diff --git a/advisories/github-reviewed/2017/10/GHSA-c43v-hrmg-56r4/GHSA-c43v-hrmg-56r4.json b/advisories/github-reviewed/2017/10/GHSA-c43v-hrmg-56r4/GHSA-c43v-hrmg-56r4.json index 0d178f72361..78cabc8d8ce 100644 --- a/advisories/github-reviewed/2017/10/GHSA-c43v-hrmg-56r4/GHSA-c43v-hrmg-56r4.json +++ b/advisories/github-reviewed/2017/10/GHSA-c43v-hrmg-56r4/GHSA-c43v-hrmg-56r4.json @@ -8,9 +8,7 @@ ], "summary": "Cocaine Gem OS Command Injection vulnerability", "details": "The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2017/10/GHSA-cj92-c4fj-w9c5/GHSA-cj92-c4fj-w9c5.json b/advisories/github-reviewed/2017/10/GHSA-cj92-c4fj-w9c5/GHSA-cj92-c4fj-w9c5.json index 67d3c793fc6..6608444289d 100644 --- a/advisories/github-reviewed/2017/10/GHSA-cj92-c4fj-w9c5/GHSA-cj92-c4fj-w9c5.json +++ b/advisories/github-reviewed/2017/10/GHSA-cj92-c4fj-w9c5/GHSA-cj92-c4fj-w9c5.json @@ -8,9 +8,7 @@ ], "summary": "Mail Gem Path Traversal vulnerability", "details": "Directory traversal vulnerability in `lib/mail/network/delivery_methods/file_delivery.rb` in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a `..` (dot dot) in the to parameter.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2017/10/GHSA-jxhw-mg8m-2pj8/GHSA-jxhw-mg8m-2pj8.json b/advisories/github-reviewed/2017/10/GHSA-jxhw-mg8m-2pj8/GHSA-jxhw-mg8m-2pj8.json index 4df44b30316..056979bec72 100644 --- a/advisories/github-reviewed/2017/10/GHSA-jxhw-mg8m-2pj8/GHSA-jxhw-mg8m-2pj8.json +++ b/advisories/github-reviewed/2017/10/GHSA-jxhw-mg8m-2pj8/GHSA-jxhw-mg8m-2pj8.json @@ -8,9 +8,7 @@ ], "summary": "Devise does not properly perform type conversion when performing database queries", "details": "Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2017/10/GHSA-q5pq-pgrv-fh89/GHSA-q5pq-pgrv-fh89.json b/advisories/github-reviewed/2017/10/GHSA-q5pq-pgrv-fh89/GHSA-q5pq-pgrv-fh89.json index 2236618db4f..53cd9c41980 100644 --- a/advisories/github-reviewed/2017/10/GHSA-q5pq-pgrv-fh89/GHSA-q5pq-pgrv-fh89.json +++ b/advisories/github-reviewed/2017/10/GHSA-q5pq-pgrv-fh89/GHSA-q5pq-pgrv-fh89.json @@ -8,9 +8,7 @@ ], "summary": "dns-sync command injection vulnerability", "details": "The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/07/GHSA-2j9c-9vmv-7m39/GHSA-2j9c-9vmv-7m39.json b/advisories/github-reviewed/2018/07/GHSA-2j9c-9vmv-7m39/GHSA-2j9c-9vmv-7m39.json index 2d3c598b7e5..5995dd3e7f8 100644 --- a/advisories/github-reviewed/2018/07/GHSA-2j9c-9vmv-7m39/GHSA-2j9c-9vmv-7m39.json +++ b/advisories/github-reviewed/2018/07/GHSA-2j9c-9vmv-7m39/GHSA-2j9c-9vmv-7m39.json @@ -62,9 +62,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-06-16T20:52:24Z", diff --git a/advisories/github-reviewed/2018/07/GHSA-4vfj-c2xf-8r48/GHSA-4vfj-c2xf-8r48.json b/advisories/github-reviewed/2018/07/GHSA-4vfj-c2xf-8r48/GHSA-4vfj-c2xf-8r48.json index 347096f1c5f..3ca82d49de5 100644 --- a/advisories/github-reviewed/2018/07/GHSA-4vfj-c2xf-8r48/GHSA-4vfj-c2xf-8r48.json +++ b/advisories/github-reviewed/2018/07/GHSA-4vfj-c2xf-8r48/GHSA-4vfj-c2xf-8r48.json @@ -8,9 +8,7 @@ ], "summary": "Directory Traversal in looppake", "details": "Affected versions of `looppake` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\n**Example request:**\n```http\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/07/GHSA-79p8-4cwq-rhqh/GHSA-79p8-4cwq-rhqh.json b/advisories/github-reviewed/2018/07/GHSA-79p8-4cwq-rhqh/GHSA-79p8-4cwq-rhqh.json index 444d3afa0d6..a13ba403a7b 100644 --- a/advisories/github-reviewed/2018/07/GHSA-79p8-4cwq-rhqh/GHSA-79p8-4cwq-rhqh.json +++ b/advisories/github-reviewed/2018/07/GHSA-79p8-4cwq-rhqh/GHSA-79p8-4cwq-rhqh.json @@ -8,9 +8,7 @@ ], "summary": "Directory Traversal in jn_jj_server", "details": "Affected versions of `jn_jj_server` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\n**Example request:**\n```http\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/07/GHSA-j38m-7q52-fgfh/GHSA-j38m-7q52-fgfh.json b/advisories/github-reviewed/2018/07/GHSA-j38m-7q52-fgfh/GHSA-j38m-7q52-fgfh.json index 3e04fc35ba6..33a83b0b39f 100644 --- a/advisories/github-reviewed/2018/07/GHSA-j38m-7q52-fgfh/GHSA-j38m-7q52-fgfh.json +++ b/advisories/github-reviewed/2018/07/GHSA-j38m-7q52-fgfh/GHSA-j38m-7q52-fgfh.json @@ -8,9 +8,7 @@ ], "summary": "Directory Traversal in node-server-forfront", "details": "Affected versions of `node-server-forfront` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\n**Example request:**\n```http\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/08/GHSA-36vc-cw62-fqvr/GHSA-36vc-cw62-fqvr.json b/advisories/github-reviewed/2018/08/GHSA-36vc-cw62-fqvr/GHSA-36vc-cw62-fqvr.json index aace79510a1..bf14d49e10e 100644 --- a/advisories/github-reviewed/2018/08/GHSA-36vc-cw62-fqvr/GHSA-36vc-cw62-fqvr.json +++ b/advisories/github-reviewed/2018/08/GHSA-36vc-cw62-fqvr/GHSA-36vc-cw62-fqvr.json @@ -8,9 +8,7 @@ ], "summary": "Shadowsock is malware", "details": "The `shadowsock` package is a piece of malware that steals environment variables and sends them to attacker controlled locations. \n\nAll versions have been unpublished from the npm registry.\n\n\n## Recommendation\n\n\nAs this package is malware, if you find it installed in your environment, the real security concern is determining how it got there. \n\nIf you have found this installed in your environment, you should:\n1. Delete the package\n2. Clear your npm cache\n3. Ensure it is not present in any other package.json files on your system\n4. Regenerate your registry credentials, tokens, and any other sensitive credentials that may have been present in your environment variables. \n\nAdditionally, any service which may have been exposed via credentials in your environment variables, such as a database, should be reviewed for indicators of compromise as well.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-cvx3-pqmj-x57x/GHSA-cvx3-pqmj-x57x.json b/advisories/github-reviewed/2019/02/GHSA-cvx3-pqmj-x57x/GHSA-cvx3-pqmj-x57x.json index 0a80252c0c5..fc0ac518823 100644 --- a/advisories/github-reviewed/2019/02/GHSA-cvx3-pqmj-x57x/GHSA-cvx3-pqmj-x57x.json +++ b/advisories/github-reviewed/2019/02/GHSA-cvx3-pqmj-x57x/GHSA-cvx3-pqmj-x57x.json @@ -8,9 +8,7 @@ ], "summary": "scalajs-standalone-bin Downloads Resources over HTTP", "details": "Affected versions of `scalajs-standalone-bin` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `scalajs-standalone-bin`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-678x-xfp4-r92r/GHSA-678x-xfp4-r92r.json b/advisories/github-reviewed/2022/05/GHSA-678x-xfp4-r92r/GHSA-678x-xfp4-r92r.json index f8a4ca48311..715b21f8465 100644 --- a/advisories/github-reviewed/2022/05/GHSA-678x-xfp4-r92r/GHSA-678x-xfp4-r92r.json +++ b/advisories/github-reviewed/2022/05/GHSA-678x-xfp4-r92r/GHSA-678x-xfp4-r92r.json @@ -8,9 +8,7 @@ ], "summary": "Apache Geronimo Application Server CSRF vulnerabilities", "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web administration password, (2) upload applications, and perform unspecified other administrative actions, as demonstrated by (3) a Shutdown request to console/portal//Server/Shutdown.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-92j2-5r7p-6hjw/GHSA-92j2-5r7p-6hjw.json b/advisories/github-reviewed/2022/05/GHSA-92j2-5r7p-6hjw/GHSA-92j2-5r7p-6hjw.json index 42725e595f4..f1eb09bae23 100644 --- a/advisories/github-reviewed/2022/05/GHSA-92j2-5r7p-6hjw/GHSA-92j2-5r7p-6hjw.json +++ b/advisories/github-reviewed/2022/05/GHSA-92j2-5r7p-6hjw/GHSA-92j2-5r7p-6hjw.json @@ -8,9 +8,7 @@ ], "summary": "Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML", "details": "The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-c372-x57p-6x7v/GHSA-c372-x57p-6x7v.json b/advisories/github-reviewed/2022/05/GHSA-c372-x57p-6x7v/GHSA-c372-x57p-6x7v.json index 8af4214d06a..e0be5b24f49 100644 --- a/advisories/github-reviewed/2022/05/GHSA-c372-x57p-6x7v/GHSA-c372-x57p-6x7v.json +++ b/advisories/github-reviewed/2022/05/GHSA-c372-x57p-6x7v/GHSA-c372-x57p-6x7v.json @@ -8,9 +8,7 @@ ], "summary": "Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities", "details": "Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-xqw9-ffx7-g998/GHSA-xqw9-ffx7-g998.json b/advisories/github-reviewed/2022/05/GHSA-xqw9-ffx7-g998/GHSA-xqw9-ffx7-g998.json index 5613574e28f..ca6f13efd2b 100644 --- a/advisories/github-reviewed/2022/05/GHSA-xqw9-ffx7-g998/GHSA-xqw9-ffx7-g998.json +++ b/advisories/github-reviewed/2022/05/GHSA-xqw9-ffx7-g998/GHSA-xqw9-ffx7-g998.json @@ -58,9 +58,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-07-31T19:55:43Z", diff --git a/advisories/github-reviewed/2024/02/GHSA-93gm-qmq6-w238/GHSA-93gm-qmq6-w238.json b/advisories/github-reviewed/2024/02/GHSA-93gm-qmq6-w238/GHSA-93gm-qmq6-w238.json index 91163f31d70..28d1a33b1cb 100644 --- a/advisories/github-reviewed/2024/02/GHSA-93gm-qmq6-w238/GHSA-93gm-qmq6-w238.json +++ b/advisories/github-reviewed/2024/02/GHSA-93gm-qmq6-w238/GHSA-93gm-qmq6-w238.json @@ -4,9 +4,7 @@ "modified": "2024-02-16T23:37:24Z", "published": "2024-02-05T17:01:19Z", "withdrawn": "2024-02-16T23:37:24Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: Starlette Content-Type Header ReDoS", "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-2jv5-9r88-3w3p. This link is maintained to preserve external references.\n\n## Original Description\n\n### Summary\n\nWhen using form data, `python-multipart` uses a Regular Expression to parse the HTTP `Content-Type` header, including options.\n\nAn attacker could send a custom-made `Content-Type` option that is very difficult for the RegEx to process, consuming CPU resources and stalling indefinitely (minutes or more) while holding the main event loop. This means that process can't handle any more requests.\n\nThis can create a ReDoS (Regular expression Denial of Service): https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS\n\nThis only applies when the app uses form data, parsed with `python-multipart`.\n\n### Details\n\nA regular HTTP `Content-Type` header could look like:\n\n```\nContent-Type: text/html; charset=utf-8\n```\n\n`python-multipart` parses the option with this RegEx: https://github.com/andrew-d/python-multipart/blob/d3d16dae4b061c34fe9d3c9081d9800c49fc1f7a/multipart/multipart.py#L72-L74\n\nA custom option could be made and sent to the server to break it with:\n\n```\nContent-Type: application/x-www-form-urlencoded; !=\\\"\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\n```\n\n### PoC\n\nCreate a Starlette app that uses form data. To reproduce it it's not even necessary to create a Starlette app, just using the `Request` is enough:\n\n```Python\n# main.py\nfrom starlette.requests import Request\nfrom starlette.responses import JSONResponse\n\n\nasync def app(scope, receive, send):\n assert scope[\"type\"] == \"http\"\n request = Request(scope, receive)\n data = await request.form()\n response_data = {}\n for key in data:\n print(key, data.getlist(key))\n response_data[key] = data.getlist(key)\n response = JSONResponse(response_data)\n await response(scope, receive, send)\n```\n\nThen start it with:\n\n```console\n$ uvicorn main:app\n\nINFO: Started server process [50601]\nINFO: Waiting for application startup.\nINFO: ASGI 'lifespan' protocol appears unsupported.\nINFO: Application startup complete.\nINFO: Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)\n```\n\nThen send the attacking request with:\n\n```console\n$ curl -v -X 'POST' -H $'Content-Type: application/x-www-form-urlencoded; !=\\\"\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' --data-binary 'input=1' 'http://localhost:8000/'\n```\n\n#### Stopping it\n\nBecause that holds the main loop consuming the CPU non-stop, it's not possible to simply kill Uvicorn with `Ctrl+C` as it can't handle the signal.\n\nTo stop it, first check the process ID running Uvicorn:\n\n```console\n$ ps -fA | grep uvicorn\n\n 501 59461 24785 0 4:28PM ttys004 0:00.13 /Users/user/code/starlette/env3.10/bin/python /Users/user/code/starlette/env3.10/bin/uvicorn redos_starlette:app\n 501 59466 99935 0 4:28PM ttys010 0:00.00 grep uvicorn\n```\n\nIn this case, the process ID was `59461`, then you can kill it (forcefully, with `-9`) with:\n\n```console\n$ kill -9 59461\n```\n\n### Impact\n\nIt's a ReDoS, (Regular expression Denial of Service), it only applies to those reading form data, using `python-multipart`. This way it also affects other libraries using Starlette, like FastAPI.\n\n### Original Report\n\nThis was originally reported to FastAPI as an email to security@tiangolo.com, sent via https://huntr.com/, the original reporter is Marcello, https://github.com/byt3bl33d3r\n\n
\nOriginal report to FastAPI\n\nHey Tiangolo!\n\nMy name's Marcello and I work on the ProtectAI/Huntr Threat Research team, a few months ago we got a report (from @nicecatch2000) of a ReDoS affecting another very popular Python web framework. After some internal research, I found that FastAPI is vulnerable to the same ReDoS under certain conditions (only when it parses Form data not JSON).\n\nHere are the details: I'm using the latest version of FastAPI (0.109.0) and the following code:\n\n```Python\nfrom typing import Annotated\nfrom fastapi.responses import HTMLResponse\nfrom fastapi import FastAPI,Form\nfrom pydantic import BaseModel\n\nclass Item(BaseModel):\n username: str\n\napp = FastAPI()\n\n@app.get(\"/\", response_class=HTMLResponse)\nasync def index():\n return HTMLResponse(\"Test\", status_code=200)\n\n@app.post(\"/submit/\")\nasync def submit(username: Annotated[str, Form()]):\n return {\"username\": username}\n\n@app.post(\"/submit_json/\")\nasync def submit_json(item: Item):\n return {\"username\": item.username}\n```\n\nI'm running the above with uvicorn with the following command:\n\n```console\nuvicorn server:app\n```\n\nThen run the following cUrl command:\n\n```\ncurl -v -X 'POST' -H $'Content-Type: application/x-www-form-urlencoded; !=\\\"\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' --data-binary 'input=1' 'http://localhost:8000/submit/'\n```\n\nYou'll see the server locks up, is unable to serve anymore requests and one CPU core is pegged to 100%\n\nYou can even start uvicorn with multiple workers with the --workers 4 argument and as long as you send (workers + 1) requests you'll completely DoS the FastApi server.\n\nIf you try submitting Json to the /submit_json endpoint with the malicious Content-Type header you'll see it isn't vulnerable. So this only affects FastAPI when it parses Form data.\n\nCheers\n\n#### Impact\n\nAn attacker is able to cause a DoS on a FastApi server via a malicious Content-Type header if it parses Form data.\n\n#### Occurrences\n\n[params.py L586](https://github.com/tiangolo/fastapi/blob/d74b3b25659b42233a669f032529880de8bd6c2d/fastapi/params.py#L586)\n\n
", "severity": [ diff --git a/advisories/github-reviewed/2024/02/GHSA-w277-wpqf-rcfv/GHSA-w277-wpqf-rcfv.json b/advisories/github-reviewed/2024/02/GHSA-w277-wpqf-rcfv/GHSA-w277-wpqf-rcfv.json index a863191b7e3..8f3ed2ee7fc 100644 --- a/advisories/github-reviewed/2024/02/GHSA-w277-wpqf-rcfv/GHSA-w277-wpqf-rcfv.json +++ b/advisories/github-reviewed/2024/02/GHSA-w277-wpqf-rcfv/GHSA-w277-wpqf-rcfv.json @@ -3,14 +3,10 @@ "id": "GHSA-w277-wpqf-rcfv", "modified": "2024-02-06T20:30:14Z", "published": "2024-02-06T20:30:14Z", - "aliases": [ - - ], + "aliases": [], "summary": "Svix vulnerable to improper comparison of different-length signatures", "details": "The `Webhook::verify` function incorrectly compared signatures of different lengths - the two signatures would only be compared up to the length of the shorter signature. This allowed an attacker to pass in `v1,` as the signature, which would always pass verification.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-02-06T20:30:14Z", diff --git a/advisories/github-reviewed/2024/03/GHSA-h59x-p739-982c/GHSA-h59x-p739-982c.json b/advisories/github-reviewed/2024/03/GHSA-h59x-p739-982c/GHSA-h59x-p739-982c.json index 5de450d22d3..44fa600da82 100644 --- a/advisories/github-reviewed/2024/03/GHSA-h59x-p739-982c/GHSA-h59x-p739-982c.json +++ b/advisories/github-reviewed/2024/03/GHSA-h59x-p739-982c/GHSA-h59x-p739-982c.json @@ -8,9 +8,7 @@ ], "summary": "LangChain directory traversal vulnerability", "details": "LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -86,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2024-03-06T16:13:39Z", diff --git a/advisories/github-reviewed/2024/06/GHSA-52xf-5p2m-9wrv/GHSA-52xf-5p2m-9wrv.json b/advisories/github-reviewed/2024/06/GHSA-52xf-5p2m-9wrv/GHSA-52xf-5p2m-9wrv.json index 64da7d687c7..ed4b39c207f 100644 --- a/advisories/github-reviewed/2024/06/GHSA-52xf-5p2m-9wrv/GHSA-52xf-5p2m-9wrv.json +++ b/advisories/github-reviewed/2024/06/GHSA-52xf-5p2m-9wrv/GHSA-52xf-5p2m-9wrv.json @@ -3,14 +3,10 @@ "id": "GHSA-52xf-5p2m-9wrv", "modified": "2024-06-06T14:26:18Z", "published": "2024-06-06T14:26:18Z", - "aliases": [ - - ], + "aliases": [], "summary": "s2n-tls has a potentially observable differences in RSA premaster secret handling", "details": "When receiving a message from a client that sent an invalid RSA premaster secret, an issue in s2n-tls results in the server performing additional processing when the premaster secret contains an incorrect client hello version. While no practical attack on s2n-tls has been demonstrated, this causes a small timing difference which could theoretically be used as described in the Marvin Attack [1].\n\nWe would like to thank Hubert Kario [2] for reporting this issue.\n\n\n### Impact\n\nThe extent of this issue is a timing difference. No practical attack on s2n-tls has been demonstrated.\n\nThis issue affects server applications that permit RSA key exchange. Applications that use the default, built-in blinding feature or properly implement self-service blinding are not affected.\n\nImpacted versions: <= v1.4.15.\n\n\n### Patches\n\nThe patch is included in v1.4.16 [3].\n\n### Workarounds\n\nApplications can work around this issue by using an s2n-tls security policy that disallows RSA key exchange.\n\nIf you have any questions or comments about this advisory we ask that you contact AWS/Amazon Security via our vulnerability reporting page [4] or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.\n\n[1] https://people.redhat.com/~hkario/marvin/\n[2] https://github.com/tomato42\n[3] https://github.com/aws/s2n-tls/releases/tag/v1.4.16\n[4] https://aws.amazon.com/security/vulnerability-reporting", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/unreviewed/2022/05/GHSA-2259-4w76-9w2p/GHSA-2259-4w76-9w2p.json b/advisories/unreviewed/2022/05/GHSA-2259-4w76-9w2p/GHSA-2259-4w76-9w2p.json index 1ca19b64595..9bca7bf7f37 100644 --- a/advisories/unreviewed/2022/05/GHSA-2259-4w76-9w2p/GHSA-2259-4w76-9w2p.json +++ b/advisories/unreviewed/2022/05/GHSA-2259-4w76-9w2p/GHSA-2259-4w76-9w2p.json @@ -7,12 +7,8 @@ "CVE-2003-0161" ], "details": "The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special \"NOCHAR\" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-22rx-rqrm-w97p/GHSA-22rx-rqrm-w97p.json b/advisories/unreviewed/2022/05/GHSA-22rx-rqrm-w97p/GHSA-22rx-rqrm-w97p.json index 65e1fbf15cb..9f267fe9f53 100644 --- a/advisories/unreviewed/2022/05/GHSA-22rx-rqrm-w97p/GHSA-22rx-rqrm-w97p.json +++ b/advisories/unreviewed/2022/05/GHSA-22rx-rqrm-w97p/GHSA-22rx-rqrm-w97p.json @@ -7,12 +7,8 @@ "CVE-2004-0182" ], "details": "Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-235q-hvh2-g375/GHSA-235q-hvh2-g375.json b/advisories/unreviewed/2022/05/GHSA-235q-hvh2-g375/GHSA-235q-hvh2-g375.json index abea902728b..37a401a26c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-235q-hvh2-g375/GHSA-235q-hvh2-g375.json +++ b/advisories/unreviewed/2022/05/GHSA-235q-hvh2-g375/GHSA-235q-hvh2-g375.json @@ -7,12 +7,8 @@ "CVE-2003-0028" ], "details": "Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-23g7-p8vx-g5m2/GHSA-23g7-p8vx-g5m2.json b/advisories/unreviewed/2022/05/GHSA-23g7-p8vx-g5m2/GHSA-23g7-p8vx-g5m2.json index 13ac4e89a9f..2c6e9b57117 100644 --- a/advisories/unreviewed/2022/05/GHSA-23g7-p8vx-g5m2/GHSA-23g7-p8vx-g5m2.json +++ b/advisories/unreviewed/2022/05/GHSA-23g7-p8vx-g5m2/GHSA-23g7-p8vx-g5m2.json @@ -7,12 +7,8 @@ "CVE-2006-4570" ], "details": "Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with \"Load Images\" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -144,9 +140,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-23mg-qphc-9fg5/GHSA-23mg-qphc-9fg5.json b/advisories/unreviewed/2022/05/GHSA-23mg-qphc-9fg5/GHSA-23mg-qphc-9fg5.json index 10086416842..5b29b57a88d 100644 --- a/advisories/unreviewed/2022/05/GHSA-23mg-qphc-9fg5/GHSA-23mg-qphc-9fg5.json +++ b/advisories/unreviewed/2022/05/GHSA-23mg-qphc-9fg5/GHSA-23mg-qphc-9fg5.json @@ -7,12 +7,8 @@ "CVE-2002-1345" ], "details": "Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-24qh-5jcc-qhqq/GHSA-24qh-5jcc-qhqq.json b/advisories/unreviewed/2022/05/GHSA-24qh-5jcc-qhqq/GHSA-24qh-5jcc-qhqq.json index dae6d054dcb..bfff63bd1ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-24qh-5jcc-qhqq/GHSA-24qh-5jcc-qhqq.json +++ b/advisories/unreviewed/2022/05/GHSA-24qh-5jcc-qhqq/GHSA-24qh-5jcc-qhqq.json @@ -7,12 +7,8 @@ "CVE-2005-1278" ], "details": "The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-254j-3m2w-23xr/GHSA-254j-3m2w-23xr.json b/advisories/unreviewed/2022/05/GHSA-254j-3m2w-23xr/GHSA-254j-3m2w-23xr.json index 10832317180..e02faf84e48 100644 --- a/advisories/unreviewed/2022/05/GHSA-254j-3m2w-23xr/GHSA-254j-3m2w-23xr.json +++ b/advisories/unreviewed/2022/05/GHSA-254j-3m2w-23xr/GHSA-254j-3m2w-23xr.json @@ -7,12 +7,8 @@ "CVE-2004-0762" ], "details": "Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-26fr-9hjv-9fj7/GHSA-26fr-9hjv-9fj7.json b/advisories/unreviewed/2022/05/GHSA-26fr-9hjv-9fj7/GHSA-26fr-9hjv-9fj7.json index ee17b8645ea..7efcd8fa1da 100644 --- a/advisories/unreviewed/2022/05/GHSA-26fr-9hjv-9fj7/GHSA-26fr-9hjv-9fj7.json +++ b/advisories/unreviewed/2022/05/GHSA-26fr-9hjv-9fj7/GHSA-26fr-9hjv-9fj7.json @@ -7,12 +7,8 @@ "CVE-2006-5010" ], "details": "Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by modifying the path to point to a malicious mkdir program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-26pm-xqvm-vjf3/GHSA-26pm-xqvm-vjf3.json b/advisories/unreviewed/2022/05/GHSA-26pm-xqvm-vjf3/GHSA-26pm-xqvm-vjf3.json index 4a09832d676..ca508c09f01 100644 --- a/advisories/unreviewed/2022/05/GHSA-26pm-xqvm-vjf3/GHSA-26pm-xqvm-vjf3.json +++ b/advisories/unreviewed/2022/05/GHSA-26pm-xqvm-vjf3/GHSA-26pm-xqvm-vjf3.json @@ -7,12 +7,8 @@ "CVE-2003-0099" ], "details": "Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-26xx-j6q3-j3rf/GHSA-26xx-j6q3-j3rf.json b/advisories/unreviewed/2022/05/GHSA-26xx-j6q3-j3rf/GHSA-26xx-j6q3-j3rf.json index af94bb09f03..2439ba949a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-26xx-j6q3-j3rf/GHSA-26xx-j6q3-j3rf.json +++ b/advisories/unreviewed/2022/05/GHSA-26xx-j6q3-j3rf/GHSA-26xx-j6q3-j3rf.json @@ -7,12 +7,8 @@ "CVE-2009-1377" ], "details": "The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of \"future epoch\" DTLS records that are buffered in a queue, aka \"DTLS record buffer limitation bug.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27fc-4jc3-pjvm/GHSA-27fc-4jc3-pjvm.json b/advisories/unreviewed/2022/05/GHSA-27fc-4jc3-pjvm/GHSA-27fc-4jc3-pjvm.json index 2c6b925c5a6..e56382426f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-27fc-4jc3-pjvm/GHSA-27fc-4jc3-pjvm.json +++ b/advisories/unreviewed/2022/05/GHSA-27fc-4jc3-pjvm/GHSA-27fc-4jc3-pjvm.json @@ -7,12 +7,8 @@ "CVE-2002-1405" ], "details": "CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-27g6-7ffq-cf4w/GHSA-27g6-7ffq-cf4w.json b/advisories/unreviewed/2022/05/GHSA-27g6-7ffq-cf4w/GHSA-27g6-7ffq-cf4w.json index 09d5eb93aee..ee655c3e7ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-27g6-7ffq-cf4w/GHSA-27g6-7ffq-cf4w.json +++ b/advisories/unreviewed/2022/05/GHSA-27g6-7ffq-cf4w/GHSA-27g6-7ffq-cf4w.json @@ -7,12 +7,8 @@ "CVE-2004-0452" ], "details": "Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-27mx-p3cq-xm25/GHSA-27mx-p3cq-xm25.json b/advisories/unreviewed/2022/05/GHSA-27mx-p3cq-xm25/GHSA-27mx-p3cq-xm25.json index 2ef54e7fbce..0b7e39808d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-27mx-p3cq-xm25/GHSA-27mx-p3cq-xm25.json +++ b/advisories/unreviewed/2022/05/GHSA-27mx-p3cq-xm25/GHSA-27mx-p3cq-xm25.json @@ -7,12 +7,8 @@ "CVE-2006-1728" ], "details": "Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to the crypto.generateCRMFRequest method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -296,9 +292,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-285v-3c4r-gxww/GHSA-285v-3c4r-gxww.json b/advisories/unreviewed/2022/05/GHSA-285v-3c4r-gxww/GHSA-285v-3c4r-gxww.json index d2bc8ebc62a..ba6725ff26b 100644 --- a/advisories/unreviewed/2022/05/GHSA-285v-3c4r-gxww/GHSA-285v-3c4r-gxww.json +++ b/advisories/unreviewed/2022/05/GHSA-285v-3c4r-gxww/GHSA-285v-3c4r-gxww.json @@ -7,12 +7,8 @@ "CVE-2006-3629" ], "details": "Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29m7-62mp-2jf6/GHSA-29m7-62mp-2jf6.json b/advisories/unreviewed/2022/05/GHSA-29m7-62mp-2jf6/GHSA-29m7-62mp-2jf6.json index 7cb34d4303e..fde04b2e194 100644 --- a/advisories/unreviewed/2022/05/GHSA-29m7-62mp-2jf6/GHSA-29m7-62mp-2jf6.json +++ b/advisories/unreviewed/2022/05/GHSA-29m7-62mp-2jf6/GHSA-29m7-62mp-2jf6.json @@ -7,12 +7,8 @@ "CVE-2002-0827" ], "details": "Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29pp-r8q7-mhv8/GHSA-29pp-r8q7-mhv8.json b/advisories/unreviewed/2022/05/GHSA-29pp-r8q7-mhv8/GHSA-29pp-r8q7-mhv8.json index 802d2024a1e..5f5841253a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-29pp-r8q7-mhv8/GHSA-29pp-r8q7-mhv8.json +++ b/advisories/unreviewed/2022/05/GHSA-29pp-r8q7-mhv8/GHSA-29pp-r8q7-mhv8.json @@ -7,12 +7,8 @@ "CVE-2003-0777" ], "details": "saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2fgw-2v2m-w7mc/GHSA-2fgw-2v2m-w7mc.json b/advisories/unreviewed/2022/05/GHSA-2fgw-2v2m-w7mc/GHSA-2fgw-2v2m-w7mc.json index 8e2559c4ed1..c2d4e3207eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fgw-2v2m-w7mc/GHSA-2fgw-2v2m-w7mc.json +++ b/advisories/unreviewed/2022/05/GHSA-2fgw-2v2m-w7mc/GHSA-2fgw-2v2m-w7mc.json @@ -7,12 +7,8 @@ "CVE-2006-1174" ], "details": "useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2fqm-grvm-7h89/GHSA-2fqm-grvm-7h89.json b/advisories/unreviewed/2022/05/GHSA-2fqm-grvm-7h89/GHSA-2fqm-grvm-7h89.json index 937f18a46b8..e2945163916 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fqm-grvm-7h89/GHSA-2fqm-grvm-7h89.json +++ b/advisories/unreviewed/2022/05/GHSA-2fqm-grvm-7h89/GHSA-2fqm-grvm-7h89.json @@ -7,12 +7,8 @@ "CVE-2008-3432" ], "details": "Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gxf-f3cr-5m3p/GHSA-2gxf-f3cr-5m3p.json b/advisories/unreviewed/2022/05/GHSA-2gxf-f3cr-5m3p/GHSA-2gxf-f3cr-5m3p.json index 2ad9ad98ca3..16bc0eddb25 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gxf-f3cr-5m3p/GHSA-2gxf-f3cr-5m3p.json +++ b/advisories/unreviewed/2022/05/GHSA-2gxf-f3cr-5m3p/GHSA-2gxf-f3cr-5m3p.json @@ -7,12 +7,8 @@ "CVE-2006-1729" ], "details": "Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jcf-pv2j-gqvq/GHSA-2jcf-pv2j-gqvq.json b/advisories/unreviewed/2022/05/GHSA-2jcf-pv2j-gqvq/GHSA-2jcf-pv2j-gqvq.json index 1228ff533ae..51e7f5de1fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jcf-pv2j-gqvq/GHSA-2jcf-pv2j-gqvq.json +++ b/advisories/unreviewed/2022/05/GHSA-2jcf-pv2j-gqvq/GHSA-2jcf-pv2j-gqvq.json @@ -7,12 +7,8 @@ "CVE-2005-0448" ], "details": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2jv3-mh5v-j4w2/GHSA-2jv3-mh5v-j4w2.json b/advisories/unreviewed/2022/05/GHSA-2jv3-mh5v-j4w2/GHSA-2jv3-mh5v-j4w2.json index 26466d78bed..0016f93169d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jv3-mh5v-j4w2/GHSA-2jv3-mh5v-j4w2.json +++ b/advisories/unreviewed/2022/05/GHSA-2jv3-mh5v-j4w2/GHSA-2jv3-mh5v-j4w2.json @@ -7,12 +7,8 @@ "CVE-2003-1234" ], "details": "Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2mcv-r2jw-5qxh/GHSA-2mcv-r2jw-5qxh.json b/advisories/unreviewed/2022/05/GHSA-2mcv-r2jw-5qxh/GHSA-2mcv-r2jw-5qxh.json index c93252af8cf..e483b843b1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mcv-r2jw-5qxh/GHSA-2mcv-r2jw-5qxh.json +++ b/advisories/unreviewed/2022/05/GHSA-2mcv-r2jw-5qxh/GHSA-2mcv-r2jw-5qxh.json @@ -7,12 +7,8 @@ "CVE-2006-6502" ], "details": "Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -228,9 +224,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2p4v-c3cg-43pp/GHSA-2p4v-c3cg-43pp.json b/advisories/unreviewed/2022/05/GHSA-2p4v-c3cg-43pp/GHSA-2p4v-c3cg-43pp.json index cd99e50d3cb..ecd5e50be14 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p4v-c3cg-43pp/GHSA-2p4v-c3cg-43pp.json +++ b/advisories/unreviewed/2022/05/GHSA-2p4v-c3cg-43pp/GHSA-2p4v-c3cg-43pp.json @@ -7,12 +7,8 @@ "CVE-2006-0208" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p53-823g-x3xx/GHSA-2p53-823g-x3xx.json b/advisories/unreviewed/2022/05/GHSA-2p53-823g-x3xx/GHSA-2p53-823g-x3xx.json index 5ede1a52c45..c78a3873e99 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p53-823g-x3xx/GHSA-2p53-823g-x3xx.json +++ b/advisories/unreviewed/2022/05/GHSA-2p53-823g-x3xx/GHSA-2p53-823g-x3xx.json @@ -7,12 +7,8 @@ "CVE-2006-4304" ], "details": "Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol (LCP) packets with an option length that exceeds the overall length, which triggers the overflow in (1) pppoe and (2) ippp. NOTE: this issue was originally incorrectly reported for the ppp driver.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2p56-r36q-fx99/GHSA-2p56-r36q-fx99.json b/advisories/unreviewed/2022/05/GHSA-2p56-r36q-fx99/GHSA-2p56-r36q-fx99.json index 7cb3e44fff9..4ca3f8df2ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p56-r36q-fx99/GHSA-2p56-r36q-fx99.json +++ b/advisories/unreviewed/2022/05/GHSA-2p56-r36q-fx99/GHSA-2p56-r36q-fx99.json @@ -7,12 +7,8 @@ "CVE-2006-0055" ], "details": "The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2p66-4rg2-ppg3/GHSA-2p66-4rg2-ppg3.json b/advisories/unreviewed/2022/05/GHSA-2p66-4rg2-ppg3/GHSA-2p66-4rg2-ppg3.json index 5745bef1729..dee5c9afa25 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p66-4rg2-ppg3/GHSA-2p66-4rg2-ppg3.json +++ b/advisories/unreviewed/2022/05/GHSA-2p66-4rg2-ppg3/GHSA-2p66-4rg2-ppg3.json @@ -7,12 +7,8 @@ "CVE-2006-5008" ], "details": "Unspecified vulnerability in utape in IBM AIX 5.2.0 and 5.3.0 allows attackers to execute arbitrary commands and overwrite arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2q54-wx6q-7cqc/GHSA-2q54-wx6q-7cqc.json b/advisories/unreviewed/2022/05/GHSA-2q54-wx6q-7cqc/GHSA-2q54-wx6q-7cqc.json index 1652a5bd675..ef9b227f4ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q54-wx6q-7cqc/GHSA-2q54-wx6q-7cqc.json +++ b/advisories/unreviewed/2022/05/GHSA-2q54-wx6q-7cqc/GHSA-2q54-wx6q-7cqc.json @@ -7,12 +7,8 @@ "CVE-2004-0164" ], "details": "KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2qf2-q2gj-r6v2/GHSA-2qf2-q2gj-r6v2.json b/advisories/unreviewed/2022/05/GHSA-2qf2-q2gj-r6v2/GHSA-2qf2-q2gj-r6v2.json index 0b4cef20a10..0beae0312a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qf2-q2gj-r6v2/GHSA-2qf2-q2gj-r6v2.json +++ b/advisories/unreviewed/2022/05/GHSA-2qf2-q2gj-r6v2/GHSA-2qf2-q2gj-r6v2.json @@ -7,12 +7,8 @@ "CVE-2002-0391" ], "details": "Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -156,9 +152,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2rh9-mcg8-96mq/GHSA-2rh9-mcg8-96mq.json b/advisories/unreviewed/2022/05/GHSA-2rh9-mcg8-96mq/GHSA-2rh9-mcg8-96mq.json index 91c2d85e3f9..6cd453dcec7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rh9-mcg8-96mq/GHSA-2rh9-mcg8-96mq.json +++ b/advisories/unreviewed/2022/05/GHSA-2rh9-mcg8-96mq/GHSA-2rh9-mcg8-96mq.json @@ -7,12 +7,8 @@ "CVE-2006-1173" ], "details": "Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -232,9 +228,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2v6g-x4rx-qh6v/GHSA-2v6g-x4rx-qh6v.json b/advisories/unreviewed/2022/05/GHSA-2v6g-x4rx-qh6v/GHSA-2v6g-x4rx-qh6v.json index 25f5cbb100a..637439b21f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v6g-x4rx-qh6v/GHSA-2v6g-x4rx-qh6v.json +++ b/advisories/unreviewed/2022/05/GHSA-2v6g-x4rx-qh6v/GHSA-2v6g-x4rx-qh6v.json @@ -7,12 +7,8 @@ "CVE-2004-0587" ], "details": "Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vpw-h4q9-62fp/GHSA-2vpw-h4q9-62fp.json b/advisories/unreviewed/2022/05/GHSA-2vpw-h4q9-62fp/GHSA-2vpw-h4q9-62fp.json index 28a9e6607b3..696d4d9ac13 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vpw-h4q9-62fp/GHSA-2vpw-h4q9-62fp.json +++ b/advisories/unreviewed/2022/05/GHSA-2vpw-h4q9-62fp/GHSA-2vpw-h4q9-62fp.json @@ -7,12 +7,8 @@ "CVE-2002-1337" ], "details": "Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2x68-h5x4-c4qp/GHSA-2x68-h5x4-c4qp.json b/advisories/unreviewed/2022/05/GHSA-2x68-h5x4-c4qp/GHSA-2x68-h5x4-c4qp.json index ff83c8bbc3e..5bd8d4c2fef 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x68-h5x4-c4qp/GHSA-2x68-h5x4-c4qp.json +++ b/advisories/unreviewed/2022/05/GHSA-2x68-h5x4-c4qp/GHSA-2x68-h5x4-c4qp.json @@ -7,12 +7,8 @@ "CVE-2003-0078" ], "details": "ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the \"Vaudenay timing attack.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2xgh-hqv7-4gq4/GHSA-2xgh-hqv7-4gq4.json b/advisories/unreviewed/2022/05/GHSA-2xgh-hqv7-4gq4/GHSA-2xgh-hqv7-4gq4.json index 48bbb0364eb..a0709776cc1 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xgh-hqv7-4gq4/GHSA-2xgh-hqv7-4gq4.json +++ b/advisories/unreviewed/2022/05/GHSA-2xgh-hqv7-4gq4/GHSA-2xgh-hqv7-4gq4.json @@ -7,12 +7,8 @@ "CVE-2006-0226" ], "details": "Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted (1) beacon or (2) probe response frames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-325r-4m7w-pcqf/GHSA-325r-4m7w-pcqf.json b/advisories/unreviewed/2022/05/GHSA-325r-4m7w-pcqf/GHSA-325r-4m7w-pcqf.json index b867022d8a3..af1d6aeedd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-325r-4m7w-pcqf/GHSA-325r-4m7w-pcqf.json +++ b/advisories/unreviewed/2022/05/GHSA-325r-4m7w-pcqf/GHSA-325r-4m7w-pcqf.json @@ -7,12 +7,8 @@ "CVE-2005-1280" ], "details": "The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3265-7c8c-jh75/GHSA-3265-7c8c-jh75.json b/advisories/unreviewed/2022/05/GHSA-3265-7c8c-jh75/GHSA-3265-7c8c-jh75.json index f6d0298283a..01562dd8eb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-3265-7c8c-jh75/GHSA-3265-7c8c-jh75.json +++ b/advisories/unreviewed/2022/05/GHSA-3265-7c8c-jh75/GHSA-3265-7c8c-jh75.json @@ -7,12 +7,8 @@ "CVE-2004-0179" ], "details": "Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-33qx-rqvh-638r/GHSA-33qx-rqvh-638r.json b/advisories/unreviewed/2022/05/GHSA-33qx-rqvh-638r/GHSA-33qx-rqvh-638r.json index 45cff90661b..c7252da25d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-33qx-rqvh-638r/GHSA-33qx-rqvh-638r.json +++ b/advisories/unreviewed/2022/05/GHSA-33qx-rqvh-638r/GHSA-33qx-rqvh-638r.json @@ -7,12 +7,8 @@ "CVE-2005-1174" ], "details": "MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-33xh-3h2c-ghq3/GHSA-33xh-3h2c-ghq3.json b/advisories/unreviewed/2022/05/GHSA-33xh-3h2c-ghq3/GHSA-33xh-3h2c-ghq3.json index b622659f181..1cf3218c928 100644 --- a/advisories/unreviewed/2022/05/GHSA-33xh-3h2c-ghq3/GHSA-33xh-3h2c-ghq3.json +++ b/advisories/unreviewed/2022/05/GHSA-33xh-3h2c-ghq3/GHSA-33xh-3h2c-ghq3.json @@ -7,12 +7,8 @@ "CVE-2006-0188" ], "details": "webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the right_frame parameter. NOTE: this has been called a cross-site scripting (XSS) issue, but it is different than what is normally identified as XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-364v-59j7-j8j2/GHSA-364v-59j7-j8j2.json b/advisories/unreviewed/2022/05/GHSA-364v-59j7-j8j2/GHSA-364v-59j7-j8j2.json index b21bd039256..67d64f350da 100644 --- a/advisories/unreviewed/2022/05/GHSA-364v-59j7-j8j2/GHSA-364v-59j7-j8j2.json +++ b/advisories/unreviewed/2022/05/GHSA-364v-59j7-j8j2/GHSA-364v-59j7-j8j2.json @@ -7,12 +7,8 @@ "CVE-2005-1476" ], "details": "Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-369f-gjmm-gjfc/GHSA-369f-gjmm-gjfc.json b/advisories/unreviewed/2022/05/GHSA-369f-gjmm-gjfc/GHSA-369f-gjmm-gjfc.json index 21249be5cdc..555099c445e 100644 --- a/advisories/unreviewed/2022/05/GHSA-369f-gjmm-gjfc/GHSA-369f-gjmm-gjfc.json +++ b/advisories/unreviewed/2022/05/GHSA-369f-gjmm-gjfc/GHSA-369f-gjmm-gjfc.json @@ -7,12 +7,8 @@ "CVE-2006-4805" ], "details": "epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service (memory consumption and crash) via an encoded XOT packet that produces a zero length value when it is decoded.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -108,9 +104,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-384q-pv6w-p8vv/GHSA-384q-pv6w-p8vv.json b/advisories/unreviewed/2022/05/GHSA-384q-pv6w-p8vv/GHSA-384q-pv6w-p8vv.json index 212456124e8..98aebdbb016 100644 --- a/advisories/unreviewed/2022/05/GHSA-384q-pv6w-p8vv/GHSA-384q-pv6w-p8vv.json +++ b/advisories/unreviewed/2022/05/GHSA-384q-pv6w-p8vv/GHSA-384q-pv6w-p8vv.json @@ -7,12 +7,8 @@ "CVE-2004-0175" ], "details": "Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-388r-hw74-wm79/GHSA-388r-hw74-wm79.json b/advisories/unreviewed/2022/05/GHSA-388r-hw74-wm79/GHSA-388r-hw74-wm79.json index 7484e122b72..f5f46fec6b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-388r-hw74-wm79/GHSA-388r-hw74-wm79.json +++ b/advisories/unreviewed/2022/05/GHSA-388r-hw74-wm79/GHSA-388r-hw74-wm79.json @@ -7,12 +7,8 @@ "CVE-2005-1399" ], "details": "FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3g95-jqmm-jr55/GHSA-3g95-jqmm-jr55.json b/advisories/unreviewed/2022/05/GHSA-3g95-jqmm-jr55/GHSA-3g95-jqmm-jr55.json index daf03d12c80..5e3e3504f82 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g95-jqmm-jr55/GHSA-3g95-jqmm-jr55.json +++ b/advisories/unreviewed/2022/05/GHSA-3g95-jqmm-jr55/GHSA-3g95-jqmm-jr55.json @@ -7,12 +7,8 @@ "CVE-2005-1768" ], "details": "Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3gcx-69hx-4g6m/GHSA-3gcx-69hx-4g6m.json b/advisories/unreviewed/2022/05/GHSA-3gcx-69hx-4g6m/GHSA-3gcx-69hx-4g6m.json index 96777728a94..4caca01c7c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gcx-69hx-4g6m/GHSA-3gcx-69hx-4g6m.json +++ b/advisories/unreviewed/2022/05/GHSA-3gcx-69hx-4g6m/GHSA-3gcx-69hx-4g6m.json @@ -7,12 +7,8 @@ "CVE-2006-6504" ], "details": "Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3gq2-8vxj-g5w7/GHSA-3gq2-8vxj-g5w7.json b/advisories/unreviewed/2022/05/GHSA-3gq2-8vxj-g5w7/GHSA-3gq2-8vxj-g5w7.json index f4c259c2825..1576b1bde90 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gq2-8vxj-g5w7/GHSA-3gq2-8vxj-g5w7.json +++ b/advisories/unreviewed/2022/05/GHSA-3gq2-8vxj-g5w7/GHSA-3gq2-8vxj-g5w7.json @@ -7,12 +7,8 @@ "CVE-2006-1740" ], "details": "Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -192,9 +188,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3h3c-hfv6-pc8h/GHSA-3h3c-hfv6-pc8h.json b/advisories/unreviewed/2022/05/GHSA-3h3c-hfv6-pc8h/GHSA-3h3c-hfv6-pc8h.json index 5f04f9401fb..ddca6e30e4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h3c-hfv6-pc8h/GHSA-3h3c-hfv6-pc8h.json +++ b/advisories/unreviewed/2022/05/GHSA-3h3c-hfv6-pc8h/GHSA-3h3c-hfv6-pc8h.json @@ -7,12 +7,8 @@ "CVE-2003-0173" ], "details": "xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3h5q-3j8q-4rm9/GHSA-3h5q-3j8q-4rm9.json b/advisories/unreviewed/2022/05/GHSA-3h5q-3j8q-4rm9/GHSA-3h5q-3j8q-4rm9.json index 5b72834221e..12682a4429b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h5q-3j8q-4rm9/GHSA-3h5q-3j8q-4rm9.json +++ b/advisories/unreviewed/2022/05/GHSA-3h5q-3j8q-4rm9/GHSA-3h5q-3j8q-4rm9.json @@ -7,12 +7,8 @@ "CVE-2005-3352" ], "details": "Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -340,9 +336,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3h63-pxm6-2x4m/GHSA-3h63-pxm6-2x4m.json b/advisories/unreviewed/2022/05/GHSA-3h63-pxm6-2x4m/GHSA-3h63-pxm6-2x4m.json index 16b2ffa731d..e64da2c02e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h63-pxm6-2x4m/GHSA-3h63-pxm6-2x4m.json +++ b/advisories/unreviewed/2022/05/GHSA-3h63-pxm6-2x4m/GHSA-3h63-pxm6-2x4m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -91,9 +89,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3hhr-4c49-xc95/GHSA-3hhr-4c49-xc95.json b/advisories/unreviewed/2022/05/GHSA-3hhr-4c49-xc95/GHSA-3hhr-4c49-xc95.json index fdad45ae5a0..601c7081790 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hhr-4c49-xc95/GHSA-3hhr-4c49-xc95.json +++ b/advisories/unreviewed/2022/05/GHSA-3hhr-4c49-xc95/GHSA-3hhr-4c49-xc95.json @@ -7,12 +7,8 @@ "CVE-2004-0107" ], "details": "The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3j45-pgff-92h5/GHSA-3j45-pgff-92h5.json b/advisories/unreviewed/2022/05/GHSA-3j45-pgff-92h5/GHSA-3j45-pgff-92h5.json index 466d69a138e..3ed5de97744 100644 --- a/advisories/unreviewed/2022/05/GHSA-3j45-pgff-92h5/GHSA-3j45-pgff-92h5.json +++ b/advisories/unreviewed/2022/05/GHSA-3j45-pgff-92h5/GHSA-3j45-pgff-92h5.json @@ -7,12 +7,8 @@ "CVE-2006-0377" ], "details": "CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka \"IMAP injection.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3m3m-6r6c-8m58/GHSA-3m3m-6r6c-8m58.json b/advisories/unreviewed/2022/05/GHSA-3m3m-6r6c-8m58/GHSA-3m3m-6r6c-8m58.json index fc5f679ab1d..6e405fd5d46 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m3m-6r6c-8m58/GHSA-3m3m-6r6c-8m58.json +++ b/advisories/unreviewed/2022/05/GHSA-3m3m-6r6c-8m58/GHSA-3m3m-6r6c-8m58.json @@ -7,12 +7,8 @@ "CVE-2005-2475" ], "details": "Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3p2f-43j8-jmf7/GHSA-3p2f-43j8-jmf7.json b/advisories/unreviewed/2022/05/GHSA-3p2f-43j8-jmf7/GHSA-3p2f-43j8-jmf7.json index c6a13d5502b..dc0695e04b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p2f-43j8-jmf7/GHSA-3p2f-43j8-jmf7.json +++ b/advisories/unreviewed/2022/05/GHSA-3p2f-43j8-jmf7/GHSA-3p2f-43j8-jmf7.json @@ -7,12 +7,8 @@ "CVE-2005-2494" ], "details": "kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3p3f-cf7r-qqhf/GHSA-3p3f-cf7r-qqhf.json b/advisories/unreviewed/2022/05/GHSA-3p3f-cf7r-qqhf/GHSA-3p3f-cf7r-qqhf.json index 74c2e432c3e..e4b72f85d34 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p3f-cf7r-qqhf/GHSA-3p3f-cf7r-qqhf.json +++ b/advisories/unreviewed/2022/05/GHSA-3p3f-cf7r-qqhf/GHSA-3p3f-cf7r-qqhf.json @@ -7,12 +7,8 @@ "CVE-2005-1036" ], "details": "FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3r67-v66x-cpqh/GHSA-3r67-v66x-cpqh.json b/advisories/unreviewed/2022/05/GHSA-3r67-v66x-cpqh/GHSA-3r67-v66x-cpqh.json index 4d3979a9266..ccb1afebb44 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r67-v66x-cpqh/GHSA-3r67-v66x-cpqh.json +++ b/advisories/unreviewed/2022/05/GHSA-3r67-v66x-cpqh/GHSA-3r67-v66x-cpqh.json @@ -7,12 +7,8 @@ "CVE-2005-2934" ], "details": "Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3rmj-3mrh-fv5j/GHSA-3rmj-3mrh-fv5j.json b/advisories/unreviewed/2022/05/GHSA-3rmj-3mrh-fv5j/GHSA-3rmj-3mrh-fv5j.json index c8d3644c664..7447cefd85d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rmj-3mrh-fv5j/GHSA-3rmj-3mrh-fv5j.json +++ b/advisories/unreviewed/2022/05/GHSA-3rmj-3mrh-fv5j/GHSA-3rmj-3mrh-fv5j.json @@ -7,12 +7,8 @@ "CVE-2003-0971" ], "details": "GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3vqh-4m9h-3wmj/GHSA-3vqh-4m9h-3wmj.json b/advisories/unreviewed/2022/05/GHSA-3vqh-4m9h-3wmj/GHSA-3vqh-4m9h-3wmj.json index f0f0daf9f47..d7397d0a59b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vqh-4m9h-3wmj/GHSA-3vqh-4m9h-3wmj.json +++ b/advisories/unreviewed/2022/05/GHSA-3vqh-4m9h-3wmj/GHSA-3vqh-4m9h-3wmj.json @@ -7,12 +7,8 @@ "CVE-2004-0512" ], "details": "Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a core dump.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3vxh-qpg8-h9j2/GHSA-3vxh-qpg8-h9j2.json b/advisories/unreviewed/2022/05/GHSA-3vxh-qpg8-h9j2/GHSA-3vxh-qpg8-h9j2.json index 621dc44d6f6..101c2552137 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vxh-qpg8-h9j2/GHSA-3vxh-qpg8-h9j2.json +++ b/advisories/unreviewed/2022/05/GHSA-3vxh-qpg8-h9j2/GHSA-3vxh-qpg8-h9j2.json @@ -7,12 +7,8 @@ "CVE-2004-2268" ], "details": "PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-42hr-qcx2-4fr6/GHSA-42hr-qcx2-4fr6.json b/advisories/unreviewed/2022/05/GHSA-42hr-qcx2-4fr6/GHSA-42hr-qcx2-4fr6.json index a084b7be948..62c449e16c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-42hr-qcx2-4fr6/GHSA-42hr-qcx2-4fr6.json +++ b/advisories/unreviewed/2022/05/GHSA-42hr-qcx2-4fr6/GHSA-42hr-qcx2-4fr6.json @@ -7,12 +7,8 @@ "CVE-2006-4253" ], "details": "Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3. NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie. Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability. NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -284,9 +280,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-42hx-48g4-m3mc/GHSA-42hx-48g4-m3mc.json b/advisories/unreviewed/2022/05/GHSA-42hx-48g4-m3mc/GHSA-42hx-48g4-m3mc.json index c139ba88131..8846345ea1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-42hx-48g4-m3mc/GHSA-42hx-48g4-m3mc.json +++ b/advisories/unreviewed/2022/05/GHSA-42hx-48g4-m3mc/GHSA-42hx-48g4-m3mc.json @@ -7,12 +7,8 @@ "CVE-2003-0864" ], "details": "Buffer overflow in m_join in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-42jw-jp69-7hjr/GHSA-42jw-jp69-7hjr.json b/advisories/unreviewed/2022/05/GHSA-42jw-jp69-7hjr/GHSA-42jw-jp69-7hjr.json index b2a533c75df..7a4d2ed4814 100644 --- a/advisories/unreviewed/2022/05/GHSA-42jw-jp69-7hjr/GHSA-42jw-jp69-7hjr.json +++ b/advisories/unreviewed/2022/05/GHSA-42jw-jp69-7hjr/GHSA-42jw-jp69-7hjr.json @@ -7,12 +7,8 @@ "CVE-2002-1742" ], "details": "SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43j5-m4qg-whf7/GHSA-43j5-m4qg-whf7.json b/advisories/unreviewed/2022/05/GHSA-43j5-m4qg-whf7/GHSA-43j5-m4qg-whf7.json index 5fc90454736..c505e634482 100644 --- a/advisories/unreviewed/2022/05/GHSA-43j5-m4qg-whf7/GHSA-43j5-m4qg-whf7.json +++ b/advisories/unreviewed/2022/05/GHSA-43j5-m4qg-whf7/GHSA-43j5-m4qg-whf7.json @@ -7,12 +7,8 @@ "CVE-2007-0800" ], "details": "Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -212,9 +208,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-44wx-mcwc-xfg9/GHSA-44wx-mcwc-xfg9.json b/advisories/unreviewed/2022/05/GHSA-44wx-mcwc-xfg9/GHSA-44wx-mcwc-xfg9.json index 8dfdb6e993b..43967cc080d 100644 --- a/advisories/unreviewed/2022/05/GHSA-44wx-mcwc-xfg9/GHSA-44wx-mcwc-xfg9.json +++ b/advisories/unreviewed/2022/05/GHSA-44wx-mcwc-xfg9/GHSA-44wx-mcwc-xfg9.json @@ -7,12 +7,8 @@ "CVE-2008-2937" ], "details": "Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this file is not owned by the recipient, which allows local users to read e-mail messages by creating a mailbox file corresponding to another user's account name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-45pc-wv4r-j445/GHSA-45pc-wv4r-j445.json b/advisories/unreviewed/2022/05/GHSA-45pc-wv4r-j445/GHSA-45pc-wv4r-j445.json index cd2ca2138b3..be893af5ff0 100644 --- a/advisories/unreviewed/2022/05/GHSA-45pc-wv4r-j445/GHSA-45pc-wv4r-j445.json +++ b/advisories/unreviewed/2022/05/GHSA-45pc-wv4r-j445/GHSA-45pc-wv4r-j445.json @@ -7,12 +7,8 @@ "CVE-2006-3461" ], "details": "Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -192,9 +188,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-45pq-qjc7-hf9c/GHSA-45pq-qjc7-hf9c.json b/advisories/unreviewed/2022/05/GHSA-45pq-qjc7-hf9c/GHSA-45pq-qjc7-hf9c.json index 3ebead7d62f..a72620b673c 100644 --- a/advisories/unreviewed/2022/05/GHSA-45pq-qjc7-hf9c/GHSA-45pq-qjc7-hf9c.json +++ b/advisories/unreviewed/2022/05/GHSA-45pq-qjc7-hf9c/GHSA-45pq-qjc7-hf9c.json @@ -7,12 +7,8 @@ "CVE-2003-0144" ], "details": "Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-45px-6f9w-fmpf/GHSA-45px-6f9w-fmpf.json b/advisories/unreviewed/2022/05/GHSA-45px-6f9w-fmpf/GHSA-45px-6f9w-fmpf.json index 9f3f79f28cb..03660665b1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-45px-6f9w-fmpf/GHSA-45px-6f9w-fmpf.json +++ b/advisories/unreviewed/2022/05/GHSA-45px-6f9w-fmpf/GHSA-45px-6f9w-fmpf.json @@ -7,12 +7,8 @@ "CVE-2005-1544" ], "details": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4623-jjp4-f6gr/GHSA-4623-jjp4-f6gr.json b/advisories/unreviewed/2022/05/GHSA-4623-jjp4-f6gr/GHSA-4623-jjp4-f6gr.json index 6917d7eaa3b..83802d96f55 100644 --- a/advisories/unreviewed/2022/05/GHSA-4623-jjp4-f6gr/GHSA-4623-jjp4-f6gr.json +++ b/advisories/unreviewed/2022/05/GHSA-4623-jjp4-f6gr/GHSA-4623-jjp4-f6gr.json @@ -7,12 +7,8 @@ "CVE-2006-3892" ], "details": "The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-468h-chpc-m7c8/GHSA-468h-chpc-m7c8.json b/advisories/unreviewed/2022/05/GHSA-468h-chpc-m7c8/GHSA-468h-chpc-m7c8.json index 5c0841f491e..5ea70b756de 100644 --- a/advisories/unreviewed/2022/05/GHSA-468h-chpc-m7c8/GHSA-468h-chpc-m7c8.json +++ b/advisories/unreviewed/2022/05/GHSA-468h-chpc-m7c8/GHSA-468h-chpc-m7c8.json @@ -7,12 +7,8 @@ "CVE-2006-4144" ], "details": "Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4758-ghm6-m66x/GHSA-4758-ghm6-m66x.json b/advisories/unreviewed/2022/05/GHSA-4758-ghm6-m66x/GHSA-4758-ghm6-m66x.json index bd3a28b094c..2bd5eb934f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-4758-ghm6-m66x/GHSA-4758-ghm6-m66x.json +++ b/advisories/unreviewed/2022/05/GHSA-4758-ghm6-m66x/GHSA-4758-ghm6-m66x.json @@ -7,12 +7,8 @@ "CVE-2005-2068" ], "details": "FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-48x8-fhj4-w7f6/GHSA-48x8-fhj4-w7f6.json b/advisories/unreviewed/2022/05/GHSA-48x8-fhj4-w7f6/GHSA-48x8-fhj4-w7f6.json index 10104a27239..45307385a23 100644 --- a/advisories/unreviewed/2022/05/GHSA-48x8-fhj4-w7f6/GHSA-48x8-fhj4-w7f6.json +++ b/advisories/unreviewed/2022/05/GHSA-48x8-fhj4-w7f6/GHSA-48x8-fhj4-w7f6.json @@ -7,12 +7,8 @@ "CVE-2005-3903" ], "details": "Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that specifies a large file, a different vulnerability than CVE-2001-1063.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-493r-9ff7-jjwj/GHSA-493r-9ff7-jjwj.json b/advisories/unreviewed/2022/05/GHSA-493r-9ff7-jjwj/GHSA-493r-9ff7-jjwj.json index e0b050c5817..88fd42e5013 100644 --- a/advisories/unreviewed/2022/05/GHSA-493r-9ff7-jjwj/GHSA-493r-9ff7-jjwj.json +++ b/advisories/unreviewed/2022/05/GHSA-493r-9ff7-jjwj/GHSA-493r-9ff7-jjwj.json @@ -7,12 +7,8 @@ "CVE-2002-2245" ], "details": "ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-49pw-q4pr-h429/GHSA-49pw-q4pr-h429.json b/advisories/unreviewed/2022/05/GHSA-49pw-q4pr-h429/GHSA-49pw-q4pr-h429.json index 4ca990d59cf..8a2c86e013a 100644 --- a/advisories/unreviewed/2022/05/GHSA-49pw-q4pr-h429/GHSA-49pw-q4pr-h429.json +++ b/advisories/unreviewed/2022/05/GHSA-49pw-q4pr-h429/GHSA-49pw-q4pr-h429.json @@ -7,12 +7,8 @@ "CVE-2005-1400" ], "details": "The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4cfr-h84p-cp36/GHSA-4cfr-h84p-cp36.json b/advisories/unreviewed/2022/05/GHSA-4cfr-h84p-cp36/GHSA-4cfr-h84p-cp36.json index 6261725fdf7..962be9021d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4cfr-h84p-cp36/GHSA-4cfr-h84p-cp36.json +++ b/advisories/unreviewed/2022/05/GHSA-4cfr-h84p-cp36/GHSA-4cfr-h84p-cp36.json @@ -7,12 +7,8 @@ "CVE-2006-4682" ], "details": "Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests and (2) malformed packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4chv-2998-h8pg/GHSA-4chv-2998-h8pg.json b/advisories/unreviewed/2022/05/GHSA-4chv-2998-h8pg/GHSA-4chv-2998-h8pg.json index 065b0df000f..cf0492d7a39 100644 --- a/advisories/unreviewed/2022/05/GHSA-4chv-2998-h8pg/GHSA-4chv-2998-h8pg.json +++ b/advisories/unreviewed/2022/05/GHSA-4chv-2998-h8pg/GHSA-4chv-2998-h8pg.json @@ -7,12 +7,8 @@ "CVE-2004-2220" ], "details": "F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allows remote attackers to bypass anti-virus protection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4cr9-2wh9-585g/GHSA-4cr9-2wh9-585g.json b/advisories/unreviewed/2022/05/GHSA-4cr9-2wh9-585g/GHSA-4cr9-2wh9-585g.json index dbc7a163d56..d02e36a2226 100644 --- a/advisories/unreviewed/2022/05/GHSA-4cr9-2wh9-585g/GHSA-4cr9-2wh9-585g.json +++ b/advisories/unreviewed/2022/05/GHSA-4cr9-2wh9-585g/GHSA-4cr9-2wh9-585g.json @@ -7,12 +7,8 @@ "CVE-2005-1279" ], "details": "tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4g77-24fr-j3qq/GHSA-4g77-24fr-j3qq.json b/advisories/unreviewed/2022/05/GHSA-4g77-24fr-j3qq/GHSA-4g77-24fr-j3qq.json index d80068bb812..a6899a581c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-4g77-24fr-j3qq/GHSA-4g77-24fr-j3qq.json +++ b/advisories/unreviewed/2022/05/GHSA-4g77-24fr-j3qq/GHSA-4g77-24fr-j3qq.json @@ -7,12 +7,8 @@ "CVE-2004-1039" ], "details": "The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4j9j-jf29-v2fj/GHSA-4j9j-jf29-v2fj.json b/advisories/unreviewed/2022/05/GHSA-4j9j-jf29-v2fj/GHSA-4j9j-jf29-v2fj.json index dae8fa44e9c..01ef8aadb70 100644 --- a/advisories/unreviewed/2022/05/GHSA-4j9j-jf29-v2fj/GHSA-4j9j-jf29-v2fj.json +++ b/advisories/unreviewed/2022/05/GHSA-4j9j-jf29-v2fj/GHSA-4j9j-jf29-v2fj.json @@ -7,12 +7,8 @@ "CVE-2003-0653" ], "details": "The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required \"PKTHDR\" mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service (kernel panic or crash) via certain OSI packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4j9m-7x23-fj85/GHSA-4j9m-7x23-fj85.json b/advisories/unreviewed/2022/05/GHSA-4j9m-7x23-fj85/GHSA-4j9m-7x23-fj85.json index bb64d3ce373..e6d2b2d5a9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4j9m-7x23-fj85/GHSA-4j9m-7x23-fj85.json +++ b/advisories/unreviewed/2022/05/GHSA-4j9m-7x23-fj85/GHSA-4j9m-7x23-fj85.json @@ -7,12 +7,8 @@ "CVE-2004-0507" ], "details": "Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4jq7-hvr2-qgmp/GHSA-4jq7-hvr2-qgmp.json b/advisories/unreviewed/2022/05/GHSA-4jq7-hvr2-qgmp/GHSA-4jq7-hvr2-qgmp.json index 0593e642f77..c5049d02365 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jq7-hvr2-qgmp/GHSA-4jq7-hvr2-qgmp.json +++ b/advisories/unreviewed/2022/05/GHSA-4jq7-hvr2-qgmp/GHSA-4jq7-hvr2-qgmp.json @@ -7,12 +7,8 @@ "CVE-2006-1494" ], "details": "Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4jrq-7cgx-qq88/GHSA-4jrq-7cgx-qq88.json b/advisories/unreviewed/2022/05/GHSA-4jrq-7cgx-qq88/GHSA-4jrq-7cgx-qq88.json index 655aaaaff4f..e46ccee32fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jrq-7cgx-qq88/GHSA-4jrq-7cgx-qq88.json +++ b/advisories/unreviewed/2022/05/GHSA-4jrq-7cgx-qq88/GHSA-4jrq-7cgx-qq88.json @@ -7,12 +7,8 @@ "CVE-2003-0977" ], "details": "CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4p3c-rrcv-8gx9/GHSA-4p3c-rrcv-8gx9.json b/advisories/unreviewed/2022/05/GHSA-4p3c-rrcv-8gx9/GHSA-4p3c-rrcv-8gx9.json index 82cd5dc6076..cc78556c2e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4p3c-rrcv-8gx9/GHSA-4p3c-rrcv-8gx9.json +++ b/advisories/unreviewed/2022/05/GHSA-4p3c-rrcv-8gx9/GHSA-4p3c-rrcv-8gx9.json @@ -7,12 +7,8 @@ "CVE-2003-0577" ], "details": "mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4p9c-c557-r5cq/GHSA-4p9c-c557-r5cq.json b/advisories/unreviewed/2022/05/GHSA-4p9c-c557-r5cq/GHSA-4p9c-c557-r5cq.json index a84d7263767..6e09a3c083d 100644 --- a/advisories/unreviewed/2022/05/GHSA-4p9c-c557-r5cq/GHSA-4p9c-c557-r5cq.json +++ b/advisories/unreviewed/2022/05/GHSA-4p9c-c557-r5cq/GHSA-4p9c-c557-r5cq.json @@ -7,12 +7,8 @@ "CVE-2004-1071" ], "details": "The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4pj8-4cfr-p3m5/GHSA-4pj8-4cfr-p3m5.json b/advisories/unreviewed/2022/05/GHSA-4pj8-4cfr-p3m5/GHSA-4pj8-4cfr-p3m5.json index 06d08203bd0..30c26be008f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pj8-4cfr-p3m5/GHSA-4pj8-4cfr-p3m5.json +++ b/advisories/unreviewed/2022/05/GHSA-4pj8-4cfr-p3m5/GHSA-4pj8-4cfr-p3m5.json @@ -7,12 +7,8 @@ "CVE-2004-1323" ], "details": "Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large signal number to (1) xxx_sys_kill, (2) xxx_sys_sigaction, and possibly other translation functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4pw3-fcxf-f8gx/GHSA-4pw3-fcxf-f8gx.json b/advisories/unreviewed/2022/05/GHSA-4pw3-fcxf-f8gx/GHSA-4pw3-fcxf-f8gx.json index 5063c62ecb9..8d6f7061c52 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pw3-fcxf-f8gx/GHSA-4pw3-fcxf-f8gx.json +++ b/advisories/unreviewed/2022/05/GHSA-4pw3-fcxf-f8gx/GHSA-4pw3-fcxf-f8gx.json @@ -7,12 +7,8 @@ "CVE-2009-1379" ], "details": "Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -144,9 +140,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4q57-g9fh-w67x/GHSA-4q57-g9fh-w67x.json b/advisories/unreviewed/2022/05/GHSA-4q57-g9fh-w67x/GHSA-4q57-g9fh-w67x.json index f3b5d6b1047..69560801009 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q57-g9fh-w67x/GHSA-4q57-g9fh-w67x.json +++ b/advisories/unreviewed/2022/05/GHSA-4q57-g9fh-w67x/GHSA-4q57-g9fh-w67x.json @@ -7,12 +7,8 @@ "CVE-2003-0147" ], "details": "OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms (\"Karatsuba\" and normal).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4q5x-p4gv-j5cj/GHSA-4q5x-p4gv-j5cj.json b/advisories/unreviewed/2022/05/GHSA-4q5x-p4gv-j5cj/GHSA-4q5x-p4gv-j5cj.json index 58a821a5794..1c75e79fd5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q5x-p4gv-j5cj/GHSA-4q5x-p4gv-j5cj.json +++ b/advisories/unreviewed/2022/05/GHSA-4q5x-p4gv-j5cj/GHSA-4q5x-p4gv-j5cj.json @@ -7,12 +7,8 @@ "CVE-2002-1565" ], "details": "Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4q7c-7fj7-4vmq/GHSA-4q7c-7fj7-4vmq.json b/advisories/unreviewed/2022/05/GHSA-4q7c-7fj7-4vmq/GHSA-4q7c-7fj7-4vmq.json index c6d7f8a1341..c84dbae1a1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q7c-7fj7-4vmq/GHSA-4q7c-7fj7-4vmq.json +++ b/advisories/unreviewed/2022/05/GHSA-4q7c-7fj7-4vmq/GHSA-4q7c-7fj7-4vmq.json @@ -7,12 +7,8 @@ "CVE-2004-1891" ], "details": "The ftp_syslog function in ftpd in SGI IRIX 6.5.20 \"doesn't work with anonymous FTP,\" which has an unknown impact, possibly preventing the actions of anonymous users from being logged.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4rcw-rfm8-hhj3/GHSA-4rcw-rfm8-hhj3.json b/advisories/unreviewed/2022/05/GHSA-4rcw-rfm8-hhj3/GHSA-4rcw-rfm8-hhj3.json index 4efef42128f..6a07837c3e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rcw-rfm8-hhj3/GHSA-4rcw-rfm8-hhj3.json +++ b/advisories/unreviewed/2022/05/GHSA-4rcw-rfm8-hhj3/GHSA-4rcw-rfm8-hhj3.json @@ -7,12 +7,8 @@ "CVE-2003-0775" ], "details": "saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4rcx-3v3w-9cg9/GHSA-4rcx-3v3w-9cg9.json b/advisories/unreviewed/2022/05/GHSA-4rcx-3v3w-9cg9/GHSA-4rcx-3v3w-9cg9.json index 89a78d8f6bc..6e971d126fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rcx-3v3w-9cg9/GHSA-4rcx-3v3w-9cg9.json +++ b/advisories/unreviewed/2022/05/GHSA-4rcx-3v3w-9cg9/GHSA-4rcx-3v3w-9cg9.json @@ -7,12 +7,8 @@ "CVE-2003-0924" ], "details": "netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4rh6-7h5w-cvjv/GHSA-4rh6-7h5w-cvjv.json b/advisories/unreviewed/2022/05/GHSA-4rh6-7h5w-cvjv/GHSA-4rh6-7h5w-cvjv.json index 713d4371371..c60846896c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rh6-7h5w-cvjv/GHSA-4rh6-7h5w-cvjv.json +++ b/advisories/unreviewed/2022/05/GHSA-4rh6-7h5w-cvjv/GHSA-4rh6-7h5w-cvjv.json @@ -7,12 +7,8 @@ "CVE-2008-3584" ], "details": "NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service (system crash) via a crafted PPPoE packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4v65-2p65-mvwf/GHSA-4v65-2p65-mvwf.json b/advisories/unreviewed/2022/05/GHSA-4v65-2p65-mvwf/GHSA-4v65-2p65-mvwf.json index 0e40f600270..5a2d2447f9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4v65-2p65-mvwf/GHSA-4v65-2p65-mvwf.json +++ b/advisories/unreviewed/2022/05/GHSA-4v65-2p65-mvwf/GHSA-4v65-2p65-mvwf.json @@ -7,12 +7,8 @@ "CVE-2003-1329" ], "details": "ftpd.c in wu-ftpd 2.6.2, when running on \"operating systems that only allow one non-connected socket bound to the same local address,\" does not close failed connections, which allows remote attackers to cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4wcr-f6x9-g539/GHSA-4wcr-f6x9-g539.json b/advisories/unreviewed/2022/05/GHSA-4wcr-f6x9-g539/GHSA-4wcr-f6x9-g539.json index 262a1cebfa0..bf1c3c3bfa2 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wcr-f6x9-g539/GHSA-4wcr-f6x9-g539.json +++ b/advisories/unreviewed/2022/05/GHSA-4wcr-f6x9-g539/GHSA-4wcr-f6x9-g539.json @@ -7,12 +7,8 @@ "CVE-2002-0392" ], "details": "Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -180,9 +176,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4wjq-73v9-h88f/GHSA-4wjq-73v9-h88f.json b/advisories/unreviewed/2022/05/GHSA-4wjq-73v9-h88f/GHSA-4wjq-73v9-h88f.json index 9f54aa6c33e..43cbd0d1b9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wjq-73v9-h88f/GHSA-4wjq-73v9-h88f.json +++ b/advisories/unreviewed/2022/05/GHSA-4wjq-73v9-h88f/GHSA-4wjq-73v9-h88f.json @@ -7,12 +7,8 @@ "CVE-2002-2188" ], "details": "OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with invalid arguments, possibly due to an integer signedness error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4x4x-qj57-37wg/GHSA-4x4x-qj57-37wg.json b/advisories/unreviewed/2022/05/GHSA-4x4x-qj57-37wg/GHSA-4x4x-qj57-37wg.json index 25aeae6871d..3d4b2b16996 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x4x-qj57-37wg/GHSA-4x4x-qj57-37wg.json +++ b/advisories/unreviewed/2022/05/GHSA-4x4x-qj57-37wg/GHSA-4x4x-qj57-37wg.json @@ -7,12 +7,8 @@ "CVE-2006-0381" ], "details": "A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4x79-6w4j-gwx6/GHSA-4x79-6w4j-gwx6.json b/advisories/unreviewed/2022/05/GHSA-4x79-6w4j-gwx6/GHSA-4x79-6w4j-gwx6.json index 48197946169..2ce6836288b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x79-6w4j-gwx6/GHSA-4x79-6w4j-gwx6.json +++ b/advisories/unreviewed/2022/05/GHSA-4x79-6w4j-gwx6/GHSA-4x79-6w4j-gwx6.json @@ -7,12 +7,8 @@ "CVE-2006-3403" ], "details": "The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -196,9 +192,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4x7f-g374-66v2/GHSA-4x7f-g374-66v2.json b/advisories/unreviewed/2022/05/GHSA-4x7f-g374-66v2/GHSA-4x7f-g374-66v2.json index fa51b38a92c..a7a71af29d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x7f-g374-66v2/GHSA-4x7f-g374-66v2.json +++ b/advisories/unreviewed/2022/05/GHSA-4x7f-g374-66v2/GHSA-4x7f-g374-66v2.json @@ -7,12 +7,8 @@ "CVE-2006-3810" ], "details": "Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -260,9 +256,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-52rf-pfj9-676q/GHSA-52rf-pfj9-676q.json b/advisories/unreviewed/2022/05/GHSA-52rf-pfj9-676q/GHSA-52rf-pfj9-676q.json index 347b96e9186..1c0403ba49e 100644 --- a/advisories/unreviewed/2022/05/GHSA-52rf-pfj9-676q/GHSA-52rf-pfj9-676q.json +++ b/advisories/unreviewed/2022/05/GHSA-52rf-pfj9-676q/GHSA-52rf-pfj9-676q.json @@ -7,12 +7,8 @@ "CVE-2005-0256" ], "details": "The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5382-qx5c-8j6g/GHSA-5382-qx5c-8j6g.json b/advisories/unreviewed/2022/05/GHSA-5382-qx5c-8j6g/GHSA-5382-qx5c-8j6g.json index e383094ce70..0aa7c4ad5ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-5382-qx5c-8j6g/GHSA-5382-qx5c-8j6g.json +++ b/advisories/unreviewed/2022/05/GHSA-5382-qx5c-8j6g/GHSA-5382-qx5c-8j6g.json @@ -7,12 +7,8 @@ "CVE-2005-4744" ], "details": "Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-53mc-97f9-qrqg/GHSA-53mc-97f9-qrqg.json b/advisories/unreviewed/2022/05/GHSA-53mc-97f9-qrqg/GHSA-53mc-97f9-qrqg.json index 533d75093f8..3b9b1056f25 100644 --- a/advisories/unreviewed/2022/05/GHSA-53mc-97f9-qrqg/GHSA-53mc-97f9-qrqg.json +++ b/advisories/unreviewed/2022/05/GHSA-53mc-97f9-qrqg/GHSA-53mc-97f9-qrqg.json @@ -7,12 +7,8 @@ "CVE-2003-0573" ], "details": "The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5438-wf9c-p7cg/GHSA-5438-wf9c-p7cg.json b/advisories/unreviewed/2022/05/GHSA-5438-wf9c-p7cg/GHSA-5438-wf9c-p7cg.json index 31143d76d10..fbc800b94d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-5438-wf9c-p7cg/GHSA-5438-wf9c-p7cg.json +++ b/advisories/unreviewed/2022/05/GHSA-5438-wf9c-p7cg/GHSA-5438-wf9c-p7cg.json @@ -7,12 +7,8 @@ "CVE-2004-0607" ], "details": "The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-54hj-xp7v-pcj6/GHSA-54hj-xp7v-pcj6.json b/advisories/unreviewed/2022/05/GHSA-54hj-xp7v-pcj6/GHSA-54hj-xp7v-pcj6.json index 012bce8fea6..96d558c70de 100644 --- a/advisories/unreviewed/2022/05/GHSA-54hj-xp7v-pcj6/GHSA-54hj-xp7v-pcj6.json +++ b/advisories/unreviewed/2022/05/GHSA-54hj-xp7v-pcj6/GHSA-54hj-xp7v-pcj6.json @@ -7,12 +7,8 @@ "CVE-2008-3530" ], "details": "sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54q7-wf84-v94r/GHSA-54q7-wf84-v94r.json b/advisories/unreviewed/2022/05/GHSA-54q7-wf84-v94r/GHSA-54q7-wf84-v94r.json index d7253b33af2..e192aeabe04 100644 --- a/advisories/unreviewed/2022/05/GHSA-54q7-wf84-v94r/GHSA-54q7-wf84-v94r.json +++ b/advisories/unreviewed/2022/05/GHSA-54q7-wf84-v94r/GHSA-54q7-wf84-v94r.json @@ -7,12 +7,8 @@ "CVE-2009-0696" ], "details": "The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -160,9 +156,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-55vc-fmpc-5q9q/GHSA-55vc-fmpc-5q9q.json b/advisories/unreviewed/2022/05/GHSA-55vc-fmpc-5q9q/GHSA-55vc-fmpc-5q9q.json index 1ba6e9f6969..eb9f345cdc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-55vc-fmpc-5q9q/GHSA-55vc-fmpc-5q9q.json +++ b/advisories/unreviewed/2022/05/GHSA-55vc-fmpc-5q9q/GHSA-55vc-fmpc-5q9q.json @@ -7,12 +7,8 @@ "CVE-2006-4811" ], "details": "Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -148,9 +144,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-563f-qfcg-wp9f/GHSA-563f-qfcg-wp9f.json b/advisories/unreviewed/2022/05/GHSA-563f-qfcg-wp9f/GHSA-563f-qfcg-wp9f.json index da4af7f1052..818e4f6f26d 100644 --- a/advisories/unreviewed/2022/05/GHSA-563f-qfcg-wp9f/GHSA-563f-qfcg-wp9f.json +++ b/advisories/unreviewed/2022/05/GHSA-563f-qfcg-wp9f/GHSA-563f-qfcg-wp9f.json @@ -7,12 +7,8 @@ "CVE-2003-0955" ], "details": "OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2) or (2) exec_elf.c, which leads to a stack-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-564p-qwx9-wr9r/GHSA-564p-qwx9-wr9r.json b/advisories/unreviewed/2022/05/GHSA-564p-qwx9-wr9r/GHSA-564p-qwx9-wr9r.json index e6458d10082..877e9660d3f 100644 --- a/advisories/unreviewed/2022/05/GHSA-564p-qwx9-wr9r/GHSA-564p-qwx9-wr9r.json +++ b/advisories/unreviewed/2022/05/GHSA-564p-qwx9-wr9r/GHSA-564p-qwx9-wr9r.json @@ -7,12 +7,8 @@ "CVE-2006-5870" ], "details": "Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -172,9 +168,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-56cv-7m3h-rjxp/GHSA-56cv-7m3h-rjxp.json b/advisories/unreviewed/2022/05/GHSA-56cv-7m3h-rjxp/GHSA-56cv-7m3h-rjxp.json index a87e8d013a5..eb838e6d11f 100644 --- a/advisories/unreviewed/2022/05/GHSA-56cv-7m3h-rjxp/GHSA-56cv-7m3h-rjxp.json +++ b/advisories/unreviewed/2022/05/GHSA-56cv-7m3h-rjxp/GHSA-56cv-7m3h-rjxp.json @@ -7,12 +7,8 @@ "CVE-2005-2968" ], "details": "Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -108,9 +104,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-575c-cp7m-ghgh/GHSA-575c-cp7m-ghgh.json b/advisories/unreviewed/2022/05/GHSA-575c-cp7m-ghgh/GHSA-575c-cp7m-ghgh.json index cdf0b2f5a5c..21b7bf34021 100644 --- a/advisories/unreviewed/2022/05/GHSA-575c-cp7m-ghgh/GHSA-575c-cp7m-ghgh.json +++ b/advisories/unreviewed/2022/05/GHSA-575c-cp7m-ghgh/GHSA-575c-cp7m-ghgh.json @@ -7,12 +7,8 @@ "CVE-2006-0455" ], "details": "gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command \"gpg --verify\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -144,9 +140,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-57q9-cw6p-2qrg/GHSA-57q9-cw6p-2qrg.json b/advisories/unreviewed/2022/05/GHSA-57q9-cw6p-2qrg/GHSA-57q9-cw6p-2qrg.json index d4c669655e3..97607aff4c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-57q9-cw6p-2qrg/GHSA-57q9-cw6p-2qrg.json +++ b/advisories/unreviewed/2022/05/GHSA-57q9-cw6p-2qrg/GHSA-57q9-cw6p-2qrg.json @@ -7,12 +7,8 @@ "CVE-2007-0909" ], "details": "Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -176,9 +172,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-57r5-rq8g-fw77/GHSA-57r5-rq8g-fw77.json b/advisories/unreviewed/2022/05/GHSA-57r5-rq8g-fw77/GHSA-57r5-rq8g-fw77.json index 45115e8f986..b79db99664c 100644 --- a/advisories/unreviewed/2022/05/GHSA-57r5-rq8g-fw77/GHSA-57r5-rq8g-fw77.json +++ b/advisories/unreviewed/2022/05/GHSA-57r5-rq8g-fw77/GHSA-57r5-rq8g-fw77.json @@ -7,12 +7,8 @@ "CVE-2005-0139" ], "details": "Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-588r-hgvg-hcjc/GHSA-588r-hgvg-hcjc.json b/advisories/unreviewed/2022/05/GHSA-588r-hgvg-hcjc/GHSA-588r-hgvg-hcjc.json index 5789d493e80..50080b190a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-588r-hgvg-hcjc/GHSA-588r-hgvg-hcjc.json +++ b/advisories/unreviewed/2022/05/GHSA-588r-hgvg-hcjc/GHSA-588r-hgvg-hcjc.json @@ -7,12 +7,8 @@ "CVE-2006-2661" ], "details": "ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-58cj-jwpm-3hvq/GHSA-58cj-jwpm-3hvq.json b/advisories/unreviewed/2022/05/GHSA-58cj-jwpm-3hvq/GHSA-58cj-jwpm-3hvq.json index 832d2a0f4fd..b806b69ca0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-58cj-jwpm-3hvq/GHSA-58cj-jwpm-3hvq.json +++ b/advisories/unreviewed/2022/05/GHSA-58cj-jwpm-3hvq/GHSA-58cj-jwpm-3hvq.json @@ -7,12 +7,8 @@ "CVE-2006-6142" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (3) delete_draft parameters in (b) compose.php, and (4) unspecified vectors involving \"a shortcoming in the magicHTML filter.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58p6-7f25-xqv3/GHSA-58p6-7f25-xqv3.json b/advisories/unreviewed/2022/05/GHSA-58p6-7f25-xqv3/GHSA-58p6-7f25-xqv3.json index 6a4a1194b6f..b9c2782c50b 100644 --- a/advisories/unreviewed/2022/05/GHSA-58p6-7f25-xqv3/GHSA-58p6-7f25-xqv3.json +++ b/advisories/unreviewed/2022/05/GHSA-58p6-7f25-xqv3/GHSA-58p6-7f25-xqv3.json @@ -7,12 +7,8 @@ "CVE-2004-0230" ], "details": "TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-59wx-2wpf-8j48/GHSA-59wx-2wpf-8j48.json b/advisories/unreviewed/2022/05/GHSA-59wx-2wpf-8j48/GHSA-59wx-2wpf-8j48.json index 8aef291ff38..d697e455dab 100644 --- a/advisories/unreviewed/2022/05/GHSA-59wx-2wpf-8j48/GHSA-59wx-2wpf-8j48.json +++ b/advisories/unreviewed/2022/05/GHSA-59wx-2wpf-8j48/GHSA-59wx-2wpf-8j48.json @@ -7,12 +7,8 @@ "CVE-2002-1978" ], "details": "IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5c39-44xr-89vv/GHSA-5c39-44xr-89vv.json b/advisories/unreviewed/2022/05/GHSA-5c39-44xr-89vv/GHSA-5c39-44xr-89vv.json index cae18cc548a..4e970f0479a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c39-44xr-89vv/GHSA-5c39-44xr-89vv.json +++ b/advisories/unreviewed/2022/05/GHSA-5c39-44xr-89vv/GHSA-5c39-44xr-89vv.json @@ -7,12 +7,8 @@ "CVE-2005-3651" ], "details": "Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -108,9 +104,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5c86-xw43-gw75/GHSA-5c86-xw43-gw75.json b/advisories/unreviewed/2022/05/GHSA-5c86-xw43-gw75/GHSA-5c86-xw43-gw75.json index 2bc88400e83..75cf7c73cb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c86-xw43-gw75/GHSA-5c86-xw43-gw75.json +++ b/advisories/unreviewed/2022/05/GHSA-5c86-xw43-gw75/GHSA-5c86-xw43-gw75.json @@ -7,12 +7,8 @@ "CVE-2004-0790" ], "details": "Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the \"blind connection-reset attack.\" NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5cfw-vgxw-pqxm/GHSA-5cfw-vgxw-pqxm.json b/advisories/unreviewed/2022/05/GHSA-5cfw-vgxw-pqxm/GHSA-5cfw-vgxw-pqxm.json index 89799ec3613..4fd03278ea3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cfw-vgxw-pqxm/GHSA-5cfw-vgxw-pqxm.json +++ b/advisories/unreviewed/2022/05/GHSA-5cfw-vgxw-pqxm/GHSA-5cfw-vgxw-pqxm.json @@ -7,12 +7,8 @@ "CVE-2003-0542" ], "details": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cp2-xr74-442p/GHSA-5cp2-xr74-442p.json b/advisories/unreviewed/2022/05/GHSA-5cp2-xr74-442p/GHSA-5cp2-xr74-442p.json index 217f37fd487..1135b6a4d82 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cp2-xr74-442p/GHSA-5cp2-xr74-442p.json +++ b/advisories/unreviewed/2022/05/GHSA-5cp2-xr74-442p/GHSA-5cp2-xr74-442p.json @@ -7,12 +7,8 @@ "CVE-2002-1153" ], "details": "IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as \"Host\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5f3p-wqh5-33m5/GHSA-5f3p-wqh5-33m5.json b/advisories/unreviewed/2022/05/GHSA-5f3p-wqh5-33m5/GHSA-5f3p-wqh5-33m5.json index 0dc6f1b0a0a..dfd53704099 100644 --- a/advisories/unreviewed/2022/05/GHSA-5f3p-wqh5-33m5/GHSA-5f3p-wqh5-33m5.json +++ b/advisories/unreviewed/2022/05/GHSA-5f3p-wqh5-33m5/GHSA-5f3p-wqh5-33m5.json @@ -7,12 +7,8 @@ "CVE-2005-1155" ], "details": "The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a tag with a javascript: URL in the href attribute, aka \"Firelinking.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5f9c-w9rv-7v96/GHSA-5f9c-w9rv-7v96.json b/advisories/unreviewed/2022/05/GHSA-5f9c-w9rv-7v96/GHSA-5f9c-w9rv-7v96.json index 5137ef79755..aabe3cdbfbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-5f9c-w9rv-7v96/GHSA-5f9c-w9rv-7v96.json +++ b/advisories/unreviewed/2022/05/GHSA-5f9c-w9rv-7v96/GHSA-5f9c-w9rv-7v96.json @@ -7,12 +7,8 @@ "CVE-2003-1023" ], "details": "Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5g37-6qw5-9qqj/GHSA-5g37-6qw5-9qqj.json b/advisories/unreviewed/2022/05/GHSA-5g37-6qw5-9qqj/GHSA-5g37-6qw5-9qqj.json index d944ff02a8a..3a91f2e8ac4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g37-6qw5-9qqj/GHSA-5g37-6qw5-9qqj.json +++ b/advisories/unreviewed/2022/05/GHSA-5g37-6qw5-9qqj/GHSA-5g37-6qw5-9qqj.json @@ -7,12 +7,8 @@ "CVE-2006-1731" ], "details": "Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments, which allows remote attackers to conduct cross-site scripting (XSS) attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g7c-7whj-r862/GHSA-5g7c-7whj-r862.json b/advisories/unreviewed/2022/05/GHSA-5g7c-7whj-r862/GHSA-5g7c-7whj-r862.json index 4261f25ae3a..0336dad0355 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g7c-7whj-r862/GHSA-5g7c-7whj-r862.json +++ b/advisories/unreviewed/2022/05/GHSA-5g7c-7whj-r862/GHSA-5g7c-7whj-r862.json @@ -7,12 +7,8 @@ "CVE-2005-4348" ], "details": "fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5gc3-j88p-jmj3/GHSA-5gc3-j88p-jmj3.json b/advisories/unreviewed/2022/05/GHSA-5gc3-j88p-jmj3/GHSA-5gc3-j88p-jmj3.json index 431fe6f84e1..27a82ce2728 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gc3-j88p-jmj3/GHSA-5gc3-j88p-jmj3.json +++ b/advisories/unreviewed/2022/05/GHSA-5gc3-j88p-jmj3/GHSA-5gc3-j88p-jmj3.json @@ -7,12 +7,8 @@ "CVE-2005-2925" ], "details": "runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5gh9-26h7-pwh7/GHSA-5gh9-26h7-pwh7.json b/advisories/unreviewed/2022/05/GHSA-5gh9-26h7-pwh7/GHSA-5gh9-26h7-pwh7.json index df3e3780070..6b7d6a3c90a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gh9-26h7-pwh7/GHSA-5gh9-26h7-pwh7.json +++ b/advisories/unreviewed/2022/05/GHSA-5gh9-26h7-pwh7/GHSA-5gh9-26h7-pwh7.json @@ -7,12 +7,8 @@ "CVE-2004-0722" ], "details": "Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5h29-fm96-2q8j/GHSA-5h29-fm96-2q8j.json b/advisories/unreviewed/2022/05/GHSA-5h29-fm96-2q8j/GHSA-5h29-fm96-2q8j.json index 05c0928a36d..1054c19d0c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-5h29-fm96-2q8j/GHSA-5h29-fm96-2q8j.json +++ b/advisories/unreviewed/2022/05/GHSA-5h29-fm96-2q8j/GHSA-5h29-fm96-2q8j.json @@ -7,12 +7,8 @@ "CVE-2003-0773" ], "details": "saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5hfw-w8jp-h4hj/GHSA-5hfw-w8jp-h4hj.json b/advisories/unreviewed/2022/05/GHSA-5hfw-w8jp-h4hj/GHSA-5hfw-w8jp-h4hj.json index 3e1a036b2a4..f39f64b5c68 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hfw-w8jp-h4hj/GHSA-5hfw-w8jp-h4hj.json +++ b/advisories/unreviewed/2022/05/GHSA-5hfw-w8jp-h4hj/GHSA-5hfw-w8jp-h4hj.json @@ -7,12 +7,8 @@ "CVE-2005-0469" ], "details": "Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5hg5-x4p6-wgf5/GHSA-5hg5-x4p6-wgf5.json b/advisories/unreviewed/2022/05/GHSA-5hg5-x4p6-wgf5/GHSA-5hg5-x4p6-wgf5.json index 59a5181b2ae..ece81933761 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hg5-x4p6-wgf5/GHSA-5hg5-x4p6-wgf5.json +++ b/advisories/unreviewed/2022/05/GHSA-5hg5-x4p6-wgf5/GHSA-5hg5-x4p6-wgf5.json @@ -7,12 +7,8 @@ "CVE-2005-2917" ], "details": "Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5hv4-qhm2-g82w/GHSA-5hv4-qhm2-g82w.json b/advisories/unreviewed/2022/05/GHSA-5hv4-qhm2-g82w/GHSA-5hv4-qhm2-g82w.json index c0f92ec4413..dc576b4187e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hv4-qhm2-g82w/GHSA-5hv4-qhm2-g82w.json +++ b/advisories/unreviewed/2022/05/GHSA-5hv4-qhm2-g82w/GHSA-5hv4-qhm2-g82w.json @@ -7,12 +7,8 @@ "CVE-2005-1175" ], "details": "Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5j29-gg9r-g9gc/GHSA-5j29-gg9r-g9gc.json b/advisories/unreviewed/2022/05/GHSA-5j29-gg9r-g9gc/GHSA-5j29-gg9r-g9gc.json index 56d8f67f35a..f782cc53a6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j29-gg9r-g9gc/GHSA-5j29-gg9r-g9gc.json +++ b/advisories/unreviewed/2022/05/GHSA-5j29-gg9r-g9gc/GHSA-5j29-gg9r-g9gc.json @@ -7,12 +7,8 @@ "CVE-2006-6077" ], "details": "The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -248,9 +244,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5j5g-mmc4-hqmg/GHSA-5j5g-mmc4-hqmg.json b/advisories/unreviewed/2022/05/GHSA-5j5g-mmc4-hqmg/GHSA-5j5g-mmc4-hqmg.json index 9f74a9287bb..fc5f3a188f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j5g-mmc4-hqmg/GHSA-5j5g-mmc4-hqmg.json +++ b/advisories/unreviewed/2022/05/GHSA-5j5g-mmc4-hqmg/GHSA-5j5g-mmc4-hqmg.json @@ -7,12 +7,8 @@ "CVE-2004-0114" ], "details": "The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's reference count when the vm_map_find function fails, which could allow local users to gain read or write access to a portion of kernel memory and gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jj5-jc9x-8v3m/GHSA-5jj5-jc9x-8v3m.json b/advisories/unreviewed/2022/05/GHSA-5jj5-jc9x-8v3m/GHSA-5jj5-jc9x-8v3m.json index f3c15aa1e46..cd51ed32d7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jj5-jc9x-8v3m/GHSA-5jj5-jc9x-8v3m.json +++ b/advisories/unreviewed/2022/05/GHSA-5jj5-jc9x-8v3m/GHSA-5jj5-jc9x-8v3m.json @@ -7,12 +7,8 @@ "CVE-2005-4601" ], "details": "The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jj6-rgx3-gwpg/GHSA-5jj6-rgx3-gwpg.json b/advisories/unreviewed/2022/05/GHSA-5jj6-rgx3-gwpg/GHSA-5jj6-rgx3-gwpg.json index 935ad8b0945..3994eba0f0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jj6-rgx3-gwpg/GHSA-5jj6-rgx3-gwpg.json +++ b/advisories/unreviewed/2022/05/GHSA-5jj6-rgx3-gwpg/GHSA-5jj6-rgx3-gwpg.json @@ -7,12 +7,8 @@ "CVE-2004-0511" ], "details": "Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5pjq-w2jx-2mpq/GHSA-5pjq-w2jx-2mpq.json b/advisories/unreviewed/2022/05/GHSA-5pjq-w2jx-2mpq/GHSA-5pjq-w2jx-2mpq.json index d5c4a7fe8b4..436cf509fa0 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pjq-w2jx-2mpq/GHSA-5pjq-w2jx-2mpq.json +++ b/advisories/unreviewed/2022/05/GHSA-5pjq-w2jx-2mpq/GHSA-5pjq-w2jx-2mpq.json @@ -7,12 +7,8 @@ "CVE-2006-3463" ], "details": "The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5r9x-42xj-4x3r/GHSA-5r9x-42xj-4x3r.json b/advisories/unreviewed/2022/05/GHSA-5r9x-42xj-4x3r/GHSA-5r9x-42xj-4x3r.json index 417790fe689..a49b4894308 100644 --- a/advisories/unreviewed/2022/05/GHSA-5r9x-42xj-4x3r/GHSA-5r9x-42xj-4x3r.json +++ b/advisories/unreviewed/2022/05/GHSA-5r9x-42xj-4x3r/GHSA-5r9x-42xj-4x3r.json @@ -7,12 +7,8 @@ "CVE-2006-5794" ], "details": "Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5rc2-352q-326v/GHSA-5rc2-352q-326v.json b/advisories/unreviewed/2022/05/GHSA-5rc2-352q-326v/GHSA-5rc2-352q-326v.json index 8ef05e7873f..5beb3ebd78f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rc2-352q-326v/GHSA-5rc2-352q-326v.json +++ b/advisories/unreviewed/2022/05/GHSA-5rc2-352q-326v/GHSA-5rc2-352q-326v.json @@ -7,12 +7,8 @@ "CVE-2005-2728" ], "details": "The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -224,9 +220,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5v4r-m243-rv3w/GHSA-5v4r-m243-rv3w.json b/advisories/unreviewed/2022/05/GHSA-5v4r-m243-rv3w/GHSA-5v4r-m243-rv3w.json index a237fd165dc..4e9088ab99c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5v4r-m243-rv3w/GHSA-5v4r-m243-rv3w.json +++ b/advisories/unreviewed/2022/05/GHSA-5v4r-m243-rv3w/GHSA-5v4r-m243-rv3w.json @@ -7,12 +7,8 @@ "CVE-2006-6505" ], "details": "Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via (1) external message modies with long Content-Type headers or (2) long RFC2047-encoded (MIME non-ASCII) headers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -180,9 +176,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5vf7-m49c-hv97/GHSA-5vf7-m49c-hv97.json b/advisories/unreviewed/2022/05/GHSA-5vf7-m49c-hv97/GHSA-5vf7-m49c-hv97.json index a10300b1aa7..07210ef5bd6 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vf7-m49c-hv97/GHSA-5vf7-m49c-hv97.json +++ b/advisories/unreviewed/2022/05/GHSA-5vf7-m49c-hv97/GHSA-5vf7-m49c-hv97.json @@ -7,12 +7,8 @@ "CVE-2003-0991" ], "details": "Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5vjh-22qr-j29m/GHSA-5vjh-22qr-j29m.json b/advisories/unreviewed/2022/05/GHSA-5vjh-22qr-j29m/GHSA-5vjh-22qr-j29m.json index 32df3364a95..b8e24460cf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vjh-22qr-j29m/GHSA-5vjh-22qr-j29m.json +++ b/advisories/unreviewed/2022/05/GHSA-5vjh-22qr-j29m/GHSA-5vjh-22qr-j29m.json @@ -7,12 +7,8 @@ "CVE-2004-2259" ], "details": "vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal during a malloc or free call, which is not re-entrant.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5vvf-4w4f-hj33/GHSA-5vvf-4w4f-hj33.json b/advisories/unreviewed/2022/05/GHSA-5vvf-4w4f-hj33/GHSA-5vvf-4w4f-hj33.json index e91821f58fc..87e212f745f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vvf-4w4f-hj33/GHSA-5vvf-4w4f-hj33.json +++ b/advisories/unreviewed/2022/05/GHSA-5vvf-4w4f-hj33/GHSA-5vvf-4w4f-hj33.json @@ -7,12 +7,8 @@ "CVE-2004-0520" ], "details": "Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5vwx-44rv-q6c2/GHSA-5vwx-44rv-q6c2.json b/advisories/unreviewed/2022/05/GHSA-5vwx-44rv-q6c2/GHSA-5vwx-44rv-q6c2.json index c8426d2454b..77b1fa91bdb 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vwx-44rv-q6c2/GHSA-5vwx-44rv-q6c2.json +++ b/advisories/unreviewed/2022/05/GHSA-5vwx-44rv-q6c2/GHSA-5vwx-44rv-q6c2.json @@ -7,12 +7,8 @@ "CVE-2003-0574" ], "details": "Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5vxx-g7fm-qfjw/GHSA-5vxx-g7fm-qfjw.json b/advisories/unreviewed/2022/05/GHSA-5vxx-g7fm-qfjw/GHSA-5vxx-g7fm-qfjw.json index 5d5a72db544..a9f6a7aa811 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vxx-g7fm-qfjw/GHSA-5vxx-g7fm-qfjw.json +++ b/advisories/unreviewed/2022/05/GHSA-5vxx-g7fm-qfjw/GHSA-5vxx-g7fm-qfjw.json @@ -7,12 +7,8 @@ "CVE-2009-1515" ], "details": "Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wm2-qcg4-9wjx/GHSA-5wm2-qcg4-9wjx.json b/advisories/unreviewed/2022/05/GHSA-5wm2-qcg4-9wjx/GHSA-5wm2-qcg4-9wjx.json index ceada3fb843..5ff9efd761e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wm2-qcg4-9wjx/GHSA-5wm2-qcg4-9wjx.json +++ b/advisories/unreviewed/2022/05/GHSA-5wm2-qcg4-9wjx/GHSA-5wm2-qcg4-9wjx.json @@ -7,12 +7,8 @@ "CVE-2002-1476" ], "details": "Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category, allows local attackers to execute arbitrary code via a user-controlled locale string that has more than 6 elements, which exceeds the boundaries of the new_categories category array, as exploitable through programs such as xterm and zsh.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5wmv-4mw3-5frc/GHSA-5wmv-4mw3-5frc.json b/advisories/unreviewed/2022/05/GHSA-5wmv-4mw3-5frc/GHSA-5wmv-4mw3-5frc.json index 585c3ec2465..aeb744b3e9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wmv-4mw3-5frc/GHSA-5wmv-4mw3-5frc.json +++ b/advisories/unreviewed/2022/05/GHSA-5wmv-4mw3-5frc/GHSA-5wmv-4mw3-5frc.json @@ -7,12 +7,8 @@ "CVE-2006-5540" ], "details": "backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a \"MIN/MAX index optimization.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5x3p-f72v-8jx5/GHSA-5x3p-f72v-8jx5.json b/advisories/unreviewed/2022/05/GHSA-5x3p-f72v-8jx5/GHSA-5x3p-f72v-8jx5.json index e703dfc965c..cf632274145 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x3p-f72v-8jx5/GHSA-5x3p-f72v-8jx5.json +++ b/advisories/unreviewed/2022/05/GHSA-5x3p-f72v-8jx5/GHSA-5x3p-f72v-8jx5.json @@ -7,12 +7,8 @@ "CVE-2009-0172" ], "details": "Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5x43-qqx3-9m79/GHSA-5x43-qqx3-9m79.json b/advisories/unreviewed/2022/05/GHSA-5x43-qqx3-9m79/GHSA-5x43-qqx3-9m79.json index 6f9d8b74979..7b6023ca104 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x43-qqx3-9m79/GHSA-5x43-qqx3-9m79.json +++ b/advisories/unreviewed/2022/05/GHSA-5x43-qqx3-9m79/GHSA-5x43-qqx3-9m79.json @@ -7,12 +7,8 @@ "CVE-2004-2606" ], "details": "The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5xr2-gxmf-xc8r/GHSA-5xr2-gxmf-xc8r.json b/advisories/unreviewed/2022/05/GHSA-5xr2-gxmf-xc8r/GHSA-5xr2-gxmf-xc8r.json index 4bc3ea918d7..00532420217 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xr2-gxmf-xc8r/GHSA-5xr2-gxmf-xc8r.json +++ b/advisories/unreviewed/2022/05/GHSA-5xr2-gxmf-xc8r/GHSA-5xr2-gxmf-xc8r.json @@ -7,12 +7,8 @@ "CVE-2006-6169" ], "details": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -152,9 +148,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6336-xxrx-mvmh/GHSA-6336-xxrx-mvmh.json b/advisories/unreviewed/2022/05/GHSA-6336-xxrx-mvmh/GHSA-6336-xxrx-mvmh.json index 0703cd21b4e..07eddf7a1c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-6336-xxrx-mvmh/GHSA-6336-xxrx-mvmh.json +++ b/advisories/unreviewed/2022/05/GHSA-6336-xxrx-mvmh/GHSA-6336-xxrx-mvmh.json @@ -7,12 +7,8 @@ "CVE-2004-0427" ], "details": "The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -148,9 +144,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-63cf-4m5h-x542/GHSA-63cf-4m5h-x542.json b/advisories/unreviewed/2022/05/GHSA-63cf-4m5h-x542/GHSA-63cf-4m5h-x542.json index b1d938cca1a..72b8821f67a 100644 --- a/advisories/unreviewed/2022/05/GHSA-63cf-4m5h-x542/GHSA-63cf-4m5h-x542.json +++ b/advisories/unreviewed/2022/05/GHSA-63cf-4m5h-x542/GHSA-63cf-4m5h-x542.json @@ -7,12 +7,8 @@ "CVE-2006-4146" ], "details": "Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-63wf-w9c4-9xqh/GHSA-63wf-w9c4-9xqh.json b/advisories/unreviewed/2022/05/GHSA-63wf-w9c4-9xqh/GHSA-63wf-w9c4-9xqh.json index 3f9677c2dd5..227b39b750e 100644 --- a/advisories/unreviewed/2022/05/GHSA-63wf-w9c4-9xqh/GHSA-63wf-w9c4-9xqh.json +++ b/advisories/unreviewed/2022/05/GHSA-63wf-w9c4-9xqh/GHSA-63wf-w9c4-9xqh.json @@ -7,12 +7,8 @@ "CVE-2004-0447" ], "details": "Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact. NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477. This is the proper candidate to use for the Linux local DoS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6486-99c6-494w/GHSA-6486-99c6-494w.json b/advisories/unreviewed/2022/05/GHSA-6486-99c6-494w/GHSA-6486-99c6-494w.json index c99ec8451f4..2b3c8ccbde6 100644 --- a/advisories/unreviewed/2022/05/GHSA-6486-99c6-494w/GHSA-6486-99c6-494w.json +++ b/advisories/unreviewed/2022/05/GHSA-6486-99c6-494w/GHSA-6486-99c6-494w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-64fr-7cvm-hm46/GHSA-64fr-7cvm-hm46.json b/advisories/unreviewed/2022/05/GHSA-64fr-7cvm-hm46/GHSA-64fr-7cvm-hm46.json index 72b6ec5601a..5eefa0a3609 100644 --- a/advisories/unreviewed/2022/05/GHSA-64fr-7cvm-hm46/GHSA-64fr-7cvm-hm46.json +++ b/advisories/unreviewed/2022/05/GHSA-64fr-7cvm-hm46/GHSA-64fr-7cvm-hm46.json @@ -7,12 +7,8 @@ "CVE-2006-4810" ], "details": "Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-653h-pp68-r626/GHSA-653h-pp68-r626.json b/advisories/unreviewed/2022/05/GHSA-653h-pp68-r626/GHSA-653h-pp68-r626.json index 4cf93ae2929..5cfccb0b785 100644 --- a/advisories/unreviewed/2022/05/GHSA-653h-pp68-r626/GHSA-653h-pp68-r626.json +++ b/advisories/unreviewed/2022/05/GHSA-653h-pp68-r626/GHSA-653h-pp68-r626.json @@ -7,12 +7,8 @@ "CVE-2004-0080" ], "details": "The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sensitive data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-65q8-rprw-c44f/GHSA-65q8-rprw-c44f.json b/advisories/unreviewed/2022/05/GHSA-65q8-rprw-c44f/GHSA-65q8-rprw-c44f.json index 7424bb6bd9f..ead8680e4e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-65q8-rprw-c44f/GHSA-65q8-rprw-c44f.json +++ b/advisories/unreviewed/2022/05/GHSA-65q8-rprw-c44f/GHSA-65q8-rprw-c44f.json @@ -7,12 +7,8 @@ "CVE-2005-1159" ], "details": "The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-66r5-q794-943w/GHSA-66r5-q794-943w.json b/advisories/unreviewed/2022/05/GHSA-66r5-q794-943w/GHSA-66r5-q794-943w.json index 33a344b86a9..570800b81dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-66r5-q794-943w/GHSA-66r5-q794-943w.json +++ b/advisories/unreviewed/2022/05/GHSA-66r5-q794-943w/GHSA-66r5-q794-943w.json @@ -7,12 +7,8 @@ "CVE-2004-1154" ], "details": "Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-673w-gf5r-mxmm/GHSA-673w-gf5r-mxmm.json b/advisories/unreviewed/2022/05/GHSA-673w-gf5r-mxmm/GHSA-673w-gf5r-mxmm.json index 223bed9e1d7..3c8f70fc809 100644 --- a/advisories/unreviewed/2022/05/GHSA-673w-gf5r-mxmm/GHSA-673w-gf5r-mxmm.json +++ b/advisories/unreviewed/2022/05/GHSA-673w-gf5r-mxmm/GHSA-673w-gf5r-mxmm.json @@ -7,12 +7,8 @@ "CVE-2006-4600" ], "details": "slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-67m9-fpj8-vgmv/GHSA-67m9-fpj8-vgmv.json b/advisories/unreviewed/2022/05/GHSA-67m9-fpj8-vgmv/GHSA-67m9-fpj8-vgmv.json index ee917c666ef..a68eafb6773 100644 --- a/advisories/unreviewed/2022/05/GHSA-67m9-fpj8-vgmv/GHSA-67m9-fpj8-vgmv.json +++ b/advisories/unreviewed/2022/05/GHSA-67m9-fpj8-vgmv/GHSA-67m9-fpj8-vgmv.json @@ -7,12 +7,8 @@ "CVE-2006-3918" ], "details": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -240,9 +236,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-68gp-v694-mxpq/GHSA-68gp-v694-mxpq.json b/advisories/unreviewed/2022/05/GHSA-68gp-v694-mxpq/GHSA-68gp-v694-mxpq.json index 60ebcc1ce62..3ca0705073e 100644 --- a/advisories/unreviewed/2022/05/GHSA-68gp-v694-mxpq/GHSA-68gp-v694-mxpq.json +++ b/advisories/unreviewed/2022/05/GHSA-68gp-v694-mxpq/GHSA-68gp-v694-mxpq.json @@ -7,12 +7,8 @@ "CVE-2004-1125" ], "details": "Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-68jc-5429-92mm/GHSA-68jc-5429-92mm.json b/advisories/unreviewed/2022/05/GHSA-68jc-5429-92mm/GHSA-68jc-5429-92mm.json index 38e4d16455a..3483cf3220b 100644 --- a/advisories/unreviewed/2022/05/GHSA-68jc-5429-92mm/GHSA-68jc-5429-92mm.json +++ b/advisories/unreviewed/2022/05/GHSA-68jc-5429-92mm/GHSA-68jc-5429-92mm.json @@ -7,12 +7,8 @@ "CVE-2004-0134" ], "details": "cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6945-86vq-2qgg/GHSA-6945-86vq-2qgg.json b/advisories/unreviewed/2022/05/GHSA-6945-86vq-2qgg/GHSA-6945-86vq-2qgg.json index 38693ceb501..bfe8bc81908 100644 --- a/advisories/unreviewed/2022/05/GHSA-6945-86vq-2qgg/GHSA-6945-86vq-2qgg.json +++ b/advisories/unreviewed/2022/05/GHSA-6945-86vq-2qgg/GHSA-6945-86vq-2qgg.json @@ -7,12 +7,8 @@ "CVE-2004-0424" ], "details": "Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6962-p2jw-wc7p/GHSA-6962-p2jw-wc7p.json b/advisories/unreviewed/2022/05/GHSA-6962-p2jw-wc7p/GHSA-6962-p2jw-wc7p.json index 684de635c02..66d5da67be8 100644 --- a/advisories/unreviewed/2022/05/GHSA-6962-p2jw-wc7p/GHSA-6962-p2jw-wc7p.json +++ b/advisories/unreviewed/2022/05/GHSA-6962-p2jw-wc7p/GHSA-6962-p2jw-wc7p.json @@ -7,12 +7,8 @@ "CVE-2004-0483" ], "details": "Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-697f-q7rj-4v4v/GHSA-697f-q7rj-4v4v.json b/advisories/unreviewed/2022/05/GHSA-697f-q7rj-4v4v/GHSA-697f-q7rj-4v4v.json index 74c6b7ce560..1f489716552 100644 --- a/advisories/unreviewed/2022/05/GHSA-697f-q7rj-4v4v/GHSA-697f-q7rj-4v4v.json +++ b/advisories/unreviewed/2022/05/GHSA-697f-q7rj-4v4v/GHSA-697f-q7rj-4v4v.json @@ -7,12 +7,8 @@ "CVE-2002-1789" ], "details": "Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69w9-429r-r7vm/GHSA-69w9-429r-r7vm.json b/advisories/unreviewed/2022/05/GHSA-69w9-429r-r7vm/GHSA-69w9-429r-r7vm.json index 45262420b47..b97df7d5180 100644 --- a/advisories/unreviewed/2022/05/GHSA-69w9-429r-r7vm/GHSA-69w9-429r-r7vm.json +++ b/advisories/unreviewed/2022/05/GHSA-69w9-429r-r7vm/GHSA-69w9-429r-r7vm.json @@ -7,12 +7,8 @@ "CVE-2005-3662" ], "details": "Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6c36-v393-c32c/GHSA-6c36-v393-c32c.json b/advisories/unreviewed/2022/05/GHSA-6c36-v393-c32c/GHSA-6c36-v393-c32c.json index c70f6a46f62..63193b19de7 100644 --- a/advisories/unreviewed/2022/05/GHSA-6c36-v393-c32c/GHSA-6c36-v393-c32c.json +++ b/advisories/unreviewed/2022/05/GHSA-6c36-v393-c32c/GHSA-6c36-v393-c32c.json @@ -7,12 +7,8 @@ "CVE-2005-3357" ], "details": "mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -280,9 +276,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6ccr-h2cv-pc67/GHSA-6ccr-h2cv-pc67.json b/advisories/unreviewed/2022/05/GHSA-6ccr-h2cv-pc67/GHSA-6ccr-h2cv-pc67.json index 0d9183e73ba..12e8da21dd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-6ccr-h2cv-pc67/GHSA-6ccr-h2cv-pc67.json +++ b/advisories/unreviewed/2022/05/GHSA-6ccr-h2cv-pc67/GHSA-6ccr-h2cv-pc67.json @@ -7,12 +7,8 @@ "CVE-2004-0758" ], "details": "Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6cp2-rh42-x39q/GHSA-6cp2-rh42-x39q.json b/advisories/unreviewed/2022/05/GHSA-6cp2-rh42-x39q/GHSA-6cp2-rh42-x39q.json index 7a33eb07f74..4c480a1fbf8 100644 --- a/advisories/unreviewed/2022/05/GHSA-6cp2-rh42-x39q/GHSA-6cp2-rh42-x39q.json +++ b/advisories/unreviewed/2022/05/GHSA-6cp2-rh42-x39q/GHSA-6cp2-rh42-x39q.json @@ -7,12 +7,8 @@ "CVE-2006-3113" ], "details": "Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -260,9 +256,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6cp6-j5p5-x552/GHSA-6cp6-j5p5-x552.json b/advisories/unreviewed/2022/05/GHSA-6cp6-j5p5-x552/GHSA-6cp6-j5p5-x552.json index 4dd07426886..d4f786536a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-6cp6-j5p5-x552/GHSA-6cp6-j5p5-x552.json +++ b/advisories/unreviewed/2022/05/GHSA-6cp6-j5p5-x552/GHSA-6cp6-j5p5-x552.json @@ -7,12 +7,8 @@ "CVE-2006-1587" ], "details": "NetBSD 1.6 up to 3.0, when a user has \"set record\" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6g68-8547-vmxp/GHSA-6g68-8547-vmxp.json b/advisories/unreviewed/2022/05/GHSA-6g68-8547-vmxp/GHSA-6g68-8547-vmxp.json index 1ba59df085b..f8b4c024bda 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g68-8547-vmxp/GHSA-6g68-8547-vmxp.json +++ b/advisories/unreviewed/2022/05/GHSA-6g68-8547-vmxp/GHSA-6g68-8547-vmxp.json @@ -7,12 +7,8 @@ "CVE-2006-0900" ], "details": "nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6g7h-vrc3-jrjh/GHSA-6g7h-vrc3-jrjh.json b/advisories/unreviewed/2022/05/GHSA-6g7h-vrc3-jrjh/GHSA-6g7h-vrc3-jrjh.json index aa4410dae78..70472fb5b89 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g7h-vrc3-jrjh/GHSA-6g7h-vrc3-jrjh.json +++ b/advisories/unreviewed/2022/05/GHSA-6g7h-vrc3-jrjh/GHSA-6g7h-vrc3-jrjh.json @@ -7,12 +7,8 @@ "CVE-2004-0133" ], "details": "The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6mm7-g5cc-wpx6/GHSA-6mm7-g5cc-wpx6.json b/advisories/unreviewed/2022/05/GHSA-6mm7-g5cc-wpx6/GHSA-6mm7-g5cc-wpx6.json index 5a5183fd84c..add14aac855 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mm7-g5cc-wpx6/GHSA-6mm7-g5cc-wpx6.json +++ b/advisories/unreviewed/2022/05/GHSA-6mm7-g5cc-wpx6/GHSA-6mm7-g5cc-wpx6.json @@ -7,12 +7,8 @@ "CVE-2003-0201" ], "details": "Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6pg6-7h2x-863m/GHSA-6pg6-7h2x-863m.json b/advisories/unreviewed/2022/05/GHSA-6pg6-7h2x-863m/GHSA-6pg6-7h2x-863m.json index f737e933d5d..ff85a1d648f 100644 --- a/advisories/unreviewed/2022/05/GHSA-6pg6-7h2x-863m/GHSA-6pg6-7h2x-863m.json +++ b/advisories/unreviewed/2022/05/GHSA-6pg6-7h2x-863m/GHSA-6pg6-7h2x-863m.json @@ -7,12 +7,8 @@ "CVE-2006-1861" ], "details": "Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -208,9 +204,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6pjr-368f-r9vp/GHSA-6pjr-368f-r9vp.json b/advisories/unreviewed/2022/05/GHSA-6pjr-368f-r9vp/GHSA-6pjr-368f-r9vp.json index e2075ca0efe..736556e488a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6pjr-368f-r9vp/GHSA-6pjr-368f-r9vp.json +++ b/advisories/unreviewed/2022/05/GHSA-6pjr-368f-r9vp/GHSA-6pjr-368f-r9vp.json @@ -7,12 +7,8 @@ "CVE-2002-1786" ], "details": "SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6px7-wrp5-gw6j/GHSA-6px7-wrp5-gw6j.json b/advisories/unreviewed/2022/05/GHSA-6px7-wrp5-gw6j/GHSA-6px7-wrp5-gw6j.json index ac7a547c3b3..c045694c78f 100644 --- a/advisories/unreviewed/2022/05/GHSA-6px7-wrp5-gw6j/GHSA-6px7-wrp5-gw6j.json +++ b/advisories/unreviewed/2022/05/GHSA-6px7-wrp5-gw6j/GHSA-6px7-wrp5-gw6j.json @@ -7,12 +7,8 @@ "CVE-2005-0138" ], "details": "rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6qfx-xcgq-wp9p/GHSA-6qfx-xcgq-wp9p.json b/advisories/unreviewed/2022/05/GHSA-6qfx-xcgq-wp9p/GHSA-6qfx-xcgq-wp9p.json index 4e51665ca23..3da8e52db24 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qfx-xcgq-wp9p/GHSA-6qfx-xcgq-wp9p.json +++ b/advisories/unreviewed/2022/05/GHSA-6qfx-xcgq-wp9p/GHSA-6qfx-xcgq-wp9p.json @@ -7,12 +7,8 @@ "CVE-2005-2707" ], "details": "Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -144,9 +140,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6qr5-8633-2jmp/GHSA-6qr5-8633-2jmp.json b/advisories/unreviewed/2022/05/GHSA-6qr5-8633-2jmp/GHSA-6qr5-8633-2jmp.json index 15744d12cd8..b19ff7e4547 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qr5-8633-2jmp/GHSA-6qr5-8633-2jmp.json +++ b/advisories/unreviewed/2022/05/GHSA-6qr5-8633-2jmp/GHSA-6qr5-8633-2jmp.json @@ -7,12 +7,8 @@ "CVE-2006-2940" ], "details": "OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -580,9 +576,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6r62-6x7v-wrm2/GHSA-6r62-6x7v-wrm2.json b/advisories/unreviewed/2022/05/GHSA-6r62-6x7v-wrm2/GHSA-6r62-6x7v-wrm2.json index 28fdb8b0518..7af9f68beaa 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r62-6x7v-wrm2/GHSA-6r62-6x7v-wrm2.json +++ b/advisories/unreviewed/2022/05/GHSA-6r62-6x7v-wrm2/GHSA-6r62-6x7v-wrm2.json @@ -7,12 +7,8 @@ "CVE-2003-0192" ], "details": "Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle \"certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one,\" which could cause Apache to use the weak ciphersuite.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6r82-pmh7-jjf5/GHSA-6r82-pmh7-jjf5.json b/advisories/unreviewed/2022/05/GHSA-6r82-pmh7-jjf5/GHSA-6r82-pmh7-jjf5.json index 33ded810f14..c9853bd3172 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r82-pmh7-jjf5/GHSA-6r82-pmh7-jjf5.json +++ b/advisories/unreviewed/2022/05/GHSA-6r82-pmh7-jjf5/GHSA-6r82-pmh7-jjf5.json @@ -7,12 +7,8 @@ "CVE-2004-0008" ], "details": "Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6rjg-j93g-96pp/GHSA-6rjg-j93g-96pp.json b/advisories/unreviewed/2022/05/GHSA-6rjg-j93g-96pp/GHSA-6rjg-j93g-96pp.json index bc7eb238f86..6134ad6b6eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rjg-j93g-96pp/GHSA-6rjg-j93g-96pp.json +++ b/advisories/unreviewed/2022/05/GHSA-6rjg-j93g-96pp/GHSA-6rjg-j93g-96pp.json @@ -7,12 +7,8 @@ "CVE-2003-0131" ], "details": "The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the \"Klima-Pokorny-Rosa attack.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6v4f-8f6p-qgjq/GHSA-6v4f-8f6p-qgjq.json b/advisories/unreviewed/2022/05/GHSA-6v4f-8f6p-qgjq/GHSA-6v4f-8f6p-qgjq.json index fbc1838dd2c..617952bca1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6v4f-8f6p-qgjq/GHSA-6v4f-8f6p-qgjq.json +++ b/advisories/unreviewed/2022/05/GHSA-6v4f-8f6p-qgjq/GHSA-6v4f-8f6p-qgjq.json @@ -7,12 +7,8 @@ "CVE-2006-2276" ], "details": "bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6vhv-2cm2-pw8c/GHSA-6vhv-2cm2-pw8c.json b/advisories/unreviewed/2022/05/GHSA-6vhv-2cm2-pw8c/GHSA-6vhv-2cm2-pw8c.json index 1b589d72645..aa1a6cd74d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vhv-2cm2-pw8c/GHSA-6vhv-2cm2-pw8c.json +++ b/advisories/unreviewed/2022/05/GHSA-6vhv-2cm2-pw8c/GHSA-6vhv-2cm2-pw8c.json @@ -7,12 +7,8 @@ "CVE-2006-5465" ], "details": "Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -208,9 +204,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6vw7-q76p-x8g5/GHSA-6vw7-q76p-x8g5.json b/advisories/unreviewed/2022/05/GHSA-6vw7-q76p-x8g5/GHSA-6vw7-q76p-x8g5.json index 772cc15c9c8..b736ac8ff5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vw7-q76p-x8g5/GHSA-6vw7-q76p-x8g5.json +++ b/advisories/unreviewed/2022/05/GHSA-6vw7-q76p-x8g5/GHSA-6vw7-q76p-x8g5.json @@ -7,12 +7,8 @@ "CVE-2004-0099" ], "details": "mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6w9g-5797-3mxw/GHSA-6w9g-5797-3mxw.json b/advisories/unreviewed/2022/05/GHSA-6w9g-5797-3mxw/GHSA-6w9g-5797-3mxw.json index 00e7adce266..f4282264659 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w9g-5797-3mxw/GHSA-6w9g-5797-3mxw.json +++ b/advisories/unreviewed/2022/05/GHSA-6w9g-5797-3mxw/GHSA-6w9g-5797-3mxw.json @@ -7,12 +7,8 @@ "CVE-2006-5464" ], "details": "Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -260,9 +256,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6wc5-w4xf-9h35/GHSA-6wc5-w4xf-9h35.json b/advisories/unreviewed/2022/05/GHSA-6wc5-w4xf-9h35/GHSA-6wc5-w4xf-9h35.json index 123e07f4fa5..fba7e6d642a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wc5-w4xf-9h35/GHSA-6wc5-w4xf-9h35.json +++ b/advisories/unreviewed/2022/05/GHSA-6wc5-w4xf-9h35/GHSA-6wc5-w4xf-9h35.json @@ -7,12 +7,8 @@ "CVE-2004-0697" ], "details": "Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6xv8-25r4-5mrf/GHSA-6xv8-25r4-5mrf.json b/advisories/unreviewed/2022/05/GHSA-6xv8-25r4-5mrf/GHSA-6xv8-25r4-5mrf.json index 5fd27e1c4f2..eafc64c2bb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xv8-25r4-5mrf/GHSA-6xv8-25r4-5mrf.json +++ b/advisories/unreviewed/2022/05/GHSA-6xv8-25r4-5mrf/GHSA-6xv8-25r4-5mrf.json @@ -7,12 +7,8 @@ "CVE-2006-4484" ], "details": "Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -216,9 +212,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-738f-c7mc-xp78/GHSA-738f-c7mc-xp78.json b/advisories/unreviewed/2022/05/GHSA-738f-c7mc-xp78/GHSA-738f-c7mc-xp78.json index adc5a6d63d4..5adf5aa3932 100644 --- a/advisories/unreviewed/2022/05/GHSA-738f-c7mc-xp78/GHSA-738f-c7mc-xp78.json +++ b/advisories/unreviewed/2022/05/GHSA-738f-c7mc-xp78/GHSA-738f-c7mc-xp78.json @@ -7,12 +7,8 @@ "CVE-2005-3627" ], "details": "Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1) a large \"number of components\" value that is not checked by DCTStream::readBaselineSOF or DCTStream::readProgressiveSOF, (2) a large \"Huffman table index\" value that is not checked by DCTStream::readHuffmanTables, and (3) certain uses of the scanInfo.numComps value by DCTStream::readScanInfo.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-73vp-66j6-8j69/GHSA-73vp-66j6-8j69.json b/advisories/unreviewed/2022/05/GHSA-73vp-66j6-8j69/GHSA-73vp-66j6-8j69.json index 2272ade4343..183645307be 100644 --- a/advisories/unreviewed/2022/05/GHSA-73vp-66j6-8j69/GHSA-73vp-66j6-8j69.json +++ b/advisories/unreviewed/2022/05/GHSA-73vp-66j6-8j69/GHSA-73vp-66j6-8j69.json @@ -7,12 +7,8 @@ "CVE-2004-0055" ], "details": "The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-73x7-w549-42qm/GHSA-73x7-w549-42qm.json b/advisories/unreviewed/2022/05/GHSA-73x7-w549-42qm/GHSA-73x7-w549-42qm.json index 75777b13cc9..a5deebbbdc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-73x7-w549-42qm/GHSA-73x7-w549-42qm.json +++ b/advisories/unreviewed/2022/05/GHSA-73x7-w549-42qm/GHSA-73x7-w549-42qm.json @@ -7,12 +7,8 @@ "CVE-2004-0394" ], "details": "A \"potential\" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-746r-2wrh-hhjx/GHSA-746r-2wrh-hhjx.json b/advisories/unreviewed/2022/05/GHSA-746r-2wrh-hhjx/GHSA-746r-2wrh-hhjx.json index 566d76a4a35..bffc9db9bb0 100644 --- a/advisories/unreviewed/2022/05/GHSA-746r-2wrh-hhjx/GHSA-746r-2wrh-hhjx.json +++ b/advisories/unreviewed/2022/05/GHSA-746r-2wrh-hhjx/GHSA-746r-2wrh-hhjx.json @@ -7,12 +7,8 @@ "CVE-2002-1318" ], "details": "Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-75wj-j7cg-5q44/GHSA-75wj-j7cg-5q44.json b/advisories/unreviewed/2022/05/GHSA-75wj-j7cg-5q44/GHSA-75wj-j7cg-5q44.json index abb80250be7..acc7659c359 100644 --- a/advisories/unreviewed/2022/05/GHSA-75wj-j7cg-5q44/GHSA-75wj-j7cg-5q44.json +++ b/advisories/unreviewed/2022/05/GHSA-75wj-j7cg-5q44/GHSA-75wj-j7cg-5q44.json @@ -7,12 +7,8 @@ "CVE-2004-0760" ], "details": "Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-763w-9m8f-rp93/GHSA-763w-9m8f-rp93.json b/advisories/unreviewed/2022/05/GHSA-763w-9m8f-rp93/GHSA-763w-9m8f-rp93.json index dcc43d0ec4f..6c9b5e51325 100644 --- a/advisories/unreviewed/2022/05/GHSA-763w-9m8f-rp93/GHSA-763w-9m8f-rp93.json +++ b/advisories/unreviewed/2022/05/GHSA-763w-9m8f-rp93/GHSA-763w-9m8f-rp93.json @@ -7,12 +7,8 @@ "CVE-2003-1013" ], "details": "The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-766c-9vwj-c5fw/GHSA-766c-9vwj-c5fw.json b/advisories/unreviewed/2022/05/GHSA-766c-9vwj-c5fw/GHSA-766c-9vwj-c5fw.json index a20c0202ba6..e3f319570fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-766c-9vwj-c5fw/GHSA-766c-9vwj-c5fw.json +++ b/advisories/unreviewed/2022/05/GHSA-766c-9vwj-c5fw/GHSA-766c-9vwj-c5fw.json @@ -7,12 +7,8 @@ "CVE-2004-0108" ], "details": "The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7722-q4vf-9pw6/GHSA-7722-q4vf-9pw6.json b/advisories/unreviewed/2022/05/GHSA-7722-q4vf-9pw6/GHSA-7722-q4vf-9pw6.json index f8fdecd18b3..2db8cefe8bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-7722-q4vf-9pw6/GHSA-7722-q4vf-9pw6.json +++ b/advisories/unreviewed/2022/05/GHSA-7722-q4vf-9pw6/GHSA-7722-q4vf-9pw6.json @@ -7,12 +7,8 @@ "CVE-2006-1814" ], "details": "NetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service (memory exhaustion) by using the sysctl system call to lock a large buffer into physical memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-778m-hp9h-2cxq/GHSA-778m-hp9h-2cxq.json b/advisories/unreviewed/2022/05/GHSA-778m-hp9h-2cxq/GHSA-778m-hp9h-2cxq.json index eb0eee98475..e88ea19c1a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-778m-hp9h-2cxq/GHSA-778m-hp9h-2cxq.json +++ b/advisories/unreviewed/2022/05/GHSA-778m-hp9h-2cxq/GHSA-778m-hp9h-2cxq.json @@ -7,12 +7,8 @@ "CVE-2006-1354" ], "details": "Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via \"Insufficient input validation\" in the EAP-MSCHAPv2 state machine module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-78fp-33xc-j734/GHSA-78fp-33xc-j734.json b/advisories/unreviewed/2022/05/GHSA-78fp-33xc-j734/GHSA-78fp-33xc-j734.json index 21b59409ad1..fcbaf0e9bd3 100644 --- a/advisories/unreviewed/2022/05/GHSA-78fp-33xc-j734/GHSA-78fp-33xc-j734.json +++ b/advisories/unreviewed/2022/05/GHSA-78fp-33xc-j734/GHSA-78fp-33xc-j734.json @@ -7,12 +7,8 @@ "CVE-2002-0810" ], "details": "Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7c4w-gm97-vgqq/GHSA-7c4w-gm97-vgqq.json b/advisories/unreviewed/2022/05/GHSA-7c4w-gm97-vgqq/GHSA-7c4w-gm97-vgqq.json index dc528680eca..325e5dfa592 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c4w-gm97-vgqq/GHSA-7c4w-gm97-vgqq.json +++ b/advisories/unreviewed/2022/05/GHSA-7c4w-gm97-vgqq/GHSA-7c4w-gm97-vgqq.json @@ -7,12 +7,8 @@ "CVE-2003-0466" ], "details": "Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7c6v-g9gw-vx3p/GHSA-7c6v-g9gw-vx3p.json b/advisories/unreviewed/2022/05/GHSA-7c6v-g9gw-vx3p/GHSA-7c6v-g9gw-vx3p.json index 73eb42b20af..0d6d47ccdbc 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c6v-g9gw-vx3p/GHSA-7c6v-g9gw-vx3p.json +++ b/advisories/unreviewed/2022/05/GHSA-7c6v-g9gw-vx3p/GHSA-7c6v-g9gw-vx3p.json @@ -7,12 +7,8 @@ "CVE-2002-1219" ], "details": "Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7cqf-cf7v-g7mv/GHSA-7cqf-cf7v-g7mv.json b/advisories/unreviewed/2022/05/GHSA-7cqf-cf7v-g7mv/GHSA-7cqf-cf7v-g7mv.json index ac35dcdf856..0fe6df39ebb 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cqf-cf7v-g7mv/GHSA-7cqf-cf7v-g7mv.json +++ b/advisories/unreviewed/2022/05/GHSA-7cqf-cf7v-g7mv/GHSA-7cqf-cf7v-g7mv.json @@ -7,12 +7,8 @@ "CVE-2005-2132" ], "details": "RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service (lack of response) via multiple invalid portmap requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7h34-qgwr-5w42/GHSA-7h34-qgwr-5w42.json b/advisories/unreviewed/2022/05/GHSA-7h34-qgwr-5w42/GHSA-7h34-qgwr-5w42.json index e437b41ff5e..d03799ae0e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-7h34-qgwr-5w42/GHSA-7h34-qgwr-5w42.json +++ b/advisories/unreviewed/2022/05/GHSA-7h34-qgwr-5w42/GHSA-7h34-qgwr-5w42.json @@ -7,12 +7,8 @@ "CVE-2003-0472" ], "details": "The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hm7-fv7g-c6pr/GHSA-7hm7-fv7g-c6pr.json b/advisories/unreviewed/2022/05/GHSA-7hm7-fv7g-c6pr/GHSA-7hm7-fv7g-c6pr.json index e32d1fd7986..3b0640a9ccd 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hm7-fv7g-c6pr/GHSA-7hm7-fv7g-c6pr.json +++ b/advisories/unreviewed/2022/05/GHSA-7hm7-fv7g-c6pr/GHSA-7hm7-fv7g-c6pr.json @@ -7,12 +7,8 @@ "CVE-2004-0930" ], "details": "The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hx5-52wg-rh87/GHSA-7hx5-52wg-rh87.json b/advisories/unreviewed/2022/05/GHSA-7hx5-52wg-rh87/GHSA-7hx5-52wg-rh87.json index 0f25bb0595d..fdc22827dac 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hx5-52wg-rh87/GHSA-7hx5-52wg-rh87.json +++ b/advisories/unreviewed/2022/05/GHSA-7hx5-52wg-rh87/GHSA-7hx5-52wg-rh87.json @@ -7,12 +7,8 @@ "CVE-2003-0872" ], "details": "Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hxr-6x6c-cjh6/GHSA-7hxr-6x6c-cjh6.json b/advisories/unreviewed/2022/05/GHSA-7hxr-6x6c-cjh6/GHSA-7hxr-6x6c-cjh6.json index 85aa7c67e75..22b70f9e0aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hxr-6x6c-cjh6/GHSA-7hxr-6x6c-cjh6.json +++ b/advisories/unreviewed/2022/05/GHSA-7hxr-6x6c-cjh6/GHSA-7hxr-6x6c-cjh6.json @@ -7,12 +7,8 @@ "CVE-2003-0174" ], "details": "The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7mq9-p447-2gr2/GHSA-7mq9-p447-2gr2.json b/advisories/unreviewed/2022/05/GHSA-7mq9-p447-2gr2/GHSA-7mq9-p447-2gr2.json index 989c8b1bbab..bcab4202cb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mq9-p447-2gr2/GHSA-7mq9-p447-2gr2.json +++ b/advisories/unreviewed/2022/05/GHSA-7mq9-p447-2gr2/GHSA-7mq9-p447-2gr2.json @@ -7,12 +7,8 @@ "CVE-2006-1742" ], "details": "The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -220,9 +216,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7p2h-6h3x-44v5/GHSA-7p2h-6h3x-44v5.json b/advisories/unreviewed/2022/05/GHSA-7p2h-6h3x-44v5/GHSA-7p2h-6h3x-44v5.json index 61f65b9766a..f854f6d5a49 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p2h-6h3x-44v5/GHSA-7p2h-6h3x-44v5.json +++ b/advisories/unreviewed/2022/05/GHSA-7p2h-6h3x-44v5/GHSA-7p2h-6h3x-44v5.json @@ -7,12 +7,8 @@ "CVE-2004-0434" ], "details": "k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p34-48rw-wvgp/GHSA-7p34-48rw-wvgp.json b/advisories/unreviewed/2022/05/GHSA-7p34-48rw-wvgp/GHSA-7p34-48rw-wvgp.json index 31d77347940..1560b6edf40 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p34-48rw-wvgp/GHSA-7p34-48rw-wvgp.json +++ b/advisories/unreviewed/2022/05/GHSA-7p34-48rw-wvgp/GHSA-7p34-48rw-wvgp.json @@ -7,12 +7,8 @@ "CVE-2003-0176" ], "details": "The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via a UDP port scan.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7p9x-fr92-xwxr/GHSA-7p9x-fr92-xwxr.json b/advisories/unreviewed/2022/05/GHSA-7p9x-fr92-xwxr/GHSA-7p9x-fr92-xwxr.json index c5d457686b1..318805ed055 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p9x-fr92-xwxr/GHSA-7p9x-fr92-xwxr.json +++ b/advisories/unreviewed/2022/05/GHSA-7p9x-fr92-xwxr/GHSA-7p9x-fr92-xwxr.json @@ -7,12 +7,8 @@ "CVE-2004-1072" ], "details": "The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7qc8-cpph-66p8/GHSA-7qc8-cpph-66p8.json b/advisories/unreviewed/2022/05/GHSA-7qc8-cpph-66p8/GHSA-7qc8-cpph-66p8.json index 9879ed2e5f5..e13515eb8ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qc8-cpph-66p8/GHSA-7qc8-cpph-66p8.json +++ b/advisories/unreviewed/2022/05/GHSA-7qc8-cpph-66p8/GHSA-7qc8-cpph-66p8.json @@ -7,12 +7,8 @@ "CVE-2002-1998" ], "details": "Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7r5r-5p2r-r2cf/GHSA-7r5r-5p2r-r2cf.json b/advisories/unreviewed/2022/05/GHSA-7r5r-5p2r-r2cf/GHSA-7r5r-5p2r-r2cf.json index c8bab747c36..78f93449257 100644 --- a/advisories/unreviewed/2022/05/GHSA-7r5r-5p2r-r2cf/GHSA-7r5r-5p2r-r2cf.json +++ b/advisories/unreviewed/2022/05/GHSA-7r5r-5p2r-r2cf/GHSA-7r5r-5p2r-r2cf.json @@ -7,12 +7,8 @@ "CVE-2004-0813" ], "details": "Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7rjj-4jxg-6hg5/GHSA-7rjj-4jxg-6hg5.json b/advisories/unreviewed/2022/05/GHSA-7rjj-4jxg-6hg5/GHSA-7rjj-4jxg-6hg5.json index 4c0272c33a7..c9cfcb2610c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rjj-4jxg-6hg5/GHSA-7rjj-4jxg-6hg5.json +++ b/advisories/unreviewed/2022/05/GHSA-7rjj-4jxg-6hg5/GHSA-7rjj-4jxg-6hg5.json @@ -7,12 +7,8 @@ "CVE-2006-4980" ], "details": "Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -176,9 +172,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7rp7-7c38-2w9q/GHSA-7rp7-7c38-2w9q.json b/advisories/unreviewed/2022/05/GHSA-7rp7-7c38-2w9q/GHSA-7rp7-7c38-2w9q.json index d6efa0e33b3..19de88295ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rp7-7c38-2w9q/GHSA-7rp7-7c38-2w9q.json +++ b/advisories/unreviewed/2022/05/GHSA-7rp7-7c38-2w9q/GHSA-7rp7-7c38-2w9q.json @@ -7,12 +7,8 @@ "CVE-2002-2185" ], "details": "The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7vgh-7rjg-hwhj/GHSA-7vgh-7rjg-hwhj.json b/advisories/unreviewed/2022/05/GHSA-7vgh-7rjg-hwhj/GHSA-7vgh-7rjg-hwhj.json index 9c4692a6bd3..61db944b0ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vgh-7rjg-hwhj/GHSA-7vgh-7rjg-hwhj.json +++ b/advisories/unreviewed/2022/05/GHSA-7vgh-7rjg-hwhj/GHSA-7vgh-7rjg-hwhj.json @@ -7,12 +7,8 @@ "CVE-2002-1787" ], "details": "Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7wc5-rw74-x5q6/GHSA-7wc5-rw74-x5q6.json b/advisories/unreviewed/2022/05/GHSA-7wc5-rw74-x5q6/GHSA-7wc5-rw74-x5q6.json index 2917715341c..3baaba63e84 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wc5-rw74-x5q6/GHSA-7wc5-rw74-x5q6.json +++ b/advisories/unreviewed/2022/05/GHSA-7wc5-rw74-x5q6/GHSA-7wc5-rw74-x5q6.json @@ -7,12 +7,8 @@ "CVE-2004-0718" ], "details": "The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7x5c-m92f-jxjp/GHSA-7x5c-m92f-jxjp.json b/advisories/unreviewed/2022/05/GHSA-7x5c-m92f-jxjp/GHSA-7x5c-m92f-jxjp.json index 14d712bd215..c65fbd50968 100644 --- a/advisories/unreviewed/2022/05/GHSA-7x5c-m92f-jxjp/GHSA-7x5c-m92f-jxjp.json +++ b/advisories/unreviewed/2022/05/GHSA-7x5c-m92f-jxjp/GHSA-7x5c-m92f-jxjp.json @@ -7,12 +7,8 @@ "CVE-2006-3807" ], "details": "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling \"named JavaScript functions\" that use the constructor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -288,9 +284,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7xr6-jcgr-7226/GHSA-7xr6-jcgr-7226.json b/advisories/unreviewed/2022/05/GHSA-7xr6-jcgr-7226/GHSA-7xr6-jcgr-7226.json index 82b30c070a4..6e98c5522b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xr6-jcgr-7226/GHSA-7xr6-jcgr-7226.json +++ b/advisories/unreviewed/2022/05/GHSA-7xr6-jcgr-7226/GHSA-7xr6-jcgr-7226.json @@ -7,12 +7,8 @@ "CVE-2002-0404" ], "details": "Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7xw6-7f8j-hr4m/GHSA-7xw6-7f8j-hr4m.json b/advisories/unreviewed/2022/05/GHSA-7xw6-7f8j-hr4m/GHSA-7xw6-7f8j-hr4m.json index 3deaf1f982f..776fd8b4b87 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xw6-7f8j-hr4m/GHSA-7xw6-7f8j-hr4m.json +++ b/advisories/unreviewed/2022/05/GHSA-7xw6-7f8j-hr4m/GHSA-7xw6-7f8j-hr4m.json @@ -7,12 +7,8 @@ "CVE-2005-0468" ], "details": "Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8253-97cw-7r82/GHSA-8253-97cw-7r82.json b/advisories/unreviewed/2022/05/GHSA-8253-97cw-7r82/GHSA-8253-97cw-7r82.json index 3fa93b6c410..b3b7e8dbb08 100644 --- a/advisories/unreviewed/2022/05/GHSA-8253-97cw-7r82/GHSA-8253-97cw-7r82.json +++ b/advisories/unreviewed/2022/05/GHSA-8253-97cw-7r82/GHSA-8253-97cw-7r82.json @@ -7,12 +7,8 @@ "CVE-2006-4334" ], "details": "Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -224,9 +220,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-83qc-2j7c-2vjq/GHSA-83qc-2j7c-2vjq.json b/advisories/unreviewed/2022/05/GHSA-83qc-2j7c-2vjq/GHSA-83qc-2j7c-2vjq.json index f9e208bf61d..02c599138fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-83qc-2j7c-2vjq/GHSA-83qc-2j7c-2vjq.json +++ b/advisories/unreviewed/2022/05/GHSA-83qc-2j7c-2vjq/GHSA-83qc-2j7c-2vjq.json @@ -7,12 +7,8 @@ "CVE-2004-0180" ], "details": "The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-844w-q34m-gpg4/GHSA-844w-q34m-gpg4.json b/advisories/unreviewed/2022/05/GHSA-844w-q34m-gpg4/GHSA-844w-q34m-gpg4.json index 04a24af47ea..d3572b1e901 100644 --- a/advisories/unreviewed/2022/05/GHSA-844w-q34m-gpg4/GHSA-844w-q34m-gpg4.json +++ b/advisories/unreviewed/2022/05/GHSA-844w-q34m-gpg4/GHSA-844w-q34m-gpg4.json @@ -7,12 +7,8 @@ "CVE-2003-0516" ], "details": "cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in (1) caller ID or (2) caller name strings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-84gp-7f3g-6v6v/GHSA-84gp-7f3g-6v6v.json b/advisories/unreviewed/2022/05/GHSA-84gp-7f3g-6v6v/GHSA-84gp-7f3g-6v6v.json index 340b69a33a4..21f861d1b58 100644 --- a/advisories/unreviewed/2022/05/GHSA-84gp-7f3g-6v6v/GHSA-84gp-7f3g-6v6v.json +++ b/advisories/unreviewed/2022/05/GHSA-84gp-7f3g-6v6v/GHSA-84gp-7f3g-6v6v.json @@ -7,12 +7,8 @@ "CVE-2006-5469" ], "details": "Unspecified vulnerability in the WBXML dissector in Wireshark (formerly Ethereal) 0.10.11 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-85x5-6qwf-rx58/GHSA-85x5-6qwf-rx58.json b/advisories/unreviewed/2022/05/GHSA-85x5-6qwf-rx58/GHSA-85x5-6qwf-rx58.json index d6047df4b1d..f7f2a84dd47 100644 --- a/advisories/unreviewed/2022/05/GHSA-85x5-6qwf-rx58/GHSA-85x5-6qwf-rx58.json +++ b/advisories/unreviewed/2022/05/GHSA-85x5-6qwf-rx58/GHSA-85x5-6qwf-rx58.json @@ -7,12 +7,8 @@ "CVE-2006-1833" ], "details": "Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause it to always generate the same random number, which allows remote attackers to more easily crack encryption keys generated from the interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-863q-qjw4-fmrr/GHSA-863q-qjw4-fmrr.json b/advisories/unreviewed/2022/05/GHSA-863q-qjw4-fmrr/GHSA-863q-qjw4-fmrr.json index 466793d2a15..6554e269071 100644 --- a/advisories/unreviewed/2022/05/GHSA-863q-qjw4-fmrr/GHSA-863q-qjw4-fmrr.json +++ b/advisories/unreviewed/2022/05/GHSA-863q-qjw4-fmrr/GHSA-863q-qjw4-fmrr.json @@ -7,12 +7,8 @@ "CVE-2006-3084" ], "details": "The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges. NOTE: as of 20060808, it is not known whether an exploitable attack scenario exists for these issues.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-86x4-8rw8-w2mr/GHSA-86x4-8rw8-w2mr.json b/advisories/unreviewed/2022/05/GHSA-86x4-8rw8-w2mr/GHSA-86x4-8rw8-w2mr.json index e637dabeb27..7376c5c08a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-86x4-8rw8-w2mr/GHSA-86x4-8rw8-w2mr.json +++ b/advisories/unreviewed/2022/05/GHSA-86x4-8rw8-w2mr/GHSA-86x4-8rw8-w2mr.json @@ -7,12 +7,8 @@ "CVE-2005-3883" ], "details": "CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the \"To\" address argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8739-vxjm-m9p4/GHSA-8739-vxjm-m9p4.json b/advisories/unreviewed/2022/05/GHSA-8739-vxjm-m9p4/GHSA-8739-vxjm-m9p4.json index 24ae837d28a..53454d24d24 100644 --- a/advisories/unreviewed/2022/05/GHSA-8739-vxjm-m9p4/GHSA-8739-vxjm-m9p4.json +++ b/advisories/unreviewed/2022/05/GHSA-8739-vxjm-m9p4/GHSA-8739-vxjm-m9p4.json @@ -7,12 +7,8 @@ "CVE-2008-2936" ], "details": "Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system supports hard links to symlinks, allows local users to append e-mail messages to a file to which a root-owned symlink points, by creating a hard link to this symlink and then sending a message. NOTE: this can be leveraged to gain privileges if there is a symlink to an init script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-888j-w88x-vjqr/GHSA-888j-w88x-vjqr.json b/advisories/unreviewed/2022/05/GHSA-888j-w88x-vjqr/GHSA-888j-w88x-vjqr.json index 932a74228f7..e4e1075b04c 100644 --- a/advisories/unreviewed/2022/05/GHSA-888j-w88x-vjqr/GHSA-888j-w88x-vjqr.json +++ b/advisories/unreviewed/2022/05/GHSA-888j-w88x-vjqr/GHSA-888j-w88x-vjqr.json @@ -7,12 +7,8 @@ "CVE-2006-3801" ], "details": "Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -220,9 +216,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-889m-6cc9-v7f2/GHSA-889m-6cc9-v7f2.json b/advisories/unreviewed/2022/05/GHSA-889m-6cc9-v7f2/GHSA-889m-6cc9-v7f2.json index 22111ce5591..7898d6d277d 100644 --- a/advisories/unreviewed/2022/05/GHSA-889m-6cc9-v7f2/GHSA-889m-6cc9-v7f2.json +++ b/advisories/unreviewed/2022/05/GHSA-889m-6cc9-v7f2/GHSA-889m-6cc9-v7f2.json @@ -7,12 +7,8 @@ "CVE-2006-6653" ], "details": "The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket consumption) via an invalid (1) name or (2) namelen parameter, which may result in the socket never being closed (aka \"a dangling socket\").", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-88g4-46fj-wmhh/GHSA-88g4-46fj-wmhh.json b/advisories/unreviewed/2022/05/GHSA-88g4-46fj-wmhh/GHSA-88g4-46fj-wmhh.json index c6af559d6ee..748d7e73a82 100644 --- a/advisories/unreviewed/2022/05/GHSA-88g4-46fj-wmhh/GHSA-88g4-46fj-wmhh.json +++ b/advisories/unreviewed/2022/05/GHSA-88g4-46fj-wmhh/GHSA-88g4-46fj-wmhh.json @@ -7,12 +7,8 @@ "CVE-2007-0779" ], "details": "GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -200,9 +196,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8fm9-vwgj-ff7v/GHSA-8fm9-vwgj-ff7v.json b/advisories/unreviewed/2022/05/GHSA-8fm9-vwgj-ff7v/GHSA-8fm9-vwgj-ff7v.json index ca2ff0766ca..6bfca0b03fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fm9-vwgj-ff7v/GHSA-8fm9-vwgj-ff7v.json +++ b/advisories/unreviewed/2022/05/GHSA-8fm9-vwgj-ff7v/GHSA-8fm9-vwgj-ff7v.json @@ -7,12 +7,8 @@ "CVE-2004-0136" ], "details": "The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a \"corrupted binary.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8fmj-f8mj-vx43/GHSA-8fmj-f8mj-vx43.json b/advisories/unreviewed/2022/05/GHSA-8fmj-f8mj-vx43/GHSA-8fmj-f8mj-vx43.json index ec067d3a89e..91400a5405c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fmj-f8mj-vx43/GHSA-8fmj-f8mj-vx43.json +++ b/advisories/unreviewed/2022/05/GHSA-8fmj-f8mj-vx43/GHSA-8fmj-f8mj-vx43.json @@ -7,12 +7,8 @@ "CVE-2002-1791" ], "details": "SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8g3j-8rp3-9ggj/GHSA-8g3j-8rp3-9ggj.json b/advisories/unreviewed/2022/05/GHSA-8g3j-8rp3-9ggj/GHSA-8g3j-8rp3-9ggj.json index a8505a170fb..43cef5e6a7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g3j-8rp3-9ggj/GHSA-8g3j-8rp3-9ggj.json +++ b/advisories/unreviewed/2022/05/GHSA-8g3j-8rp3-9ggj/GHSA-8g3j-8rp3-9ggj.json @@ -7,12 +7,8 @@ "CVE-2007-1007" ], "details": "Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8g7g-xf4w-6pch/GHSA-8g7g-xf4w-6pch.json b/advisories/unreviewed/2022/05/GHSA-8g7g-xf4w-6pch/GHSA-8g7g-xf4w-6pch.json index 7ca3b397c0b..e75fd121f05 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g7g-xf4w-6pch/GHSA-8g7g-xf4w-6pch.json +++ b/advisories/unreviewed/2022/05/GHSA-8g7g-xf4w-6pch/GHSA-8g7g-xf4w-6pch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8g8g-9f4q-f275/GHSA-8g8g-9f4q-f275.json b/advisories/unreviewed/2022/05/GHSA-8g8g-9f4q-f275/GHSA-8g8g-9f4q-f275.json index aa6d97ec38a..044354ac786 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g8g-9f4q-f275/GHSA-8g8g-9f4q-f275.json +++ b/advisories/unreviewed/2022/05/GHSA-8g8g-9f4q-f275/GHSA-8g8g-9f4q-f275.json @@ -7,12 +7,8 @@ "CVE-2006-1168" ], "details": "The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8g9q-xjgw-r992/GHSA-8g9q-xjgw-r992.json b/advisories/unreviewed/2022/05/GHSA-8g9q-xjgw-r992/GHSA-8g9q-xjgw-r992.json index 5495b38397d..3a18081c282 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g9q-xjgw-r992/GHSA-8g9q-xjgw-r992.json +++ b/advisories/unreviewed/2022/05/GHSA-8g9q-xjgw-r992/GHSA-8g9q-xjgw-r992.json @@ -7,12 +7,8 @@ "CVE-2003-0282" ], "details": "Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a \"..\" sequence.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8gjg-55hh-82p9/GHSA-8gjg-55hh-82p9.json b/advisories/unreviewed/2022/05/GHSA-8gjg-55hh-82p9/GHSA-8gjg-55hh-82p9.json index ef4a6ccf976..4510298b8ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-8gjg-55hh-82p9/GHSA-8gjg-55hh-82p9.json +++ b/advisories/unreviewed/2022/05/GHSA-8gjg-55hh-82p9/GHSA-8gjg-55hh-82p9.json @@ -7,12 +7,8 @@ "CVE-2006-1932" ], "details": "Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8gp2-v2vm-xr7x/GHSA-8gp2-v2vm-xr7x.json b/advisories/unreviewed/2022/05/GHSA-8gp2-v2vm-xr7x/GHSA-8gp2-v2vm-xr7x.json index 7b176a9e1b2..7284023c312 100644 --- a/advisories/unreviewed/2022/05/GHSA-8gp2-v2vm-xr7x/GHSA-8gp2-v2vm-xr7x.json +++ b/advisories/unreviewed/2022/05/GHSA-8gp2-v2vm-xr7x/GHSA-8gp2-v2vm-xr7x.json @@ -7,12 +7,8 @@ "CVE-2004-1768" ], "details": "The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote attackers to cause a denial of service (crash) via messages with the ISO-8859-10 character set, which is not recognized by the converters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8hfq-wv6x-73v6/GHSA-8hfq-wv6x-73v6.json b/advisories/unreviewed/2022/05/GHSA-8hfq-wv6x-73v6/GHSA-8hfq-wv6x-73v6.json index 796c5ae1e88..a5d6ac6babc 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hfq-wv6x-73v6/GHSA-8hfq-wv6x-73v6.json +++ b/advisories/unreviewed/2022/05/GHSA-8hfq-wv6x-73v6/GHSA-8hfq-wv6x-73v6.json @@ -7,12 +7,8 @@ "CVE-2005-1157" ], "details": "Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka \"Firesearching 2.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8hj3-wvpv-xrpr/GHSA-8hj3-wvpv-xrpr.json b/advisories/unreviewed/2022/05/GHSA-8hj3-wvpv-xrpr/GHSA-8hj3-wvpv-xrpr.json index 6deab97e591..d2ce159f008 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hj3-wvpv-xrpr/GHSA-8hj3-wvpv-xrpr.json +++ b/advisories/unreviewed/2022/05/GHSA-8hj3-wvpv-xrpr/GHSA-8hj3-wvpv-xrpr.json @@ -7,12 +7,8 @@ "CVE-2003-0102" ], "details": "Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8j2j-5pq8-mr48/GHSA-8j2j-5pq8-mr48.json b/advisories/unreviewed/2022/05/GHSA-8j2j-5pq8-mr48/GHSA-8j2j-5pq8-mr48.json index 0347891e4ed..1bcca784916 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j2j-5pq8-mr48/GHSA-8j2j-5pq8-mr48.json +++ b/advisories/unreviewed/2022/05/GHSA-8j2j-5pq8-mr48/GHSA-8j2j-5pq8-mr48.json @@ -7,12 +7,8 @@ "CVE-2007-0995" ], "details": "Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j4j-h6j9-f4c3/GHSA-8j4j-h6j9-f4c3.json b/advisories/unreviewed/2022/05/GHSA-8j4j-h6j9-f4c3/GHSA-8j4j-h6j9-f4c3.json index 7385c6e48c8..d8603c4c18f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j4j-h6j9-f4c3/GHSA-8j4j-h6j9-f4c3.json +++ b/advisories/unreviewed/2022/05/GHSA-8j4j-h6j9-f4c3/GHSA-8j4j-h6j9-f4c3.json @@ -7,12 +7,8 @@ "CVE-2002-2198" ], "details": "Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8j85-5mm6-6h5p/GHSA-8j85-5mm6-6h5p.json b/advisories/unreviewed/2022/05/GHSA-8j85-5mm6-6h5p/GHSA-8j85-5mm6-6h5p.json index 92dfed84c63..37a8a125481 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j85-5mm6-6h5p/GHSA-8j85-5mm6-6h5p.json +++ b/advisories/unreviewed/2022/05/GHSA-8j85-5mm6-6h5p/GHSA-8j85-5mm6-6h5p.json @@ -7,12 +7,8 @@ "CVE-2004-0405" ], "details": "CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8j8g-w6r8-wr7h/GHSA-8j8g-w6r8-wr7h.json b/advisories/unreviewed/2022/05/GHSA-8j8g-w6r8-wr7h/GHSA-8j8g-w6r8-wr7h.json index f74914c92b7..7754950c729 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j8g-w6r8-wr7h/GHSA-8j8g-w6r8-wr7h.json +++ b/advisories/unreviewed/2022/05/GHSA-8j8g-w6r8-wr7h/GHSA-8j8g-w6r8-wr7h.json @@ -7,12 +7,8 @@ "CVE-2007-0996" ], "details": "The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -176,9 +172,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8jw3-72q3-6378/GHSA-8jw3-72q3-6378.json b/advisories/unreviewed/2022/05/GHSA-8jw3-72q3-6378/GHSA-8jw3-72q3-6378.json index a81f1aa7b9a..163ad865468 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jw3-72q3-6378/GHSA-8jw3-72q3-6378.json +++ b/advisories/unreviewed/2022/05/GHSA-8jw3-72q3-6378/GHSA-8jw3-72q3-6378.json @@ -7,12 +7,8 @@ "CVE-2004-1060" ], "details": "Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP (\"Fragmentation Needed and Don't Fragment was Set\") packets with a low next-hop MTU value, aka the \"Path MTU discovery attack.\" NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8mfg-j523-2x92/GHSA-8mfg-j523-2x92.json b/advisories/unreviewed/2022/05/GHSA-8mfg-j523-2x92/GHSA-8mfg-j523-2x92.json index 02c67ba38d3..bfa0bbb683a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mfg-j523-2x92/GHSA-8mfg-j523-2x92.json +++ b/advisories/unreviewed/2022/05/GHSA-8mfg-j523-2x92/GHSA-8mfg-j523-2x92.json @@ -7,12 +7,8 @@ "CVE-2005-1689" ], "details": "Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8mwh-m2c8-2cj6/GHSA-8mwh-m2c8-2cj6.json b/advisories/unreviewed/2022/05/GHSA-8mwh-m2c8-2cj6/GHSA-8mwh-m2c8-2cj6.json index f69a9d7a855..38d2b8832d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mwh-m2c8-2cj6/GHSA-8mwh-m2c8-2cj6.json +++ b/advisories/unreviewed/2022/05/GHSA-8mwh-m2c8-2cj6/GHSA-8mwh-m2c8-2cj6.json @@ -7,12 +7,8 @@ "CVE-2002-0795" ], "details": "The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8p45-xmrj-4v5c/GHSA-8p45-xmrj-4v5c.json b/advisories/unreviewed/2022/05/GHSA-8p45-xmrj-4v5c/GHSA-8p45-xmrj-4v5c.json index 860aa7a494e..5ba3c50314b 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p45-xmrj-4v5c/GHSA-8p45-xmrj-4v5c.json +++ b/advisories/unreviewed/2022/05/GHSA-8p45-xmrj-4v5c/GHSA-8p45-xmrj-4v5c.json @@ -7,12 +7,8 @@ "CVE-2005-3656" ], "details": "Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8phw-p6c6-5mx9/GHSA-8phw-p6c6-5mx9.json b/advisories/unreviewed/2022/05/GHSA-8phw-p6c6-5mx9/GHSA-8phw-p6c6-5mx9.json index 18a28a8ecbc..6d051cbdf5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8phw-p6c6-5mx9/GHSA-8phw-p6c6-5mx9.json +++ b/advisories/unreviewed/2022/05/GHSA-8phw-p6c6-5mx9/GHSA-8phw-p6c6-5mx9.json @@ -7,12 +7,8 @@ "CVE-2006-5006" ], "details": "Buffer overflow in cfgmgr in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long directory path argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8r79-mxmm-hhc6/GHSA-8r79-mxmm-hhc6.json b/advisories/unreviewed/2022/05/GHSA-8r79-mxmm-hhc6/GHSA-8r79-mxmm-hhc6.json index 34e27cee3d2..0d8f70a28b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r79-mxmm-hhc6/GHSA-8r79-mxmm-hhc6.json +++ b/advisories/unreviewed/2022/05/GHSA-8r79-mxmm-hhc6/GHSA-8r79-mxmm-hhc6.json @@ -7,12 +7,8 @@ "CVE-2006-1741" ], "details": "Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by (1) \"using a modal alert to suspend an event handler while a new page is being loaded\", (2) using eval(), and using certain variants involving (3) \"new Script;\" and (4) using window.__proto__ to extend eval, aka \"cross-site JavaScript injection\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8r84-3jfq-g684/GHSA-8r84-3jfq-g684.json b/advisories/unreviewed/2022/05/GHSA-8r84-3jfq-g684/GHSA-8r84-3jfq-g684.json index 9bf9e591a61..81167e58486 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r84-3jfq-g684/GHSA-8r84-3jfq-g684.json +++ b/advisories/unreviewed/2022/05/GHSA-8r84-3jfq-g684/GHSA-8r84-3jfq-g684.json @@ -7,12 +7,8 @@ "CVE-2003-0898" ], "details": "IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8rh9-c9p7-ppjc/GHSA-8rh9-c9p7-ppjc.json b/advisories/unreviewed/2022/05/GHSA-8rh9-c9p7-ppjc/GHSA-8rh9-c9p7-ppjc.json index be07515c9ca..8a9a93be5c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rh9-c9p7-ppjc/GHSA-8rh9-c9p7-ppjc.json +++ b/advisories/unreviewed/2022/05/GHSA-8rh9-c9p7-ppjc/GHSA-8rh9-c9p7-ppjc.json @@ -7,12 +7,8 @@ "CVE-2004-0763" ], "details": "Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the \"onunload\" method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8rhh-mg2p-8fh8/GHSA-8rhh-mg2p-8fh8.json b/advisories/unreviewed/2022/05/GHSA-8rhh-mg2p-8fh8/GHSA-8rhh-mg2p-8fh8.json index f6f3782f29d..45f3f86b1da 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rhh-mg2p-8fh8/GHSA-8rhh-mg2p-8fh8.json +++ b/advisories/unreviewed/2022/05/GHSA-8rhh-mg2p-8fh8/GHSA-8rhh-mg2p-8fh8.json @@ -7,12 +7,8 @@ "CVE-2004-1068" ], "details": "A \"missing serialization\" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8v22-vg6j-pf23/GHSA-8v22-vg6j-pf23.json b/advisories/unreviewed/2022/05/GHSA-8v22-vg6j-pf23/GHSA-8v22-vg6j-pf23.json index 4a208994c25..090b2fd2d58 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v22-vg6j-pf23/GHSA-8v22-vg6j-pf23.json +++ b/advisories/unreviewed/2022/05/GHSA-8v22-vg6j-pf23/GHSA-8v22-vg6j-pf23.json @@ -7,12 +7,8 @@ "CVE-2006-1724" ], "details": "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -172,9 +168,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8w98-f339-9fh8/GHSA-8w98-f339-9fh8.json b/advisories/unreviewed/2022/05/GHSA-8w98-f339-9fh8/GHSA-8w98-f339-9fh8.json index e2385f4e2a2..a9ce80fdb48 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w98-f339-9fh8/GHSA-8w98-f339-9fh8.json +++ b/advisories/unreviewed/2022/05/GHSA-8w98-f339-9fh8/GHSA-8w98-f339-9fh8.json @@ -7,12 +7,8 @@ "CVE-2004-0807" ], "details": "Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8wp7-mc8c-hm59/GHSA-8wp7-mc8c-hm59.json b/advisories/unreviewed/2022/05/GHSA-8wp7-mc8c-hm59/GHSA-8wp7-mc8c-hm59.json index 2cb1c058683..4dadca3a2fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wp7-mc8c-hm59/GHSA-8wp7-mc8c-hm59.json +++ b/advisories/unreviewed/2022/05/GHSA-8wp7-mc8c-hm59/GHSA-8wp7-mc8c-hm59.json @@ -7,12 +7,8 @@ "CVE-2004-1053" ], "details": "Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8x3x-v4q7-cjjp/GHSA-8x3x-v4q7-cjjp.json b/advisories/unreviewed/2022/05/GHSA-8x3x-v4q7-cjjp/GHSA-8x3x-v4q7-cjjp.json index d345f7c223a..0b0ea2ab2e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x3x-v4q7-cjjp/GHSA-8x3x-v4q7-cjjp.json +++ b/advisories/unreviewed/2022/05/GHSA-8x3x-v4q7-cjjp/GHSA-8x3x-v4q7-cjjp.json @@ -7,12 +7,8 @@ "CVE-2005-2359" ], "details": "The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8x5c-jhv9-65x6/GHSA-8x5c-jhv9-65x6.json b/advisories/unreviewed/2022/05/GHSA-8x5c-jhv9-65x6/GHSA-8x5c-jhv9-65x6.json index a3063234206..1e08460ac7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x5c-jhv9-65x6/GHSA-8x5c-jhv9-65x6.json +++ b/advisories/unreviewed/2022/05/GHSA-8x5c-jhv9-65x6/GHSA-8x5c-jhv9-65x6.json @@ -7,12 +7,8 @@ "CVE-2006-4924" ], "details": "sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -324,9 +320,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8x77-gm2m-rcr6/GHSA-8x77-gm2m-rcr6.json b/advisories/unreviewed/2022/05/GHSA-8x77-gm2m-rcr6/GHSA-8x77-gm2m-rcr6.json index 6f00ca1e2c2..f03133ca6d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x77-gm2m-rcr6/GHSA-8x77-gm2m-rcr6.json +++ b/advisories/unreviewed/2022/05/GHSA-8x77-gm2m-rcr6/GHSA-8x77-gm2m-rcr6.json @@ -7,12 +7,8 @@ "CVE-2006-4537" ], "details": "NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a \"network breakin\" event, which allows local users to obtain passwords by reading the file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9256-64mc-8rcv/GHSA-9256-64mc-8rcv.json b/advisories/unreviewed/2022/05/GHSA-9256-64mc-8rcv/GHSA-9256-64mc-8rcv.json index 1410d3b5d71..a3c1b7b0e00 100644 --- a/advisories/unreviewed/2022/05/GHSA-9256-64mc-8rcv/GHSA-9256-64mc-8rcv.json +++ b/advisories/unreviewed/2022/05/GHSA-9256-64mc-8rcv/GHSA-9256-64mc-8rcv.json @@ -7,12 +7,8 @@ "CVE-2002-1518" ], "details": "mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-92gj-7w52-q2cw/GHSA-92gj-7w52-q2cw.json b/advisories/unreviewed/2022/05/GHSA-92gj-7w52-q2cw/GHSA-92gj-7w52-q2cw.json index b206b60c479..594af7aade6 100644 --- a/advisories/unreviewed/2022/05/GHSA-92gj-7w52-q2cw/GHSA-92gj-7w52-q2cw.json +++ b/advisories/unreviewed/2022/05/GHSA-92gj-7w52-q2cw/GHSA-92gj-7w52-q2cw.json @@ -7,12 +7,8 @@ "CVE-2004-1070" ], "details": "The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-92gm-9hj8-rfmw/GHSA-92gm-9hj8-rfmw.json b/advisories/unreviewed/2022/05/GHSA-92gm-9hj8-rfmw/GHSA-92gm-9hj8-rfmw.json index fc7221db1e9..c46b92e4a11 100644 --- a/advisories/unreviewed/2022/05/GHSA-92gm-9hj8-rfmw/GHSA-92gm-9hj8-rfmw.json +++ b/advisories/unreviewed/2022/05/GHSA-92gm-9hj8-rfmw/GHSA-92gm-9hj8-rfmw.json @@ -7,12 +7,8 @@ "CVE-2005-3193" ], "details": "Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-945j-48p3-f37w/GHSA-945j-48p3-f37w.json b/advisories/unreviewed/2022/05/GHSA-945j-48p3-f37w/GHSA-945j-48p3-f37w.json index 9945929dc43..e4866b72ccf 100644 --- a/advisories/unreviewed/2022/05/GHSA-945j-48p3-f37w/GHSA-945j-48p3-f37w.json +++ b/advisories/unreviewed/2022/05/GHSA-945j-48p3-f37w/GHSA-945j-48p3-f37w.json @@ -7,12 +7,8 @@ "CVE-2003-0989" ], "details": "tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-96qc-cv4m-j8fq/GHSA-96qc-cv4m-j8fq.json b/advisories/unreviewed/2022/05/GHSA-96qc-cv4m-j8fq/GHSA-96qc-cv4m-j8fq.json index 84517233f61..1c1a6908525 100644 --- a/advisories/unreviewed/2022/05/GHSA-96qc-cv4m-j8fq/GHSA-96qc-cv4m-j8fq.json +++ b/advisories/unreviewed/2022/05/GHSA-96qc-cv4m-j8fq/GHSA-96qc-cv4m-j8fq.json @@ -7,12 +7,8 @@ "CVE-2002-0380" ], "details": "Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9855-w374-4v24/GHSA-9855-w374-4v24.json b/advisories/unreviewed/2022/05/GHSA-9855-w374-4v24/GHSA-9855-w374-4v24.json index 8cade0b0240..e0c63b89013 100644 --- a/advisories/unreviewed/2022/05/GHSA-9855-w374-4v24/GHSA-9855-w374-4v24.json +++ b/advisories/unreviewed/2022/05/GHSA-9855-w374-4v24/GHSA-9855-w374-4v24.json @@ -7,12 +7,8 @@ "CVE-2005-1228" ], "details": "Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-98qq-6f93-2rg7/GHSA-98qq-6f93-2rg7.json b/advisories/unreviewed/2022/05/GHSA-98qq-6f93-2rg7/GHSA-98qq-6f93-2rg7.json index c589080175a..f2486457b2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-98qq-6f93-2rg7/GHSA-98qq-6f93-2rg7.json +++ b/advisories/unreviewed/2022/05/GHSA-98qq-6f93-2rg7/GHSA-98qq-6f93-2rg7.json @@ -7,12 +7,8 @@ "CVE-2005-3011" ], "details": "The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98r4-fx32-wmfw/GHSA-98r4-fx32-wmfw.json b/advisories/unreviewed/2022/05/GHSA-98r4-fx32-wmfw/GHSA-98r4-fx32-wmfw.json index 4f323b48d85..13b513fb918 100644 --- a/advisories/unreviewed/2022/05/GHSA-98r4-fx32-wmfw/GHSA-98r4-fx32-wmfw.json +++ b/advisories/unreviewed/2022/05/GHSA-98r4-fx32-wmfw/GHSA-98r4-fx32-wmfw.json @@ -7,12 +7,8 @@ "CVE-2002-1368" ], "details": "Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9963-xc26-4vg3/GHSA-9963-xc26-4vg3.json b/advisories/unreviewed/2022/05/GHSA-9963-xc26-4vg3/GHSA-9963-xc26-4vg3.json index 63af0501b8b..002790cc512 100644 --- a/advisories/unreviewed/2022/05/GHSA-9963-xc26-4vg3/GHSA-9963-xc26-4vg3.json +++ b/advisories/unreviewed/2022/05/GHSA-9963-xc26-4vg3/GHSA-9963-xc26-4vg3.json @@ -7,12 +7,8 @@ "CVE-2006-3744" ], "details": "Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile (bitmap) images that trigger heap-based buffer overflows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9964-6ghh-p55w/GHSA-9964-6ghh-p55w.json b/advisories/unreviewed/2022/05/GHSA-9964-6ghh-p55w/GHSA-9964-6ghh-p55w.json index 831030fe568..b394d07d236 100644 --- a/advisories/unreviewed/2022/05/GHSA-9964-6ghh-p55w/GHSA-9964-6ghh-p55w.json +++ b/advisories/unreviewed/2022/05/GHSA-9964-6ghh-p55w/GHSA-9964-6ghh-p55w.json @@ -7,12 +7,8 @@ "CVE-2006-5463" ], "details": "Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary JavaScript bytecode via unspecified vectors involving modification of a Script object while it is executing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -244,9 +240,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9c3w-8m3v-q5m8/GHSA-9c3w-8m3v-q5m8.json b/advisories/unreviewed/2022/05/GHSA-9c3w-8m3v-q5m8/GHSA-9c3w-8m3v-q5m8.json index 78becd20773..90dd4c4faf1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9c3w-8m3v-q5m8/GHSA-9c3w-8m3v-q5m8.json +++ b/advisories/unreviewed/2022/05/GHSA-9c3w-8m3v-q5m8/GHSA-9c3w-8m3v-q5m8.json @@ -7,12 +7,8 @@ "CVE-2004-0139" ], "details": "Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which \"t_unbind changes t_bind's behavior,\" has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9cg4-699v-g366/GHSA-9cg4-699v-g366.json b/advisories/unreviewed/2022/05/GHSA-9cg4-699v-g366/GHSA-9cg4-699v-g366.json index 3ff4accfe41..e399e8c8dc2 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cg4-699v-g366/GHSA-9cg4-699v-g366.json +++ b/advisories/unreviewed/2022/05/GHSA-9cg4-699v-g366/GHSA-9cg4-699v-g366.json @@ -7,12 +7,8 @@ "CVE-2005-3275" ], "details": "The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9cgq-cjm7-94qp/GHSA-9cgq-cjm7-94qp.json b/advisories/unreviewed/2022/05/GHSA-9cgq-cjm7-94qp/GHSA-9cgq-cjm7-94qp.json index 6c52f5af6cb..90dda1a8168 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cgq-cjm7-94qp/GHSA-9cgq-cjm7-94qp.json +++ b/advisories/unreviewed/2022/05/GHSA-9cgq-cjm7-94qp/GHSA-9cgq-cjm7-94qp.json @@ -7,12 +7,8 @@ "CVE-2005-3658" ], "details": "Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause a denial of service (unresponsive application) via malformed RPC packets to (1) RPC program number 390109 (nsrd.exe) and (2) RPC program number 390113 (nsrexecd.exe).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9fjc-6jmw-8r3m/GHSA-9fjc-6jmw-8r3m.json b/advisories/unreviewed/2022/05/GHSA-9fjc-6jmw-8r3m/GHSA-9fjc-6jmw-8r3m.json index 10b84d3b5d7..4085365a2a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fjc-6jmw-8r3m/GHSA-9fjc-6jmw-8r3m.json +++ b/advisories/unreviewed/2022/05/GHSA-9fjc-6jmw-8r3m/GHSA-9fjc-6jmw-8r3m.json @@ -7,12 +7,8 @@ "CVE-2005-0953" ], "details": "Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9fqv-4m7q-x5j2/GHSA-9fqv-4m7q-x5j2.json b/advisories/unreviewed/2022/05/GHSA-9fqv-4m7q-x5j2/GHSA-9fqv-4m7q-x5j2.json index 9d255514c91..f5dde9e0106 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fqv-4m7q-x5j2/GHSA-9fqv-4m7q-x5j2.json +++ b/advisories/unreviewed/2022/05/GHSA-9fqv-4m7q-x5j2/GHSA-9fqv-4m7q-x5j2.json @@ -7,12 +7,8 @@ "CVE-2006-0292" ], "details": "The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -252,9 +248,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9g2f-xcj6-7657/GHSA-9g2f-xcj6-7657.json b/advisories/unreviewed/2022/05/GHSA-9g2f-xcj6-7657/GHSA-9g2f-xcj6-7657.json index 0684a346c3b..456ee272e88 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g2f-xcj6-7657/GHSA-9g2f-xcj6-7657.json +++ b/advisories/unreviewed/2022/05/GHSA-9g2f-xcj6-7657/GHSA-9g2f-xcj6-7657.json @@ -7,12 +7,8 @@ "CVE-2003-0694" ], "details": "The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9h92-hjv2-cj7q/GHSA-9h92-hjv2-cj7q.json b/advisories/unreviewed/2022/05/GHSA-9h92-hjv2-cj7q/GHSA-9h92-hjv2-cj7q.json index 8bff0afecf6..78ce3b4e949 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h92-hjv2-cj7q/GHSA-9h92-hjv2-cj7q.json +++ b/advisories/unreviewed/2022/05/GHSA-9h92-hjv2-cj7q/GHSA-9h92-hjv2-cj7q.json @@ -7,12 +7,8 @@ "CVE-2006-4416" ], "details": "Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9hr9-wg7q-ffxj/GHSA-9hr9-wg7q-ffxj.json b/advisories/unreviewed/2022/05/GHSA-9hr9-wg7q-ffxj/GHSA-9hr9-wg7q-ffxj.json index c4ac8699adf..dd6f04de0a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hr9-wg7q-ffxj/GHSA-9hr9-wg7q-ffxj.json +++ b/advisories/unreviewed/2022/05/GHSA-9hr9-wg7q-ffxj/GHSA-9hr9-wg7q-ffxj.json @@ -7,12 +7,8 @@ "CVE-2005-4153" ], "details": "Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to \"fail with an Overflow on bad date data in a processed message,\" a different vulnerability than CVE-2005-3573.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9j3v-w638-mx3p/GHSA-9j3v-w638-mx3p.json b/advisories/unreviewed/2022/05/GHSA-9j3v-w638-mx3p/GHSA-9j3v-w638-mx3p.json index bd8d4d9dcb0..f39ea359342 100644 --- a/advisories/unreviewed/2022/05/GHSA-9j3v-w638-mx3p/GHSA-9j3v-w638-mx3p.json +++ b/advisories/unreviewed/2022/05/GHSA-9j3v-w638-mx3p/GHSA-9j3v-w638-mx3p.json @@ -7,12 +7,8 @@ "CVE-2005-1153" ], "details": "Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the \"Show javascript\" option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9qx2-jpx2-xj47/GHSA-9qx2-jpx2-xj47.json b/advisories/unreviewed/2022/05/GHSA-9qx2-jpx2-xj47/GHSA-9qx2-jpx2-xj47.json index 1180a9b5e02..2823644a415 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qx2-jpx2-xj47/GHSA-9qx2-jpx2-xj47.json +++ b/advisories/unreviewed/2022/05/GHSA-9qx2-jpx2-xj47/GHSA-9qx2-jpx2-xj47.json @@ -7,12 +7,8 @@ "CVE-2003-0855" ], "details": "Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9qx9-746j-j43j/GHSA-9qx9-746j-j43j.json b/advisories/unreviewed/2022/05/GHSA-9qx9-746j-j43j/GHSA-9qx9-746j-j43j.json index 3d9baca6d84..a602127eba5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qx9-746j-j43j/GHSA-9qx9-746j-j43j.json +++ b/advisories/unreviewed/2022/05/GHSA-9qx9-746j-j43j/GHSA-9qx9-746j-j43j.json @@ -7,12 +7,8 @@ "CVE-2004-1131" ], "details": "Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9x7m-vh7w-2mvh/GHSA-9x7m-vh7w-2mvh.json b/advisories/unreviewed/2022/05/GHSA-9x7m-vh7w-2mvh/GHSA-9x7m-vh7w-2mvh.json index 01e25a52c9f..51c724d98ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x7m-vh7w-2mvh/GHSA-9x7m-vh7w-2mvh.json +++ b/advisories/unreviewed/2022/05/GHSA-9x7m-vh7w-2mvh/GHSA-9x7m-vh7w-2mvh.json @@ -7,12 +7,8 @@ "CVE-2006-0883" ], "details": "OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates during PAM authentication, which allows remote attackers to cause a denial of service (client connection refusal) by connecting multiple times to the SSH server, waiting for the password prompt, then disconnecting.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9xf5-hxpg-rcfj/GHSA-9xf5-hxpg-rcfj.json b/advisories/unreviewed/2022/05/GHSA-9xf5-hxpg-rcfj/GHSA-9xf5-hxpg-rcfj.json index 06a5b2fdda7..f6e2becd66a 100644 --- a/advisories/unreviewed/2022/05/GHSA-9xf5-hxpg-rcfj/GHSA-9xf5-hxpg-rcfj.json +++ b/advisories/unreviewed/2022/05/GHSA-9xf5-hxpg-rcfj/GHSA-9xf5-hxpg-rcfj.json @@ -7,12 +7,8 @@ "CVE-2003-0098" ], "details": "Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9xjf-8fwf-5xx6/GHSA-9xjf-8fwf-5xx6.json b/advisories/unreviewed/2022/05/GHSA-9xjf-8fwf-5xx6/GHSA-9xjf-8fwf-5xx6.json index 9e702c3a869..3b0f36f1b14 100644 --- a/advisories/unreviewed/2022/05/GHSA-9xjf-8fwf-5xx6/GHSA-9xjf-8fwf-5xx6.json +++ b/advisories/unreviewed/2022/05/GHSA-9xjf-8fwf-5xx6/GHSA-9xjf-8fwf-5xx6.json @@ -7,12 +7,8 @@ "CVE-2004-0137" ], "details": "Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of \"page invalidation issues.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c4xg-24hh-cq78/GHSA-c4xg-24hh-cq78.json b/advisories/unreviewed/2022/05/GHSA-c4xg-24hh-cq78/GHSA-c4xg-24hh-cq78.json index c8a8aa81779..4b4a9d12538 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4xg-24hh-cq78/GHSA-c4xg-24hh-cq78.json +++ b/advisories/unreviewed/2022/05/GHSA-c4xg-24hh-cq78/GHSA-c4xg-24hh-cq78.json @@ -7,12 +7,8 @@ "CVE-2005-4077" ], "details": "Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a \"?\" separator in the hostname portion, which causes a \"/\" to be prepended to the resulting string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -160,9 +156,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c5p7-4hq8-gm4c/GHSA-c5p7-4hq8-gm4c.json b/advisories/unreviewed/2022/05/GHSA-c5p7-4hq8-gm4c/GHSA-c5p7-4hq8-gm4c.json index d8e1677d0cd..dd37de06476 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5p7-4hq8-gm4c/GHSA-c5p7-4hq8-gm4c.json +++ b/advisories/unreviewed/2022/05/GHSA-c5p7-4hq8-gm4c/GHSA-c5p7-4hq8-gm4c.json @@ -7,12 +7,8 @@ "CVE-2006-0049" ], "details": "gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c65v-php3-gmxx/GHSA-c65v-php3-gmxx.json b/advisories/unreviewed/2022/05/GHSA-c65v-php3-gmxx/GHSA-c65v-php3-gmxx.json index fbfff540356..746bf450c01 100644 --- a/advisories/unreviewed/2022/05/GHSA-c65v-php3-gmxx/GHSA-c65v-php3-gmxx.json +++ b/advisories/unreviewed/2022/05/GHSA-c65v-php3-gmxx/GHSA-c65v-php3-gmxx.json @@ -7,12 +7,8 @@ "CVE-2006-0296" ], "details": "The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -260,9 +256,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c67q-9hxp-64hm/GHSA-c67q-9hxp-64hm.json b/advisories/unreviewed/2022/05/GHSA-c67q-9hxp-64hm/GHSA-c67q-9hxp-64hm.json index 7451ae0718c..c88dc71a769 100644 --- a/advisories/unreviewed/2022/05/GHSA-c67q-9hxp-64hm/GHSA-c67q-9hxp-64hm.json +++ b/advisories/unreviewed/2022/05/GHSA-c67q-9hxp-64hm/GHSA-c67q-9hxp-64hm.json @@ -7,12 +7,8 @@ "CVE-2005-3628" ], "details": "Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -168,9 +164,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c6vg-33v6-g8vm/GHSA-c6vg-33v6-g8vm.json b/advisories/unreviewed/2022/05/GHSA-c6vg-33v6-g8vm/GHSA-c6vg-33v6-g8vm.json index c91f39bce1b..10ee021ea95 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6vg-33v6-g8vm/GHSA-c6vg-33v6-g8vm.json +++ b/advisories/unreviewed/2022/05/GHSA-c6vg-33v6-g8vm/GHSA-c6vg-33v6-g8vm.json @@ -7,12 +7,8 @@ "CVE-2005-3120" ], "details": "Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -152,9 +148,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c852-rjqq-x3x3/GHSA-c852-rjqq-x3x3.json b/advisories/unreviewed/2022/05/GHSA-c852-rjqq-x3x3/GHSA-c852-rjqq-x3x3.json index 3a860b9a8cd..dc4aacba018 100644 --- a/advisories/unreviewed/2022/05/GHSA-c852-rjqq-x3x3/GHSA-c852-rjqq-x3x3.json +++ b/advisories/unreviewed/2022/05/GHSA-c852-rjqq-x3x3/GHSA-c852-rjqq-x3x3.json @@ -7,12 +7,8 @@ "CVE-2002-1419" ], "details": "The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c878-8cvq-qfv7/GHSA-c878-8cvq-qfv7.json b/advisories/unreviewed/2022/05/GHSA-c878-8cvq-qfv7/GHSA-c878-8cvq-qfv7.json index bf99575f45f..9c757fa7486 100644 --- a/advisories/unreviewed/2022/05/GHSA-c878-8cvq-qfv7/GHSA-c878-8cvq-qfv7.json +++ b/advisories/unreviewed/2022/05/GHSA-c878-8cvq-qfv7/GHSA-c878-8cvq-qfv7.json @@ -7,12 +7,8 @@ "CVE-2004-0185" ], "details": "Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c92g-qcfc-4869/GHSA-c92g-qcfc-4869.json b/advisories/unreviewed/2022/05/GHSA-c92g-qcfc-4869/GHSA-c92g-qcfc-4869.json index 2a8f4d6a1dc..f1af711fb76 100644 --- a/advisories/unreviewed/2022/05/GHSA-c92g-qcfc-4869/GHSA-c92g-qcfc-4869.json +++ b/advisories/unreviewed/2022/05/GHSA-c92g-qcfc-4869/GHSA-c92g-qcfc-4869.json @@ -7,12 +7,8 @@ "CVE-2004-0541" ], "details": "Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password (\"pass\" variable).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c9fh-84vx-4p2p/GHSA-c9fh-84vx-4p2p.json b/advisories/unreviewed/2022/05/GHSA-c9fh-84vx-4p2p/GHSA-c9fh-84vx-4p2p.json index 44b4d14e718..7a785a78e0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9fh-84vx-4p2p/GHSA-c9fh-84vx-4p2p.json +++ b/advisories/unreviewed/2022/05/GHSA-c9fh-84vx-4p2p/GHSA-c9fh-84vx-4p2p.json @@ -7,12 +7,8 @@ "CVE-2005-2797" ], "details": "OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding (\"-D\" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c9pj-8qx8-ccrw/GHSA-c9pj-8qx8-ccrw.json b/advisories/unreviewed/2022/05/GHSA-c9pj-8qx8-ccrw/GHSA-c9pj-8qx8-ccrw.json index c983daafa51..4781aafa931 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9pj-8qx8-ccrw/GHSA-c9pj-8qx8-ccrw.json +++ b/advisories/unreviewed/2022/05/GHSA-c9pj-8qx8-ccrw/GHSA-c9pj-8qx8-ccrw.json @@ -7,12 +7,8 @@ "CVE-2003-0107" ], "details": "Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cc25-q8c7-8w7p/GHSA-cc25-q8c7-8w7p.json b/advisories/unreviewed/2022/05/GHSA-cc25-q8c7-8w7p/GHSA-cc25-q8c7-8w7p.json index 30255bfeb65..f71328c2ef4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc25-q8c7-8w7p/GHSA-cc25-q8c7-8w7p.json +++ b/advisories/unreviewed/2022/05/GHSA-cc25-q8c7-8w7p/GHSA-cc25-q8c7-8w7p.json @@ -7,12 +7,8 @@ "CVE-2004-0135" ], "details": "The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cc7x-8w7g-r27p/GHSA-cc7x-8w7g-r27p.json b/advisories/unreviewed/2022/05/GHSA-cc7x-8w7g-r27p/GHSA-cc7x-8w7g-r27p.json index e2c7a0cbc5f..89c8f0db110 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc7x-8w7g-r27p/GHSA-cc7x-8w7g-r27p.json +++ b/advisories/unreviewed/2022/05/GHSA-cc7x-8w7g-r27p/GHSA-cc7x-8w7g-r27p.json @@ -7,12 +7,8 @@ "CVE-2009-0173" ], "details": "Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to cause a denial of service (trap) via a crafted data stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ccmc-8626-x545/GHSA-ccmc-8626-x545.json b/advisories/unreviewed/2022/05/GHSA-ccmc-8626-x545/GHSA-ccmc-8626-x545.json index d9f534a2e13..039af79abb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccmc-8626-x545/GHSA-ccmc-8626-x545.json +++ b/advisories/unreviewed/2022/05/GHSA-ccmc-8626-x545/GHSA-ccmc-8626-x545.json @@ -7,12 +7,8 @@ "CVE-2006-4020" ], "details": "scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -172,9 +168,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cf26-mx53-78pv/GHSA-cf26-mx53-78pv.json b/advisories/unreviewed/2022/05/GHSA-cf26-mx53-78pv/GHSA-cf26-mx53-78pv.json index cc2b6ba503e..cf5bb66e074 100644 --- a/advisories/unreviewed/2022/05/GHSA-cf26-mx53-78pv/GHSA-cf26-mx53-78pv.json +++ b/advisories/unreviewed/2022/05/GHSA-cf26-mx53-78pv/GHSA-cf26-mx53-78pv.json @@ -7,12 +7,8 @@ "CVE-2002-2093" ], "details": "The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to \"Output Video\", allows attackers to access a console session by running videoout then videoin.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cfvq-2qp7-r72f/GHSA-cfvq-2qp7-r72f.json b/advisories/unreviewed/2022/05/GHSA-cfvq-2qp7-r72f/GHSA-cfvq-2qp7-r72f.json index aaa512872d0..025cd7925c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfvq-2qp7-r72f/GHSA-cfvq-2qp7-r72f.json +++ b/advisories/unreviewed/2022/05/GHSA-cfvq-2qp7-r72f/GHSA-cfvq-2qp7-r72f.json @@ -7,12 +7,8 @@ "CVE-2006-5456" ], "details": "Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cg6m-w7xp-6g8r/GHSA-cg6m-w7xp-6g8r.json b/advisories/unreviewed/2022/05/GHSA-cg6m-w7xp-6g8r/GHSA-cg6m-w7xp-6g8r.json index cbcbd8c4404..f3b5efba7a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cg6m-w7xp-6g8r/GHSA-cg6m-w7xp-6g8r.json +++ b/advisories/unreviewed/2022/05/GHSA-cg6m-w7xp-6g8r/GHSA-cg6m-w7xp-6g8r.json @@ -7,12 +7,8 @@ "CVE-2005-1406" ], "details": "The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cgqx-jwj4-2jc4/GHSA-cgqx-jwj4-2jc4.json b/advisories/unreviewed/2022/05/GHSA-cgqx-jwj4-2jc4/GHSA-cgqx-jwj4-2jc4.json index 15de85a737f..4bf26081bbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgqx-jwj4-2jc4/GHSA-cgqx-jwj4-2jc4.json +++ b/advisories/unreviewed/2022/05/GHSA-cgqx-jwj4-2jc4/GHSA-cgqx-jwj4-2jc4.json @@ -7,12 +7,8 @@ "CVE-2006-5467" ], "details": "The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a \"-\" instead of \"--\" and contains an inconsistent ID.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cjph-r34c-g8rg/GHSA-cjph-r34c-g8rg.json b/advisories/unreviewed/2022/05/GHSA-cjph-r34c-g8rg/GHSA-cjph-r34c-g8rg.json index 5fe650eacbd..8a95056d7e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjph-r34c-g8rg/GHSA-cjph-r34c-g8rg.json +++ b/advisories/unreviewed/2022/05/GHSA-cjph-r34c-g8rg/GHSA-cjph-r34c-g8rg.json @@ -7,12 +7,8 @@ "CVE-2004-1890" ], "details": "Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via the PORT mode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cjqf-4m3m-v7rh/GHSA-cjqf-4m3m-v7rh.json b/advisories/unreviewed/2022/05/GHSA-cjqf-4m3m-v7rh/GHSA-cjqf-4m3m-v7rh.json index 703197e404f..dffa750cecb 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjqf-4m3m-v7rh/GHSA-cjqf-4m3m-v7rh.json +++ b/advisories/unreviewed/2022/05/GHSA-cjqf-4m3m-v7rh/GHSA-cjqf-4m3m-v7rh.json @@ -7,12 +7,8 @@ "CVE-2006-4574" ], "details": "Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cm24-8jw3-w7p7/GHSA-cm24-8jw3-w7p7.json b/advisories/unreviewed/2022/05/GHSA-cm24-8jw3-w7p7/GHSA-cm24-8jw3-w7p7.json index 85ac3d101e9..cb80883c15f 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm24-8jw3-w7p7/GHSA-cm24-8jw3-w7p7.json +++ b/advisories/unreviewed/2022/05/GHSA-cm24-8jw3-w7p7/GHSA-cm24-8jw3-w7p7.json @@ -7,12 +7,8 @@ "CVE-2002-1517" ], "details": "fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cm27-qc8j-3wx6/GHSA-cm27-qc8j-3wx6.json b/advisories/unreviewed/2022/05/GHSA-cm27-qc8j-3wx6/GHSA-cm27-qc8j-3wx6.json index 03c435ccfa6..562f0f4173b 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm27-qc8j-3wx6/GHSA-cm27-qc8j-3wx6.json +++ b/advisories/unreviewed/2022/05/GHSA-cm27-qc8j-3wx6/GHSA-cm27-qc8j-3wx6.json @@ -7,12 +7,8 @@ "CVE-2005-0749" ], "details": "The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cmw6-vcmf-xpcx/GHSA-cmw6-vcmf-xpcx.json b/advisories/unreviewed/2022/05/GHSA-cmw6-vcmf-xpcx/GHSA-cmw6-vcmf-xpcx.json index 9a9f4645f98..ff674a56b7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmw6-vcmf-xpcx/GHSA-cmw6-vcmf-xpcx.json +++ b/advisories/unreviewed/2022/05/GHSA-cmw6-vcmf-xpcx/GHSA-cmw6-vcmf-xpcx.json @@ -7,12 +7,8 @@ "CVE-2009-0789" ], "details": "OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cp4j-q49w-68jf/GHSA-cp4j-q49w-68jf.json b/advisories/unreviewed/2022/05/GHSA-cp4j-q49w-68jf/GHSA-cp4j-q49w-68jf.json index ff918d21756..cc1db061173 100644 --- a/advisories/unreviewed/2022/05/GHSA-cp4j-q49w-68jf/GHSA-cp4j-q49w-68jf.json +++ b/advisories/unreviewed/2022/05/GHSA-cp4j-q49w-68jf/GHSA-cp4j-q49w-68jf.json @@ -7,12 +7,8 @@ "CVE-2007-0908" ], "details": "The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq85-qr6h-4x5p/GHSA-cq85-qr6h-4x5p.json b/advisories/unreviewed/2022/05/GHSA-cq85-qr6h-4x5p/GHSA-cq85-qr6h-4x5p.json index c03fe48358f..424348307a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq85-qr6h-4x5p/GHSA-cq85-qr6h-4x5p.json +++ b/advisories/unreviewed/2022/05/GHSA-cq85-qr6h-4x5p/GHSA-cq85-qr6h-4x5p.json @@ -7,12 +7,8 @@ "CVE-2006-5867" ], "details": "fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cqq9-qgwr-48j4/GHSA-cqq9-qgwr-48j4.json b/advisories/unreviewed/2022/05/GHSA-cqq9-qgwr-48j4/GHSA-cqq9-qgwr-48j4.json index 945c11585bd..5545b235839 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqq9-qgwr-48j4/GHSA-cqq9-qgwr-48j4.json +++ b/advisories/unreviewed/2022/05/GHSA-cqq9-qgwr-48j4/GHSA-cqq9-qgwr-48j4.json @@ -7,12 +7,8 @@ "CVE-2002-0379" ], "details": "Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-crjc-v7fx-459m/GHSA-crjc-v7fx-459m.json b/advisories/unreviewed/2022/05/GHSA-crjc-v7fx-459m/GHSA-crjc-v7fx-459m.json index 278eef8cc58..3b0af243da8 100644 --- a/advisories/unreviewed/2022/05/GHSA-crjc-v7fx-459m/GHSA-crjc-v7fx-459m.json +++ b/advisories/unreviewed/2022/05/GHSA-crjc-v7fx-459m/GHSA-crjc-v7fx-459m.json @@ -7,12 +7,8 @@ "CVE-2002-0702" ], "details": "Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cv2w-7jmr-4jgp/GHSA-cv2w-7jmr-4jgp.json b/advisories/unreviewed/2022/05/GHSA-cv2w-7jmr-4jgp/GHSA-cv2w-7jmr-4jgp.json index d2cc657d539..62f149ae9bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv2w-7jmr-4jgp/GHSA-cv2w-7jmr-4jgp.json +++ b/advisories/unreviewed/2022/05/GHSA-cv2w-7jmr-4jgp/GHSA-cv2w-7jmr-4jgp.json @@ -7,12 +7,8 @@ "CVE-2002-1317" ], "details": "Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cv68-j3qg-q86v/GHSA-cv68-j3qg-q86v.json b/advisories/unreviewed/2022/05/GHSA-cv68-j3qg-q86v/GHSA-cv68-j3qg-q86v.json index 305f5477867..85675da681c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv68-j3qg-q86v/GHSA-cv68-j3qg-q86v.json +++ b/advisories/unreviewed/2022/05/GHSA-cv68-j3qg-q86v/GHSA-cv68-j3qg-q86v.json @@ -7,12 +7,8 @@ "CVE-2002-1500" ], "details": "Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cvgv-4v7x-cwc9/GHSA-cvgv-4v7x-cwc9.json b/advisories/unreviewed/2022/05/GHSA-cvgv-4v7x-cwc9/GHSA-cvgv-4v7x-cwc9.json index 5fe8632f5cf..b531ae095a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvgv-4v7x-cwc9/GHSA-cvgv-4v7x-cwc9.json +++ b/advisories/unreviewed/2022/05/GHSA-cvgv-4v7x-cwc9/GHSA-cvgv-4v7x-cwc9.json @@ -7,12 +7,8 @@ "CVE-2002-1516" ], "details": "rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cw9v-mmf8-gmmr/GHSA-cw9v-mmf8-gmmr.json b/advisories/unreviewed/2022/05/GHSA-cw9v-mmf8-gmmr/GHSA-cw9v-mmf8-gmmr.json index 872830ad069..19b56dbd655 100644 --- a/advisories/unreviewed/2022/05/GHSA-cw9v-mmf8-gmmr/GHSA-cw9v-mmf8-gmmr.json +++ b/advisories/unreviewed/2022/05/GHSA-cw9v-mmf8-gmmr/GHSA-cw9v-mmf8-gmmr.json @@ -7,12 +7,8 @@ "CVE-2006-4339" ], "details": "OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -816,9 +812,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cwr4-7j4w-3vv9/GHSA-cwr4-7j4w-3vv9.json b/advisories/unreviewed/2022/05/GHSA-cwr4-7j4w-3vv9/GHSA-cwr4-7j4w-3vv9.json index 725dc0cddb1..b8f28a9bd33 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwr4-7j4w-3vv9/GHSA-cwr4-7j4w-3vv9.json +++ b/advisories/unreviewed/2022/05/GHSA-cwr4-7j4w-3vv9/GHSA-cwr4-7j4w-3vv9.json @@ -7,12 +7,8 @@ "CVE-2004-0488" ], "details": "Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cwr4-w68c-gmq5/GHSA-cwr4-w68c-gmq5.json b/advisories/unreviewed/2022/05/GHSA-cwr4-w68c-gmq5/GHSA-cwr4-w68c-gmq5.json index 3bd4f356f51..70bdfe62bb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwr4-w68c-gmq5/GHSA-cwr4-w68c-gmq5.json +++ b/advisories/unreviewed/2022/05/GHSA-cwr4-w68c-gmq5/GHSA-cwr4-w68c-gmq5.json @@ -7,12 +7,8 @@ "CVE-2006-3806" ], "details": "Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified \"string function arguments.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -288,9 +284,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f27j-9fv2-5hrg/GHSA-f27j-9fv2-5hrg.json b/advisories/unreviewed/2022/05/GHSA-f27j-9fv2-5hrg/GHSA-f27j-9fv2-5hrg.json index 58a7c5cfc6c..c358d1770a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-f27j-9fv2-5hrg/GHSA-f27j-9fv2-5hrg.json +++ b/advisories/unreviewed/2022/05/GHSA-f27j-9fv2-5hrg/GHSA-f27j-9fv2-5hrg.json @@ -7,12 +7,8 @@ "CVE-2006-0052" ], "details": "The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f2fr-mhhc-gjhx/GHSA-f2fr-mhhc-gjhx.json b/advisories/unreviewed/2022/05/GHSA-f2fr-mhhc-gjhx/GHSA-f2fr-mhhc-gjhx.json index 38add50e467..3b698634e16 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2fr-mhhc-gjhx/GHSA-f2fr-mhhc-gjhx.json +++ b/advisories/unreviewed/2022/05/GHSA-f2fr-mhhc-gjhx/GHSA-f2fr-mhhc-gjhx.json @@ -7,12 +7,8 @@ "CVE-2003-0679" ], "details": "Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f3f6-hw6f-fq9r/GHSA-f3f6-hw6f-fq9r.json b/advisories/unreviewed/2022/05/GHSA-f3f6-hw6f-fq9r/GHSA-f3f6-hw6f-fq9r.json index 0d69dc7f9ec..7805f85cad0 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3f6-hw6f-fq9r/GHSA-f3f6-hw6f-fq9r.json +++ b/advisories/unreviewed/2022/05/GHSA-f3f6-hw6f-fq9r/GHSA-f3f6-hw6f-fq9r.json @@ -7,12 +7,8 @@ "CVE-2006-3467" ], "details": "Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -236,9 +232,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f3g9-v59r-jm7w/GHSA-f3g9-v59r-jm7w.json b/advisories/unreviewed/2022/05/GHSA-f3g9-v59r-jm7w/GHSA-f3g9-v59r-jm7w.json index 034d4d1925e..9dd5111ef1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3g9-v59r-jm7w/GHSA-f3g9-v59r-jm7w.json +++ b/advisories/unreviewed/2022/05/GHSA-f3g9-v59r-jm7w/GHSA-f3g9-v59r-jm7w.json @@ -7,12 +7,8 @@ "CVE-2005-0464" ], "details": "gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f3pq-43cm-w3cf/GHSA-f3pq-43cm-w3cf.json b/advisories/unreviewed/2022/05/GHSA-f3pq-43cm-w3cf/GHSA-f3pq-43cm-w3cf.json index ea53ab5730f..e9b31d3e931 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3pq-43cm-w3cf/GHSA-f3pq-43cm-w3cf.json +++ b/advisories/unreviewed/2022/05/GHSA-f3pq-43cm-w3cf/GHSA-f3pq-43cm-w3cf.json @@ -7,12 +7,8 @@ "CVE-2006-3460" ], "details": "Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f48c-g7r5-vhv8/GHSA-f48c-g7r5-vhv8.json b/advisories/unreviewed/2022/05/GHSA-f48c-g7r5-vhv8/GHSA-f48c-g7r5-vhv8.json index f02aaaebf40..8da7a5df996 100644 --- a/advisories/unreviewed/2022/05/GHSA-f48c-g7r5-vhv8/GHSA-f48c-g7r5-vhv8.json +++ b/advisories/unreviewed/2022/05/GHSA-f48c-g7r5-vhv8/GHSA-f48c-g7r5-vhv8.json @@ -7,12 +7,8 @@ "CVE-2006-0884" ], "details": "The WYSIWYG rendering engine (\"rich mail\" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4p7-cvff-gr4c/GHSA-f4p7-cvff-gr4c.json b/advisories/unreviewed/2022/05/GHSA-f4p7-cvff-gr4c/GHSA-f4p7-cvff-gr4c.json index 4acb0755930..b86b424e671 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4p7-cvff-gr4c/GHSA-f4p7-cvff-gr4c.json +++ b/advisories/unreviewed/2022/05/GHSA-f4p7-cvff-gr4c/GHSA-f4p7-cvff-gr4c.json @@ -7,12 +7,8 @@ "CVE-2006-6097" ], "details": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -188,9 +184,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f4wq-jrxj-pf8j/GHSA-f4wq-jrxj-pf8j.json b/advisories/unreviewed/2022/05/GHSA-f4wq-jrxj-pf8j/GHSA-f4wq-jrxj-pf8j.json index 8bb56fcec2b..694249d0f15 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4wq-jrxj-pf8j/GHSA-f4wq-jrxj-pf8j.json +++ b/advisories/unreviewed/2022/05/GHSA-f4wq-jrxj-pf8j/GHSA-f4wq-jrxj-pf8j.json @@ -7,12 +7,8 @@ "CVE-2006-2314" ], "details": "PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the \"\\\" (backslash) byte 0x5c to be the trailing byte of a multibyte character, such as SJIS, BIG5, GBK, GB18030, and UHC, which cannot be handled correctly by a client that does not understand multibyte encodings, aka a second variant of \"Encoding-Based SQL Injection.\" NOTE: it could be argued that this is a class of issue related to interaction errors between the client and PostgreSQL, but a CVE has been assigned since PostgreSQL is treating this as a preventative measure against this class of problem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -152,9 +148,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f56f-988c-jq3p/GHSA-f56f-988c-jq3p.json b/advisories/unreviewed/2022/05/GHSA-f56f-988c-jq3p/GHSA-f56f-988c-jq3p.json index d7eff547ed9..3c4e3317b8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-f56f-988c-jq3p/GHSA-f56f-988c-jq3p.json +++ b/advisories/unreviewed/2022/05/GHSA-f56f-988c-jq3p/GHSA-f56f-988c-jq3p.json @@ -7,12 +7,8 @@ "CVE-2005-2929" ], "details": "Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f5fj-2gr2-7787/GHSA-f5fj-2gr2-7787.json b/advisories/unreviewed/2022/05/GHSA-f5fj-2gr2-7787/GHSA-f5fj-2gr2-7787.json index d85fc66a0c7..dfc024fcd57 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5fj-2gr2-7787/GHSA-f5fj-2gr2-7787.json +++ b/advisories/unreviewed/2022/05/GHSA-f5fj-2gr2-7787/GHSA-f5fj-2gr2-7787.json @@ -7,12 +7,8 @@ "CVE-2002-1281" ], "details": "Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f5rc-6j65-w2pp/GHSA-f5rc-6j65-w2pp.json b/advisories/unreviewed/2022/05/GHSA-f5rc-6j65-w2pp/GHSA-f5rc-6j65-w2pp.json index 62500f27282..ab8d65a1188 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5rc-6j65-w2pp/GHSA-f5rc-6j65-w2pp.json +++ b/advisories/unreviewed/2022/05/GHSA-f5rc-6j65-w2pp/GHSA-f5rc-6j65-w2pp.json @@ -7,12 +7,8 @@ "CVE-2002-1392" ], "details": "faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f6j4-jjq3-5j5j/GHSA-f6j4-jjq3-5j5j.json b/advisories/unreviewed/2022/05/GHSA-f6j4-jjq3-5j5j/GHSA-f6j4-jjq3-5j5j.json index f02a63a4e66..bd6021e9be6 100644 --- a/advisories/unreviewed/2022/05/GHSA-f6j4-jjq3-5j5j/GHSA-f6j4-jjq3-5j5j.json +++ b/advisories/unreviewed/2022/05/GHSA-f6j4-jjq3-5j5j/GHSA-f6j4-jjq3-5j5j.json @@ -7,12 +7,8 @@ "CVE-2006-3465" ], "details": "Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -184,9 +180,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f79w-jc47-24f4/GHSA-f79w-jc47-24f4.json b/advisories/unreviewed/2022/05/GHSA-f79w-jc47-24f4/GHSA-f79w-jc47-24f4.json index 6322aec0ee8..8b46d9d1c4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f79w-jc47-24f4/GHSA-f79w-jc47-24f4.json +++ b/advisories/unreviewed/2022/05/GHSA-f79w-jc47-24f4/GHSA-f79w-jc47-24f4.json @@ -7,12 +7,8 @@ "CVE-2004-0491" ], "details": "The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f7q7-fmv4-99cj/GHSA-f7q7-fmv4-99cj.json b/advisories/unreviewed/2022/05/GHSA-f7q7-fmv4-99cj/GHSA-f7q7-fmv4-99cj.json index b77ad095bc4..9a4f9adf83a 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7q7-fmv4-99cj/GHSA-f7q7-fmv4-99cj.json +++ b/advisories/unreviewed/2022/05/GHSA-f7q7-fmv4-99cj/GHSA-f7q7-fmv4-99cj.json @@ -7,12 +7,8 @@ "CVE-2003-0730" ], "details": "Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f8vv-w522-3v4v/GHSA-f8vv-w522-3v4v.json b/advisories/unreviewed/2022/05/GHSA-f8vv-w522-3v4v/GHSA-f8vv-w522-3v4v.json index 2041c93fe8e..72bd191b66d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8vv-w522-3v4v/GHSA-f8vv-w522-3v4v.json +++ b/advisories/unreviewed/2022/05/GHSA-f8vv-w522-3v4v/GHSA-f8vv-w522-3v4v.json @@ -7,12 +7,8 @@ "CVE-2007-0906" ], "details": "Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions. NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885). NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f96j-qf54-qvww/GHSA-f96j-qf54-qvww.json b/advisories/unreviewed/2022/05/GHSA-f96j-qf54-qvww/GHSA-f96j-qf54-qvww.json index 2b41a47656f..5b8e07a1bb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-f96j-qf54-qvww/GHSA-f96j-qf54-qvww.json +++ b/advisories/unreviewed/2022/05/GHSA-f96j-qf54-qvww/GHSA-f96j-qf54-qvww.json @@ -7,12 +7,8 @@ "CVE-2003-0865" ], "details": "Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fc4p-x25r-c4jr/GHSA-fc4p-x25r-c4jr.json b/advisories/unreviewed/2022/05/GHSA-fc4p-x25r-c4jr/GHSA-fc4p-x25r-c4jr.json index 18455f00a66..4b06bab1a59 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc4p-x25r-c4jr/GHSA-fc4p-x25r-c4jr.json +++ b/advisories/unreviewed/2022/05/GHSA-fc4p-x25r-c4jr/GHSA-fc4p-x25r-c4jr.json @@ -7,12 +7,8 @@ "CVE-2006-1490" ], "details": "PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a \"binary safety\" issue. NOTE: this issue has been referred to as a \"memory leak,\" but it is an information leak that discloses memory contents.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -144,9 +140,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fc7r-gvq8-rc9r/GHSA-fc7r-gvq8-rc9r.json b/advisories/unreviewed/2022/05/GHSA-fc7r-gvq8-rc9r/GHSA-fc7r-gvq8-rc9r.json index 1eb94d04c2a..8d8dd0b041b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc7r-gvq8-rc9r/GHSA-fc7r-gvq8-rc9r.json +++ b/advisories/unreviewed/2022/05/GHSA-fc7r-gvq8-rc9r/GHSA-fc7r-gvq8-rc9r.json @@ -7,12 +7,8 @@ "CVE-2004-0882" ], "details": "Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small \"maximum data bytes\" value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fcjc-w42v-v5hp/GHSA-fcjc-w42v-v5hp.json b/advisories/unreviewed/2022/05/GHSA-fcjc-w42v-v5hp/GHSA-fcjc-w42v-v5hp.json index dcace4b3da0..18f2a9561af 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcjc-w42v-v5hp/GHSA-fcjc-w42v-v5hp.json +++ b/advisories/unreviewed/2022/05/GHSA-fcjc-w42v-v5hp/GHSA-fcjc-w42v-v5hp.json @@ -7,12 +7,8 @@ "CVE-2009-1905" ], "details": "The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcqj-f8qj-8gcp/GHSA-fcqj-f8qj-8gcp.json b/advisories/unreviewed/2022/05/GHSA-fcqj-f8qj-8gcp/GHSA-fcqj-f8qj-8gcp.json index 1e816eb2a90..19a37855f65 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcqj-f8qj-8gcp/GHSA-fcqj-f8qj-8gcp.json +++ b/advisories/unreviewed/2022/05/GHSA-fcqj-f8qj-8gcp/GHSA-fcqj-f8qj-8gcp.json @@ -7,12 +7,8 @@ "CVE-2005-0605" ], "details": "scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ffv2-fj33-mvch/GHSA-ffv2-fj33-mvch.json b/advisories/unreviewed/2022/05/GHSA-ffv2-fj33-mvch/GHSA-ffv2-fj33-mvch.json index da06eb142a9..f27809e5a34 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffv2-fj33-mvch/GHSA-ffv2-fj33-mvch.json +++ b/advisories/unreviewed/2022/05/GHSA-ffv2-fj33-mvch/GHSA-ffv2-fj33-mvch.json @@ -7,12 +7,8 @@ "CVE-2005-1532" ], "details": "Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via \"non-DOM property overrides,\" a variant of CVE-2005-1160.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ffvj-mxf9-q65v/GHSA-ffvj-mxf9-q65v.json b/advisories/unreviewed/2022/05/GHSA-ffvj-mxf9-q65v/GHSA-ffvj-mxf9-q65v.json index 4406d669e6c..86fcc6cbfee 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffvj-mxf9-q65v/GHSA-ffvj-mxf9-q65v.json +++ b/advisories/unreviewed/2022/05/GHSA-ffvj-mxf9-q65v/GHSA-ffvj-mxf9-q65v.json @@ -7,12 +7,8 @@ "CVE-2004-0757" ], "details": "Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fg93-983g-7p2v/GHSA-fg93-983g-7p2v.json b/advisories/unreviewed/2022/05/GHSA-fg93-983g-7p2v/GHSA-fg93-983g-7p2v.json index b2014e051c9..2ff97127fb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg93-983g-7p2v/GHSA-fg93-983g-7p2v.json +++ b/advisories/unreviewed/2022/05/GHSA-fg93-983g-7p2v/GHSA-fg93-983g-7p2v.json @@ -7,12 +7,8 @@ "CVE-2005-1111" ], "details": "Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fgmr-rpcg-m7f6/GHSA-fgmr-rpcg-m7f6.json b/advisories/unreviewed/2022/05/GHSA-fgmr-rpcg-m7f6/GHSA-fgmr-rpcg-m7f6.json index cb12c4d89a2..29b28f57fe9 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgmr-rpcg-m7f6/GHSA-fgmr-rpcg-m7f6.json +++ b/advisories/unreviewed/2022/05/GHSA-fgmr-rpcg-m7f6/GHSA-fgmr-rpcg-m7f6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fgvr-8366-34w4/GHSA-fgvr-8366-34w4.json b/advisories/unreviewed/2022/05/GHSA-fgvr-8366-34w4/GHSA-fgvr-8366-34w4.json index 1fa4f161522..e8b51683225 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgvr-8366-34w4/GHSA-fgvr-8366-34w4.json +++ b/advisories/unreviewed/2022/05/GHSA-fgvr-8366-34w4/GHSA-fgvr-8366-34w4.json @@ -7,12 +7,8 @@ "CVE-2006-5747" ], "details": "Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -208,9 +204,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fgxc-ppfj-92r7/GHSA-fgxc-ppfj-92r7.json b/advisories/unreviewed/2022/05/GHSA-fgxc-ppfj-92r7/GHSA-fgxc-ppfj-92r7.json index aed8a433231..b78ef939fa3 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgxc-ppfj-92r7/GHSA-fgxc-ppfj-92r7.json +++ b/advisories/unreviewed/2022/05/GHSA-fgxc-ppfj-92r7/GHSA-fgxc-ppfj-92r7.json @@ -7,12 +7,8 @@ "CVE-2006-5003" ], "details": "Unspecified vulnerability in the named8 command in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fhc7-h22h-h8g3/GHSA-fhc7-h22h-h8g3.json b/advisories/unreviewed/2022/05/GHSA-fhc7-h22h-h8g3/GHSA-fhc7-h22h-h8g3.json index 4e6687cd5be..eccf25ef6a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhc7-h22h-h8g3/GHSA-fhc7-h22h-h8g3.json +++ b/advisories/unreviewed/2022/05/GHSA-fhc7-h22h-h8g3/GHSA-fhc7-h22h-h8g3.json @@ -7,12 +7,8 @@ "CVE-2005-1859" ], "details": "Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to execute arbitrary shells as root on other hosts in the cluster or array.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fjc8-474c-2xx3/GHSA-fjc8-474c-2xx3.json b/advisories/unreviewed/2022/05/GHSA-fjc8-474c-2xx3/GHSA-fjc8-474c-2xx3.json index 6e424cd96b4..01d99b3ea6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjc8-474c-2xx3/GHSA-fjc8-474c-2xx3.json +++ b/advisories/unreviewed/2022/05/GHSA-fjc8-474c-2xx3/GHSA-fjc8-474c-2xx3.json @@ -7,12 +7,8 @@ "CVE-2006-0225" ], "details": "scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -268,9 +264,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fjcg-hcmf-7fm8/GHSA-fjcg-hcmf-7fm8.json b/advisories/unreviewed/2022/05/GHSA-fjcg-hcmf-7fm8/GHSA-fjcg-hcmf-7fm8.json index 3bc0d5f97d1..df77c6aff43 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjcg-hcmf-7fm8/GHSA-fjcg-hcmf-7fm8.json +++ b/advisories/unreviewed/2022/05/GHSA-fjcg-hcmf-7fm8/GHSA-fjcg-hcmf-7fm8.json @@ -7,12 +7,8 @@ "CVE-2004-0414" ], "details": "CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed \"Entry\" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fm33-hrc3-jr7v/GHSA-fm33-hrc3-jr7v.json b/advisories/unreviewed/2022/05/GHSA-fm33-hrc3-jr7v/GHSA-fm33-hrc3-jr7v.json index 1b92507694e..5b619d5327e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fm33-hrc3-jr7v/GHSA-fm33-hrc3-jr7v.json +++ b/advisories/unreviewed/2022/05/GHSA-fm33-hrc3-jr7v/GHSA-fm33-hrc3-jr7v.json @@ -7,12 +7,8 @@ "CVE-2005-0989" ], "details": "The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fmg4-pw8h-q4xp/GHSA-fmg4-pw8h-q4xp.json b/advisories/unreviewed/2022/05/GHSA-fmg4-pw8h-q4xp/GHSA-fmg4-pw8h-q4xp.json index 0492ec89103..a06039ab546 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmg4-pw8h-q4xp/GHSA-fmg4-pw8h-q4xp.json +++ b/advisories/unreviewed/2022/05/GHSA-fmg4-pw8h-q4xp/GHSA-fmg4-pw8h-q4xp.json @@ -7,12 +7,8 @@ "CVE-2004-0057" ], "details": "The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid \"len\" or \"loc\" values to be used in a loop, a different vulnerability than CVE-2003-0989.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fmj6-5jhp-f8v9/GHSA-fmj6-5jhp-f8v9.json b/advisories/unreviewed/2022/05/GHSA-fmj6-5jhp-f8v9/GHSA-fmj6-5jhp-f8v9.json index 9825d6a2e4d..86fbebe4bce 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmj6-5jhp-f8v9/GHSA-fmj6-5jhp-f8v9.json +++ b/advisories/unreviewed/2022/05/GHSA-fmj6-5jhp-f8v9/GHSA-fmj6-5jhp-f8v9.json @@ -7,12 +7,8 @@ "CVE-2005-3186" ], "details": "Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fmwv-2jjw-c8mw/GHSA-fmwv-2jjw-c8mw.json b/advisories/unreviewed/2022/05/GHSA-fmwv-2jjw-c8mw/GHSA-fmwv-2jjw-c8mw.json index 01f4e6eca48..7369f42f455 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmwv-2jjw-c8mw/GHSA-fmwv-2jjw-c8mw.json +++ b/advisories/unreviewed/2022/05/GHSA-fmwv-2jjw-c8mw/GHSA-fmwv-2jjw-c8mw.json @@ -7,12 +7,8 @@ "CVE-2002-0363" ], "details": "ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fq3g-66vv-fqfv/GHSA-fq3g-66vv-fqfv.json b/advisories/unreviewed/2022/05/GHSA-fq3g-66vv-fqfv/GHSA-fq3g-66vv-fqfv.json index 1abe81f7ada..80522e3a082 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq3g-66vv-fqfv/GHSA-fq3g-66vv-fqfv.json +++ b/advisories/unreviewed/2022/05/GHSA-fq3g-66vv-fqfv/GHSA-fq3g-66vv-fqfv.json @@ -7,12 +7,8 @@ "CVE-2006-1283" ], "details": "opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fq7g-8p9p-2pcj/GHSA-fq7g-8p9p-2pcj.json b/advisories/unreviewed/2022/05/GHSA-fq7g-8p9p-2pcj/GHSA-fq7g-8p9p-2pcj.json index c15ea76055a..7b3c361e648 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq7g-8p9p-2pcj/GHSA-fq7g-8p9p-2pcj.json +++ b/advisories/unreviewed/2022/05/GHSA-fq7g-8p9p-2pcj/GHSA-fq7g-8p9p-2pcj.json @@ -7,12 +7,8 @@ "CVE-2004-0521" ], "details": "SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fq97-w52g-3c2q/GHSA-fq97-w52g-3c2q.json b/advisories/unreviewed/2022/05/GHSA-fq97-w52g-3c2q/GHSA-fq97-w52g-3c2q.json index 1817e669c43..b92deda1234 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq97-w52g-3c2q/GHSA-fq97-w52g-3c2q.json +++ b/advisories/unreviewed/2022/05/GHSA-fq97-w52g-3c2q/GHSA-fq97-w52g-3c2q.json @@ -7,12 +7,8 @@ "CVE-2005-2704" ], "details": "Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fqm4-g2w4-w349/GHSA-fqm4-g2w4-w349.json b/advisories/unreviewed/2022/05/GHSA-fqm4-g2w4-w349/GHSA-fqm4-g2w4-w349.json index 3ec1c31e29e..cbafa6f4c00 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqm4-g2w4-w349/GHSA-fqm4-g2w4-w349.json +++ b/advisories/unreviewed/2022/05/GHSA-fqm4-g2w4-w349/GHSA-fqm4-g2w4-w349.json @@ -7,12 +7,8 @@ "CVE-2002-2180" ], "details": "The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fqqr-pvfq-qprq/GHSA-fqqr-pvfq-qprq.json b/advisories/unreviewed/2022/05/GHSA-fqqr-pvfq-qprq/GHSA-fqqr-pvfq-qprq.json index 4bb5e320c12..a138197f91d 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqqr-pvfq-qprq/GHSA-fqqr-pvfq-qprq.json +++ b/advisories/unreviewed/2022/05/GHSA-fqqr-pvfq-qprq/GHSA-fqqr-pvfq-qprq.json @@ -7,12 +7,8 @@ "CVE-2006-6503" ], "details": "Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -228,9 +224,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fqvv-84gm-c2c5/GHSA-fqvv-84gm-c2c5.json b/advisories/unreviewed/2022/05/GHSA-fqvv-84gm-c2c5/GHSA-fqvv-84gm-c2c5.json index 471d6b52c25..9ad0ef3a626 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqvv-84gm-c2c5/GHSA-fqvv-84gm-c2c5.json +++ b/advisories/unreviewed/2022/05/GHSA-fqvv-84gm-c2c5/GHSA-fqvv-84gm-c2c5.json @@ -7,12 +7,8 @@ "CVE-2004-0791" ], "details": "Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the \"ICMP Source Quench attack.\" NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-frvc-2mm7-vwcg/GHSA-frvc-2mm7-vwcg.json b/advisories/unreviewed/2022/05/GHSA-frvc-2mm7-vwcg/GHSA-frvc-2mm7-vwcg.json index 7c1bb0c2024..61a978c3e2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-frvc-2mm7-vwcg/GHSA-frvc-2mm7-vwcg.json +++ b/advisories/unreviewed/2022/05/GHSA-frvc-2mm7-vwcg/GHSA-frvc-2mm7-vwcg.json @@ -7,12 +7,8 @@ "CVE-2006-1531" ], "details": "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -108,9 +104,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fv5v-25hp-gmw7/GHSA-fv5v-25hp-gmw7.json b/advisories/unreviewed/2022/05/GHSA-fv5v-25hp-gmw7/GHSA-fv5v-25hp-gmw7.json index 7859da4f56c..d4bdd1862df 100644 --- a/advisories/unreviewed/2022/05/GHSA-fv5v-25hp-gmw7/GHSA-fv5v-25hp-gmw7.json +++ b/advisories/unreviewed/2022/05/GHSA-fv5v-25hp-gmw7/GHSA-fv5v-25hp-gmw7.json @@ -7,12 +7,8 @@ "CVE-2004-0418" ], "details": "serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an \"out-of-bounds\" write for a single byte to execute arbitrary code or modify critical program data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fvj4-6gc6-xj65/GHSA-fvj4-6gc6-xj65.json b/advisories/unreviewed/2022/05/GHSA-fvj4-6gc6-xj65/GHSA-fvj4-6gc6-xj65.json index 4259c89ae55..89be1569618 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvj4-6gc6-xj65/GHSA-fvj4-6gc6-xj65.json +++ b/advisories/unreviewed/2022/05/GHSA-fvj4-6gc6-xj65/GHSA-fvj4-6gc6-xj65.json @@ -7,12 +7,8 @@ "CVE-2006-4335" ], "details": "Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a \"stack modification vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -244,9 +240,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fwv6-j4q7-2p64/GHSA-fwv6-j4q7-2p64.json b/advisories/unreviewed/2022/05/GHSA-fwv6-j4q7-2p64/GHSA-fwv6-j4q7-2p64.json index edf3fcdb304..31939bb9a31 100644 --- a/advisories/unreviewed/2022/05/GHSA-fwv6-j4q7-2p64/GHSA-fwv6-j4q7-2p64.json +++ b/advisories/unreviewed/2022/05/GHSA-fwv6-j4q7-2p64/GHSA-fwv6-j4q7-2p64.json @@ -7,12 +7,8 @@ "CVE-2006-4336" ], "details": "Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -244,9 +240,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fxmm-r6c6-cq2x/GHSA-fxmm-r6c6-cq2x.json b/advisories/unreviewed/2022/05/GHSA-fxmm-r6c6-cq2x/GHSA-fxmm-r6c6-cq2x.json index 5ed7cf2327e..43dd7e36274 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxmm-r6c6-cq2x/GHSA-fxmm-r6c6-cq2x.json +++ b/advisories/unreviewed/2022/05/GHSA-fxmm-r6c6-cq2x/GHSA-fxmm-r6c6-cq2x.json @@ -7,12 +7,8 @@ "CVE-2005-4776" ], "details": "Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause a denial of service (heap corruption or system crash) and possibly gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fxpj-c39m-f9vx/GHSA-fxpj-c39m-f9vx.json b/advisories/unreviewed/2022/05/GHSA-fxpj-c39m-f9vx/GHSA-fxpj-c39m-f9vx.json index 58127ef5bd0..4c31523a414 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxpj-c39m-f9vx/GHSA-fxpj-c39m-f9vx.json +++ b/advisories/unreviewed/2022/05/GHSA-fxpj-c39m-f9vx/GHSA-fxpj-c39m-f9vx.json @@ -7,12 +7,8 @@ "CVE-2004-1124" ], "details": "Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fxvg-34mm-mrcp/GHSA-fxvg-34mm-mrcp.json b/advisories/unreviewed/2022/05/GHSA-fxvg-34mm-mrcp/GHSA-fxvg-34mm-mrcp.json index 6106577bb88..aadf97415e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxvg-34mm-mrcp/GHSA-fxvg-34mm-mrcp.json +++ b/advisories/unreviewed/2022/05/GHSA-fxvg-34mm-mrcp/GHSA-fxvg-34mm-mrcp.json @@ -7,12 +7,8 @@ "CVE-2006-3083" ], "details": "The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -148,9 +144,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fxx3-6m2r-fwh5/GHSA-fxx3-6m2r-fwh5.json b/advisories/unreviewed/2022/05/GHSA-fxx3-6m2r-fwh5/GHSA-fxx3-6m2r-fwh5.json index 8987548e32a..fd212de1924 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxx3-6m2r-fwh5/GHSA-fxx3-6m2r-fwh5.json +++ b/advisories/unreviewed/2022/05/GHSA-fxx3-6m2r-fwh5/GHSA-fxx3-6m2r-fwh5.json @@ -7,12 +7,8 @@ "CVE-2006-6235" ], "details": "A \"stack overwrite\" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -156,9 +152,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g246-r9p3-4qh3/GHSA-g246-r9p3-4qh3.json b/advisories/unreviewed/2022/05/GHSA-g246-r9p3-4qh3/GHSA-g246-r9p3-4qh3.json index 8e5643f6e51..ba63fe44682 100644 --- a/advisories/unreviewed/2022/05/GHSA-g246-r9p3-4qh3/GHSA-g246-r9p3-4qh3.json +++ b/advisories/unreviewed/2022/05/GHSA-g246-r9p3-4qh3/GHSA-g246-r9p3-4qh3.json @@ -7,12 +7,8 @@ "CVE-2004-2002" ], "details": "Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certain UDP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g33w-ch5f-5cp8/GHSA-g33w-ch5f-5cp8.json b/advisories/unreviewed/2022/05/GHSA-g33w-ch5f-5cp8/GHSA-g33w-ch5f-5cp8.json index 9143e7e3651..4e457b1c6a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-g33w-ch5f-5cp8/GHSA-g33w-ch5f-5cp8.json +++ b/advisories/unreviewed/2022/05/GHSA-g33w-ch5f-5cp8/GHSA-g33w-ch5f-5cp8.json @@ -7,12 +7,8 @@ "CVE-2005-3659" ], "details": "nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g34f-5f7w-8hw9/GHSA-g34f-5f7w-8hw9.json b/advisories/unreviewed/2022/05/GHSA-g34f-5f7w-8hw9/GHSA-g34f-5f7w-8hw9.json index 8cda5e2d5aa..4074176bf75 100644 --- a/advisories/unreviewed/2022/05/GHSA-g34f-5f7w-8hw9/GHSA-g34f-5f7w-8hw9.json +++ b/advisories/unreviewed/2022/05/GHSA-g34f-5f7w-8hw9/GHSA-g34f-5f7w-8hw9.json @@ -7,12 +7,8 @@ "CVE-2005-4585" ], "details": "Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g3j8-jppq-c6p4/GHSA-g3j8-jppq-c6p4.json b/advisories/unreviewed/2022/05/GHSA-g3j8-jppq-c6p4/GHSA-g3j8-jppq-c6p4.json index bedcfdcbce4..fa8f261e07d 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3j8-jppq-c6p4/GHSA-g3j8-jppq-c6p4.json +++ b/advisories/unreviewed/2022/05/GHSA-g3j8-jppq-c6p4/GHSA-g3j8-jppq-c6p4.json @@ -7,12 +7,8 @@ "CVE-2005-3178" ], "details": "Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g3w5-6ccf-62gj/GHSA-g3w5-6ccf-62gj.json b/advisories/unreviewed/2022/05/GHSA-g3w5-6ccf-62gj/GHSA-g3w5-6ccf-62gj.json index 86b0fed3187..3b84512bc42 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3w5-6ccf-62gj/GHSA-g3w5-6ccf-62gj.json +++ b/advisories/unreviewed/2022/05/GHSA-g3w5-6ccf-62gj/GHSA-g3w5-6ccf-62gj.json @@ -7,12 +7,8 @@ "CVE-2005-2933" ], "details": "Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (\") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -188,9 +184,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g3xh-7cc5-g3q9/GHSA-g3xh-7cc5-g3q9.json b/advisories/unreviewed/2022/05/GHSA-g3xh-7cc5-g3q9/GHSA-g3xh-7cc5-g3q9.json index 207b5df5232..9f52a309e42 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3xh-7cc5-g3q9/GHSA-g3xh-7cc5-g3q9.json +++ b/advisories/unreviewed/2022/05/GHSA-g3xh-7cc5-g3q9/GHSA-g3xh-7cc5-g3q9.json @@ -7,12 +7,8 @@ "CVE-2004-0094" ], "details": "Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g4fx-7rrq-8736/GHSA-g4fx-7rrq-8736.json b/advisories/unreviewed/2022/05/GHSA-g4fx-7rrq-8736/GHSA-g4fx-7rrq-8736.json index 6d1ee5146d6..59c42dabf48 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4fx-7rrq-8736/GHSA-g4fx-7rrq-8736.json +++ b/advisories/unreviewed/2022/05/GHSA-g4fx-7rrq-8736/GHSA-g4fx-7rrq-8736.json @@ -7,12 +7,8 @@ "CVE-2006-2440" ], "details": "Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g52f-4wx9-cj5q/GHSA-g52f-4wx9-cj5q.json b/advisories/unreviewed/2022/05/GHSA-g52f-4wx9-cj5q/GHSA-g52f-4wx9-cj5q.json index 73865ce34fc..5a470a6295b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g52f-4wx9-cj5q/GHSA-g52f-4wx9-cj5q.json +++ b/advisories/unreviewed/2022/05/GHSA-g52f-4wx9-cj5q/GHSA-g52f-4wx9-cj5q.json @@ -7,12 +7,8 @@ "CVE-2003-0056" ], "details": "Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or (2) -r command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g542-vx79-g9v8/GHSA-g542-vx79-g9v8.json b/advisories/unreviewed/2022/05/GHSA-g542-vx79-g9v8/GHSA-g542-vx79-g9v8.json index 5ee17791a68..efbc6f9358c 100644 --- a/advisories/unreviewed/2022/05/GHSA-g542-vx79-g9v8/GHSA-g542-vx79-g9v8.json +++ b/advisories/unreviewed/2022/05/GHSA-g542-vx79-g9v8/GHSA-g542-vx79-g9v8.json @@ -7,12 +7,8 @@ "CVE-2006-0481" ], "details": "Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g54v-mwg7-vp88/GHSA-g54v-mwg7-vp88.json b/advisories/unreviewed/2022/05/GHSA-g54v-mwg7-vp88/GHSA-g54v-mwg7-vp88.json index 3c47f7a0a7e..975a5fbd0ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-g54v-mwg7-vp88/GHSA-g54v-mwg7-vp88.json +++ b/advisories/unreviewed/2022/05/GHSA-g54v-mwg7-vp88/GHSA-g54v-mwg7-vp88.json @@ -7,12 +7,8 @@ "CVE-2005-0033" ], "details": "Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g564-fjp3-fqpr/GHSA-g564-fjp3-fqpr.json b/advisories/unreviewed/2022/05/GHSA-g564-fjp3-fqpr/GHSA-g564-fjp3-fqpr.json index 75b328ecf27..9364640df8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g564-fjp3-fqpr/GHSA-g564-fjp3-fqpr.json +++ b/advisories/unreviewed/2022/05/GHSA-g564-fjp3-fqpr/GHSA-g564-fjp3-fqpr.json @@ -7,12 +7,8 @@ "CVE-2005-1229" ], "details": "Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. (dot dot) in a cpio file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g6hg-gvcc-35fg/GHSA-g6hg-gvcc-35fg.json b/advisories/unreviewed/2022/05/GHSA-g6hg-gvcc-35fg/GHSA-g6hg-gvcc-35fg.json index 43856d0b41e..6c926f5c19b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g6hg-gvcc-35fg/GHSA-g6hg-gvcc-35fg.json +++ b/advisories/unreviewed/2022/05/GHSA-g6hg-gvcc-35fg/GHSA-g6hg-gvcc-35fg.json @@ -7,12 +7,8 @@ "CVE-2006-1937" ], "details": "Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) multiple vectors in H.248, and the (2) X.509if, (3) SRVLOC, (4) H.245, (5) AIM, and (6) general packet dissectors; and (7) the statistics counter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g6j2-gqmx-35g8/GHSA-g6j2-gqmx-35g8.json b/advisories/unreviewed/2022/05/GHSA-g6j2-gqmx-35g8/GHSA-g6j2-gqmx-35g8.json index aa366dd7e46..dfca202a344 100644 --- a/advisories/unreviewed/2022/05/GHSA-g6j2-gqmx-35g8/GHSA-g6j2-gqmx-35g8.json +++ b/advisories/unreviewed/2022/05/GHSA-g6j2-gqmx-35g8/GHSA-g6j2-gqmx-35g8.json @@ -7,12 +7,8 @@ "CVE-2006-4683" ], "details": "IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g7p7-r9qm-8vc3/GHSA-g7p7-r9qm-8vc3.json b/advisories/unreviewed/2022/05/GHSA-g7p7-r9qm-8vc3/GHSA-g7p7-r9qm-8vc3.json index 79fc6d01c08..160ef923115 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7p7-r9qm-8vc3/GHSA-g7p7-r9qm-8vc3.json +++ b/advisories/unreviewed/2022/05/GHSA-g7p7-r9qm-8vc3/GHSA-g7p7-r9qm-8vc3.json @@ -7,12 +7,8 @@ "CVE-2004-0171" ], "details": "FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g82v-vwh4-vpjc/GHSA-g82v-vwh4-vpjc.json b/advisories/unreviewed/2022/05/GHSA-g82v-vwh4-vpjc/GHSA-g82v-vwh4-vpjc.json index c22c5b17977..d81fde35010 100644 --- a/advisories/unreviewed/2022/05/GHSA-g82v-vwh4-vpjc/GHSA-g82v-vwh4-vpjc.json +++ b/advisories/unreviewed/2022/05/GHSA-g82v-vwh4-vpjc/GHSA-g82v-vwh4-vpjc.json @@ -7,12 +7,8 @@ "CVE-2003-0688" ], "details": "The DNS map code in Sendmail 8.12.8 and earlier, when using the \"enhdnsbl\" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g8fv-c9gr-q25c/GHSA-g8fv-c9gr-q25c.json b/advisories/unreviewed/2022/05/GHSA-g8fv-c9gr-q25c/GHSA-g8fv-c9gr-q25c.json index ad1beb0e624..7745284ed1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8fv-c9gr-q25c/GHSA-g8fv-c9gr-q25c.json +++ b/advisories/unreviewed/2022/05/GHSA-g8fv-c9gr-q25c/GHSA-g8fv-c9gr-q25c.json @@ -7,12 +7,8 @@ "CVE-2008-3856" ], "details": "The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g8vw-4vw6-856q/GHSA-g8vw-4vw6-856q.json b/advisories/unreviewed/2022/05/GHSA-g8vw-4vw6-856q/GHSA-g8vw-4vw6-856q.json index d3843cc0040..8fc418ce85f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8vw-4vw6-856q/GHSA-g8vw-4vw6-856q.json +++ b/advisories/unreviewed/2022/05/GHSA-g8vw-4vw6-856q/GHSA-g8vw-4vw6-856q.json @@ -7,12 +7,8 @@ "CVE-2006-1588" ], "details": "The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g92c-jq66-562r/GHSA-g92c-jq66-562r.json b/advisories/unreviewed/2022/05/GHSA-g92c-jq66-562r/GHSA-g92c-jq66-562r.json index bb39168bfbd..3a03aa92c55 100644 --- a/advisories/unreviewed/2022/05/GHSA-g92c-jq66-562r/GHSA-g92c-jq66-562r.json +++ b/advisories/unreviewed/2022/05/GHSA-g92c-jq66-562r/GHSA-g92c-jq66-562r.json @@ -7,12 +7,8 @@ "CVE-2005-2495" ], "details": "Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -164,9 +160,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g94p-2chx-w9v6/GHSA-g94p-2chx-w9v6.json b/advisories/unreviewed/2022/05/GHSA-g94p-2chx-w9v6/GHSA-g94p-2chx-w9v6.json index d1eddce02d0..a20c56f96bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-g94p-2chx-w9v6/GHSA-g94p-2chx-w9v6.json +++ b/advisories/unreviewed/2022/05/GHSA-g94p-2chx-w9v6/GHSA-g94p-2chx-w9v6.json @@ -7,12 +7,8 @@ "CVE-2004-1483" ], "details": "Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g998-qjcg-g7jh/GHSA-g998-qjcg-g7jh.json b/advisories/unreviewed/2022/05/GHSA-g998-qjcg-g7jh/GHSA-g998-qjcg-g7jh.json index c6813c4d12c..b1c55be38bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-g998-qjcg-g7jh/GHSA-g998-qjcg-g7jh.json +++ b/advisories/unreviewed/2022/05/GHSA-g998-qjcg-g7jh/GHSA-g998-qjcg-g7jh.json @@ -7,12 +7,8 @@ "CVE-2006-1056" ], "details": "The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -216,9 +212,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g9fw-v33p-xrq5/GHSA-g9fw-v33p-xrq5.json b/advisories/unreviewed/2022/05/GHSA-g9fw-v33p-xrq5/GHSA-g9fw-v33p-xrq5.json index c8b9fa863a3..322c7ccbe3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9fw-v33p-xrq5/GHSA-g9fw-v33p-xrq5.json +++ b/advisories/unreviewed/2022/05/GHSA-g9fw-v33p-xrq5/GHSA-g9fw-v33p-xrq5.json @@ -7,12 +7,8 @@ "CVE-2005-2703" ], "details": "Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g9wm-8j5w-m9xc/GHSA-g9wm-8j5w-m9xc.json b/advisories/unreviewed/2022/05/GHSA-g9wm-8j5w-m9xc/GHSA-g9wm-8j5w-m9xc.json index a6aafdb7e57..bee90f74b0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9wm-8j5w-m9xc/GHSA-g9wm-8j5w-m9xc.json +++ b/advisories/unreviewed/2022/05/GHSA-g9wm-8j5w-m9xc/GHSA-g9wm-8j5w-m9xc.json @@ -7,12 +7,8 @@ "CVE-2005-0449" ], "details": "The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gc4q-mf7x-jrrp/GHSA-gc4q-mf7x-jrrp.json b/advisories/unreviewed/2022/05/GHSA-gc4q-mf7x-jrrp/GHSA-gc4q-mf7x-jrrp.json index d67e3f3e5e4..352e2800e2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gc4q-mf7x-jrrp/GHSA-gc4q-mf7x-jrrp.json +++ b/advisories/unreviewed/2022/05/GHSA-gc4q-mf7x-jrrp/GHSA-gc4q-mf7x-jrrp.json @@ -7,12 +7,8 @@ "CVE-2005-0758" ], "details": "zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gcgf-6qp7-hmmv/GHSA-gcgf-6qp7-hmmv.json b/advisories/unreviewed/2022/05/GHSA-gcgf-6qp7-hmmv/GHSA-gcgf-6qp7-hmmv.json index 7ab880c0d80..2c3388c0009 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcgf-6qp7-hmmv/GHSA-gcgf-6qp7-hmmv.json +++ b/advisories/unreviewed/2022/05/GHSA-gcgf-6qp7-hmmv/GHSA-gcgf-6qp7-hmmv.json @@ -7,12 +7,8 @@ "CVE-2007-0956" ], "details": "The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcqf-gvjg-mhm8/GHSA-gcqf-gvjg-mhm8.json b/advisories/unreviewed/2022/05/GHSA-gcqf-gvjg-mhm8/GHSA-gcqf-gvjg-mhm8.json index 7b619ddcfbc..56b096b528c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcqf-gvjg-mhm8/GHSA-gcqf-gvjg-mhm8.json +++ b/advisories/unreviewed/2022/05/GHSA-gcqf-gvjg-mhm8/GHSA-gcqf-gvjg-mhm8.json @@ -7,12 +7,8 @@ "CVE-2006-2024" ], "details": "Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain \"codec cleanup methods\" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -128,9 +124,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gf24-q725-m5hh/GHSA-gf24-q725-m5hh.json b/advisories/unreviewed/2022/05/GHSA-gf24-q725-m5hh/GHSA-gf24-q725-m5hh.json index 4f679195e1c..cced60206b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf24-q725-m5hh/GHSA-gf24-q725-m5hh.json +++ b/advisories/unreviewed/2022/05/GHSA-gf24-q725-m5hh/GHSA-gf24-q725-m5hh.json @@ -7,12 +7,8 @@ "CVE-2006-3804" ], "details": "Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -188,9 +184,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gf47-4488-9gh6/GHSA-gf47-4488-9gh6.json b/advisories/unreviewed/2022/05/GHSA-gf47-4488-9gh6/GHSA-gf47-4488-9gh6.json index 43b79ab74a7..4a1af943209 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf47-4488-9gh6/GHSA-gf47-4488-9gh6.json +++ b/advisories/unreviewed/2022/05/GHSA-gf47-4488-9gh6/GHSA-gf47-4488-9gh6.json @@ -7,12 +7,8 @@ "CVE-2005-4268" ], "details": "Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggvw-qxcq-2xgj/GHSA-ggvw-qxcq-2xgj.json b/advisories/unreviewed/2022/05/GHSA-ggvw-qxcq-2xgj/GHSA-ggvw-qxcq-2xgj.json index 6403f980fc4..7abed2d54f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggvw-qxcq-2xgj/GHSA-ggvw-qxcq-2xgj.json +++ b/advisories/unreviewed/2022/05/GHSA-ggvw-qxcq-2xgj/GHSA-ggvw-qxcq-2xgj.json @@ -7,12 +7,8 @@ "CVE-2006-2313" ], "details": "PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of \"Encoding-Based SQL Injection.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ggxp-7ch8-7mfp/GHSA-ggxp-7ch8-7mfp.json b/advisories/unreviewed/2022/05/GHSA-ggxp-7ch8-7mfp/GHSA-ggxp-7ch8-7mfp.json index a94ef85fe10..319a7e630f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggxp-7ch8-7mfp/GHSA-ggxp-7ch8-7mfp.json +++ b/advisories/unreviewed/2022/05/GHSA-ggxp-7ch8-7mfp/GHSA-ggxp-7ch8-7mfp.json @@ -7,12 +7,8 @@ "CVE-2006-3738" ], "details": "Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gjxh-r9hc-8vp9/GHSA-gjxh-r9hc-8vp9.json b/advisories/unreviewed/2022/05/GHSA-gjxh-r9hc-8vp9/GHSA-gjxh-r9hc-8vp9.json index 580be909832..9f8bc48c476 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjxh-r9hc-8vp9/GHSA-gjxh-r9hc-8vp9.json +++ b/advisories/unreviewed/2022/05/GHSA-gjxh-r9hc-8vp9/GHSA-gjxh-r9hc-8vp9.json @@ -7,12 +7,8 @@ "CVE-2005-2019" ], "details": "ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent lookups, allowing remote attackers to bypass intended access restrictions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjxm-326v-65c3/GHSA-gjxm-326v-65c3.json b/advisories/unreviewed/2022/05/GHSA-gjxm-326v-65c3/GHSA-gjxm-326v-65c3.json index a3406c0df26..96a7a9d56b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjxm-326v-65c3/GHSA-gjxm-326v-65c3.json +++ b/advisories/unreviewed/2022/05/GHSA-gjxm-326v-65c3/GHSA-gjxm-326v-65c3.json @@ -7,12 +7,8 @@ "CVE-2006-3811" ], "details": "Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) \"anonymous box selectors outside of UA stylesheets,\" (5) stale references to \"removed nodes,\" and (6) running the crypto.generateCRMFRequest callback on deleted context.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -276,9 +272,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gmh3-2x3j-5mm2/GHSA-gmh3-2x3j-5mm2.json b/advisories/unreviewed/2022/05/GHSA-gmh3-2x3j-5mm2/GHSA-gmh3-2x3j-5mm2.json index fd5f3a2e013..92cecf13df6 100644 --- a/advisories/unreviewed/2022/05/GHSA-gmh3-2x3j-5mm2/GHSA-gmh3-2x3j-5mm2.json +++ b/advisories/unreviewed/2022/05/GHSA-gmh3-2x3j-5mm2/GHSA-gmh3-2x3j-5mm2.json @@ -7,12 +7,8 @@ "CVE-2004-0523" ], "details": "Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gqcx-7w82-wcv3/GHSA-gqcx-7w82-wcv3.json b/advisories/unreviewed/2022/05/GHSA-gqcx-7w82-wcv3/GHSA-gqcx-7w82-wcv3.json index fa2766ad911..559bca5e72d 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqcx-7w82-wcv3/GHSA-gqcx-7w82-wcv3.json +++ b/advisories/unreviewed/2022/05/GHSA-gqcx-7w82-wcv3/GHSA-gqcx-7w82-wcv3.json @@ -7,12 +7,8 @@ "CVE-2003-0914" ], "details": "ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gqwr-p67x-5fff/GHSA-gqwr-p67x-5fff.json b/advisories/unreviewed/2022/05/GHSA-gqwr-p67x-5fff/GHSA-gqwr-p67x-5fff.json index d65e7973343..1493a8bd1f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqwr-p67x-5fff/GHSA-gqwr-p67x-5fff.json +++ b/advisories/unreviewed/2022/05/GHSA-gqwr-p67x-5fff/GHSA-gqwr-p67x-5fff.json @@ -7,12 +7,8 @@ "CVE-2006-0082" ], "details": "Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-grrp-mxgq-v9mw/GHSA-grrp-mxgq-v9mw.json b/advisories/unreviewed/2022/05/GHSA-grrp-mxgq-v9mw/GHSA-grrp-mxgq-v9mw.json index 05570c1496d..fbf4f4b2f0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-grrp-mxgq-v9mw/GHSA-grrp-mxgq-v9mw.json +++ b/advisories/unreviewed/2022/05/GHSA-grrp-mxgq-v9mw/GHSA-grrp-mxgq-v9mw.json @@ -7,12 +7,8 @@ "CVE-2002-1889" ], "details": "Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a denial of service (crash) via a malformed log entry.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gv25-rf7q-whjp/GHSA-gv25-rf7q-whjp.json b/advisories/unreviewed/2022/05/GHSA-gv25-rf7q-whjp/GHSA-gv25-rf7q-whjp.json index f5a14553b63..5f0e515d339 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv25-rf7q-whjp/GHSA-gv25-rf7q-whjp.json +++ b/advisories/unreviewed/2022/05/GHSA-gv25-rf7q-whjp/GHSA-gv25-rf7q-whjp.json @@ -7,12 +7,8 @@ "CVE-2004-0504" ], "details": "Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gw49-f4qm-3gcc/GHSA-gw49-f4qm-3gcc.json b/advisories/unreviewed/2022/05/GHSA-gw49-f4qm-3gcc/GHSA-gw49-f4qm-3gcc.json index b058e6a7a19..1d4a782973a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gw49-f4qm-3gcc/GHSA-gw49-f4qm-3gcc.json +++ b/advisories/unreviewed/2022/05/GHSA-gw49-f4qm-3gcc/GHSA-gw49-f4qm-3gcc.json @@ -7,12 +7,8 @@ "CVE-2004-0806" ], "details": "cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gxxr-jv9h-5q3v/GHSA-gxxr-jv9h-5q3v.json b/advisories/unreviewed/2022/05/GHSA-gxxr-jv9h-5q3v/GHSA-gxxr-jv9h-5q3v.json index d6632bf6964..0f86a538026 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxxr-jv9h-5q3v/GHSA-gxxr-jv9h-5q3v.json +++ b/advisories/unreviewed/2022/05/GHSA-gxxr-jv9h-5q3v/GHSA-gxxr-jv9h-5q3v.json @@ -7,12 +7,8 @@ "CVE-2006-1358" ], "details": "Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h263-cqx8-8926/GHSA-h263-cqx8-8926.json b/advisories/unreviewed/2022/05/GHSA-h263-cqx8-8926/GHSA-h263-cqx8-8926.json index 53fe34d7539..cc841d0d325 100644 --- a/advisories/unreviewed/2022/05/GHSA-h263-cqx8-8926/GHSA-h263-cqx8-8926.json +++ b/advisories/unreviewed/2022/05/GHSA-h263-cqx8-8926/GHSA-h263-cqx8-8926.json @@ -7,12 +7,8 @@ "CVE-2005-0013" ], "details": "nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h34j-mjqw-m9pj/GHSA-h34j-mjqw-m9pj.json b/advisories/unreviewed/2022/05/GHSA-h34j-mjqw-m9pj/GHSA-h34j-mjqw-m9pj.json index d120d60abd4..7c2e212468b 100644 --- a/advisories/unreviewed/2022/05/GHSA-h34j-mjqw-m9pj/GHSA-h34j-mjqw-m9pj.json +++ b/advisories/unreviewed/2022/05/GHSA-h34j-mjqw-m9pj/GHSA-h34j-mjqw-m9pj.json @@ -7,12 +7,8 @@ "CVE-2006-5002" ], "details": "Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 (invscoutClient_VPD_Survey) allows attackers to overwrite arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h375-h7pm-622c/GHSA-h375-h7pm-622c.json b/advisories/unreviewed/2022/05/GHSA-h375-h7pm-622c/GHSA-h375-h7pm-622c.json index b141d85846c..abfc3299006 100644 --- a/advisories/unreviewed/2022/05/GHSA-h375-h7pm-622c/GHSA-h375-h7pm-622c.json +++ b/advisories/unreviewed/2022/05/GHSA-h375-h7pm-622c/GHSA-h375-h7pm-622c.json @@ -7,12 +7,8 @@ "CVE-2005-0064" ], "details": "Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h388-h6q7-p8q8/GHSA-h388-h6q7-p8q8.json b/advisories/unreviewed/2022/05/GHSA-h388-h6q7-p8q8/GHSA-h388-h6q7-p8q8.json index 0a35c670965..0a356bc1382 100644 --- a/advisories/unreviewed/2022/05/GHSA-h388-h6q7-p8q8/GHSA-h388-h6q7-p8q8.json +++ b/advisories/unreviewed/2022/05/GHSA-h388-h6q7-p8q8/GHSA-h388-h6q7-p8q8.json @@ -7,12 +7,8 @@ "CVE-2009-2859" ], "details": "IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h4fc-76p7-v47h/GHSA-h4fc-76p7-v47h.json b/advisories/unreviewed/2022/05/GHSA-h4fc-76p7-v47h/GHSA-h4fc-76p7-v47h.json index d6035d6338c..2bb118f32a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4fc-76p7-v47h/GHSA-h4fc-76p7-v47h.json +++ b/advisories/unreviewed/2022/05/GHSA-h4fc-76p7-v47h/GHSA-h4fc-76p7-v47h.json @@ -7,12 +7,8 @@ "CVE-2003-1294" ], "details": "Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h5fp-g22r-hvpc/GHSA-h5fp-g22r-hvpc.json b/advisories/unreviewed/2022/05/GHSA-h5fp-g22r-hvpc/GHSA-h5fp-g22r-hvpc.json index 01b0c1bedac..dea48bae177 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5fp-g22r-hvpc/GHSA-h5fp-g22r-hvpc.json +++ b/advisories/unreviewed/2022/05/GHSA-h5fp-g22r-hvpc/GHSA-h5fp-g22r-hvpc.json @@ -7,12 +7,8 @@ "CVE-2006-0380" ], "details": "A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h7q2-25j6-m5ww/GHSA-h7q2-25j6-m5ww.json b/advisories/unreviewed/2022/05/GHSA-h7q2-25j6-m5ww/GHSA-h7q2-25j6-m5ww.json index 46b598071c5..d68700a4952 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7q2-25j6-m5ww/GHSA-h7q2-25j6-m5ww.json +++ b/advisories/unreviewed/2022/05/GHSA-h7q2-25j6-m5ww/GHSA-h7q2-25j6-m5ww.json @@ -7,12 +7,8 @@ "CVE-2002-0356" ], "details": "Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h7wj-q4wv-chfq/GHSA-h7wj-q4wv-chfq.json b/advisories/unreviewed/2022/05/GHSA-h7wj-q4wv-chfq/GHSA-h7wj-q4wv-chfq.json index a6e0c3356a6..021d07c008f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7wj-q4wv-chfq/GHSA-h7wj-q4wv-chfq.json +++ b/advisories/unreviewed/2022/05/GHSA-h7wj-q4wv-chfq/GHSA-h7wj-q4wv-chfq.json @@ -7,12 +7,8 @@ "CVE-2005-2969" ], "details": "The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -312,9 +308,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h89c-f8ff-gv7w/GHSA-h89c-f8ff-gv7w.json b/advisories/unreviewed/2022/05/GHSA-h89c-f8ff-gv7w/GHSA-h89c-f8ff-gv7w.json index 3fec1f4f1a3..63dcdbacc23 100644 --- a/advisories/unreviewed/2022/05/GHSA-h89c-f8ff-gv7w/GHSA-h89c-f8ff-gv7w.json +++ b/advisories/unreviewed/2022/05/GHSA-h89c-f8ff-gv7w/GHSA-h89c-f8ff-gv7w.json @@ -7,12 +7,8 @@ "CVE-2006-3082" ], "details": "parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -148,9 +144,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h8w2-9pxp-qpcc/GHSA-h8w2-9pxp-qpcc.json b/advisories/unreviewed/2022/05/GHSA-h8w2-9pxp-qpcc/GHSA-h8w2-9pxp-qpcc.json index 0fc1c076888..c49f57fc85b 100644 --- a/advisories/unreviewed/2022/05/GHSA-h8w2-9pxp-qpcc/GHSA-h8w2-9pxp-qpcc.json +++ b/advisories/unreviewed/2022/05/GHSA-h8w2-9pxp-qpcc/GHSA-h8w2-9pxp-qpcc.json @@ -7,12 +7,8 @@ "CVE-2006-1790" ], "details": "A regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the InstallTrigger.install method, which leads to memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -208,9 +204,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9j2-347v-3v58/GHSA-h9j2-347v-3v58.json b/advisories/unreviewed/2022/05/GHSA-h9j2-347v-3v58/GHSA-h9j2-347v-3v58.json index b45d2742b96..c6e236c835f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9j2-347v-3v58/GHSA-h9j2-347v-3v58.json +++ b/advisories/unreviewed/2022/05/GHSA-h9j2-347v-3v58/GHSA-h9j2-347v-3v58.json @@ -7,12 +7,8 @@ "CVE-2005-2491" ], "details": "Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -280,9 +276,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9qp-9p74-vrxm/GHSA-h9qp-9p74-vrxm.json b/advisories/unreviewed/2022/05/GHSA-h9qp-9p74-vrxm/GHSA-h9qp-9p74-vrxm.json index a6da5d66452..794b9c141ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9qp-9p74-vrxm/GHSA-h9qp-9p74-vrxm.json +++ b/advisories/unreviewed/2022/05/GHSA-h9qp-9p74-vrxm/GHSA-h9qp-9p74-vrxm.json @@ -7,12 +7,8 @@ "CVE-2006-2842" ], "details": "** DISPUTED ** PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled. Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE. However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9v7-73gj-prww/GHSA-h9v7-73gj-prww.json b/advisories/unreviewed/2022/05/GHSA-h9v7-73gj-prww/GHSA-h9v7-73gj-prww.json index 9e1b3678058..7350a919c8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9v7-73gj-prww/GHSA-h9v7-73gj-prww.json +++ b/advisories/unreviewed/2022/05/GHSA-h9v7-73gj-prww/GHSA-h9v7-73gj-prww.json @@ -7,12 +7,8 @@ "CVE-2006-0996" ], "details": "Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h9v8-cj85-fcwj/GHSA-h9v8-cj85-fcwj.json b/advisories/unreviewed/2022/05/GHSA-h9v8-cj85-fcwj/GHSA-h9v8-cj85-fcwj.json index 1979a5fae08..fd61660f6ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9v8-cj85-fcwj/GHSA-h9v8-cj85-fcwj.json +++ b/advisories/unreviewed/2022/05/GHSA-h9v8-cj85-fcwj/GHSA-h9v8-cj85-fcwj.json @@ -7,12 +7,8 @@ "CVE-2004-0698" ], "details": "4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hcmv-4364-jhrx/GHSA-hcmv-4364-jhrx.json b/advisories/unreviewed/2022/05/GHSA-hcmv-4364-jhrx/GHSA-hcmv-4364-jhrx.json index e93387d4a83..8d2a802510a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcmv-4364-jhrx/GHSA-hcmv-4364-jhrx.json +++ b/advisories/unreviewed/2022/05/GHSA-hcmv-4364-jhrx/GHSA-hcmv-4364-jhrx.json @@ -7,12 +7,8 @@ "CVE-2003-0937" ], "details": "SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the \"as\" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hcpr-x372-mrhj/GHSA-hcpr-x372-mrhj.json b/advisories/unreviewed/2022/05/GHSA-hcpr-x372-mrhj/GHSA-hcpr-x372-mrhj.json index cffdb87b425..49e98d2b849 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcpr-x372-mrhj/GHSA-hcpr-x372-mrhj.json +++ b/advisories/unreviewed/2022/05/GHSA-hcpr-x372-mrhj/GHSA-hcpr-x372-mrhj.json @@ -7,12 +7,8 @@ "CVE-2006-4257" ], "details": "IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending crafted SQLJRA packet, which results in a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hffw-p4ph-5fmr/GHSA-hffw-p4ph-5fmr.json b/advisories/unreviewed/2022/05/GHSA-hffw-p4ph-5fmr/GHSA-hffw-p4ph-5fmr.json index 592d59be408..745a712110f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hffw-p4ph-5fmr/GHSA-hffw-p4ph-5fmr.json +++ b/advisories/unreviewed/2022/05/GHSA-hffw-p4ph-5fmr/GHSA-hffw-p4ph-5fmr.json @@ -7,12 +7,8 @@ "CVE-2003-0834" ], "details": "Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hgwp-f5r4-hvm6/GHSA-hgwp-f5r4-hvm6.json b/advisories/unreviewed/2022/05/GHSA-hgwp-f5r4-hvm6/GHSA-hgwp-f5r4-hvm6.json index 6d55821a8b4..5c7ef866716 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgwp-f5r4-hvm6/GHSA-hgwp-f5r4-hvm6.json +++ b/advisories/unreviewed/2022/05/GHSA-hgwp-f5r4-hvm6/GHSA-hgwp-f5r4-hvm6.json @@ -7,12 +7,8 @@ "CVE-2009-1552" ], "details": "Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause a denial of service (system panic) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hh57-6r48-4q3g/GHSA-hh57-6r48-4q3g.json b/advisories/unreviewed/2022/05/GHSA-hh57-6r48-4q3g/GHSA-hh57-6r48-4q3g.json index ba835fe959c..be5e9ccba1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hh57-6r48-4q3g/GHSA-hh57-6r48-4q3g.json +++ b/advisories/unreviewed/2022/05/GHSA-hh57-6r48-4q3g/GHSA-hh57-6r48-4q3g.json @@ -7,12 +7,8 @@ "CVE-2004-2012" ], "details": "The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hhhq-8f65-6q7x/GHSA-hhhq-8f65-6q7x.json b/advisories/unreviewed/2022/05/GHSA-hhhq-8f65-6q7x/GHSA-hhhq-8f65-6q7x.json index e503204b6ba..ffb93e96335 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhhq-8f65-6q7x/GHSA-hhhq-8f65-6q7x.json +++ b/advisories/unreviewed/2022/05/GHSA-hhhq-8f65-6q7x/GHSA-hhhq-8f65-6q7x.json @@ -7,12 +7,8 @@ "CVE-2006-0748" ], "details": "Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via \"an invalid and non-sensical ordering of table-related tags\" that results in a negative array index.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -220,9 +216,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hj7w-qcxj-wjmx/GHSA-hj7w-qcxj-wjmx.json b/advisories/unreviewed/2022/05/GHSA-hj7w-qcxj-wjmx/GHSA-hj7w-qcxj-wjmx.json index 4f758fd4f09..9a4084f3a23 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj7w-qcxj-wjmx/GHSA-hj7w-qcxj-wjmx.json +++ b/advisories/unreviewed/2022/05/GHSA-hj7w-qcxj-wjmx/GHSA-hj7w-qcxj-wjmx.json @@ -7,12 +7,8 @@ "CVE-2015-2726" ], "details": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hm24-rgjh-p3xc/GHSA-hm24-rgjh-p3xc.json b/advisories/unreviewed/2022/05/GHSA-hm24-rgjh-p3xc/GHSA-hm24-rgjh-p3xc.json index 4d97ce84b10..8cb4944e882 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm24-rgjh-p3xc/GHSA-hm24-rgjh-p3xc.json +++ b/advisories/unreviewed/2022/05/GHSA-hm24-rgjh-p3xc/GHSA-hm24-rgjh-p3xc.json @@ -7,12 +7,8 @@ "CVE-2006-1736" ], "details": "Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the \"Save image as...\" option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -148,9 +144,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hm72-qxg7-34pg/GHSA-hm72-qxg7-34pg.json b/advisories/unreviewed/2022/05/GHSA-hm72-qxg7-34pg/GHSA-hm72-qxg7-34pg.json index c614ee43b83..27717801b81 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm72-qxg7-34pg/GHSA-hm72-qxg7-34pg.json +++ b/advisories/unreviewed/2022/05/GHSA-hm72-qxg7-34pg/GHSA-hm72-qxg7-34pg.json @@ -7,12 +7,8 @@ "CVE-2003-0101" ], "details": "miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hmxm-5947-qv2q/GHSA-hmxm-5947-qv2q.json b/advisories/unreviewed/2022/05/GHSA-hmxm-5947-qv2q/GHSA-hmxm-5947-qv2q.json index 2adf4f9be21..7a042e635ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmxm-5947-qv2q/GHSA-hmxm-5947-qv2q.json +++ b/advisories/unreviewed/2022/05/GHSA-hmxm-5947-qv2q/GHSA-hmxm-5947-qv2q.json @@ -7,12 +7,8 @@ "CVE-2004-0178" ], "details": "The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service (crash) via a sample with an odd number of bytes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hpfw-83fw-cc3h/GHSA-hpfw-83fw-cc3h.json b/advisories/unreviewed/2022/05/GHSA-hpfw-83fw-cc3h/GHSA-hpfw-83fw-cc3h.json index 67182fc270b..2a11de1f80d 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpfw-83fw-cc3h/GHSA-hpfw-83fw-cc3h.json +++ b/advisories/unreviewed/2022/05/GHSA-hpfw-83fw-cc3h/GHSA-hpfw-83fw-cc3h.json @@ -7,12 +7,8 @@ "CVE-2004-0696" ], "details": "The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a \"*\" (asterisk) character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hqjp-f7rc-2758/GHSA-hqjp-f7rc-2758.json b/advisories/unreviewed/2022/05/GHSA-hqjp-f7rc-2758/GHSA-hqjp-f7rc-2758.json index 426ab93a965..fba077c0e0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqjp-f7rc-2758/GHSA-hqjp-f7rc-2758.json +++ b/advisories/unreviewed/2022/05/GHSA-hqjp-f7rc-2758/GHSA-hqjp-f7rc-2758.json @@ -7,12 +7,8 @@ "CVE-2002-0358" ], "details": "MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hr44-4p4m-vp56/GHSA-hr44-4p4m-vp56.json b/advisories/unreviewed/2022/05/GHSA-hr44-4p4m-vp56/GHSA-hr44-4p4m-vp56.json index 808ba7be1f1..cdc564707cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr44-4p4m-vp56/GHSA-hr44-4p4m-vp56.json +++ b/advisories/unreviewed/2022/05/GHSA-hr44-4p4m-vp56/GHSA-hr44-4p4m-vp56.json @@ -7,12 +7,8 @@ "CVE-2005-0134" ], "details": "The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hr4v-37pq-7rhh/GHSA-hr4v-37pq-7rhh.json b/advisories/unreviewed/2022/05/GHSA-hr4v-37pq-7rhh/GHSA-hr4v-37pq-7rhh.json index f7902dfa178..6202dd5f9e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr4v-37pq-7rhh/GHSA-hr4v-37pq-7rhh.json +++ b/advisories/unreviewed/2022/05/GHSA-hr4v-37pq-7rhh/GHSA-hr4v-37pq-7rhh.json @@ -7,12 +7,8 @@ "CVE-2003-0778" ], "details": "saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hrfv-96mm-hg9w/GHSA-hrfv-96mm-hg9w.json b/advisories/unreviewed/2022/05/GHSA-hrfv-96mm-hg9w/GHSA-hrfv-96mm-hg9w.json index 9129372c599..f1d068d617b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrfv-96mm-hg9w/GHSA-hrfv-96mm-hg9w.json +++ b/advisories/unreviewed/2022/05/GHSA-hrfv-96mm-hg9w/GHSA-hrfv-96mm-hg9w.json @@ -7,12 +7,8 @@ "CVE-2004-0093" ], "details": "XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hrqw-pgfh-35p4/GHSA-hrqw-pgfh-35p4.json b/advisories/unreviewed/2022/05/GHSA-hrqw-pgfh-35p4/GHSA-hrqw-pgfh-35p4.json index 7fa48fbe8d0..b3c33b239a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrqw-pgfh-35p4/GHSA-hrqw-pgfh-35p4.json +++ b/advisories/unreviewed/2022/05/GHSA-hrqw-pgfh-35p4/GHSA-hrqw-pgfh-35p4.json @@ -7,12 +7,8 @@ "CVE-2006-3619" ], "details": "Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with \"../\" sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -128,9 +124,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hrr2-5hxg-8fpx/GHSA-hrr2-5hxg-8fpx.json b/advisories/unreviewed/2022/05/GHSA-hrr2-5hxg-8fpx/GHSA-hrr2-5hxg-8fpx.json index 8faa6f30562..f880184dd7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrr2-5hxg-8fpx/GHSA-hrr2-5hxg-8fpx.json +++ b/advisories/unreviewed/2022/05/GHSA-hrr2-5hxg-8fpx/GHSA-hrr2-5hxg-8fpx.json @@ -7,12 +7,8 @@ "CVE-2003-0431" ], "details": "The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hvf9-84xc-mq2x/GHSA-hvf9-84xc-mq2x.json b/advisories/unreviewed/2022/05/GHSA-hvf9-84xc-mq2x/GHSA-hvf9-84xc-mq2x.json index 5aee0e69feb..2f4437bed6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvf9-84xc-mq2x/GHSA-hvf9-84xc-mq2x.json +++ b/advisories/unreviewed/2022/05/GHSA-hvf9-84xc-mq2x/GHSA-hvf9-84xc-mq2x.json @@ -7,12 +7,8 @@ "CVE-2004-0435" ], "details": "Certain \"programming errors\" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hvrc-56qp-9hgv/GHSA-hvrc-56qp-9hgv.json b/advisories/unreviewed/2022/05/GHSA-hvrc-56qp-9hgv/GHSA-hvrc-56qp-9hgv.json index d7fb3bc9c5e..84c0b56d68f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvrc-56qp-9hgv/GHSA-hvrc-56qp-9hgv.json +++ b/advisories/unreviewed/2022/05/GHSA-hvrc-56qp-9hgv/GHSA-hvrc-56qp-9hgv.json @@ -7,12 +7,8 @@ "CVE-2003-0328" ], "details": "EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hwmm-gww6-748j/GHSA-hwmm-gww6-748j.json b/advisories/unreviewed/2022/05/GHSA-hwmm-gww6-748j/GHSA-hwmm-gww6-748j.json index bcc2c2e6360..1281b53d088 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwmm-gww6-748j/GHSA-hwmm-gww6-748j.json +++ b/advisories/unreviewed/2022/05/GHSA-hwmm-gww6-748j/GHSA-hwmm-gww6-748j.json @@ -7,12 +7,8 @@ "CVE-2005-0754" ], "details": "Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hx28-58mx-whmj/GHSA-hx28-58mx-whmj.json b/advisories/unreviewed/2022/05/GHSA-hx28-58mx-whmj/GHSA-hx28-58mx-whmj.json index b40fe39da07..26fc86b4a21 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx28-58mx-whmj/GHSA-hx28-58mx-whmj.json +++ b/advisories/unreviewed/2022/05/GHSA-hx28-58mx-whmj/GHSA-hx28-58mx-whmj.json @@ -7,12 +7,8 @@ "CVE-2006-4019" ], "details": "Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hx6g-x7hw-prxh/GHSA-hx6g-x7hw-prxh.json b/advisories/unreviewed/2022/05/GHSA-hx6g-x7hw-prxh/GHSA-hx6g-x7hw-prxh.json index 88eb5f1310c..28f00de5aaf 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx6g-x7hw-prxh/GHSA-hx6g-x7hw-prxh.json +++ b/advisories/unreviewed/2022/05/GHSA-hx6g-x7hw-prxh/GHSA-hx6g-x7hw-prxh.json @@ -7,12 +7,8 @@ "CVE-2006-0742" ], "details": "The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the \"noreturn\" attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j29p-hg69-484g/GHSA-j29p-hg69-484g.json b/advisories/unreviewed/2022/05/GHSA-j29p-hg69-484g/GHSA-j29p-hg69-484g.json index 0aa71f817be..7102af28cd3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j29p-hg69-484g/GHSA-j29p-hg69-484g.json +++ b/advisories/unreviewed/2022/05/GHSA-j29p-hg69-484g/GHSA-j29p-hg69-484g.json @@ -7,12 +7,8 @@ "CVE-2006-4337" ], "details": "Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -236,9 +232,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j2g3-92wj-m9vf/GHSA-j2g3-92wj-m9vf.json b/advisories/unreviewed/2022/05/GHSA-j2g3-92wj-m9vf/GHSA-j2g3-92wj-m9vf.json index 16fb195c9f6..8d8b6fcfb90 100644 --- a/advisories/unreviewed/2022/05/GHSA-j2g3-92wj-m9vf/GHSA-j2g3-92wj-m9vf.json +++ b/advisories/unreviewed/2022/05/GHSA-j2g3-92wj-m9vf/GHSA-j2g3-92wj-m9vf.json @@ -7,12 +7,8 @@ "CVE-2002-2092" ], "details": "Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j3wp-2v29-wh98/GHSA-j3wp-2v29-wh98.json b/advisories/unreviewed/2022/05/GHSA-j3wp-2v29-wh98/GHSA-j3wp-2v29-wh98.json index af19802f8e4..2ed1ff2cbee 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3wp-2v29-wh98/GHSA-j3wp-2v29-wh98.json +++ b/advisories/unreviewed/2022/05/GHSA-j3wp-2v29-wh98/GHSA-j3wp-2v29-wh98.json @@ -7,12 +7,8 @@ "CVE-2006-1936" ], "details": "Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code via the telnet dissector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j55c-jm95-hcr6/GHSA-j55c-jm95-hcr6.json b/advisories/unreviewed/2022/05/GHSA-j55c-jm95-hcr6/GHSA-j55c-jm95-hcr6.json index 3f6afc0ba02..2ec7cd802ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-j55c-jm95-hcr6/GHSA-j55c-jm95-hcr6.json +++ b/advisories/unreviewed/2022/05/GHSA-j55c-jm95-hcr6/GHSA-j55c-jm95-hcr6.json @@ -7,12 +7,8 @@ "CVE-2003-0576" ], "details": "Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service (kernel panic) via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j59m-2737-jgm8/GHSA-j59m-2737-jgm8.json b/advisories/unreviewed/2022/05/GHSA-j59m-2737-jgm8/GHSA-j59m-2737-jgm8.json index 7f8392f9c52..318eb2677fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-j59m-2737-jgm8/GHSA-j59m-2737-jgm8.json +++ b/advisories/unreviewed/2022/05/GHSA-j59m-2737-jgm8/GHSA-j59m-2737-jgm8.json @@ -7,12 +7,8 @@ "CVE-2004-0506" ], "details": "The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j65f-95c3-p4r8/GHSA-j65f-95c3-p4r8.json b/advisories/unreviewed/2022/05/GHSA-j65f-95c3-p4r8/GHSA-j65f-95c3-p4r8.json index 6ad2c38eaeb..b13c25a25d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-j65f-95c3-p4r8/GHSA-j65f-95c3-p4r8.json +++ b/advisories/unreviewed/2022/05/GHSA-j65f-95c3-p4r8/GHSA-j65f-95c3-p4r8.json @@ -7,12 +7,8 @@ "CVE-2003-0564" ], "details": "Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j662-g76p-xchg/GHSA-j662-g76p-xchg.json b/advisories/unreviewed/2022/05/GHSA-j662-g76p-xchg/GHSA-j662-g76p-xchg.json index 4a43f8c122e..b9c37a39fef 100644 --- a/advisories/unreviewed/2022/05/GHSA-j662-g76p-xchg/GHSA-j662-g76p-xchg.json +++ b/advisories/unreviewed/2022/05/GHSA-j662-g76p-xchg/GHSA-j662-g76p-xchg.json @@ -7,12 +7,8 @@ "CVE-2006-3632" ], "details": "Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j74p-5vhc-j95m/GHSA-j74p-5vhc-j95m.json b/advisories/unreviewed/2022/05/GHSA-j74p-5vhc-j95m/GHSA-j74p-5vhc-j95m.json index e3be4e7ebf3..3f78b085ff2 100644 --- a/advisories/unreviewed/2022/05/GHSA-j74p-5vhc-j95m/GHSA-j74p-5vhc-j95m.json +++ b/advisories/unreviewed/2022/05/GHSA-j74p-5vhc-j95m/GHSA-j74p-5vhc-j95m.json @@ -7,12 +7,8 @@ "CVE-2006-1939" ], "details": "Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) an invalid display filter, or the (2) GSM SMS, (3) ASN.1-based, (4) DCERPC NT, (5) PER, (6) RPC, (7) DCERPC, and (8) ASN.1 dissectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j85x-jfqv-fm5r/GHSA-j85x-jfqv-fm5r.json b/advisories/unreviewed/2022/05/GHSA-j85x-jfqv-fm5r/GHSA-j85x-jfqv-fm5r.json index 830c25fa50f..91ef0b12beb 100644 --- a/advisories/unreviewed/2022/05/GHSA-j85x-jfqv-fm5r/GHSA-j85x-jfqv-fm5r.json +++ b/advisories/unreviewed/2022/05/GHSA-j85x-jfqv-fm5r/GHSA-j85x-jfqv-fm5r.json @@ -7,12 +7,8 @@ "CVE-2004-0415" ], "details": "Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j8jf-5q4f-2r9c/GHSA-j8jf-5q4f-2r9c.json b/advisories/unreviewed/2022/05/GHSA-j8jf-5q4f-2r9c/GHSA-j8jf-5q4f-2r9c.json index 0fb75cfa7e6..fed5ea95f74 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8jf-5q4f-2r9c/GHSA-j8jf-5q4f-2r9c.json +++ b/advisories/unreviewed/2022/05/GHSA-j8jf-5q4f-2r9c/GHSA-j8jf-5q4f-2r9c.json @@ -7,12 +7,8 @@ "CVE-2004-2655" ], "details": "rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j95c-3qmv-c45f/GHSA-j95c-3qmv-c45f.json b/advisories/unreviewed/2022/05/GHSA-j95c-3qmv-c45f/GHSA-j95c-3qmv-c45f.json index 947647ac8b7..c84602eb8c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-j95c-3qmv-c45f/GHSA-j95c-3qmv-c45f.json +++ b/advisories/unreviewed/2022/05/GHSA-j95c-3qmv-c45f/GHSA-j95c-3qmv-c45f.json @@ -7,12 +7,8 @@ "CVE-2003-0797" ], "details": "Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j98g-25wq-62h9/GHSA-j98g-25wq-62h9.json b/advisories/unreviewed/2022/05/GHSA-j98g-25wq-62h9/GHSA-j98g-25wq-62h9.json index d8d2c276588..c333b0808c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-j98g-25wq-62h9/GHSA-j98g-25wq-62h9.json +++ b/advisories/unreviewed/2022/05/GHSA-j98g-25wq-62h9/GHSA-j98g-25wq-62h9.json @@ -7,12 +7,8 @@ "CVE-2006-1931" ], "details": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j9f9-qx28-xr8w/GHSA-j9f9-qx28-xr8w.json b/advisories/unreviewed/2022/05/GHSA-j9f9-qx28-xr8w/GHSA-j9f9-qx28-xr8w.json index 673d73cf1fb..312adcfe875 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9f9-qx28-xr8w/GHSA-j9f9-qx28-xr8w.json +++ b/advisories/unreviewed/2022/05/GHSA-j9f9-qx28-xr8w/GHSA-j9f9-qx28-xr8w.json @@ -7,12 +7,8 @@ "CVE-2006-5005" ], "details": "Unspecified vulnerability in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors involving /etc/slip.login.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j9xc-r2mv-xr3g/GHSA-j9xc-r2mv-xr3g.json b/advisories/unreviewed/2022/05/GHSA-j9xc-r2mv-xr3g/GHSA-j9xc-r2mv-xr3g.json index 518a194f3cc..49b162a928e 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9xc-r2mv-xr3g/GHSA-j9xc-r2mv-xr3g.json +++ b/advisories/unreviewed/2022/05/GHSA-j9xc-r2mv-xr3g/GHSA-j9xc-r2mv-xr3g.json @@ -7,12 +7,8 @@ "CVE-2007-0981" ], "details": "Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -240,9 +236,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jch3-qg3p-9hw2/GHSA-jch3-qg3p-9hw2.json b/advisories/unreviewed/2022/05/GHSA-jch3-qg3p-9hw2/GHSA-jch3-qg3p-9hw2.json index ba050e3e967..88ea98a08c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jch3-qg3p-9hw2/GHSA-jch3-qg3p-9hw2.json +++ b/advisories/unreviewed/2022/05/GHSA-jch3-qg3p-9hw2/GHSA-jch3-qg3p-9hw2.json @@ -7,12 +7,8 @@ "CVE-2002-0355" ], "details": "netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jchf-v664-v535/GHSA-jchf-v664-v535.json b/advisories/unreviewed/2022/05/GHSA-jchf-v664-v535/GHSA-jchf-v664-v535.json index 5d3c3f0bcdd..c00530f8fb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jchf-v664-v535/GHSA-jchf-v664-v535.json +++ b/advisories/unreviewed/2022/05/GHSA-jchf-v664-v535/GHSA-jchf-v664-v535.json @@ -7,12 +7,8 @@ "CVE-2004-0505" ], "details": "The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jgf6-cvpx-r6pr/GHSA-jgf6-cvpx-r6pr.json b/advisories/unreviewed/2022/05/GHSA-jgf6-cvpx-r6pr/GHSA-jgf6-cvpx-r6pr.json index 864fd570202..c6aa3fec249 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgf6-cvpx-r6pr/GHSA-jgf6-cvpx-r6pr.json +++ b/advisories/unreviewed/2022/05/GHSA-jgf6-cvpx-r6pr/GHSA-jgf6-cvpx-r6pr.json @@ -7,12 +7,8 @@ "CVE-2004-1812" ], "details": "Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jgqm-fwvg-g6gm/GHSA-jgqm-fwvg-g6gm.json b/advisories/unreviewed/2022/05/GHSA-jgqm-fwvg-g6gm/GHSA-jgqm-fwvg-g6gm.json index fcc0f4bf051..d6308fc73e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgqm-fwvg-g6gm/GHSA-jgqm-fwvg-g6gm.json +++ b/advisories/unreviewed/2022/05/GHSA-jgqm-fwvg-g6gm/GHSA-jgqm-fwvg-g6gm.json @@ -7,12 +7,8 @@ "CVE-2003-1289" ], "details": "The iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to 5.1-RELEASE-p1 allows local users to read portions of kernel memory (memory disclosure) via a large length parameter, which copies additional kernel memory into userland memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jhjp-mfjv-rvhx/GHSA-jhjp-mfjv-rvhx.json b/advisories/unreviewed/2022/05/GHSA-jhjp-mfjv-rvhx/GHSA-jhjp-mfjv-rvhx.json index fddfab26941..4913213c903 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhjp-mfjv-rvhx/GHSA-jhjp-mfjv-rvhx.json +++ b/advisories/unreviewed/2022/05/GHSA-jhjp-mfjv-rvhx/GHSA-jhjp-mfjv-rvhx.json @@ -7,12 +7,8 @@ "CVE-2003-0127" ], "details": "The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jj4q-rrx8-g76g/GHSA-jj4q-rrx8-g76g.json b/advisories/unreviewed/2022/05/GHSA-jj4q-rrx8-g76g/GHSA-jj4q-rrx8-g76g.json index 0282fa1d2a6..f0937600bf0 100644 --- a/advisories/unreviewed/2022/05/GHSA-jj4q-rrx8-g76g/GHSA-jj4q-rrx8-g76g.json +++ b/advisories/unreviewed/2022/05/GHSA-jj4q-rrx8-g76g/GHSA-jj4q-rrx8-g76g.json @@ -7,12 +7,8 @@ "CVE-2005-4691" ], "details": "imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack on the temporary file for the file.0 target, which is used for a pre-formatted manual page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jm8v-5wvv-cpmw/GHSA-jm8v-5wvv-cpmw.json b/advisories/unreviewed/2022/05/GHSA-jm8v-5wvv-cpmw/GHSA-jm8v-5wvv-cpmw.json index c79dfd80e5c..e59d7584fac 100644 --- a/advisories/unreviewed/2022/05/GHSA-jm8v-5wvv-cpmw/GHSA-jm8v-5wvv-cpmw.json +++ b/advisories/unreviewed/2022/05/GHSA-jm8v-5wvv-cpmw/GHSA-jm8v-5wvv-cpmw.json @@ -7,12 +7,8 @@ "CVE-2005-3625" ], "details": "Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka \"Infinite CPU spins.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -344,9 +340,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmfp-6hwg-w7qf/GHSA-jmfp-6hwg-w7qf.json b/advisories/unreviewed/2022/05/GHSA-jmfp-6hwg-w7qf/GHSA-jmfp-6hwg-w7qf.json index 6a0fa583231..a75664cffb0 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmfp-6hwg-w7qf/GHSA-jmfp-6hwg-w7qf.json +++ b/advisories/unreviewed/2022/05/GHSA-jmfp-6hwg-w7qf/GHSA-jmfp-6hwg-w7qf.json @@ -7,12 +7,8 @@ "CVE-2006-6498" ], "details": "Multiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, SeaMonkey before 1.0.7, and Mozilla 1.7 and probably earlier on Solaris, allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -228,9 +224,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmgr-hgq4-h5rf/GHSA-jmgr-hgq4-h5rf.json b/advisories/unreviewed/2022/05/GHSA-jmgr-hgq4-h5rf/GHSA-jmgr-hgq4-h5rf.json index e4495912198..bb269660152 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmgr-hgq4-h5rf/GHSA-jmgr-hgq4-h5rf.json +++ b/advisories/unreviewed/2022/05/GHSA-jmgr-hgq4-h5rf/GHSA-jmgr-hgq4-h5rf.json @@ -7,12 +7,8 @@ "CVE-2007-0910" ], "details": "Unspecified vulnerability in PHP before 5.2.1 allows attackers to \"clobber\" certain super-global variables via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -184,9 +180,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jp9f-f85w-rv5v/GHSA-jp9f-f85w-rv5v.json b/advisories/unreviewed/2022/05/GHSA-jp9f-f85w-rv5v/GHSA-jp9f-f85w-rv5v.json index 16d5c57ae9f..c7202ef9207 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp9f-f85w-rv5v/GHSA-jp9f-f85w-rv5v.json +++ b/advisories/unreviewed/2022/05/GHSA-jp9f-f85w-rv5v/GHSA-jp9f-f85w-rv5v.json @@ -7,12 +7,8 @@ "CVE-2004-0967" ], "details": "The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpcf-q9v6-ghjf/GHSA-jpcf-q9v6-ghjf.json b/advisories/unreviewed/2022/05/GHSA-jpcf-q9v6-ghjf/GHSA-jpcf-q9v6-ghjf.json index 25ee59ff0e2..c9cd9fff334 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpcf-q9v6-ghjf/GHSA-jpcf-q9v6-ghjf.json +++ b/advisories/unreviewed/2022/05/GHSA-jpcf-q9v6-ghjf/GHSA-jpcf-q9v6-ghjf.json @@ -7,12 +7,8 @@ "CVE-2008-3960" ], "details": "Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (service crash) via \"malicious packets.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpv3-m3h3-ph93/GHSA-jpv3-m3h3-ph93.json b/advisories/unreviewed/2022/05/GHSA-jpv3-m3h3-ph93/GHSA-jpv3-m3h3-ph93.json index 6f0c90e45e1..c4043338297 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpv3-m3h3-ph93/GHSA-jpv3-m3h3-ph93.json +++ b/advisories/unreviewed/2022/05/GHSA-jpv3-m3h3-ph93/GHSA-jpv3-m3h3-ph93.json @@ -7,12 +7,8 @@ "CVE-2006-1990" ], "details": "Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function call, a different vulnerability than CVE-2002-1396.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -164,9 +160,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jr5h-gxvq-3v3w/GHSA-jr5h-gxvq-3v3w.json b/advisories/unreviewed/2022/05/GHSA-jr5h-gxvq-3v3w/GHSA-jr5h-gxvq-3v3w.json index 89c98b2d9e1..9c895a14748 100644 --- a/advisories/unreviewed/2022/05/GHSA-jr5h-gxvq-3v3w/GHSA-jr5h-gxvq-3v3w.json +++ b/advisories/unreviewed/2022/05/GHSA-jr5h-gxvq-3v3w/GHSA-jr5h-gxvq-3v3w.json @@ -7,12 +7,8 @@ "CVE-2005-1263" ], "details": "The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jrhm-8c88-jfrv/GHSA-jrhm-8c88-jfrv.json b/advisories/unreviewed/2022/05/GHSA-jrhm-8c88-jfrv/GHSA-jrhm-8c88-jfrv.json index 9dabb62124a..2cb307243c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrhm-8c88-jfrv/GHSA-jrhm-8c88-jfrv.json +++ b/advisories/unreviewed/2022/05/GHSA-jrhm-8c88-jfrv/GHSA-jrhm-8c88-jfrv.json @@ -7,12 +7,8 @@ "CVE-2002-1282" ], "details": "Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jv8p-6h4c-vx58/GHSA-jv8p-6h4c-vx58.json b/advisories/unreviewed/2022/05/GHSA-jv8p-6h4c-vx58/GHSA-jv8p-6h4c-vx58.json index 5f947b0876e..87a81008302 100644 --- a/advisories/unreviewed/2022/05/GHSA-jv8p-6h4c-vx58/GHSA-jv8p-6h4c-vx58.json +++ b/advisories/unreviewed/2022/05/GHSA-jv8p-6h4c-vx58/GHSA-jv8p-6h4c-vx58.json @@ -7,12 +7,8 @@ "CVE-2009-2660" ], "details": "Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to (1) crafted GIF files (gifread.c) and (2) crafted JPEG files (jpegread.c), a different vulnerability than CVE-2009-2295.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jvfg-x6v5-pmcq/GHSA-jvfg-x6v5-pmcq.json b/advisories/unreviewed/2022/05/GHSA-jvfg-x6v5-pmcq/GHSA-jvfg-x6v5-pmcq.json index 0e6f0bc3606..98366e1d4bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvfg-x6v5-pmcq/GHSA-jvfg-x6v5-pmcq.json +++ b/advisories/unreviewed/2022/05/GHSA-jvfg-x6v5-pmcq/GHSA-jvfg-x6v5-pmcq.json @@ -7,12 +7,8 @@ "CVE-2005-3857" ], "details": "The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jvmm-gcp4-vg22/GHSA-jvmm-gcp4-vg22.json b/advisories/unreviewed/2022/05/GHSA-jvmm-gcp4-vg22/GHSA-jvmm-gcp4-vg22.json index cbfd89f250f..d791ebe1114 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvmm-gcp4-vg22/GHSA-jvmm-gcp4-vg22.json +++ b/advisories/unreviewed/2022/05/GHSA-jvmm-gcp4-vg22/GHSA-jvmm-gcp4-vg22.json @@ -7,12 +7,8 @@ "CVE-2002-2201" ], "details": "The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jw6x-xphc-fgvr/GHSA-jw6x-xphc-fgvr.json b/advisories/unreviewed/2022/05/GHSA-jw6x-xphc-fgvr/GHSA-jw6x-xphc-fgvr.json index 63265f78bf8..1a242e8bc20 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw6x-xphc-fgvr/GHSA-jw6x-xphc-fgvr.json +++ b/advisories/unreviewed/2022/05/GHSA-jw6x-xphc-fgvr/GHSA-jw6x-xphc-fgvr.json @@ -7,12 +7,8 @@ "CVE-2006-0054" ], "details": "The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jw7j-hqfh-5qqm/GHSA-jw7j-hqfh-5qqm.json b/advisories/unreviewed/2022/05/GHSA-jw7j-hqfh-5qqm/GHSA-jw7j-hqfh-5qqm.json index 17554a37e2e..caa21c6eaa1 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw7j-hqfh-5qqm/GHSA-jw7j-hqfh-5qqm.json +++ b/advisories/unreviewed/2022/05/GHSA-jw7j-hqfh-5qqm/GHSA-jw7j-hqfh-5qqm.json @@ -7,12 +7,8 @@ "CVE-2006-1530" ], "details": "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jw8m-xprv-3rh7/GHSA-jw8m-xprv-3rh7.json b/advisories/unreviewed/2022/05/GHSA-jw8m-xprv-3rh7/GHSA-jw8m-xprv-3rh7.json index 29cdca94fc5..4c293567998 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw8m-xprv-3rh7/GHSA-jw8m-xprv-3rh7.json +++ b/advisories/unreviewed/2022/05/GHSA-jw8m-xprv-3rh7/GHSA-jw8m-xprv-3rh7.json @@ -7,12 +7,8 @@ "CVE-2003-0774" ], "details": "saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jx7g-w69f-vmq6/GHSA-jx7g-w69f-vmq6.json b/advisories/unreviewed/2022/05/GHSA-jx7g-w69f-vmq6/GHSA-jx7g-w69f-vmq6.json index 55b0981dd3b..08b1b1e8a5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx7g-w69f-vmq6/GHSA-jx7g-w69f-vmq6.json +++ b/advisories/unreviewed/2022/05/GHSA-jx7g-w69f-vmq6/GHSA-jx7g-w69f-vmq6.json @@ -7,12 +7,8 @@ "CVE-2004-0918" ], "details": "The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jxvq-9v75-wqch/GHSA-jxvq-9v75-wqch.json b/advisories/unreviewed/2022/05/GHSA-jxvq-9v75-wqch/GHSA-jxvq-9v75-wqch.json index a69bc1fcc38..37575c2d3d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxvq-9v75-wqch/GHSA-jxvq-9v75-wqch.json +++ b/advisories/unreviewed/2022/05/GHSA-jxvq-9v75-wqch/GHSA-jxvq-9v75-wqch.json @@ -7,12 +7,8 @@ "CVE-2006-4482" ], "details": "Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m243-hvg9-qc96/GHSA-m243-hvg9-qc96.json b/advisories/unreviewed/2022/05/GHSA-m243-hvg9-qc96/GHSA-m243-hvg9-qc96.json index 5f247b71d2a..4146cdcb90b 100644 --- a/advisories/unreviewed/2022/05/GHSA-m243-hvg9-qc96/GHSA-m243-hvg9-qc96.json +++ b/advisories/unreviewed/2022/05/GHSA-m243-hvg9-qc96/GHSA-m243-hvg9-qc96.json @@ -7,12 +7,8 @@ "CVE-2002-1383" ], "details": "Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m29m-89vm-949f/GHSA-m29m-89vm-949f.json b/advisories/unreviewed/2022/05/GHSA-m29m-89vm-949f/GHSA-m29m-89vm-949f.json index e0e2325d76c..392fa2a8693 100644 --- a/advisories/unreviewed/2022/05/GHSA-m29m-89vm-949f/GHSA-m29m-89vm-949f.json +++ b/advisories/unreviewed/2022/05/GHSA-m29m-89vm-949f/GHSA-m29m-89vm-949f.json @@ -7,12 +7,8 @@ "CVE-2004-1058" ], "details": "Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m2h2-rm4v-5p5x/GHSA-m2h2-rm4v-5p5x.json b/advisories/unreviewed/2022/05/GHSA-m2h2-rm4v-5p5x/GHSA-m2h2-rm4v-5p5x.json index a8ca0d1c01f..873c650801a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2h2-rm4v-5p5x/GHSA-m2h2-rm4v-5p5x.json +++ b/advisories/unreviewed/2022/05/GHSA-m2h2-rm4v-5p5x/GHSA-m2h2-rm4v-5p5x.json @@ -7,12 +7,8 @@ "CVE-2003-0851" ], "details": "OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m2vp-q7mm-qrpv/GHSA-m2vp-q7mm-qrpv.json b/advisories/unreviewed/2022/05/GHSA-m2vp-q7mm-qrpv/GHSA-m2vp-q7mm-qrpv.json index c825069ca80..a23b41145da 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2vp-q7mm-qrpv/GHSA-m2vp-q7mm-qrpv.json +++ b/advisories/unreviewed/2022/05/GHSA-m2vp-q7mm-qrpv/GHSA-m2vp-q7mm-qrpv.json @@ -7,12 +7,8 @@ "CVE-2002-1344" ], "details": "Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m3w2-q6w5-4x94/GHSA-m3w2-q6w5-4x94.json b/advisories/unreviewed/2022/05/GHSA-m3w2-q6w5-4x94/GHSA-m3w2-q6w5-4x94.json index 6641c21f82e..f87b85cdcbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3w2-q6w5-4x94/GHSA-m3w2-q6w5-4x94.json +++ b/advisories/unreviewed/2022/05/GHSA-m3w2-q6w5-4x94/GHSA-m3w2-q6w5-4x94.json @@ -7,12 +7,8 @@ "CVE-2002-0402" ], "details": "Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code while Ethereal is parsing keysyms.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m3xx-qj4w-w77f/GHSA-m3xx-qj4w-w77f.json b/advisories/unreviewed/2022/05/GHSA-m3xx-qj4w-w77f/GHSA-m3xx-qj4w-w77f.json index 7f62fd26c55..a23b222e4b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3xx-qj4w-w77f/GHSA-m3xx-qj4w-w77f.json +++ b/advisories/unreviewed/2022/05/GHSA-m3xx-qj4w-w77f/GHSA-m3xx-qj4w-w77f.json @@ -7,12 +7,8 @@ "CVE-2004-0919" ], "details": "The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m4gf-h6wv-8794/GHSA-m4gf-h6wv-8794.json b/advisories/unreviewed/2022/05/GHSA-m4gf-h6wv-8794/GHSA-m4gf-h6wv-8794.json index 9064243fcaf..12ecb292e3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4gf-h6wv-8794/GHSA-m4gf-h6wv-8794.json +++ b/advisories/unreviewed/2022/05/GHSA-m4gf-h6wv-8794/GHSA-m4gf-h6wv-8794.json @@ -7,12 +7,8 @@ "CVE-2002-1231" ], "details": "SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m54c-37c8-7cfp/GHSA-m54c-37c8-7cfp.json b/advisories/unreviewed/2022/05/GHSA-m54c-37c8-7cfp/GHSA-m54c-37c8-7cfp.json index 3fec407aa59..a89b9a2b278 100644 --- a/advisories/unreviewed/2022/05/GHSA-m54c-37c8-7cfp/GHSA-m54c-37c8-7cfp.json +++ b/advisories/unreviewed/2022/05/GHSA-m54c-37c8-7cfp/GHSA-m54c-37c8-7cfp.json @@ -7,12 +7,8 @@ "CVE-2005-2701" ], "details": "Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m5hx-rq87-ggxp/GHSA-m5hx-rq87-ggxp.json b/advisories/unreviewed/2022/05/GHSA-m5hx-rq87-ggxp/GHSA-m5hx-rq87-ggxp.json index 96f2642d855..47bcb135633 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5hx-rq87-ggxp/GHSA-m5hx-rq87-ggxp.json +++ b/advisories/unreviewed/2022/05/GHSA-m5hx-rq87-ggxp/GHSA-m5hx-rq87-ggxp.json @@ -7,12 +7,8 @@ "CVE-2002-0803" ], "details": "Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m5jg-5w4m-4mhc/GHSA-m5jg-5w4m-4mhc.json b/advisories/unreviewed/2022/05/GHSA-m5jg-5w4m-4mhc/GHSA-m5jg-5w4m-4mhc.json index 02236cb0ebe..12f1acd2636 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5jg-5w4m-4mhc/GHSA-m5jg-5w4m-4mhc.json +++ b/advisories/unreviewed/2022/05/GHSA-m5jg-5w4m-4mhc/GHSA-m5jg-5w4m-4mhc.json @@ -7,12 +7,8 @@ "CVE-2004-0155" ], "details": "The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m65g-7986-vjx8/GHSA-m65g-7986-vjx8.json b/advisories/unreviewed/2022/05/GHSA-m65g-7986-vjx8/GHSA-m65g-7986-vjx8.json index 22caca9bf2d..5c81354dde7 100644 --- a/advisories/unreviewed/2022/05/GHSA-m65g-7986-vjx8/GHSA-m65g-7986-vjx8.json +++ b/advisories/unreviewed/2022/05/GHSA-m65g-7986-vjx8/GHSA-m65g-7986-vjx8.json @@ -7,12 +7,8 @@ "CVE-2003-0430" ], "details": "The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m69x-6q22-9gfc/GHSA-m69x-6q22-9gfc.json b/advisories/unreviewed/2022/05/GHSA-m69x-6q22-9gfc/GHSA-m69x-6q22-9gfc.json index 978c7c5a7c2..28758b22e73 100644 --- a/advisories/unreviewed/2022/05/GHSA-m69x-6q22-9gfc/GHSA-m69x-6q22-9gfc.json +++ b/advisories/unreviewed/2022/05/GHSA-m69x-6q22-9gfc/GHSA-m69x-6q22-9gfc.json @@ -7,12 +7,8 @@ "CVE-2015-2713" ], "details": "Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m749-7r88-grm4/GHSA-m749-7r88-grm4.json b/advisories/unreviewed/2022/05/GHSA-m749-7r88-grm4/GHSA-m749-7r88-grm4.json index 622d67a5bae..508e985b5bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-m749-7r88-grm4/GHSA-m749-7r88-grm4.json +++ b/advisories/unreviewed/2022/05/GHSA-m749-7r88-grm4/GHSA-m749-7r88-grm4.json @@ -7,12 +7,8 @@ "CVE-2006-5011" ], "details": "Untrusted search path vulnerability in snappd in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via a Trojan horse program, involving the \"system subroutine\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m83q-fc4r-h6ww/GHSA-m83q-fc4r-h6ww.json b/advisories/unreviewed/2022/05/GHSA-m83q-fc4r-h6ww/GHSA-m83q-fc4r-h6ww.json index 18dc13e03c6..25bf09e45c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-m83q-fc4r-h6ww/GHSA-m83q-fc4r-h6ww.json +++ b/advisories/unreviewed/2022/05/GHSA-m83q-fc4r-h6ww/GHSA-m83q-fc4r-h6ww.json @@ -7,12 +7,8 @@ "CVE-2004-2142" ], "details": "Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd 1.28 and 1.31 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m87g-q8c5-j57m/GHSA-m87g-q8c5-j57m.json b/advisories/unreviewed/2022/05/GHSA-m87g-q8c5-j57m/GHSA-m87g-q8c5-j57m.json index d97799dc17b..f9e541972a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-m87g-q8c5-j57m/GHSA-m87g-q8c5-j57m.json +++ b/advisories/unreviewed/2022/05/GHSA-m87g-q8c5-j57m/GHSA-m87g-q8c5-j57m.json @@ -7,12 +7,8 @@ "CVE-2004-0126" ], "details": "The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m968-rq7m-646j/GHSA-m968-rq7m-646j.json b/advisories/unreviewed/2022/05/GHSA-m968-rq7m-646j/GHSA-m968-rq7m-646j.json index 9a3ff197a6a..ee4f5e9c05f 100644 --- a/advisories/unreviewed/2022/05/GHSA-m968-rq7m-646j/GHSA-m968-rq7m-646j.json +++ b/advisories/unreviewed/2022/05/GHSA-m968-rq7m-646j/GHSA-m968-rq7m-646j.json @@ -7,12 +7,8 @@ "CVE-2009-0040" ], "details": "The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9p7-26x3-qmg3/GHSA-m9p7-26x3-qmg3.json b/advisories/unreviewed/2022/05/GHSA-m9p7-26x3-qmg3/GHSA-m9p7-26x3-qmg3.json index 95045a6ffdb..d04fb1326aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9p7-26x3-qmg3/GHSA-m9p7-26x3-qmg3.json +++ b/advisories/unreviewed/2022/05/GHSA-m9p7-26x3-qmg3/GHSA-m9p7-26x3-qmg3.json @@ -7,12 +7,8 @@ "CVE-2006-3459" ], "details": "Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mf4g-hr4q-jc65/GHSA-mf4g-hr4q-jc65.json b/advisories/unreviewed/2022/05/GHSA-mf4g-hr4q-jc65/GHSA-mf4g-hr4q-jc65.json index bfc437fbf29..1a62949650d 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf4g-hr4q-jc65/GHSA-mf4g-hr4q-jc65.json +++ b/advisories/unreviewed/2022/05/GHSA-mf4g-hr4q-jc65/GHSA-mf4g-hr4q-jc65.json @@ -7,12 +7,8 @@ "CVE-2003-0517" ], "details": "faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mg6c-c5w2-g567/GHSA-mg6c-c5w2-g567.json b/advisories/unreviewed/2022/05/GHSA-mg6c-c5w2-g567/GHSA-mg6c-c5w2-g567.json index a28f740ca7d..50d3798b81e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mg6c-c5w2-g567/GHSA-mg6c-c5w2-g567.json +++ b/advisories/unreviewed/2022/05/GHSA-mg6c-c5w2-g567/GHSA-mg6c-c5w2-g567.json @@ -7,12 +7,8 @@ "CVE-2006-3628" ], "details": "Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mh2w-pcr6-4vfc/GHSA-mh2w-pcr6-4vfc.json b/advisories/unreviewed/2022/05/GHSA-mh2w-pcr6-4vfc/GHSA-mh2w-pcr6-4vfc.json index 441fd7cff8d..1d3e9d386f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh2w-pcr6-4vfc/GHSA-mh2w-pcr6-4vfc.json +++ b/advisories/unreviewed/2022/05/GHSA-mh2w-pcr6-4vfc/GHSA-mh2w-pcr6-4vfc.json @@ -7,12 +7,8 @@ "CVE-2004-0602" ], "details": "The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges or cause a system panic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mh36-jvm3-rccr/GHSA-mh36-jvm3-rccr.json b/advisories/unreviewed/2022/05/GHSA-mh36-jvm3-rccr/GHSA-mh36-jvm3-rccr.json index fc3b660ed8d..7e79dc7a2fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh36-jvm3-rccr/GHSA-mh36-jvm3-rccr.json +++ b/advisories/unreviewed/2022/05/GHSA-mh36-jvm3-rccr/GHSA-mh36-jvm3-rccr.json @@ -7,12 +7,8 @@ "CVE-2005-3313" ], "details": "The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mhpq-3f55-446g/GHSA-mhpq-3f55-446g.json b/advisories/unreviewed/2022/05/GHSA-mhpq-3f55-446g/GHSA-mhpq-3f55-446g.json index 4009ee6f46d..62c1a3f405e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhpq-3f55-446g/GHSA-mhpq-3f55-446g.json +++ b/advisories/unreviewed/2022/05/GHSA-mhpq-3f55-446g/GHSA-mhpq-3f55-446g.json @@ -7,12 +7,8 @@ "CVE-2003-0177" ], "details": "SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow \"-\" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mhpw-qj29-rmfj/GHSA-mhpw-qj29-rmfj.json b/advisories/unreviewed/2022/05/GHSA-mhpw-qj29-rmfj/GHSA-mhpw-qj29-rmfj.json index d3b441b44d9..972a2393e41 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhpw-qj29-rmfj/GHSA-mhpw-qj29-rmfj.json +++ b/advisories/unreviewed/2022/05/GHSA-mhpw-qj29-rmfj/GHSA-mhpw-qj29-rmfj.json @@ -7,12 +7,8 @@ "CVE-2006-1940" ], "details": "Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service (abort) via the SNDCP dissector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mj28-wp87-qqjj/GHSA-mj28-wp87-qqjj.json b/advisories/unreviewed/2022/05/GHSA-mj28-wp87-qqjj/GHSA-mj28-wp87-qqjj.json index f97e7fa5a04..6f833125974 100644 --- a/advisories/unreviewed/2022/05/GHSA-mj28-wp87-qqjj/GHSA-mj28-wp87-qqjj.json +++ b/advisories/unreviewed/2022/05/GHSA-mj28-wp87-qqjj/GHSA-mj28-wp87-qqjj.json @@ -7,12 +7,8 @@ "CVE-2006-2224" ], "details": "RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjf7-4c2q-4gp8/GHSA-mjf7-4c2q-4gp8.json b/advisories/unreviewed/2022/05/GHSA-mjf7-4c2q-4gp8/GHSA-mjf7-4c2q-4gp8.json index 9eddec74787..2828a732c5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjf7-4c2q-4gp8/GHSA-mjf7-4c2q-4gp8.json +++ b/advisories/unreviewed/2022/05/GHSA-mjf7-4c2q-4gp8/GHSA-mjf7-4c2q-4gp8.json @@ -7,12 +7,8 @@ "CVE-2003-0796" ], "details": "Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mm4x-g8fm-x6cg/GHSA-mm4x-g8fm-x6cg.json b/advisories/unreviewed/2022/05/GHSA-mm4x-g8fm-x6cg/GHSA-mm4x-g8fm-x6cg.json index 3913c544944..82f7e80000e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm4x-g8fm-x6cg/GHSA-mm4x-g8fm-x6cg.json +++ b/advisories/unreviewed/2022/05/GHSA-mm4x-g8fm-x6cg/GHSA-mm4x-g8fm-x6cg.json @@ -7,12 +7,8 @@ "CVE-2005-3783" ], "details": "The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread group ID to check whether it is attaching to itself, which allows local users to cause a denial of service (crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mm7q-95r6-v3v2/GHSA-mm7q-95r6-v3v2.json b/advisories/unreviewed/2022/05/GHSA-mm7q-95r6-v3v2/GHSA-mm7q-95r6-v3v2.json index 520980893b8..d5022ff355a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm7q-95r6-v3v2/GHSA-mm7q-95r6-v3v2.json +++ b/advisories/unreviewed/2022/05/GHSA-mm7q-95r6-v3v2/GHSA-mm7q-95r6-v3v2.json @@ -7,12 +7,8 @@ "CVE-2005-1849" ], "details": "inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -152,9 +148,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mpm3-c55x-2wp9/GHSA-mpm3-c55x-2wp9.json b/advisories/unreviewed/2022/05/GHSA-mpm3-c55x-2wp9/GHSA-mpm3-c55x-2wp9.json index 980d20eae30..b4ae4c9fb4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpm3-c55x-2wp9/GHSA-mpm3-c55x-2wp9.json +++ b/advisories/unreviewed/2022/05/GHSA-mpm3-c55x-2wp9/GHSA-mpm3-c55x-2wp9.json @@ -7,12 +7,8 @@ "CVE-2004-1471" ], "details": "Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mq5h-r3rg-j9hg/GHSA-mq5h-r3rg-j9hg.json b/advisories/unreviewed/2022/05/GHSA-mq5h-r3rg-j9hg/GHSA-mq5h-r3rg-j9hg.json index 07031d2e8f1..137c5f6995f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mq5h-r3rg-j9hg/GHSA-mq5h-r3rg-j9hg.json +++ b/advisories/unreviewed/2022/05/GHSA-mq5h-r3rg-j9hg/GHSA-mq5h-r3rg-j9hg.json @@ -7,12 +7,8 @@ "CVE-2006-5051" ], "details": "Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwwc-2rmx-mj8j/GHSA-mwwc-2rmx-mj8j.json b/advisories/unreviewed/2022/05/GHSA-mwwc-2rmx-mj8j/GHSA-mwwc-2rmx-mj8j.json index 68e9f5dede3..8117042f852 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwwc-2rmx-mj8j/GHSA-mwwc-2rmx-mj8j.json +++ b/advisories/unreviewed/2022/05/GHSA-mwwc-2rmx-mj8j/GHSA-mwwc-2rmx-mj8j.json @@ -7,12 +7,8 @@ "CVE-2006-2937" ], "details": "OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -556,9 +552,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p22j-7pqv-4r36/GHSA-p22j-7pqv-4r36.json b/advisories/unreviewed/2022/05/GHSA-p22j-7pqv-4r36/GHSA-p22j-7pqv-4r36.json index 7dcb3905d4d..4b71b4395c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-p22j-7pqv-4r36/GHSA-p22j-7pqv-4r36.json +++ b/advisories/unreviewed/2022/05/GHSA-p22j-7pqv-4r36/GHSA-p22j-7pqv-4r36.json @@ -7,12 +7,8 @@ "CVE-2003-0175" ], "details": "SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p2qc-c4q2-x8c2/GHSA-p2qc-c4q2-x8c2.json b/advisories/unreviewed/2022/05/GHSA-p2qc-c4q2-x8c2/GHSA-p2qc-c4q2-x8c2.json index 9a4d51aa6aa..4bfddb2a4da 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2qc-c4q2-x8c2/GHSA-p2qc-c4q2-x8c2.json +++ b/advisories/unreviewed/2022/05/GHSA-p2qc-c4q2-x8c2/GHSA-p2qc-c4q2-x8c2.json @@ -7,12 +7,8 @@ "CVE-2003-0575" ], "details": "Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTH_UNIX gid list.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p2xx-mp65-2vff/GHSA-p2xx-mp65-2vff.json b/advisories/unreviewed/2022/05/GHSA-p2xx-mp65-2vff/GHSA-p2xx-mp65-2vff.json index ec1111a5574..548fcf7407c 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2xx-mp65-2vff/GHSA-p2xx-mp65-2vff.json +++ b/advisories/unreviewed/2022/05/GHSA-p2xx-mp65-2vff/GHSA-p2xx-mp65-2vff.json @@ -7,12 +7,8 @@ "CVE-2004-0371" ], "details": "Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p33g-2wwh-cj87/GHSA-p33g-2wwh-cj87.json b/advisories/unreviewed/2022/05/GHSA-p33g-2wwh-cj87/GHSA-p33g-2wwh-cj87.json index 2faea626a63..33ac2dc3b5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-p33g-2wwh-cj87/GHSA-p33g-2wwh-cj87.json +++ b/advisories/unreviewed/2022/05/GHSA-p33g-2wwh-cj87/GHSA-p33g-2wwh-cj87.json @@ -7,12 +7,8 @@ "CVE-2003-0572" ], "details": "Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service (memory consumption).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p357-vv6x-p853/GHSA-p357-vv6x-p853.json b/advisories/unreviewed/2022/05/GHSA-p357-vv6x-p853/GHSA-p357-vv6x-p853.json index 66d52902928..6f651e95e69 100644 --- a/advisories/unreviewed/2022/05/GHSA-p357-vv6x-p853/GHSA-p357-vv6x-p853.json +++ b/advisories/unreviewed/2022/05/GHSA-p357-vv6x-p853/GHSA-p357-vv6x-p853.json @@ -7,12 +7,8 @@ "CVE-2005-3629" ], "details": "initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p35g-8cgj-q8wc/GHSA-p35g-8cgj-q8wc.json b/advisories/unreviewed/2022/05/GHSA-p35g-8cgj-q8wc/GHSA-p35g-8cgj-q8wc.json index f930fefc8a4..ea1e26787a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p35g-8cgj-q8wc/GHSA-p35g-8cgj-q8wc.json +++ b/advisories/unreviewed/2022/05/GHSA-p35g-8cgj-q8wc/GHSA-p35g-8cgj-q8wc.json @@ -7,12 +7,8 @@ "CVE-2003-0428" ], "details": "Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p39h-j93c-vcjq/GHSA-p39h-j93c-vcjq.json b/advisories/unreviewed/2022/05/GHSA-p39h-j93c-vcjq/GHSA-p39h-j93c-vcjq.json index 5482a256453..d147df58791 100644 --- a/advisories/unreviewed/2022/05/GHSA-p39h-j93c-vcjq/GHSA-p39h-j93c-vcjq.json +++ b/advisories/unreviewed/2022/05/GHSA-p39h-j93c-vcjq/GHSA-p39h-j93c-vcjq.json @@ -7,12 +7,8 @@ "CVE-2006-5468" ], "details": "Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p3m9-6hcj-3jxm/GHSA-p3m9-6hcj-3jxm.json b/advisories/unreviewed/2022/05/GHSA-p3m9-6hcj-3jxm/GHSA-p3m9-6hcj-3jxm.json index b1c524a4b5a..03c9e1288e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3m9-6hcj-3jxm/GHSA-p3m9-6hcj-3jxm.json +++ b/advisories/unreviewed/2022/05/GHSA-p3m9-6hcj-3jxm/GHSA-p3m9-6hcj-3jxm.json @@ -7,12 +7,8 @@ "CVE-2003-0759" ], "details": "Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p43w-35fv-3qjj/GHSA-p43w-35fv-3qjj.json b/advisories/unreviewed/2022/05/GHSA-p43w-35fv-3qjj/GHSA-p43w-35fv-3qjj.json index 7b05cb4637b..fbba526a3c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-p43w-35fv-3qjj/GHSA-p43w-35fv-3qjj.json +++ b/advisories/unreviewed/2022/05/GHSA-p43w-35fv-3qjj/GHSA-p43w-35fv-3qjj.json @@ -7,12 +7,8 @@ "CVE-2006-1933" ], "details": "Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (large or infinite loops) viarafted packets to the (1) UMA and (2) BER dissectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p4qr-c64v-fjhc/GHSA-p4qr-c64v-fjhc.json b/advisories/unreviewed/2022/05/GHSA-p4qr-c64v-fjhc/GHSA-p4qr-c64v-fjhc.json index 5e58e609a97..cc6638b4cb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4qr-c64v-fjhc/GHSA-p4qr-c64v-fjhc.json +++ b/advisories/unreviewed/2022/05/GHSA-p4qr-c64v-fjhc/GHSA-p4qr-c64v-fjhc.json @@ -7,12 +7,8 @@ "CVE-2003-0985" ], "details": "The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -200,9 +196,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p59g-55fw-7q46/GHSA-p59g-55fw-7q46.json b/advisories/unreviewed/2022/05/GHSA-p59g-55fw-7q46/GHSA-p59g-55fw-7q46.json index a07339f897a..5c5f16aac18 100644 --- a/advisories/unreviewed/2022/05/GHSA-p59g-55fw-7q46/GHSA-p59g-55fw-7q46.json +++ b/advisories/unreviewed/2022/05/GHSA-p59g-55fw-7q46/GHSA-p59g-55fw-7q46.json @@ -7,12 +7,8 @@ "CVE-2005-3573" ], "details": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -108,9 +104,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p5cr-7f6f-r5wg/GHSA-p5cr-7f6f-r5wg.json b/advisories/unreviewed/2022/05/GHSA-p5cr-7f6f-r5wg/GHSA-p5cr-7f6f-r5wg.json index da147f3ae9d..f990fb1fc40 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5cr-7f6f-r5wg/GHSA-p5cr-7f6f-r5wg.json +++ b/advisories/unreviewed/2022/05/GHSA-p5cr-7f6f-r5wg/GHSA-p5cr-7f6f-r5wg.json @@ -7,12 +7,8 @@ "CVE-2006-0905" ], "details": "A \"programming error\" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p7cq-vpx5-5pp5/GHSA-p7cq-vpx5-5pp5.json b/advisories/unreviewed/2022/05/GHSA-p7cq-vpx5-5pp5/GHSA-p7cq-vpx5-5pp5.json index afa58b01ad0..9b96796564c 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7cq-vpx5-5pp5/GHSA-p7cq-vpx5-5pp5.json +++ b/advisories/unreviewed/2022/05/GHSA-p7cq-vpx5-5pp5/GHSA-p7cq-vpx5-5pp5.json @@ -7,12 +7,8 @@ "CVE-2005-1156" ], "details": "Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka \"Firesearching 1.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p845-4v57-x54v/GHSA-p845-4v57-x54v.json b/advisories/unreviewed/2022/05/GHSA-p845-4v57-x54v/GHSA-p845-4v57-x54v.json index 145c09bf891..c414634887f 100644 --- a/advisories/unreviewed/2022/05/GHSA-p845-4v57-x54v/GHSA-p845-4v57-x54v.json +++ b/advisories/unreviewed/2022/05/GHSA-p845-4v57-x54v/GHSA-p845-4v57-x54v.json @@ -7,12 +7,8 @@ "CVE-2003-0432" ], "details": "Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p887-85m2-5wj7/GHSA-p887-85m2-5wj7.json b/advisories/unreviewed/2022/05/GHSA-p887-85m2-5wj7/GHSA-p887-85m2-5wj7.json index 7171535b388..e9e96da73d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-p887-85m2-5wj7/GHSA-p887-85m2-5wj7.json +++ b/advisories/unreviewed/2022/05/GHSA-p887-85m2-5wj7/GHSA-p887-85m2-5wj7.json @@ -7,12 +7,8 @@ "CVE-2002-1194" ], "details": "Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p8rh-j2g8-vj3j/GHSA-p8rh-j2g8-vj3j.json b/advisories/unreviewed/2022/05/GHSA-p8rh-j2g8-vj3j/GHSA-p8rh-j2g8-vj3j.json index 1d09d24a26c..998aaecd0a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-p8rh-j2g8-vj3j/GHSA-p8rh-j2g8-vj3j.json +++ b/advisories/unreviewed/2022/05/GHSA-p8rh-j2g8-vj3j/GHSA-p8rh-j2g8-vj3j.json @@ -7,12 +7,8 @@ "CVE-2002-1669" ], "details": "pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p9vf-28fh-h8hp/GHSA-p9vf-28fh-h8hp.json b/advisories/unreviewed/2022/05/GHSA-p9vf-28fh-h8hp/GHSA-p9vf-28fh-h8hp.json index 3d0a958a906..85a38cc3548 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9vf-28fh-h8hp/GHSA-p9vf-28fh-h8hp.json +++ b/advisories/unreviewed/2022/05/GHSA-p9vf-28fh-h8hp/GHSA-p9vf-28fh-h8hp.json @@ -7,12 +7,8 @@ "CVE-2005-4741" ], "details": "NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without a reset of real credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pc38-w37f-288f/GHSA-pc38-w37f-288f.json b/advisories/unreviewed/2022/05/GHSA-pc38-w37f-288f/GHSA-pc38-w37f-288f.json index 0f184a14444..4e8e0c18f63 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc38-w37f-288f/GHSA-pc38-w37f-288f.json +++ b/advisories/unreviewed/2022/05/GHSA-pc38-w37f-288f/GHSA-pc38-w37f-288f.json @@ -7,12 +7,8 @@ "CVE-2006-1734" ], "details": "Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using the Object.watch method to access the \"clone parent\" internal function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -240,9 +236,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pc4q-qwc7-mjww/GHSA-pc4q-qwc7-mjww.json b/advisories/unreviewed/2022/05/GHSA-pc4q-qwc7-mjww/GHSA-pc4q-qwc7-mjww.json index 3cd1f38947e..f37a8d66c7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc4q-qwc7-mjww/GHSA-pc4q-qwc7-mjww.json +++ b/advisories/unreviewed/2022/05/GHSA-pc4q-qwc7-mjww/GHSA-pc4q-qwc7-mjww.json @@ -7,12 +7,8 @@ "CVE-2006-4681" ], "details": "Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pcwf-qwvv-qjg3/GHSA-pcwf-qwvv-qjg3.json b/advisories/unreviewed/2022/05/GHSA-pcwf-qwvv-qjg3/GHSA-pcwf-qwvv-qjg3.json index 78460367d6f..01f40967475 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcwf-qwvv-qjg3/GHSA-pcwf-qwvv-qjg3.json +++ b/advisories/unreviewed/2022/05/GHSA-pcwf-qwvv-qjg3/GHSA-pcwf-qwvv-qjg3.json @@ -7,12 +7,8 @@ "CVE-2004-0081" ], "details": "OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pf33-mp3w-9986/GHSA-pf33-mp3w-9986.json b/advisories/unreviewed/2022/05/GHSA-pf33-mp3w-9986/GHSA-pf33-mp3w-9986.json index efa8305ed72..e9ffe454092 100644 --- a/advisories/unreviewed/2022/05/GHSA-pf33-mp3w-9986/GHSA-pf33-mp3w-9986.json +++ b/advisories/unreviewed/2022/05/GHSA-pf33-mp3w-9986/GHSA-pf33-mp3w-9986.json @@ -7,12 +7,8 @@ "CVE-2006-5740" ], "details": "Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via a crafted LDAP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pf42-5v8g-g3xx/GHSA-pf42-5v8g-g3xx.json b/advisories/unreviewed/2022/05/GHSA-pf42-5v8g-g3xx/GHSA-pf42-5v8g-g3xx.json index daa35de255c..96aebfcb374 100644 --- a/advisories/unreviewed/2022/05/GHSA-pf42-5v8g-g3xx/GHSA-pf42-5v8g-g3xx.json +++ b/advisories/unreviewed/2022/05/GHSA-pf42-5v8g-g3xx/GHSA-pf42-5v8g-g3xx.json @@ -7,12 +7,8 @@ "CVE-2003-0776" ], "details": "saned in sane-backends 1.0.7 and earlier does not properly \"check the validity of the RPC numbers it gets before getting the parameters,\" with unknown consequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pffp-vc69-8j27/GHSA-pffp-vc69-8j27.json b/advisories/unreviewed/2022/05/GHSA-pffp-vc69-8j27/GHSA-pffp-vc69-8j27.json index f38735a1c32..3b501f2daf7 100644 --- a/advisories/unreviewed/2022/05/GHSA-pffp-vc69-8j27/GHSA-pffp-vc69-8j27.json +++ b/advisories/unreviewed/2022/05/GHSA-pffp-vc69-8j27/GHSA-pffp-vc69-8j27.json @@ -7,12 +7,8 @@ "CVE-2002-1598" ], "details": "Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to (1) mlclear or (2) mllock.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pfgc-jg5h-rf7c/GHSA-pfgc-jg5h-rf7c.json b/advisories/unreviewed/2022/05/GHSA-pfgc-jg5h-rf7c/GHSA-pfgc-jg5h-rf7c.json index 61ceeef4ede..98173c41d0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfgc-jg5h-rf7c/GHSA-pfgc-jg5h-rf7c.json +++ b/advisories/unreviewed/2022/05/GHSA-pfgc-jg5h-rf7c/GHSA-pfgc-jg5h-rf7c.json @@ -7,12 +7,8 @@ "CVE-2005-2134" ], "details": "The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the set-parameters ioctl on an audio device to change the block size and set the pause state to \"unpaused\" in the same ioctl, which causes a divide-by-zero error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pfx9-32mw-2rgr/GHSA-pfx9-32mw-2rgr.json b/advisories/unreviewed/2022/05/GHSA-pfx9-32mw-2rgr/GHSA-pfx9-32mw-2rgr.json index 6e8d3c0861b..b036a937478 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfx9-32mw-2rgr/GHSA-pfx9-32mw-2rgr.json +++ b/advisories/unreviewed/2022/05/GHSA-pfx9-32mw-2rgr/GHSA-pfx9-32mw-2rgr.json @@ -7,12 +7,8 @@ "CVE-2002-2199" ], "details": "The default aide.conf file in Advanced Intrusion Detection Environment (AIDE) before 0.7_1 on FreeBSD before 2002-08-28 does not properly check subdirectories, which could allow local users to bypass detection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pg4x-mm39-59q8/GHSA-pg4x-mm39-59q8.json b/advisories/unreviewed/2022/05/GHSA-pg4x-mm39-59q8/GHSA-pg4x-mm39-59q8.json index bbaaf880842..828e26b5a17 100644 --- a/advisories/unreviewed/2022/05/GHSA-pg4x-mm39-59q8/GHSA-pg4x-mm39-59q8.json +++ b/advisories/unreviewed/2022/05/GHSA-pg4x-mm39-59q8/GHSA-pg4x-mm39-59q8.json @@ -7,12 +7,8 @@ "CVE-2006-3802" ], "details": "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -240,9 +236,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pg87-fxp9-w848/GHSA-pg87-fxp9-w848.json b/advisories/unreviewed/2022/05/GHSA-pg87-fxp9-w848/GHSA-pg87-fxp9-w848.json index 65e5b5965f6..cd7b02c1914 100644 --- a/advisories/unreviewed/2022/05/GHSA-pg87-fxp9-w848/GHSA-pg87-fxp9-w848.json +++ b/advisories/unreviewed/2022/05/GHSA-pg87-fxp9-w848/GHSA-pg87-fxp9-w848.json @@ -7,12 +7,8 @@ "CVE-2006-3242" ], "details": "Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces received from the IMAP server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pgxv-x8c2-8f48/GHSA-pgxv-x8c2-8f48.json b/advisories/unreviewed/2022/05/GHSA-pgxv-x8c2-8f48/GHSA-pgxv-x8c2-8f48.json index 3940ad4a11b..4f65e216c27 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgxv-x8c2-8f48/GHSA-pgxv-x8c2-8f48.json +++ b/advisories/unreviewed/2022/05/GHSA-pgxv-x8c2-8f48/GHSA-pgxv-x8c2-8f48.json @@ -7,12 +7,8 @@ "CVE-2006-0747" ], "details": "Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ph6p-3j2f-xq2g/GHSA-ph6p-3j2f-xq2g.json b/advisories/unreviewed/2022/05/GHSA-ph6p-3j2f-xq2g/GHSA-ph6p-3j2f-xq2g.json index f84dd7db985..ad202721d9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-ph6p-3j2f-xq2g/GHSA-ph6p-3j2f-xq2g.json +++ b/advisories/unreviewed/2022/05/GHSA-ph6p-3j2f-xq2g/GHSA-ph6p-3j2f-xq2g.json @@ -7,12 +7,8 @@ "CVE-2004-0112" ], "details": "The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -128,9 +124,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ph8j-5f3x-v435/GHSA-ph8j-5f3x-v435.json b/advisories/unreviewed/2022/05/GHSA-ph8j-5f3x-v435/GHSA-ph8j-5f3x-v435.json index 6614d5b2a4e..18e439dc44c 100644 --- a/advisories/unreviewed/2022/05/GHSA-ph8j-5f3x-v435/GHSA-ph8j-5f3x-v435.json +++ b/advisories/unreviewed/2022/05/GHSA-ph8j-5f3x-v435/GHSA-ph8j-5f3x-v435.json @@ -7,12 +7,8 @@ "CVE-2003-0386" ], "details": "OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass \"from=\" and \"user@host\" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pjf2-ggxp-rg8p/GHSA-pjf2-ggxp-rg8p.json b/advisories/unreviewed/2022/05/GHSA-pjf2-ggxp-rg8p/GHSA-pjf2-ggxp-rg8p.json index 217b3eff24f..47c1fa1b9c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjf2-ggxp-rg8p/GHSA-pjf2-ggxp-rg8p.json +++ b/advisories/unreviewed/2022/05/GHSA-pjf2-ggxp-rg8p/GHSA-pjf2-ggxp-rg8p.json @@ -7,12 +7,8 @@ "CVE-2004-0597" ], "details": "Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -184,9 +180,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pjpw-9mvc-5cwc/GHSA-pjpw-9mvc-5cwc.json b/advisories/unreviewed/2022/05/GHSA-pjpw-9mvc-5cwc/GHSA-pjpw-9mvc-5cwc.json index 755f71644b8..ecf404a91a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjpw-9mvc-5cwc/GHSA-pjpw-9mvc-5cwc.json +++ b/advisories/unreviewed/2022/05/GHSA-pjpw-9mvc-5cwc/GHSA-pjpw-9mvc-5cwc.json @@ -7,12 +7,8 @@ "CVE-2009-0688" ], "details": "Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pjw2-8x38-jc3c/GHSA-pjw2-8x38-jc3c.json b/advisories/unreviewed/2022/05/GHSA-pjw2-8x38-jc3c/GHSA-pjw2-8x38-jc3c.json index 0e3cd9ea199..2e4b874e613 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjw2-8x38-jc3c/GHSA-pjw2-8x38-jc3c.json +++ b/advisories/unreviewed/2022/05/GHSA-pjw2-8x38-jc3c/GHSA-pjw2-8x38-jc3c.json @@ -7,12 +7,8 @@ "CVE-2006-0433" ], "details": "Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service (infinite loop).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pm7p-h6w7-hvg5/GHSA-pm7p-h6w7-hvg5.json b/advisories/unreviewed/2022/05/GHSA-pm7p-h6w7-hvg5/GHSA-pm7p-h6w7-hvg5.json index 55a6517f08a..1eb51b7ff25 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm7p-h6w7-hvg5/GHSA-pm7p-h6w7-hvg5.json +++ b/advisories/unreviewed/2022/05/GHSA-pm7p-h6w7-hvg5/GHSA-pm7p-h6w7-hvg5.json @@ -7,12 +7,8 @@ "CVE-2006-0098" ], "details": "The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pm99-m8ww-5fw3/GHSA-pm99-m8ww-5fw3.json b/advisories/unreviewed/2022/05/GHSA-pm99-m8ww-5fw3/GHSA-pm99-m8ww-5fw3.json index acbda596132..df88378a1e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm99-m8ww-5fw3/GHSA-pm99-m8ww-5fw3.json +++ b/advisories/unreviewed/2022/05/GHSA-pm99-m8ww-5fw3/GHSA-pm99-m8ww-5fw3.json @@ -7,12 +7,8 @@ "CVE-2006-0195" ], "details": "Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) \"/*\" and \"*/\" comments, or (2) a newline in a \"url\" specifier, which is processed by certain web browsers including Internet Explorer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pmg9-q8pq-2g6h/GHSA-pmg9-q8pq-2g6h.json b/advisories/unreviewed/2022/05/GHSA-pmg9-q8pq-2g6h/GHSA-pmg9-q8pq-2g6h.json index 2e1e3a2a9a6..8b8a791c409 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmg9-q8pq-2g6h/GHSA-pmg9-q8pq-2g6h.json +++ b/advisories/unreviewed/2022/05/GHSA-pmg9-q8pq-2g6h/GHSA-pmg9-q8pq-2g6h.json @@ -7,12 +7,8 @@ "CVE-2006-0019" ], "details": "Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pmqf-rc4m-6f55/GHSA-pmqf-rc4m-6f55.json b/advisories/unreviewed/2022/05/GHSA-pmqf-rc4m-6f55/GHSA-pmqf-rc4m-6f55.json index 0ea915dc0c0..da78e3b0a26 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmqf-rc4m-6f55/GHSA-pmqf-rc4m-6f55.json +++ b/advisories/unreviewed/2022/05/GHSA-pmqf-rc4m-6f55/GHSA-pmqf-rc4m-6f55.json @@ -7,12 +7,8 @@ "CVE-2005-0988" ], "details": "Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pp33-jv3m-3jch/GHSA-pp33-jv3m-3jch.json b/advisories/unreviewed/2022/05/GHSA-pp33-jv3m-3jch/GHSA-pp33-jv3m-3jch.json index e1ce5790aa9..d825653d256 100644 --- a/advisories/unreviewed/2022/05/GHSA-pp33-jv3m-3jch/GHSA-pp33-jv3m-3jch.json +++ b/advisories/unreviewed/2022/05/GHSA-pp33-jv3m-3jch/GHSA-pp33-jv3m-3jch.json @@ -7,12 +7,8 @@ "CVE-2006-1529" ], "details": "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pr2f-jh2p-p39m/GHSA-pr2f-jh2p-p39m.json b/advisories/unreviewed/2022/05/GHSA-pr2f-jh2p-p39m/GHSA-pr2f-jh2p-p39m.json index 66f7649fcdb..0d299d9d848 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr2f-jh2p-p39m/GHSA-pr2f-jh2p-p39m.json +++ b/advisories/unreviewed/2022/05/GHSA-pr2f-jh2p-p39m/GHSA-pr2f-jh2p-p39m.json @@ -7,12 +7,8 @@ "CVE-2005-3185" ], "details": "Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pr85-6mjj-rj93/GHSA-pr85-6mjj-rj93.json b/advisories/unreviewed/2022/05/GHSA-pr85-6mjj-rj93/GHSA-pr85-6mjj-rj93.json index 65795eea02e..3e5fa8f36c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr85-6mjj-rj93/GHSA-pr85-6mjj-rj93.json +++ b/advisories/unreviewed/2022/05/GHSA-pr85-6mjj-rj93/GHSA-pr85-6mjj-rj93.json @@ -7,12 +7,8 @@ "CVE-2006-4338" ], "details": "unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -244,9 +240,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-prrq-w62p-245h/GHSA-prrq-w62p-245h.json b/advisories/unreviewed/2022/05/GHSA-prrq-w62p-245h/GHSA-prrq-w62p-245h.json index 42ceb9aa3c3..a66c8fb8d17 100644 --- a/advisories/unreviewed/2022/05/GHSA-prrq-w62p-245h/GHSA-prrq-w62p-245h.json +++ b/advisories/unreviewed/2022/05/GHSA-prrq-w62p-245h/GHSA-prrq-w62p-245h.json @@ -7,12 +7,8 @@ "CVE-2005-2926" ], "details": "Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-prw6-j486-h64g/GHSA-prw6-j486-h64g.json b/advisories/unreviewed/2022/05/GHSA-prw6-j486-h64g/GHSA-prw6-j486-h64g.json index 292ff698832..ba74eb80274 100644 --- a/advisories/unreviewed/2022/05/GHSA-prw6-j486-h64g/GHSA-prw6-j486-h64g.json +++ b/advisories/unreviewed/2022/05/GHSA-prw6-j486-h64g/GHSA-prw6-j486-h64g.json @@ -7,12 +7,8 @@ "CVE-2004-2600" ], "details": "The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-prwf-cxjx-w992/GHSA-prwf-cxjx-w992.json b/advisories/unreviewed/2022/05/GHSA-prwf-cxjx-w992/GHSA-prwf-cxjx-w992.json index ce2a5713709..76e85654a7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-prwf-cxjx-w992/GHSA-prwf-cxjx-w992.json +++ b/advisories/unreviewed/2022/05/GHSA-prwf-cxjx-w992/GHSA-prwf-cxjx-w992.json @@ -7,12 +7,8 @@ "CVE-2006-0591" ], "details": "The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pv7m-39mr-v2jm/GHSA-pv7m-39mr-v2jm.json b/advisories/unreviewed/2022/05/GHSA-pv7m-39mr-v2jm/GHSA-pv7m-39mr-v2jm.json index 0658b069c6b..4c7d85e316d 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv7m-39mr-v2jm/GHSA-pv7m-39mr-v2jm.json +++ b/advisories/unreviewed/2022/05/GHSA-pv7m-39mr-v2jm/GHSA-pv7m-39mr-v2jm.json @@ -7,12 +7,8 @@ "CVE-2003-0963" ], "details": "Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pv8c-73v5-8vpj/GHSA-pv8c-73v5-8vpj.json b/advisories/unreviewed/2022/05/GHSA-pv8c-73v5-8vpj/GHSA-pv8c-73v5-8vpj.json index 21bcda54c39..abd72e7c9a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv8c-73v5-8vpj/GHSA-pv8c-73v5-8vpj.json +++ b/advisories/unreviewed/2022/05/GHSA-pv8c-73v5-8vpj/GHSA-pv8c-73v5-8vpj.json @@ -7,12 +7,8 @@ "CVE-2003-0848" ], "details": "Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative \"pathlen\" value to be used.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pvpx-24h7-j848/GHSA-pvpx-24h7-j848.json b/advisories/unreviewed/2022/05/GHSA-pvpx-24h7-j848/GHSA-pvpx-24h7-j848.json index 2cdd33d4772..b3891476a0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvpx-24h7-j848/GHSA-pvpx-24h7-j848.json +++ b/advisories/unreviewed/2022/05/GHSA-pvpx-24h7-j848/GHSA-pvpx-24h7-j848.json @@ -7,12 +7,8 @@ "CVE-2002-1391" ], "details": "Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pvqm-jc37-37p5/GHSA-pvqm-jc37-37p5.json b/advisories/unreviewed/2022/05/GHSA-pvqm-jc37-37p5/GHSA-pvqm-jc37-37p5.json index bbce6ecfa78..90121352681 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvqm-jc37-37p5/GHSA-pvqm-jc37-37p5.json +++ b/advisories/unreviewed/2022/05/GHSA-pvqm-jc37-37p5/GHSA-pvqm-jc37-37p5.json @@ -7,12 +7,8 @@ "CVE-2009-0590" ], "details": "The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pw9h-wwm9-4h36/GHSA-pw9h-wwm9-4h36.json b/advisories/unreviewed/2022/05/GHSA-pw9h-wwm9-4h36/GHSA-pw9h-wwm9-4h36.json index ebfb4314f6e..ee37f967f1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pw9h-wwm9-4h36/GHSA-pw9h-wwm9-4h36.json +++ b/advisories/unreviewed/2022/05/GHSA-pw9h-wwm9-4h36/GHSA-pw9h-wwm9-4h36.json @@ -7,12 +7,8 @@ "CVE-2004-0764" ], "details": "Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the \"chrome\" flag and XML User Interface Language (XUL) files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pwcc-x4h8-g74h/GHSA-pwcc-x4h8-g74h.json b/advisories/unreviewed/2022/05/GHSA-pwcc-x4h8-g74h/GHSA-pwcc-x4h8-g74h.json index 383919da79f..1ee85638e62 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwcc-x4h8-g74h/GHSA-pwcc-x4h8-g74h.json +++ b/advisories/unreviewed/2022/05/GHSA-pwcc-x4h8-g74h/GHSA-pwcc-x4h8-g74h.json @@ -7,12 +7,8 @@ "CVE-2006-0749" ], "details": "nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a \"particular sequence of HTML tags\" that leads to memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -256,9 +252,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-px9q-8f7r-rv49/GHSA-px9q-8f7r-rv49.json b/advisories/unreviewed/2022/05/GHSA-px9q-8f7r-rv49/GHSA-px9q-8f7r-rv49.json index dcc1475b0d9..fd9ba5da183 100644 --- a/advisories/unreviewed/2022/05/GHSA-px9q-8f7r-rv49/GHSA-px9q-8f7r-rv49.json +++ b/advisories/unreviewed/2022/05/GHSA-px9q-8f7r-rv49/GHSA-px9q-8f7r-rv49.json @@ -7,12 +7,8 @@ "CVE-2008-4247" ], "details": "ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q27h-3894-69mg/GHSA-q27h-3894-69mg.json b/advisories/unreviewed/2022/05/GHSA-q27h-3894-69mg/GHSA-q27h-3894-69mg.json index 7c93b74e5c5..c1b1795e268 100644 --- a/advisories/unreviewed/2022/05/GHSA-q27h-3894-69mg/GHSA-q27h-3894-69mg.json +++ b/advisories/unreviewed/2022/05/GHSA-q27h-3894-69mg/GHSA-q27h-3894-69mg.json @@ -7,12 +7,8 @@ "CVE-2005-3183" ], "details": "The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q292-6rrq-qv64/GHSA-q292-6rrq-qv64.json b/advisories/unreviewed/2022/05/GHSA-q292-6rrq-qv64/GHSA-q292-6rrq-qv64.json index 725db3a2173..119d1737f4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q292-6rrq-qv64/GHSA-q292-6rrq-qv64.json +++ b/advisories/unreviewed/2022/05/GHSA-q292-6rrq-qv64/GHSA-q292-6rrq-qv64.json @@ -7,12 +7,8 @@ "CVE-2005-1260" ], "details": "bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a \"decompression bomb\").", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2hq-vr9g-6x97/GHSA-q2hq-vr9g-6x97.json b/advisories/unreviewed/2022/05/GHSA-q2hq-vr9g-6x97/GHSA-q2hq-vr9g-6x97.json index 3e38f38709f..3bb6f14c005 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2hq-vr9g-6x97/GHSA-q2hq-vr9g-6x97.json +++ b/advisories/unreviewed/2022/05/GHSA-q2hq-vr9g-6x97/GHSA-q2hq-vr9g-6x97.json @@ -7,12 +7,8 @@ "CVE-2004-0759" ], "details": "Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q392-5rj3-249f/GHSA-q392-5rj3-249f.json b/advisories/unreviewed/2022/05/GHSA-q392-5rj3-249f/GHSA-q392-5rj3-249f.json index 53ebc4a4e02..86a37a87a3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q392-5rj3-249f/GHSA-q392-5rj3-249f.json +++ b/advisories/unreviewed/2022/05/GHSA-q392-5rj3-249f/GHSA-q392-5rj3-249f.json @@ -7,12 +7,8 @@ "CVE-2004-0109" ], "details": "Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -180,9 +176,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q4cm-p57g-9hfg/GHSA-q4cm-p57g-9hfg.json b/advisories/unreviewed/2022/05/GHSA-q4cm-p57g-9hfg/GHSA-q4cm-p57g-9hfg.json index ae835f1a6f3..fccd5cd30f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4cm-p57g-9hfg/GHSA-q4cm-p57g-9hfg.json +++ b/advisories/unreviewed/2022/05/GHSA-q4cm-p57g-9hfg/GHSA-q4cm-p57g-9hfg.json @@ -7,12 +7,8 @@ "CVE-2006-1934" ], "details": "Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) ALCAP dissector, (2) Network Instruments file code, or (3) NetXray/Windows Sniffer file code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q4qh-59mc-9fjr/GHSA-q4qh-59mc-9fjr.json b/advisories/unreviewed/2022/05/GHSA-q4qh-59mc-9fjr/GHSA-q4qh-59mc-9fjr.json index 32efbb303ae..c83329fdb2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4qh-59mc-9fjr/GHSA-q4qh-59mc-9fjr.json +++ b/advisories/unreviewed/2022/05/GHSA-q4qh-59mc-9fjr/GHSA-q4qh-59mc-9fjr.json @@ -7,12 +7,8 @@ "CVE-2005-2927" ], "details": "Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q5x9-vpfc-fjcq/GHSA-q5x9-vpfc-fjcq.json b/advisories/unreviewed/2022/05/GHSA-q5x9-vpfc-fjcq/GHSA-q5x9-vpfc-fjcq.json index 76c24fcfcfe..221381a66e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5x9-vpfc-fjcq/GHSA-q5x9-vpfc-fjcq.json +++ b/advisories/unreviewed/2022/05/GHSA-q5x9-vpfc-fjcq/GHSA-q5x9-vpfc-fjcq.json @@ -7,12 +7,8 @@ "CVE-2005-4134" ], "details": "Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -228,9 +224,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q685-268q-v69f/GHSA-q685-268q-v69f.json b/advisories/unreviewed/2022/05/GHSA-q685-268q-v69f/GHSA-q685-268q-v69f.json index 9e31419a239..4e84867b8a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-q685-268q-v69f/GHSA-q685-268q-v69f.json +++ b/advisories/unreviewed/2022/05/GHSA-q685-268q-v69f/GHSA-q685-268q-v69f.json @@ -7,12 +7,8 @@ "CVE-2004-0417" ], "details": "Integer overflow in the \"Max-dotdot\" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q7v5-vf67-fpfr/GHSA-q7v5-vf67-fpfr.json b/advisories/unreviewed/2022/05/GHSA-q7v5-vf67-fpfr/GHSA-q7v5-vf67-fpfr.json index fe867802418..9e0d3d810b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7v5-vf67-fpfr/GHSA-q7v5-vf67-fpfr.json +++ b/advisories/unreviewed/2022/05/GHSA-q7v5-vf67-fpfr/GHSA-q7v5-vf67-fpfr.json @@ -7,12 +7,8 @@ "CVE-2005-1531" ], "details": "Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via \"Wrapped\" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) \"a nested variant.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q7vf-rjwh-chxv/GHSA-q7vf-rjwh-chxv.json b/advisories/unreviewed/2022/05/GHSA-q7vf-rjwh-chxv/GHSA-q7vf-rjwh-chxv.json index fff6e64f0c7..36cd43925d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7vf-rjwh-chxv/GHSA-q7vf-rjwh-chxv.json +++ b/advisories/unreviewed/2022/05/GHSA-q7vf-rjwh-chxv/GHSA-q7vf-rjwh-chxv.json @@ -7,12 +7,8 @@ "CVE-2006-4340" ], "details": "Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q864-5rmm-c437/GHSA-q864-5rmm-c437.json b/advisories/unreviewed/2022/05/GHSA-q864-5rmm-c437/GHSA-q864-5rmm-c437.json index 707708371cc..31533e20c11 100644 --- a/advisories/unreviewed/2022/05/GHSA-q864-5rmm-c437/GHSA-q864-5rmm-c437.json +++ b/advisories/unreviewed/2022/05/GHSA-q864-5rmm-c437/GHSA-q864-5rmm-c437.json @@ -7,12 +7,8 @@ "CVE-2004-0006" ], "details": "Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -148,9 +144,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q8gg-chp9-2fpw/GHSA-q8gg-chp9-2fpw.json b/advisories/unreviewed/2022/05/GHSA-q8gg-chp9-2fpw/GHSA-q8gg-chp9-2fpw.json index f2e9a9b9aca..eeec0ecc27e 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8gg-chp9-2fpw/GHSA-q8gg-chp9-2fpw.json +++ b/advisories/unreviewed/2022/05/GHSA-q8gg-chp9-2fpw/GHSA-q8gg-chp9-2fpw.json @@ -7,12 +7,8 @@ "CVE-2003-0125" ], "details": "Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reboot) and execute arbitrary code via a long GET /OPTIONS value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q8q4-prmv-qrjp/GHSA-q8q4-prmv-qrjp.json b/advisories/unreviewed/2022/05/GHSA-q8q4-prmv-qrjp/GHSA-q8q4-prmv-qrjp.json index 0f63431939b..1696068bcbc 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8q4-prmv-qrjp/GHSA-q8q4-prmv-qrjp.json +++ b/advisories/unreviewed/2022/05/GHSA-q8q4-prmv-qrjp/GHSA-q8q4-prmv-qrjp.json @@ -7,12 +7,8 @@ "CVE-2006-1732" ], "details": "Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS) attacks via unspecified vectors involving the window.controllers array.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -220,9 +216,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q98h-p5jw-69g3/GHSA-q98h-p5jw-69g3.json b/advisories/unreviewed/2022/05/GHSA-q98h-p5jw-69g3/GHSA-q98h-p5jw-69g3.json index 949efe114e3..e8906910f10 100644 --- a/advisories/unreviewed/2022/05/GHSA-q98h-p5jw-69g3/GHSA-q98h-p5jw-69g3.json +++ b/advisories/unreviewed/2022/05/GHSA-q98h-p5jw-69g3/GHSA-q98h-p5jw-69g3.json @@ -7,12 +7,8 @@ "CVE-2009-2482" ], "details": "The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q9hw-p2pq-q4p7/GHSA-q9hw-p2pq-q4p7.json b/advisories/unreviewed/2022/05/GHSA-q9hw-p2pq-q4p7/GHSA-q9hw-p2pq-q4p7.json index b8fe85f8835..546eb3cfb1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9hw-p2pq-q4p7/GHSA-q9hw-p2pq-q4p7.json +++ b/advisories/unreviewed/2022/05/GHSA-q9hw-p2pq-q4p7/GHSA-q9hw-p2pq-q4p7.json @@ -7,12 +7,8 @@ "CVE-2002-0640" ], "details": "Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qc6m-vfp3-h4f4/GHSA-qc6m-vfp3-h4f4.json b/advisories/unreviewed/2022/05/GHSA-qc6m-vfp3-h4f4/GHSA-qc6m-vfp3-h4f4.json index 82893273733..0066a40a49b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc6m-vfp3-h4f4/GHSA-qc6m-vfp3-h4f4.json +++ b/advisories/unreviewed/2022/05/GHSA-qc6m-vfp3-h4f4/GHSA-qc6m-vfp3-h4f4.json @@ -7,12 +7,8 @@ "CVE-2006-1733" ], "details": "Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the (1) valueOf.call or (2) valueOf.apply methods of an XBL binding, or (3) \"by inserting an XBL method into the DOM's document.body prototype chain.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -240,9 +236,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qf2w-6gx5-q88j/GHSA-qf2w-6gx5-q88j.json b/advisories/unreviewed/2022/05/GHSA-qf2w-6gx5-q88j/GHSA-qf2w-6gx5-q88j.json index 6fbc3641d43..d18f1d79f51 100644 --- a/advisories/unreviewed/2022/05/GHSA-qf2w-6gx5-q88j/GHSA-qf2w-6gx5-q88j.json +++ b/advisories/unreviewed/2022/05/GHSA-qf2w-6gx5-q88j/GHSA-qf2w-6gx5-q88j.json @@ -7,12 +7,8 @@ "CVE-2002-1365" ], "details": "Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the \"@\" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgm4-wx5q-868f/GHSA-qgm4-wx5q-868f.json b/advisories/unreviewed/2022/05/GHSA-qgm4-wx5q-868f/GHSA-qgm4-wx5q-868f.json index d89b1e44d1d..705bfb0eccc 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgm4-wx5q-868f/GHSA-qgm4-wx5q-868f.json +++ b/advisories/unreviewed/2022/05/GHSA-qgm4-wx5q-868f/GHSA-qgm4-wx5q-868f.json @@ -7,12 +7,8 @@ "CVE-2006-3627" ], "details": "Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qgpg-f5p7-6q84/GHSA-qgpg-f5p7-6q84.json b/advisories/unreviewed/2022/05/GHSA-qgpg-f5p7-6q84/GHSA-qgpg-f5p7-6q84.json index 5fa066ec86b..05c9dec239d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgpg-f5p7-6q84/GHSA-qgpg-f5p7-6q84.json +++ b/advisories/unreviewed/2022/05/GHSA-qgpg-f5p7-6q84/GHSA-qgpg-f5p7-6q84.json @@ -7,12 +7,8 @@ "CVE-2002-1265" ], "details": "The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qh7v-rx83-4crp/GHSA-qh7v-rx83-4crp.json b/advisories/unreviewed/2022/05/GHSA-qh7v-rx83-4crp/GHSA-qh7v-rx83-4crp.json index bd0951c2c91..47f6c6ad78e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qh7v-rx83-4crp/GHSA-qh7v-rx83-4crp.json +++ b/advisories/unreviewed/2022/05/GHSA-qh7v-rx83-4crp/GHSA-qh7v-rx83-4crp.json @@ -7,12 +7,8 @@ "CVE-2003-1040" ], "details": "kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qhjf-94rc-w8jc/GHSA-qhjf-94rc-w8jc.json b/advisories/unreviewed/2022/05/GHSA-qhjf-94rc-w8jc/GHSA-qhjf-94rc-w8jc.json index ea56b39b435..4d4441dd217 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhjf-94rc-w8jc/GHSA-qhjf-94rc-w8jc.json +++ b/advisories/unreviewed/2022/05/GHSA-qhjf-94rc-w8jc/GHSA-qhjf-94rc-w8jc.json @@ -7,12 +7,8 @@ "CVE-2006-1935" ], "details": "Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the COPS dissector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qhvp-f78p-g96p/GHSA-qhvp-f78p-g96p.json b/advisories/unreviewed/2022/05/GHSA-qhvp-f78p-g96p/GHSA-qhvp-f78p-g96p.json index 705fe6bbba4..2e5aef3443c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhvp-f78p-g96p/GHSA-qhvp-f78p-g96p.json +++ b/advisories/unreviewed/2022/05/GHSA-qhvp-f78p-g96p/GHSA-qhvp-f78p-g96p.json @@ -7,12 +7,8 @@ "CVE-2007-0957" ], "details": "Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjr4-6mch-8mc9/GHSA-qjr4-6mch-8mc9.json b/advisories/unreviewed/2022/05/GHSA-qjr4-6mch-8mc9/GHSA-qjr4-6mch-8mc9.json index bd07f537ebe..1172bfa4d19 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjr4-6mch-8mc9/GHSA-qjr4-6mch-8mc9.json +++ b/advisories/unreviewed/2022/05/GHSA-qjr4-6mch-8mc9/GHSA-qjr4-6mch-8mc9.json @@ -7,12 +7,8 @@ "CVE-2003-0473" ], "details": "Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qjrp-xgm3-mxhj/GHSA-qjrp-xgm3-mxhj.json b/advisories/unreviewed/2022/05/GHSA-qjrp-xgm3-mxhj/GHSA-qjrp-xgm3-mxhj.json index 5d4dbf7925d..76d2627ccab 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjrp-xgm3-mxhj/GHSA-qjrp-xgm3-mxhj.json +++ b/advisories/unreviewed/2022/05/GHSA-qjrp-xgm3-mxhj/GHSA-qjrp-xgm3-mxhj.json @@ -7,12 +7,8 @@ "CVE-2006-3812" ], "details": "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -200,9 +196,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qm2w-x4c4-rq55/GHSA-qm2w-x4c4-rq55.json b/advisories/unreviewed/2022/05/GHSA-qm2w-x4c4-rq55/GHSA-qm2w-x4c4-rq55.json index a733a5a3e28..b0769e6ee19 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm2w-x4c4-rq55/GHSA-qm2w-x4c4-rq55.json +++ b/advisories/unreviewed/2022/05/GHSA-qm2w-x4c4-rq55/GHSA-qm2w-x4c4-rq55.json @@ -7,12 +7,8 @@ "CVE-2005-2798" ], "details": "sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qmvp-2m2m-rm8h/GHSA-qmvp-2m2m-rm8h.json b/advisories/unreviewed/2022/05/GHSA-qmvp-2m2m-rm8h/GHSA-qmvp-2m2m-rm8h.json index 2ff52987419..43bb8ac12e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-qmvp-2m2m-rm8h/GHSA-qmvp-2m2m-rm8h.json +++ b/advisories/unreviewed/2022/05/GHSA-qmvp-2m2m-rm8h/GHSA-qmvp-2m2m-rm8h.json @@ -7,12 +7,8 @@ "CVE-2002-1323" ], "details": "Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qp4j-3v3v-gvgq/GHSA-qp4j-3v3v-gvgq.json b/advisories/unreviewed/2022/05/GHSA-qp4j-3v3v-gvgq/GHSA-qp4j-3v3v-gvgq.json index abf99ed45a4..ed2b974ba11 100644 --- a/advisories/unreviewed/2022/05/GHSA-qp4j-3v3v-gvgq/GHSA-qp4j-3v3v-gvgq.json +++ b/advisories/unreviewed/2022/05/GHSA-qp4j-3v3v-gvgq/GHSA-qp4j-3v3v-gvgq.json @@ -7,12 +7,8 @@ "CVE-2007-0994" ], "details": "A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qp7f-3c43-g3jh/GHSA-qp7f-3c43-g3jh.json b/advisories/unreviewed/2022/05/GHSA-qp7f-3c43-g3jh/GHSA-qp7f-3c43-g3jh.json index e463eaa5542..31f002b93d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-qp7f-3c43-g3jh/GHSA-qp7f-3c43-g3jh.json +++ b/advisories/unreviewed/2022/05/GHSA-qp7f-3c43-g3jh/GHSA-qp7f-3c43-g3jh.json @@ -7,12 +7,8 @@ "CVE-2004-0801" ], "details": "Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qppf-5wcp-vjwc/GHSA-qppf-5wcp-vjwc.json b/advisories/unreviewed/2022/05/GHSA-qppf-5wcp-vjwc/GHSA-qppf-5wcp-vjwc.json index 289a83d2047..7487960d03a 100644 --- a/advisories/unreviewed/2022/05/GHSA-qppf-5wcp-vjwc/GHSA-qppf-5wcp-vjwc.json +++ b/advisories/unreviewed/2022/05/GHSA-qppf-5wcp-vjwc/GHSA-qppf-5wcp-vjwc.json @@ -7,12 +7,8 @@ "CVE-2005-0176" ], "details": "The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qpr6-prp3-323r/GHSA-qpr6-prp3-323r.json b/advisories/unreviewed/2022/05/GHSA-qpr6-prp3-323r/GHSA-qpr6-prp3-323r.json index b2d52ceb3cc..180eb53fbeb 100644 --- a/advisories/unreviewed/2022/05/GHSA-qpr6-prp3-323r/GHSA-qpr6-prp3-323r.json +++ b/advisories/unreviewed/2022/05/GHSA-qpr6-prp3-323r/GHSA-qpr6-prp3-323r.json @@ -7,12 +7,8 @@ "CVE-2005-0085" ], "details": "Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qq7m-chhg-7qf3/GHSA-qq7m-chhg-7qf3.json b/advisories/unreviewed/2022/05/GHSA-qq7m-chhg-7qf3/GHSA-qq7m-chhg-7qf3.json index 7284a7e9e75..da7bdd156ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq7m-chhg-7qf3/GHSA-qq7m-chhg-7qf3.json +++ b/advisories/unreviewed/2022/05/GHSA-qq7m-chhg-7qf3/GHSA-qq7m-chhg-7qf3.json @@ -7,12 +7,8 @@ "CVE-2004-0794" ], "details": "Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qr6w-8m4j-52r2/GHSA-qr6w-8m4j-52r2.json b/advisories/unreviewed/2022/05/GHSA-qr6w-8m4j-52r2/GHSA-qr6w-8m4j-52r2.json index 5f7e40794f0..9178650cd9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qr6w-8m4j-52r2/GHSA-qr6w-8m4j-52r2.json +++ b/advisories/unreviewed/2022/05/GHSA-qr6w-8m4j-52r2/GHSA-qr6w-8m4j-52r2.json @@ -7,12 +7,8 @@ "CVE-2006-3746" ], "details": "Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -160,9 +156,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qrfc-r8pv-4g98/GHSA-qrfc-r8pv-4g98.json b/advisories/unreviewed/2022/05/GHSA-qrfc-r8pv-4g98/GHSA-qrfc-r8pv-4g98.json index 55494e2d3a2..fba3cb40d17 100644 --- a/advisories/unreviewed/2022/05/GHSA-qrfc-r8pv-4g98/GHSA-qrfc-r8pv-4g98.json +++ b/advisories/unreviewed/2022/05/GHSA-qrfc-r8pv-4g98/GHSA-qrfc-r8pv-4g98.json @@ -7,12 +7,8 @@ "CVE-2006-2025" ], "details": "Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qrx9-fjwj-734r/GHSA-qrx9-fjwj-734r.json b/advisories/unreviewed/2022/05/GHSA-qrx9-fjwj-734r/GHSA-qrx9-fjwj-734r.json index 6ff6a1c1b0d..3d24177c34e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qrx9-fjwj-734r/GHSA-qrx9-fjwj-734r.json +++ b/advisories/unreviewed/2022/05/GHSA-qrx9-fjwj-734r/GHSA-qrx9-fjwj-734r.json @@ -7,12 +7,8 @@ "CVE-2006-5007" ], "details": "Untrusted search path vulnerability in uucp in IBM AIX 5.2.0 and 5.3.0 allows local users to local users to gain privileges via a Trojan horse program involving uux.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qv5f-9fxj-3g5c/GHSA-qv5f-9fxj-3g5c.json b/advisories/unreviewed/2022/05/GHSA-qv5f-9fxj-3g5c/GHSA-qv5f-9fxj-3g5c.json index 4b0f5a66c37..5b4a9f4a08b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qv5f-9fxj-3g5c/GHSA-qv5f-9fxj-3g5c.json +++ b/advisories/unreviewed/2022/05/GHSA-qv5f-9fxj-3g5c/GHSA-qv5f-9fxj-3g5c.json @@ -7,12 +7,8 @@ "CVE-2002-1543" ], "details": "Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvgh-wc5w-3447/GHSA-qvgh-wc5w-3447.json b/advisories/unreviewed/2022/05/GHSA-qvgh-wc5w-3447/GHSA-qvgh-wc5w-3447.json index b189dd34414..a55c2f6ad4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvgh-wc5w-3447/GHSA-qvgh-wc5w-3447.json +++ b/advisories/unreviewed/2022/05/GHSA-qvgh-wc5w-3447/GHSA-qvgh-wc5w-3447.json @@ -7,12 +7,8 @@ "CVE-2004-1066" ], "details": "The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2 separate items in the future.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvjj-23hg-238h/GHSA-qvjj-23hg-238h.json b/advisories/unreviewed/2022/05/GHSA-qvjj-23hg-238h/GHSA-qvjj-23hg-238h.json index fc5e93e0b19..60eea05df09 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvjj-23hg-238h/GHSA-qvjj-23hg-238h.json +++ b/advisories/unreviewed/2022/05/GHSA-qvjj-23hg-238h/GHSA-qvjj-23hg-238h.json @@ -7,12 +7,8 @@ "CVE-2004-0396" ], "details": "Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvpq-g6pg-2h67/GHSA-qvpq-g6pg-2h67.json b/advisories/unreviewed/2022/05/GHSA-qvpq-g6pg-2h67/GHSA-qvpq-g6pg-2h67.json index 06808eac701..f3a0e3e517c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvpq-g6pg-2h67/GHSA-qvpq-g6pg-2h67.json +++ b/advisories/unreviewed/2022/05/GHSA-qvpq-g6pg-2h67/GHSA-qvpq-g6pg-2h67.json @@ -7,12 +7,8 @@ "CVE-2006-3808" ], "details": "Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -236,9 +232,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qwvx-3rjq-gj2g/GHSA-qwvx-3rjq-gj2g.json b/advisories/unreviewed/2022/05/GHSA-qwvx-3rjq-gj2g/GHSA-qwvx-3rjq-gj2g.json index dbcd120226c..c6e1b5605a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwvx-3rjq-gj2g/GHSA-qwvx-3rjq-gj2g.json +++ b/advisories/unreviewed/2022/05/GHSA-qwvx-3rjq-gj2g/GHSA-qwvx-3rjq-gj2g.json @@ -7,12 +7,8 @@ "CVE-2015-2736" ], "details": "The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qxmx-9x27-fp8j/GHSA-qxmx-9x27-fp8j.json b/advisories/unreviewed/2022/05/GHSA-qxmx-9x27-fp8j/GHSA-qxmx-9x27-fp8j.json index bd3f02c7b5a..252bfab42ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxmx-9x27-fp8j/GHSA-qxmx-9x27-fp8j.json +++ b/advisories/unreviewed/2022/05/GHSA-qxmx-9x27-fp8j/GHSA-qxmx-9x27-fp8j.json @@ -7,12 +7,8 @@ "CVE-2005-2558" ], "details": "Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qxx9-28p4-39v8/GHSA-qxx9-28p4-39v8.json b/advisories/unreviewed/2022/05/GHSA-qxx9-28p4-39v8/GHSA-qxx9-28p4-39v8.json index f41812a48d1..46abfb7402f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxx9-28p4-39v8/GHSA-qxx9-28p4-39v8.json +++ b/advisories/unreviewed/2022/05/GHSA-qxx9-28p4-39v8/GHSA-qxx9-28p4-39v8.json @@ -7,12 +7,8 @@ "CVE-2003-0085" ], "details": "Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r225-pcvh-8cpq/GHSA-r225-pcvh-8cpq.json b/advisories/unreviewed/2022/05/GHSA-r225-pcvh-8cpq/GHSA-r225-pcvh-8cpq.json index 339cf621f71..5dad68fed80 100644 --- a/advisories/unreviewed/2022/05/GHSA-r225-pcvh-8cpq/GHSA-r225-pcvh-8cpq.json +++ b/advisories/unreviewed/2022/05/GHSA-r225-pcvh-8cpq/GHSA-r225-pcvh-8cpq.json @@ -7,12 +7,8 @@ "CVE-2003-0966" ], "details": "Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r23f-ff9f-8vcc/GHSA-r23f-ff9f-8vcc.json b/advisories/unreviewed/2022/05/GHSA-r23f-ff9f-8vcc/GHSA-r23f-ff9f-8vcc.json index a581b4db6a1..f797f3400d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r23f-ff9f-8vcc/GHSA-r23f-ff9f-8vcc.json +++ b/advisories/unreviewed/2022/05/GHSA-r23f-ff9f-8vcc/GHSA-r23f-ff9f-8vcc.json @@ -7,12 +7,8 @@ "CVE-2003-0746" ], "details": "Various Distributed Computing Environment (DCE) implementations, including HP OpenView, allow remote attackers to cause a denial of service (process hang or termination) via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such as the Blaster/MSblast/LovSAN worm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r2r9-xr4w-r49c/GHSA-r2r9-xr4w-r49c.json b/advisories/unreviewed/2022/05/GHSA-r2r9-xr4w-r49c/GHSA-r2r9-xr4w-r49c.json index b5994442c81..0aad1fdc717 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2r9-xr4w-r49c/GHSA-r2r9-xr4w-r49c.json +++ b/advisories/unreviewed/2022/05/GHSA-r2r9-xr4w-r49c/GHSA-r2r9-xr4w-r49c.json @@ -7,12 +7,8 @@ "CVE-2004-0797" ], "details": "The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r37c-hqc8-2f3v/GHSA-r37c-hqc8-2f3v.json b/advisories/unreviewed/2022/05/GHSA-r37c-hqc8-2f3v/GHSA-r37c-hqc8-2f3v.json index a2eae237370..e9d9ef187e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-r37c-hqc8-2f3v/GHSA-r37c-hqc8-2f3v.json +++ b/advisories/unreviewed/2022/05/GHSA-r37c-hqc8-2f3v/GHSA-r37c-hqc8-2f3v.json @@ -7,12 +7,8 @@ "CVE-2002-2222" ], "details": "isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (crash) by sending Internet Key Exchange (IKE) payloads out of sequence.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r3hj-67hc-ghvr/GHSA-r3hj-67hc-ghvr.json b/advisories/unreviewed/2022/05/GHSA-r3hj-67hc-ghvr/GHSA-r3hj-67hc-ghvr.json index e36ab29738a..cd6b15c8e4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3hj-67hc-ghvr/GHSA-r3hj-67hc-ghvr.json +++ b/advisories/unreviewed/2022/05/GHSA-r3hj-67hc-ghvr/GHSA-r3hj-67hc-ghvr.json @@ -7,12 +7,8 @@ "CVE-2006-1167" ], "details": "SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r4jv-xp6w-68qp/GHSA-r4jv-xp6w-68qp.json b/advisories/unreviewed/2022/05/GHSA-r4jv-xp6w-68qp/GHSA-r4jv-xp6w-68qp.json index bfb24a6be2f..82607218d08 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4jv-xp6w-68qp/GHSA-r4jv-xp6w-68qp.json +++ b/advisories/unreviewed/2022/05/GHSA-r4jv-xp6w-68qp/GHSA-r4jv-xp6w-68qp.json @@ -7,12 +7,8 @@ "CVE-2002-1235" ], "details": "The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5gq-7c27-jhm8/GHSA-r5gq-7c27-jhm8.json b/advisories/unreviewed/2022/05/GHSA-r5gq-7c27-jhm8/GHSA-r5gq-7c27-jhm8.json index 5be6d9c43cb..da7e199d795 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5gq-7c27-jhm8/GHSA-r5gq-7c27-jhm8.json +++ b/advisories/unreviewed/2022/05/GHSA-r5gq-7c27-jhm8/GHSA-r5gq-7c27-jhm8.json @@ -7,12 +7,8 @@ "CVE-2005-1160" ], "details": "The privileged \"chrome\" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5rf-93rj-rvfq/GHSA-r5rf-93rj-rvfq.json b/advisories/unreviewed/2022/05/GHSA-r5rf-93rj-rvfq/GHSA-r5rf-93rj-rvfq.json index f1f28395b69..ae8d03d4d04 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5rf-93rj-rvfq/GHSA-r5rf-93rj-rvfq.json +++ b/advisories/unreviewed/2022/05/GHSA-r5rf-93rj-rvfq/GHSA-r5rf-93rj-rvfq.json @@ -7,12 +7,8 @@ "CVE-2006-6654" ], "details": "The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers to cause a denial of service (kernel panic) via an invalid msg_controllen parameter to the sendit function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r65w-cgpx-8r29/GHSA-r65w-cgpx-8r29.json b/advisories/unreviewed/2022/05/GHSA-r65w-cgpx-8r29/GHSA-r65w-cgpx-8r29.json index 5104eaaff01..140fc17a2dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-r65w-cgpx-8r29/GHSA-r65w-cgpx-8r29.json +++ b/advisories/unreviewed/2022/05/GHSA-r65w-cgpx-8r29/GHSA-r65w-cgpx-8r29.json @@ -7,12 +7,8 @@ "CVE-2006-6655" ], "details": "The procfs implementation in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (kernel panic) by attempting to access /emul/linux/proc/0/stat on a procfs filesystem that was mounted with mount_procfs -o linux, which results in a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r677-35c3-7hmg/GHSA-r677-35c3-7hmg.json b/advisories/unreviewed/2022/05/GHSA-r677-35c3-7hmg/GHSA-r677-35c3-7hmg.json index 566f466afd8..d9284997f7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-r677-35c3-7hmg/GHSA-r677-35c3-7hmg.json +++ b/advisories/unreviewed/2022/05/GHSA-r677-35c3-7hmg/GHSA-r677-35c3-7hmg.json @@ -7,12 +7,8 @@ "CVE-2006-1735" ], "details": "Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -240,9 +236,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r67j-rqm9-w8mr/GHSA-r67j-rqm9-w8mr.json b/advisories/unreviewed/2022/05/GHSA-r67j-rqm9-w8mr/GHSA-r67j-rqm9-w8mr.json index a2e61f5fe4c..b56b23d98d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-r67j-rqm9-w8mr/GHSA-r67j-rqm9-w8mr.json +++ b/advisories/unreviewed/2022/05/GHSA-r67j-rqm9-w8mr/GHSA-r67j-rqm9-w8mr.json @@ -7,12 +7,8 @@ "CVE-2002-1350" ], "details": "The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r6gj-g9qf-3c55/GHSA-r6gj-g9qf-3c55.json b/advisories/unreviewed/2022/05/GHSA-r6gj-g9qf-3c55/GHSA-r6gj-g9qf-3c55.json index dfd8fff71e4..a70b1ba3996 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6gj-g9qf-3c55/GHSA-r6gj-g9qf-3c55.json +++ b/advisories/unreviewed/2022/05/GHSA-r6gj-g9qf-3c55/GHSA-r6gj-g9qf-3c55.json @@ -7,12 +7,8 @@ "CVE-2005-0356" ], "details": "Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r6rx-rqmj-9cq5/GHSA-r6rx-rqmj-9cq5.json b/advisories/unreviewed/2022/05/GHSA-r6rx-rqmj-9cq5/GHSA-r6rx-rqmj-9cq5.json index 8bfc9622d00..63944d2fcec 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6rx-rqmj-9cq5/GHSA-r6rx-rqmj-9cq5.json +++ b/advisories/unreviewed/2022/05/GHSA-r6rx-rqmj-9cq5/GHSA-r6rx-rqmj-9cq5.json @@ -7,12 +7,8 @@ "CVE-2004-0482" ], "details": "Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r7qv-r86r-qrqf/GHSA-r7qv-r86r-qrqf.json b/advisories/unreviewed/2022/05/GHSA-r7qv-r86r-qrqf/GHSA-r7qv-r86r-qrqf.json index 118ec1a44b4..1206e982ef5 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7qv-r86r-qrqf/GHSA-r7qv-r86r-qrqf.json +++ b/advisories/unreviewed/2022/05/GHSA-r7qv-r86r-qrqf/GHSA-r7qv-r86r-qrqf.json @@ -7,12 +7,8 @@ "CVE-2009-0687" ], "details": "The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r87q-q7hx-24jg/GHSA-r87q-q7hx-24jg.json b/advisories/unreviewed/2022/05/GHSA-r87q-q7hx-24jg/GHSA-r87q-q7hx-24jg.json index ab41cdd200f..06dc98901b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r87q-q7hx-24jg/GHSA-r87q-q7hx-24jg.json +++ b/advisories/unreviewed/2022/05/GHSA-r87q-q7hx-24jg/GHSA-r87q-q7hx-24jg.json @@ -7,12 +7,8 @@ "CVE-2005-1704" ], "details": "Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -168,9 +164,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r8hv-9qwq-p9w3/GHSA-r8hv-9qwq-p9w3.json b/advisories/unreviewed/2022/05/GHSA-r8hv-9qwq-p9w3/GHSA-r8hv-9qwq-p9w3.json index 43b100344c1..e6ce1095c1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8hv-9qwq-p9w3/GHSA-r8hv-9qwq-p9w3.json +++ b/advisories/unreviewed/2022/05/GHSA-r8hv-9qwq-p9w3/GHSA-r8hv-9qwq-p9w3.json @@ -7,12 +7,8 @@ "CVE-2004-0510" ], "details": "Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r99q-hjh5-368x/GHSA-r99q-hjh5-368x.json b/advisories/unreviewed/2022/05/GHSA-r99q-hjh5-368x/GHSA-r99q-hjh5-368x.json index f2631bc76af..cbfbf5481f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-r99q-hjh5-368x/GHSA-r99q-hjh5-368x.json +++ b/advisories/unreviewed/2022/05/GHSA-r99q-hjh5-368x/GHSA-r99q-hjh5-368x.json @@ -7,12 +7,8 @@ "CVE-2003-0680" ], "details": "Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r9rm-x6jp-8r54/GHSA-r9rm-x6jp-8r54.json b/advisories/unreviewed/2022/05/GHSA-r9rm-x6jp-8r54/GHSA-r9rm-x6jp-8r54.json index 6533197e2d8..45389b071a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9rm-x6jp-8r54/GHSA-r9rm-x6jp-8r54.json +++ b/advisories/unreviewed/2022/05/GHSA-r9rm-x6jp-8r54/GHSA-r9rm-x6jp-8r54.json @@ -7,12 +7,8 @@ "CVE-2008-3958" ], "details": "IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. NOTE: this may overlap CVE-2008-3858. NOTE: this issue exists because of an incomplete fix for CVE-2008-3959.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rcgr-jhj7-cx8m/GHSA-rcgr-jhj7-cx8m.json b/advisories/unreviewed/2022/05/GHSA-rcgr-jhj7-cx8m/GHSA-rcgr-jhj7-cx8m.json index b872d9d2e90..fb65f8a6144 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcgr-jhj7-cx8m/GHSA-rcgr-jhj7-cx8m.json +++ b/advisories/unreviewed/2022/05/GHSA-rcgr-jhj7-cx8m/GHSA-rcgr-jhj7-cx8m.json @@ -7,12 +7,8 @@ "CVE-2003-0086" ], "details": "The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rf8c-7g59-3m3m/GHSA-rf8c-7g59-3m3m.json b/advisories/unreviewed/2022/05/GHSA-rf8c-7g59-3m3m/GHSA-rf8c-7g59-3m3m.json index e46bad0dc3f..3755f07dc62 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf8c-7g59-3m3m/GHSA-rf8c-7g59-3m3m.json +++ b/advisories/unreviewed/2022/05/GHSA-rf8c-7g59-3m3m/GHSA-rf8c-7g59-3m3m.json @@ -7,12 +7,8 @@ "CVE-2009-1387" ], "details": "The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rfjx-5fv4-2g47/GHSA-rfjx-5fv4-2g47.json b/advisories/unreviewed/2022/05/GHSA-rfjx-5fv4-2g47/GHSA-rfjx-5fv4-2g47.json index d52841ca2b3..6deb4ed1356 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfjx-5fv4-2g47/GHSA-rfjx-5fv4-2g47.json +++ b/advisories/unreviewed/2022/05/GHSA-rfjx-5fv4-2g47/GHSA-rfjx-5fv4-2g47.json @@ -7,12 +7,8 @@ "CVE-2005-2693" ], "details": "cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rfm3-rfv4-crj6/GHSA-rfm3-rfv4-crj6.json b/advisories/unreviewed/2022/05/GHSA-rfm3-rfv4-crj6/GHSA-rfm3-rfv4-crj6.json index 2f04d2e6fca..cf4bd7c91e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfm3-rfv4-crj6/GHSA-rfm3-rfv4-crj6.json +++ b/advisories/unreviewed/2022/05/GHSA-rfm3-rfv4-crj6/GHSA-rfm3-rfv4-crj6.json @@ -7,12 +7,8 @@ "CVE-2005-2666" ], "details": "SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rfqx-hgpj-37m4/GHSA-rfqx-hgpj-37m4.json b/advisories/unreviewed/2022/05/GHSA-rfqx-hgpj-37m4/GHSA-rfqx-hgpj-37m4.json index 42fd8f54ada..cabad4f9eb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfqx-hgpj-37m4/GHSA-rfqx-hgpj-37m4.json +++ b/advisories/unreviewed/2022/05/GHSA-rfqx-hgpj-37m4/GHSA-rfqx-hgpj-37m4.json @@ -7,12 +7,8 @@ "CVE-2006-6497" ], "details": "Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -244,9 +240,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rfw3-vhq2-vh23/GHSA-rfw3-vhq2-vh23.json b/advisories/unreviewed/2022/05/GHSA-rfw3-vhq2-vh23/GHSA-rfw3-vhq2-vh23.json index e941108b27a..adcace22196 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfw3-vhq2-vh23/GHSA-rfw3-vhq2-vh23.json +++ b/advisories/unreviewed/2022/05/GHSA-rfw3-vhq2-vh23/GHSA-rfw3-vhq2-vh23.json @@ -7,12 +7,8 @@ "CVE-2006-3631" ], "details": "Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rghv-pw6p-2rc3/GHSA-rghv-pw6p-2rc3.json b/advisories/unreviewed/2022/05/GHSA-rghv-pw6p-2rc3/GHSA-rghv-pw6p-2rc3.json index 1bd617ed8cf..b023ff6e763 100644 --- a/advisories/unreviewed/2022/05/GHSA-rghv-pw6p-2rc3/GHSA-rghv-pw6p-2rc3.json +++ b/advisories/unreviewed/2022/05/GHSA-rghv-pw6p-2rc3/GHSA-rghv-pw6p-2rc3.json @@ -7,12 +7,8 @@ "CVE-2005-4733" ], "details": "NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the F_CLOSEM fcntl with a parameter value of 0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rgr2-r95x-q6qg/GHSA-rgr2-r95x-q6qg.json b/advisories/unreviewed/2022/05/GHSA-rgr2-r95x-q6qg/GHSA-rgr2-r95x-q6qg.json index f8d69aac77b..25524b7c869 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgr2-r95x-q6qg/GHSA-rgr2-r95x-q6qg.json +++ b/advisories/unreviewed/2022/05/GHSA-rgr2-r95x-q6qg/GHSA-rgr2-r95x-q6qg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -115,9 +113,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rhp3-rf73-5hpc/GHSA-rhp3-rf73-5hpc.json b/advisories/unreviewed/2022/05/GHSA-rhp3-rf73-5hpc/GHSA-rhp3-rf73-5hpc.json index 66dfcae6d64..597f5dd7369 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhp3-rf73-5hpc/GHSA-rhp3-rf73-5hpc.json +++ b/advisories/unreviewed/2022/05/GHSA-rhp3-rf73-5hpc/GHSA-rhp3-rf73-5hpc.json @@ -7,12 +7,8 @@ "CVE-2002-2059" ], "details": "BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change the default boot device via the F8 key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rj3h-g34f-3227/GHSA-rj3h-g34f-3227.json b/advisories/unreviewed/2022/05/GHSA-rj3h-g34f-3227/GHSA-rj3h-g34f-3227.json index 8f9f3d510e1..dbead19b834 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj3h-g34f-3227/GHSA-rj3h-g34f-3227.json +++ b/advisories/unreviewed/2022/05/GHSA-rj3h-g34f-3227/GHSA-rj3h-g34f-3227.json @@ -7,12 +7,8 @@ "CVE-2006-0301" ], "details": "Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and others, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that produce certain values that exceed the width or height of the associated bitmap.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rj55-jv57-g48f/GHSA-rj55-jv57-g48f.json b/advisories/unreviewed/2022/05/GHSA-rj55-jv57-g48f/GHSA-rj55-jv57-g48f.json index 19569ef90d0..e7fc4033548 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj55-jv57-g48f/GHSA-rj55-jv57-g48f.json +++ b/advisories/unreviewed/2022/05/GHSA-rj55-jv57-g48f/GHSA-rj55-jv57-g48f.json @@ -7,12 +7,8 @@ "CVE-2005-2218" ], "details": "The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rj76-p6p4-3fm5/GHSA-rj76-p6p4-3fm5.json b/advisories/unreviewed/2022/05/GHSA-rj76-p6p4-3fm5/GHSA-rj76-p6p4-3fm5.json index 6231d1e9524..53255d62ac0 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj76-p6p4-3fm5/GHSA-rj76-p6p4-3fm5.json +++ b/advisories/unreviewed/2022/05/GHSA-rj76-p6p4-3fm5/GHSA-rj76-p6p4-3fm5.json @@ -7,12 +7,8 @@ "CVE-2005-3624" ], "details": "The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -332,9 +328,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rjcw-h883-7wp6/GHSA-rjcw-h883-7wp6.json b/advisories/unreviewed/2022/05/GHSA-rjcw-h883-7wp6/GHSA-rjcw-h883-7wp6.json index 46d5d3d6b1a..30bd1043522 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjcw-h883-7wp6/GHSA-rjcw-h883-7wp6.json +++ b/advisories/unreviewed/2022/05/GHSA-rjcw-h883-7wp6/GHSA-rjcw-h883-7wp6.json @@ -7,12 +7,8 @@ "CVE-2009-1628" ], "details": "Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remote attackers to execute arbitrary code via a crafted TCP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rjg5-8q9w-qwjm/GHSA-rjg5-8q9w-qwjm.json b/advisories/unreviewed/2022/05/GHSA-rjg5-8q9w-qwjm/GHSA-rjg5-8q9w-qwjm.json index 94ea779d773..28a65017d29 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjg5-8q9w-qwjm/GHSA-rjg5-8q9w-qwjm.json +++ b/advisories/unreviewed/2022/05/GHSA-rjg5-8q9w-qwjm/GHSA-rjg5-8q9w-qwjm.json @@ -7,12 +7,8 @@ "CVE-2009-2860" ], "details": "Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via \"malicious packets.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rjhx-jgh9-pm4q/GHSA-rjhx-jgh9-pm4q.json b/advisories/unreviewed/2022/05/GHSA-rjhx-jgh9-pm4q/GHSA-rjhx-jgh9-pm4q.json index 283cf1feddb..c07e41f231c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjhx-jgh9-pm4q/GHSA-rjhx-jgh9-pm4q.json +++ b/advisories/unreviewed/2022/05/GHSA-rjhx-jgh9-pm4q/GHSA-rjhx-jgh9-pm4q.json @@ -7,12 +7,8 @@ "CVE-2006-1646" ], "details": "The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggressive mode, allows remote attackers to cause a denial of service (daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rm85-grxg-qm94/GHSA-rm85-grxg-qm94.json b/advisories/unreviewed/2022/05/GHSA-rm85-grxg-qm94/GHSA-rm85-grxg-qm94.json index 9646226db6f..72c6887bcd7 100644 --- a/advisories/unreviewed/2022/05/GHSA-rm85-grxg-qm94/GHSA-rm85-grxg-qm94.json +++ b/advisories/unreviewed/2022/05/GHSA-rm85-grxg-qm94/GHSA-rm85-grxg-qm94.json @@ -7,12 +7,8 @@ "CVE-2006-6501" ], "details": "Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -228,9 +224,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rmhr-q7w5-3ffq/GHSA-rmhr-q7w5-3ffq.json b/advisories/unreviewed/2022/05/GHSA-rmhr-q7w5-3ffq/GHSA-rmhr-q7w5-3ffq.json index d5fe052b212..c273639dfa8 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmhr-q7w5-3ffq/GHSA-rmhr-q7w5-3ffq.json +++ b/advisories/unreviewed/2022/05/GHSA-rmhr-q7w5-3ffq/GHSA-rmhr-q7w5-3ffq.json @@ -7,12 +7,8 @@ "CVE-2006-5462" ], "details": "Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates. NOTE: this identifier is for unpatched product versions that were originally intended to be addressed by CVE-2006-4340.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -232,9 +228,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rmjx-gf38-h2g4/GHSA-rmjx-gf38-h2g4.json b/advisories/unreviewed/2022/05/GHSA-rmjx-gf38-h2g4/GHSA-rmjx-gf38-h2g4.json index 522b85bc9dd..7109965f66e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmjx-gf38-h2g4/GHSA-rmjx-gf38-h2g4.json +++ b/advisories/unreviewed/2022/05/GHSA-rmjx-gf38-h2g4/GHSA-rmjx-gf38-h2g4.json @@ -7,12 +7,8 @@ "CVE-2006-1727" ], "details": "Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with \"Print Preview\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -272,9 +268,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rmm9-grhc-5r49/GHSA-rmm9-grhc-5r49.json b/advisories/unreviewed/2022/05/GHSA-rmm9-grhc-5r49/GHSA-rmm9-grhc-5r49.json index ebc4cb634fb..57e910d8c6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmm9-grhc-5r49/GHSA-rmm9-grhc-5r49.json +++ b/advisories/unreviewed/2022/05/GHSA-rmm9-grhc-5r49/GHSA-rmm9-grhc-5r49.json @@ -7,12 +7,8 @@ "CVE-2006-5009" ], "details": "Unspecified vulnerability in xlock in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands and overwrite arbitrary files via unspecified vectors, possibly involving a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rp23-2xcw-7j87/GHSA-rp23-2xcw-7j87.json b/advisories/unreviewed/2022/05/GHSA-rp23-2xcw-7j87/GHSA-rp23-2xcw-7j87.json index 8fbd81a05ca..ed0ef56ffd0 100644 --- a/advisories/unreviewed/2022/05/GHSA-rp23-2xcw-7j87/GHSA-rp23-2xcw-7j87.json +++ b/advisories/unreviewed/2022/05/GHSA-rp23-2xcw-7j87/GHSA-rp23-2xcw-7j87.json @@ -7,12 +7,8 @@ "CVE-2006-4514" ], "details": "Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole_init_info function to allocate insufficient memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rpmr-5wph-m7rq/GHSA-rpmr-5wph-m7rq.json b/advisories/unreviewed/2022/05/GHSA-rpmr-5wph-m7rq/GHSA-rpmr-5wph-m7rq.json index c9600614849..31515e89579 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpmr-5wph-m7rq/GHSA-rpmr-5wph-m7rq.json +++ b/advisories/unreviewed/2022/05/GHSA-rpmr-5wph-m7rq/GHSA-rpmr-5wph-m7rq.json @@ -7,12 +7,8 @@ "CVE-2005-0014" ], "details": "Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rq9g-h4j2-r538/GHSA-rq9g-h4j2-r538.json b/advisories/unreviewed/2022/05/GHSA-rq9g-h4j2-r538/GHSA-rq9g-h4j2-r538.json index 5f9fa1ae0e4..660fa46dfbb 100644 --- a/advisories/unreviewed/2022/05/GHSA-rq9g-h4j2-r538/GHSA-rq9g-h4j2-r538.json +++ b/advisories/unreviewed/2022/05/GHSA-rq9g-h4j2-r538/GHSA-rq9g-h4j2-r538.json @@ -7,12 +7,8 @@ "CVE-2006-5868" ], "details": "Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rqhq-hhm8-99xj/GHSA-rqhq-hhm8-99xj.json b/advisories/unreviewed/2022/05/GHSA-rqhq-hhm8-99xj/GHSA-rqhq-hhm8-99xj.json index 275c22868ac..0a9b5f985f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqhq-hhm8-99xj/GHSA-rqhq-hhm8-99xj.json +++ b/advisories/unreviewed/2022/05/GHSA-rqhq-hhm8-99xj/GHSA-rqhq-hhm8-99xj.json @@ -7,12 +7,8 @@ "CVE-2009-1954" ], "details": "Unspecified vulnerability in portmapper (aka portmap) in IBM AIX 5.3 allows attackers to cause a denial of service (daemon hang) via unknown vectors, related to libtli.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rqjx-gxhp-5x5r/GHSA-rqjx-gxhp-5x5r.json b/advisories/unreviewed/2022/05/GHSA-rqjx-gxhp-5x5r/GHSA-rqjx-gxhp-5x5r.json index 7dfa8d9a539..9acbf3e0f34 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqjx-gxhp-5x5r/GHSA-rqjx-gxhp-5x5r.json +++ b/advisories/unreviewed/2022/05/GHSA-rqjx-gxhp-5x5r/GHSA-rqjx-gxhp-5x5r.json @@ -7,12 +7,8 @@ "CVE-2009-1386" ], "details": "ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrh8-qpfq-g4g6/GHSA-rrh8-qpfq-g4g6.json b/advisories/unreviewed/2022/05/GHSA-rrh8-qpfq-g4g6/GHSA-rrh8-qpfq-g4g6.json index 554adf10b36..3baa8191a39 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrh8-qpfq-g4g6/GHSA-rrh8-qpfq-g4g6.json +++ b/advisories/unreviewed/2022/05/GHSA-rrh8-qpfq-g4g6/GHSA-rrh8-qpfq-g4g6.json @@ -7,12 +7,8 @@ "CVE-2003-0792" ], "details": "Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote attackers to cause a denial of service (crash) via a certain email.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rrmc-m598-86rh/GHSA-rrmc-m598-86rh.json b/advisories/unreviewed/2022/05/GHSA-rrmc-m598-86rh/GHSA-rrmc-m598-86rh.json index c81939e9316..1add42dad59 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrmc-m598-86rh/GHSA-rrmc-m598-86rh.json +++ b/advisories/unreviewed/2022/05/GHSA-rrmc-m598-86rh/GHSA-rrmc-m598-86rh.json @@ -7,12 +7,8 @@ "CVE-2006-3016" ], "details": "Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to \"certain characters in session names,\" including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rrvh-pgqf-54ph/GHSA-rrvh-pgqf-54ph.json b/advisories/unreviewed/2022/05/GHSA-rrvh-pgqf-54ph/GHSA-rrvh-pgqf-54ph.json index cd17dbbd22f..2f33c3a7dbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrvh-pgqf-54ph/GHSA-rrvh-pgqf-54ph.json +++ b/advisories/unreviewed/2022/05/GHSA-rrvh-pgqf-54ph/GHSA-rrvh-pgqf-54ph.json @@ -7,12 +7,8 @@ "CVE-2004-0078" ], "details": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rv23-gf9q-6frc/GHSA-rv23-gf9q-6frc.json b/advisories/unreviewed/2022/05/GHSA-rv23-gf9q-6frc/GHSA-rv23-gf9q-6frc.json index a80729e25ca..5d7cac9469f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rv23-gf9q-6frc/GHSA-rv23-gf9q-6frc.json +++ b/advisories/unreviewed/2022/05/GHSA-rv23-gf9q-6frc/GHSA-rv23-gf9q-6frc.json @@ -7,12 +7,8 @@ "CVE-2007-0988" ], "details": "The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an \"a:2147483649:{\" argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rw56-gxm9-c6gm/GHSA-rw56-gxm9-c6gm.json b/advisories/unreviewed/2022/05/GHSA-rw56-gxm9-c6gm/GHSA-rw56-gxm9-c6gm.json index 7073cead321..5f457eaf4b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-rw56-gxm9-c6gm/GHSA-rw56-gxm9-c6gm.json +++ b/advisories/unreviewed/2022/05/GHSA-rw56-gxm9-c6gm/GHSA-rw56-gxm9-c6gm.json @@ -7,12 +7,8 @@ "CVE-2004-2001" ], "details": "ifconfig \"-arp\" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rwpj-v5h3-jgg3/GHSA-rwpj-v5h3-jgg3.json b/advisories/unreviewed/2022/05/GHSA-rwpj-v5h3-jgg3/GHSA-rwpj-v5h3-jgg3.json index aecd0d5977c..fe02b61e7d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwpj-v5h3-jgg3/GHSA-rwpj-v5h3-jgg3.json +++ b/advisories/unreviewed/2022/05/GHSA-rwpj-v5h3-jgg3/GHSA-rwpj-v5h3-jgg3.json @@ -7,12 +7,8 @@ "CVE-2003-0683" ], "details": "NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rwqm-33xf-cwgq/GHSA-rwqm-33xf-cwgq.json b/advisories/unreviewed/2022/05/GHSA-rwqm-33xf-cwgq/GHSA-rwqm-33xf-cwgq.json index e6ea8c79ff1..39c789b9801 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwqm-33xf-cwgq/GHSA-rwqm-33xf-cwgq.json +++ b/advisories/unreviewed/2022/05/GHSA-rwqm-33xf-cwgq/GHSA-rwqm-33xf-cwgq.json @@ -7,12 +7,8 @@ "CVE-2006-0058" ], "details": "Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -296,9 +292,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rx2v-jmvm-3c4h/GHSA-rx2v-jmvm-3c4h.json b/advisories/unreviewed/2022/05/GHSA-rx2v-jmvm-3c4h/GHSA-rx2v-jmvm-3c4h.json index 086f6dec2dd..b72ba8dae29 100644 --- a/advisories/unreviewed/2022/05/GHSA-rx2v-jmvm-3c4h/GHSA-rx2v-jmvm-3c4h.json +++ b/advisories/unreviewed/2022/05/GHSA-rx2v-jmvm-3c4h/GHSA-rx2v-jmvm-3c4h.json @@ -7,12 +7,8 @@ "CVE-2006-3694" ], "details": "Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass \"safe level\" checks via unspecified vectors involving (1) the alias function and (2) \"directory operations\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rxhq-jfc6-wqxf/GHSA-rxhq-jfc6-wqxf.json b/advisories/unreviewed/2022/05/GHSA-rxhq-jfc6-wqxf/GHSA-rxhq-jfc6-wqxf.json index 311ed33dc06..67afda503c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxhq-jfc6-wqxf/GHSA-rxhq-jfc6-wqxf.json +++ b/advisories/unreviewed/2022/05/GHSA-rxhq-jfc6-wqxf/GHSA-rxhq-jfc6-wqxf.json @@ -7,12 +7,8 @@ "CVE-2003-0804" ], "details": "The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rxwh-g7jh-p598/GHSA-rxwh-g7jh-p598.json b/advisories/unreviewed/2022/05/GHSA-rxwh-g7jh-p598/GHSA-rxwh-g7jh-p598.json index fa2cb07eec1..a2366ad10cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxwh-g7jh-p598/GHSA-rxwh-g7jh-p598.json +++ b/advisories/unreviewed/2022/05/GHSA-rxwh-g7jh-p598/GHSA-rxwh-g7jh-p598.json @@ -7,12 +7,8 @@ "CVE-2006-1737" ], "details": "Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary bytecode via JavaScript with a large regular expression.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -240,9 +236,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v37r-6jpm-wr9h/GHSA-v37r-6jpm-wr9h.json b/advisories/unreviewed/2022/05/GHSA-v37r-6jpm-wr9h/GHSA-v37r-6jpm-wr9h.json index 3c8bf9fe014..77e75efbc22 100644 --- a/advisories/unreviewed/2022/05/GHSA-v37r-6jpm-wr9h/GHSA-v37r-6jpm-wr9h.json +++ b/advisories/unreviewed/2022/05/GHSA-v37r-6jpm-wr9h/GHSA-v37r-6jpm-wr9h.json @@ -7,12 +7,8 @@ "CVE-2005-0351" ], "details": "Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v4fj-43xc-9937/GHSA-v4fj-43xc-9937.json b/advisories/unreviewed/2022/05/GHSA-v4fj-43xc-9937/GHSA-v4fj-43xc-9937.json index 1d6f1533fc7..fbb7ddb5589 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4fj-43xc-9937/GHSA-v4fj-43xc-9937.json +++ b/advisories/unreviewed/2022/05/GHSA-v4fj-43xc-9937/GHSA-v4fj-43xc-9937.json @@ -7,12 +7,8 @@ "CVE-2004-0761" ], "details": "Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v4rr-pqxv-98x3/GHSA-v4rr-pqxv-98x3.json b/advisories/unreviewed/2022/05/GHSA-v4rr-pqxv-98x3/GHSA-v4rr-pqxv-98x3.json index bb2597f4f64..0717f1e94ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4rr-pqxv-98x3/GHSA-v4rr-pqxv-98x3.json +++ b/advisories/unreviewed/2022/05/GHSA-v4rr-pqxv-98x3/GHSA-v4rr-pqxv-98x3.json @@ -7,12 +7,8 @@ "CVE-2004-1889" ], "details": "Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via a link failure with Microsoft Windows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v57j-fcxc-gjh9/GHSA-v57j-fcxc-gjh9.json b/advisories/unreviewed/2022/05/GHSA-v57j-fcxc-gjh9/GHSA-v57j-fcxc-gjh9.json index c4bfa2152af..707c8c3278b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v57j-fcxc-gjh9/GHSA-v57j-fcxc-gjh9.json +++ b/advisories/unreviewed/2022/05/GHSA-v57j-fcxc-gjh9/GHSA-v57j-fcxc-gjh9.json @@ -7,12 +7,8 @@ "CVE-2007-0907" ], "details": "Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -172,9 +168,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v7q3-fwm6-93x8/GHSA-v7q3-fwm6-93x8.json b/advisories/unreviewed/2022/05/GHSA-v7q3-fwm6-93x8/GHSA-v7q3-fwm6-93x8.json index 53534c0527e..ebfdcd11165 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7q3-fwm6-93x8/GHSA-v7q3-fwm6-93x8.json +++ b/advisories/unreviewed/2022/05/GHSA-v7q3-fwm6-93x8/GHSA-v7q3-fwm6-93x8.json @@ -7,12 +7,8 @@ "CVE-2006-0379" ], "details": "FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v965-8v6m-8c59/GHSA-v965-8v6m-8c59.json b/advisories/unreviewed/2022/05/GHSA-v965-8v6m-8c59/GHSA-v965-8v6m-8c59.json index 87a5add9944..678c381526a 100644 --- a/advisories/unreviewed/2022/05/GHSA-v965-8v6m-8c59/GHSA-v965-8v6m-8c59.json +++ b/advisories/unreviewed/2022/05/GHSA-v965-8v6m-8c59/GHSA-v965-8v6m-8c59.json @@ -7,12 +7,8 @@ "CVE-2009-1378" ], "details": "Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka \"DTLS fragment handling memory leak.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v9fj-qg8h-9mv2/GHSA-v9fj-qg8h-9mv2.json b/advisories/unreviewed/2022/05/GHSA-v9fj-qg8h-9mv2/GHSA-v9fj-qg8h-9mv2.json index f1b223940be..938a384a93d 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9fj-qg8h-9mv2/GHSA-v9fj-qg8h-9mv2.json +++ b/advisories/unreviewed/2022/05/GHSA-v9fj-qg8h-9mv2/GHSA-v9fj-qg8h-9mv2.json @@ -7,12 +7,8 @@ "CVE-2006-1938" ], "details": "Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via the (1) Sniffer capture or (2) SMB PIPE dissector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v9w2-g4p4-9xg6/GHSA-v9w2-g4p4-9xg6.json b/advisories/unreviewed/2022/05/GHSA-v9w2-g4p4-9xg6/GHSA-v9w2-g4p4-9xg6.json index 97a9012d477..3e96e2edb5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9w2-g4p4-9xg6/GHSA-v9w2-g4p4-9xg6.json +++ b/advisories/unreviewed/2022/05/GHSA-v9w2-g4p4-9xg6/GHSA-v9w2-g4p4-9xg6.json @@ -7,12 +7,8 @@ "CVE-2005-3626" ], "details": "Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -344,9 +340,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vc3q-759j-m83c/GHSA-vc3q-759j-m83c.json b/advisories/unreviewed/2022/05/GHSA-vc3q-759j-m83c/GHSA-vc3q-759j-m83c.json index 5f9a3e2a5e2..14817da38d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc3q-759j-m83c/GHSA-vc3q-759j-m83c.json +++ b/advisories/unreviewed/2022/05/GHSA-vc3q-759j-m83c/GHSA-vc3q-759j-m83c.json @@ -7,12 +7,8 @@ "CVE-2006-3686" ], "details": "Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and \"remote users\" to cause a denial of service (crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vcfg-6cwj-xppm/GHSA-vcfg-6cwj-xppm.json b/advisories/unreviewed/2022/05/GHSA-vcfg-6cwj-xppm/GHSA-vcfg-6cwj-xppm.json index 44506733576..0f9d60b5f45 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcfg-6cwj-xppm/GHSA-vcfg-6cwj-xppm.json +++ b/advisories/unreviewed/2022/05/GHSA-vcfg-6cwj-xppm/GHSA-vcfg-6cwj-xppm.json @@ -7,12 +7,8 @@ "CVE-2006-2026" ], "details": "Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to \"setfield/getfield methods in cleanup functions.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vf44-2j68-pjgj/GHSA-vf44-2j68-pjgj.json b/advisories/unreviewed/2022/05/GHSA-vf44-2j68-pjgj/GHSA-vf44-2j68-pjgj.json index e95a60ddb6b..591d3c865a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf44-2j68-pjgj/GHSA-vf44-2j68-pjgj.json +++ b/advisories/unreviewed/2022/05/GHSA-vf44-2j68-pjgj/GHSA-vf44-2j68-pjgj.json @@ -7,12 +7,8 @@ "CVE-2005-1918" ], "details": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vg9c-529p-65wv/GHSA-vg9c-529p-65wv.json b/advisories/unreviewed/2022/05/GHSA-vg9c-529p-65wv/GHSA-vg9c-529p-65wv.json index 4d58936ec95..c68fb1d3dfe 100644 --- a/advisories/unreviewed/2022/05/GHSA-vg9c-529p-65wv/GHSA-vg9c-529p-65wv.json +++ b/advisories/unreviewed/2022/05/GHSA-vg9c-529p-65wv/GHSA-vg9c-529p-65wv.json @@ -7,12 +7,8 @@ "CVE-2006-5748" ], "details": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -280,9 +276,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vgfh-ppxh-3g5c/GHSA-vgfh-ppxh-3g5c.json b/advisories/unreviewed/2022/05/GHSA-vgfh-ppxh-3g5c/GHSA-vgfh-ppxh-3g5c.json index ede331d029d..d0828d26e5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgfh-ppxh-3g5c/GHSA-vgfh-ppxh-3g5c.json +++ b/advisories/unreviewed/2022/05/GHSA-vgfh-ppxh-3g5c/GHSA-vgfh-ppxh-3g5c.json @@ -7,12 +7,8 @@ "CVE-2002-0824" ], "details": "BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vgrw-2xjq-9rqm/GHSA-vgrw-2xjq-9rqm.json b/advisories/unreviewed/2022/05/GHSA-vgrw-2xjq-9rqm/GHSA-vgrw-2xjq-9rqm.json index c0cb851791c..ba8780a621a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgrw-2xjq-9rqm/GHSA-vgrw-2xjq-9rqm.json +++ b/advisories/unreviewed/2022/05/GHSA-vgrw-2xjq-9rqm/GHSA-vgrw-2xjq-9rqm.json @@ -7,12 +7,8 @@ "CVE-2002-2196" ], "details": "Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhxw-jx93-5q56/GHSA-vhxw-jx93-5q56.json b/advisories/unreviewed/2022/05/GHSA-vhxw-jx93-5q56/GHSA-vhxw-jx93-5q56.json index 2c105e9a5df..07efd611e02 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhxw-jx93-5q56/GHSA-vhxw-jx93-5q56.json +++ b/advisories/unreviewed/2022/05/GHSA-vhxw-jx93-5q56/GHSA-vhxw-jx93-5q56.json @@ -7,12 +7,8 @@ "CVE-2002-1947" ], "details": "Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vj46-9qg5-hvg2/GHSA-vj46-9qg5-hvg2.json b/advisories/unreviewed/2022/05/GHSA-vj46-9qg5-hvg2/GHSA-vj46-9qg5-hvg2.json index befab6d58bf..9bae4138a77 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj46-9qg5-hvg2/GHSA-vj46-9qg5-hvg2.json +++ b/advisories/unreviewed/2022/05/GHSA-vj46-9qg5-hvg2/GHSA-vj46-9qg5-hvg2.json @@ -7,12 +7,8 @@ "CVE-2006-2120" ], "details": "The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vj4w-8f53-7cjg/GHSA-vj4w-8f53-7cjg.json b/advisories/unreviewed/2022/05/GHSA-vj4w-8f53-7cjg/GHSA-vj4w-8f53-7cjg.json index e6e7bd1f8d3..60c1a57c34c 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj4w-8f53-7cjg/GHSA-vj4w-8f53-7cjg.json +++ b/advisories/unreviewed/2022/05/GHSA-vj4w-8f53-7cjg/GHSA-vj4w-8f53-7cjg.json @@ -7,12 +7,8 @@ "CVE-2004-0125" ], "details": "The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vjcq-9wcj-6rq5/GHSA-vjcq-9wcj-6rq5.json b/advisories/unreviewed/2022/05/GHSA-vjcq-9wcj-6rq5/GHSA-vjcq-9wcj-6rq5.json index a354ec1b1c6..753d642e300 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjcq-9wcj-6rq5/GHSA-vjcq-9wcj-6rq5.json +++ b/advisories/unreviewed/2022/05/GHSA-vjcq-9wcj-6rq5/GHSA-vjcq-9wcj-6rq5.json @@ -7,12 +7,8 @@ "CVE-2006-0145" ], "details": "The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allows local users to read arbitrary kernel memory and gain privileges via the lseek system call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vp9x-6f47-r7r2/GHSA-vp9x-6f47-r7r2.json b/advisories/unreviewed/2022/05/GHSA-vp9x-6f47-r7r2/GHSA-vp9x-6f47-r7r2.json index 1a89fbd8d44..dd896449d83 100644 --- a/advisories/unreviewed/2022/05/GHSA-vp9x-6f47-r7r2/GHSA-vp9x-6f47-r7r2.json +++ b/advisories/unreviewed/2022/05/GHSA-vp9x-6f47-r7r2/GHSA-vp9x-6f47-r7r2.json @@ -7,12 +7,8 @@ "CVE-2006-4571" ], "details": "Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -240,9 +236,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vpfh-5h94-wjmx/GHSA-vpfh-5h94-wjmx.json b/advisories/unreviewed/2022/05/GHSA-vpfh-5h94-wjmx/GHSA-vpfh-5h94-wjmx.json index b6c558da583..65ec21df8b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpfh-5h94-wjmx/GHSA-vpfh-5h94-wjmx.json +++ b/advisories/unreviewed/2022/05/GHSA-vpfh-5h94-wjmx/GHSA-vpfh-5h94-wjmx.json @@ -7,12 +7,8 @@ "CVE-2006-1589" ], "details": "The elf_load_file function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service (kernel crash) via an ELF interpreter that does not have a PT_LOAD section in its header, which triggers a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vq6h-p287-jxff/GHSA-vq6h-p287-jxff.json b/advisories/unreviewed/2022/05/GHSA-vq6h-p287-jxff/GHSA-vq6h-p287-jxff.json index 5ac8de5e851..07b66d7d7dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-vq6h-p287-jxff/GHSA-vq6h-p287-jxff.json +++ b/advisories/unreviewed/2022/05/GHSA-vq6h-p287-jxff/GHSA-vq6h-p287-jxff.json @@ -7,12 +7,8 @@ "CVE-2002-1667" ], "details": "The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM object during page invalidation, which allows local users to cause a denial of service (crash) by calling msync on an unaccessed memory map created with MAP_ANON and MAP_NOSYNC flags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqjv-jhp4-724w/GHSA-vqjv-jhp4-724w.json b/advisories/unreviewed/2022/05/GHSA-vqjv-jhp4-724w/GHSA-vqjv-jhp4-724w.json index a07de77d943..e372248259f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqjv-jhp4-724w/GHSA-vqjv-jhp4-724w.json +++ b/advisories/unreviewed/2022/05/GHSA-vqjv-jhp4-724w/GHSA-vqjv-jhp4-724w.json @@ -7,12 +7,8 @@ "CVE-2002-2261" ], "details": "Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqm2-c8wp-mmg7/GHSA-vqm2-c8wp-mmg7.json b/advisories/unreviewed/2022/05/GHSA-vqm2-c8wp-mmg7/GHSA-vqm2-c8wp-mmg7.json index 70a776851ff..2719c279307 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqm2-c8wp-mmg7/GHSA-vqm2-c8wp-mmg7.json +++ b/advisories/unreviewed/2022/05/GHSA-vqm2-c8wp-mmg7/GHSA-vqm2-c8wp-mmg7.json @@ -7,12 +7,8 @@ "CVE-2004-0257" ], "details": "OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqmp-x7c6-8wq4/GHSA-vqmp-x7c6-8wq4.json b/advisories/unreviewed/2022/05/GHSA-vqmp-x7c6-8wq4/GHSA-vqmp-x7c6-8wq4.json index 5b818f7879d..aef67bacc04 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqmp-x7c6-8wq4/GHSA-vqmp-x7c6-8wq4.json +++ b/advisories/unreviewed/2022/05/GHSA-vqmp-x7c6-8wq4/GHSA-vqmp-x7c6-8wq4.json @@ -7,12 +7,8 @@ "CVE-2006-3809" ], "details": "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -272,9 +268,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vr27-vq6j-wvvp/GHSA-vr27-vq6j-wvvp.json b/advisories/unreviewed/2022/05/GHSA-vr27-vq6j-wvvp/GHSA-vr27-vq6j-wvvp.json index f9b30faa804..d3458d43b2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-vr27-vq6j-wvvp/GHSA-vr27-vq6j-wvvp.json +++ b/advisories/unreviewed/2022/05/GHSA-vr27-vq6j-wvvp/GHSA-vr27-vq6j-wvvp.json @@ -7,12 +7,8 @@ "CVE-2006-4566" ], "details": "Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set (\"[\\\\\"), which leads to a buffer over-read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -244,9 +240,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vrm9-vqv5-39gr/GHSA-vrm9-vqv5-39gr.json b/advisories/unreviewed/2022/05/GHSA-vrm9-vqv5-39gr/GHSA-vrm9-vqv5-39gr.json index 1255507ba5b..2c7f22e238f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrm9-vqv5-39gr/GHSA-vrm9-vqv5-39gr.json +++ b/advisories/unreviewed/2022/05/GHSA-vrm9-vqv5-39gr/GHSA-vrm9-vqv5-39gr.json @@ -7,12 +7,8 @@ "CVE-2006-4343" ], "details": "The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vv9c-3fjv-r77f/GHSA-vv9c-3fjv-r77f.json b/advisories/unreviewed/2022/05/GHSA-vv9c-3fjv-r77f/GHSA-vv9c-3fjv-r77f.json index 4e910e25f0c..09d734a9d65 100644 --- a/advisories/unreviewed/2022/05/GHSA-vv9c-3fjv-r77f/GHSA-vv9c-3fjv-r77f.json +++ b/advisories/unreviewed/2022/05/GHSA-vv9c-3fjv-r77f/GHSA-vv9c-3fjv-r77f.json @@ -7,12 +7,8 @@ "CVE-2006-4254" ], "details": "Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vwf7-7g8c-h7pw/GHSA-vwf7-7g8c-h7pw.json b/advisories/unreviewed/2022/05/GHSA-vwf7-7g8c-h7pw/GHSA-vwf7-7g8c-h7pw.json index 9e0d610a677..d7ecb694437 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwf7-7g8c-h7pw/GHSA-vwf7-7g8c-h7pw.json +++ b/advisories/unreviewed/2022/05/GHSA-vwf7-7g8c-h7pw/GHSA-vwf7-7g8c-h7pw.json @@ -7,12 +7,8 @@ "CVE-2006-3743" ], "details": "Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vx7j-rxcm-25x5/GHSA-vx7j-rxcm-25x5.json b/advisories/unreviewed/2022/05/GHSA-vx7j-rxcm-25x5/GHSA-vx7j-rxcm-25x5.json index 3bd849cd6e2..ed3de9095ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx7j-rxcm-25x5/GHSA-vx7j-rxcm-25x5.json +++ b/advisories/unreviewed/2022/05/GHSA-vx7j-rxcm-25x5/GHSA-vx7j-rxcm-25x5.json @@ -7,12 +7,8 @@ "CVE-2006-3017" ], "details": "zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -160,9 +156,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vxpf-8467-g5rj/GHSA-vxpf-8467-g5rj.json b/advisories/unreviewed/2022/05/GHSA-vxpf-8467-g5rj/GHSA-vxpf-8467-g5rj.json index c2cefdb4b51..717a016f76c 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxpf-8467-g5rj/GHSA-vxpf-8467-g5rj.json +++ b/advisories/unreviewed/2022/05/GHSA-vxpf-8467-g5rj/GHSA-vxpf-8467-g5rj.json @@ -7,12 +7,8 @@ "CVE-2006-1723" ], "details": "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -108,9 +104,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w2mg-247r-4xfc/GHSA-w2mg-247r-4xfc.json b/advisories/unreviewed/2022/05/GHSA-w2mg-247r-4xfc/GHSA-w2mg-247r-4xfc.json index 26f0f1d5412..7e30eeedd58 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2mg-247r-4xfc/GHSA-w2mg-247r-4xfc.json +++ b/advisories/unreviewed/2022/05/GHSA-w2mg-247r-4xfc/GHSA-w2mg-247r-4xfc.json @@ -7,12 +7,8 @@ "CVE-2004-0519" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w2qv-rhm9-97p2/GHSA-w2qv-rhm9-97p2.json b/advisories/unreviewed/2022/05/GHSA-w2qv-rhm9-97p2/GHSA-w2qv-rhm9-97p2.json index 6f6f2931bc3..834b13a5b5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2qv-rhm9-97p2/GHSA-w2qv-rhm9-97p2.json +++ b/advisories/unreviewed/2022/05/GHSA-w2qv-rhm9-97p2/GHSA-w2qv-rhm9-97p2.json @@ -7,12 +7,8 @@ "CVE-2005-2096" ], "details": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -236,9 +232,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w48v-q8fw-236r/GHSA-w48v-q8fw-236r.json b/advisories/unreviewed/2022/05/GHSA-w48v-q8fw-236r/GHSA-w48v-q8fw-236r.json index 50521cf0202..484389acfb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-w48v-q8fw-236r/GHSA-w48v-q8fw-236r.json +++ b/advisories/unreviewed/2022/05/GHSA-w48v-q8fw-236r/GHSA-w48v-q8fw-236r.json @@ -7,12 +7,8 @@ "CVE-2006-1730" ], "details": "Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -304,9 +300,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w59m-3c5g-3v9c/GHSA-w59m-3c5g-3v9c.json b/advisories/unreviewed/2022/05/GHSA-w59m-3c5g-3v9c/GHSA-w59m-3c5g-3v9c.json index 21d029ad6f2..1005d3d393c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w59m-3c5g-3v9c/GHSA-w59m-3c5g-3v9c.json +++ b/advisories/unreviewed/2022/05/GHSA-w59m-3c5g-3v9c/GHSA-w59m-3c5g-3v9c.json @@ -7,12 +7,8 @@ "CVE-2004-0492" ], "details": "Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w64f-27fx-6p6r/GHSA-w64f-27fx-6p6r.json b/advisories/unreviewed/2022/05/GHSA-w64f-27fx-6p6r/GHSA-w64f-27fx-6p6r.json index 62c9e6eb552..f5d02d48d78 100644 --- a/advisories/unreviewed/2022/05/GHSA-w64f-27fx-6p6r/GHSA-w64f-27fx-6p6r.json +++ b/advisories/unreviewed/2022/05/GHSA-w64f-27fx-6p6r/GHSA-w64f-27fx-6p6r.json @@ -7,12 +7,8 @@ "CVE-2002-1490" ], "details": "NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w6jv-5h4q-3hqj/GHSA-w6jv-5h4q-3hqj.json b/advisories/unreviewed/2022/05/GHSA-w6jv-5h4q-3hqj/GHSA-w6jv-5h4q-3hqj.json index 756800dc0e9..fb3e90d24fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6jv-5h4q-3hqj/GHSA-w6jv-5h4q-3hqj.json +++ b/advisories/unreviewed/2022/05/GHSA-w6jv-5h4q-3hqj/GHSA-w6jv-5h4q-3hqj.json @@ -7,12 +7,8 @@ "CVE-2006-5004" ], "details": "Unspecified vulnerability in the rdist command in IBM AIX 5.2.0 and 5.3.0 allows local users to overwrite arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w79f-5j5f-hxqj/GHSA-w79f-5j5f-hxqj.json b/advisories/unreviewed/2022/05/GHSA-w79f-5j5f-hxqj/GHSA-w79f-5j5f-hxqj.json index ff837a04211..2e36edc303f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w79f-5j5f-hxqj/GHSA-w79f-5j5f-hxqj.json +++ b/advisories/unreviewed/2022/05/GHSA-w79f-5j5f-hxqj/GHSA-w79f-5j5f-hxqj.json @@ -7,12 +7,8 @@ "CVE-2004-0403" ], "details": "Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w7gp-7wj2-jmvx/GHSA-w7gp-7wj2-jmvx.json b/advisories/unreviewed/2022/05/GHSA-w7gp-7wj2-jmvx/GHSA-w7gp-7wj2-jmvx.json index 5f010d68377..8a1ae2b6493 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7gp-7wj2-jmvx/GHSA-w7gp-7wj2-jmvx.json +++ b/advisories/unreviewed/2022/05/GHSA-w7gp-7wj2-jmvx/GHSA-w7gp-7wj2-jmvx.json @@ -7,12 +7,8 @@ "CVE-2005-3143" ], "details": "Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP clients on Mac OS X 10.4 Mail 2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w8gx-r5wm-gjrw/GHSA-w8gx-r5wm-gjrw.json b/advisories/unreviewed/2022/05/GHSA-w8gx-r5wm-gjrw/GHSA-w8gx-r5wm-gjrw.json index a0f5c14ca3f..55f88124aca 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8gx-r5wm-gjrw/GHSA-w8gx-r5wm-gjrw.json +++ b/advisories/unreviewed/2022/05/GHSA-w8gx-r5wm-gjrw/GHSA-w8gx-r5wm-gjrw.json @@ -7,12 +7,8 @@ "CVE-2003-0429" ], "details": "The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w9p3-2qgf-68g5/GHSA-w9p3-2qgf-68g5.json b/advisories/unreviewed/2022/05/GHSA-w9p3-2qgf-68g5/GHSA-w9p3-2qgf-68g5.json index cf10d0a35d5..1d239b96809 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9p3-2qgf-68g5/GHSA-w9p3-2qgf-68g5.json +++ b/advisories/unreviewed/2022/05/GHSA-w9p3-2qgf-68g5/GHSA-w9p3-2qgf-68g5.json @@ -7,12 +7,8 @@ "CVE-2002-1584" ], "details": "Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w9wh-5q96-r696/GHSA-w9wh-5q96-r696.json b/advisories/unreviewed/2022/05/GHSA-w9wh-5q96-r696/GHSA-w9wh-5q96-r696.json index 7215cd65758..bffc579393b 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9wh-5q96-r696/GHSA-w9wh-5q96-r696.json +++ b/advisories/unreviewed/2022/05/GHSA-w9wh-5q96-r696/GHSA-w9wh-5q96-r696.json @@ -7,12 +7,8 @@ "CVE-2006-3803" ], "details": "Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -248,9 +244,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wc46-2g2w-q2mc/GHSA-wc46-2g2w-q2mc.json b/advisories/unreviewed/2022/05/GHSA-wc46-2g2w-q2mc/GHSA-wc46-2g2w-q2mc.json index 503341adfd5..1b2851b855d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc46-2g2w-q2mc/GHSA-wc46-2g2w-q2mc.json +++ b/advisories/unreviewed/2022/05/GHSA-wc46-2g2w-q2mc/GHSA-wc46-2g2w-q2mc.json @@ -7,12 +7,8 @@ "CVE-2005-3191" ], "details": "Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wf2r-72fr-qcpj/GHSA-wf2r-72fr-qcpj.json b/advisories/unreviewed/2022/05/GHSA-wf2r-72fr-qcpj/GHSA-wf2r-72fr-qcpj.json index 7b2a7ffa89e..106cb788467 100644 --- a/advisories/unreviewed/2022/05/GHSA-wf2r-72fr-qcpj/GHSA-wf2r-72fr-qcpj.json +++ b/advisories/unreviewed/2022/05/GHSA-wf2r-72fr-qcpj/GHSA-wf2r-72fr-qcpj.json @@ -7,12 +7,8 @@ "CVE-2005-0465" ], "details": "gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wfv9-4q78-4fr2/GHSA-wfv9-4q78-4fr2.json b/advisories/unreviewed/2022/05/GHSA-wfv9-4q78-4fr2/GHSA-wfv9-4q78-4fr2.json index e25ec6ef984..c9aa4839ad3 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfv9-4q78-4fr2/GHSA-wfv9-4q78-4fr2.json +++ b/advisories/unreviewed/2022/05/GHSA-wfv9-4q78-4fr2/GHSA-wfv9-4q78-4fr2.json @@ -7,12 +7,8 @@ "CVE-2006-2205" ], "details": "The audio_write function in NetBSD 3.0 allows local users to cause a denial of service (kernel crash) by using the audiosetinfo ioctl to change the sample rate of an audio device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wg77-pm57-j6rv/GHSA-wg77-pm57-j6rv.json b/advisories/unreviewed/2022/05/GHSA-wg77-pm57-j6rv/GHSA-wg77-pm57-j6rv.json index 4f3bac0f763..b92351951c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg77-pm57-j6rv/GHSA-wg77-pm57-j6rv.json +++ b/advisories/unreviewed/2022/05/GHSA-wg77-pm57-j6rv/GHSA-wg77-pm57-j6rv.json @@ -7,12 +7,8 @@ "CVE-2009-0159" ], "details": "Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wgp2-rffm-276c/GHSA-wgp2-rffm-276c.json b/advisories/unreviewed/2022/05/GHSA-wgp2-rffm-276c/GHSA-wgp2-rffm-276c.json index bf8d70cbeb2..c815b2e0c69 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgp2-rffm-276c/GHSA-wgp2-rffm-276c.json +++ b/advisories/unreviewed/2022/05/GHSA-wgp2-rffm-276c/GHSA-wgp2-rffm-276c.json @@ -7,12 +7,8 @@ "CVE-2006-1738" ], "details": "Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) by changing the (1) -moz-grid and (2) -moz-grid-group display styles.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -232,9 +228,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wgp5-p97p-cph9/GHSA-wgp5-p97p-cph9.json b/advisories/unreviewed/2022/05/GHSA-wgp5-p97p-cph9/GHSA-wgp5-p97p-cph9.json index feaeeb8ac05..677c040aa2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgp5-p97p-cph9/GHSA-wgp5-p97p-cph9.json +++ b/advisories/unreviewed/2022/05/GHSA-wgp5-p97p-cph9/GHSA-wgp5-p97p-cph9.json @@ -7,12 +7,8 @@ "CVE-2004-0189" ], "details": "The \"%xx\" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL (\"%00\") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wh3v-rww9-7gp2/GHSA-wh3v-rww9-7gp2.json b/advisories/unreviewed/2022/05/GHSA-wh3v-rww9-7gp2/GHSA-wh3v-rww9-7gp2.json index e8f004deb81..21cae662e6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh3v-rww9-7gp2/GHSA-wh3v-rww9-7gp2.json +++ b/advisories/unreviewed/2022/05/GHSA-wh3v-rww9-7gp2/GHSA-wh3v-rww9-7gp2.json @@ -7,12 +7,8 @@ "CVE-2006-6121" ], "details": "Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wh5h-x845-rhh4/GHSA-wh5h-x845-rhh4.json b/advisories/unreviewed/2022/05/GHSA-wh5h-x845-rhh4/GHSA-wh5h-x845-rhh4.json index 4f9f3c39b86..2325aa738b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh5h-x845-rhh4/GHSA-wh5h-x845-rhh4.json +++ b/advisories/unreviewed/2022/05/GHSA-wh5h-x845-rhh4/GHSA-wh5h-x845-rhh4.json @@ -7,12 +7,8 @@ "CVE-2002-0381" ], "details": "The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-whcc-xgj9-gfj9/GHSA-whcc-xgj9-gfj9.json b/advisories/unreviewed/2022/05/GHSA-whcc-xgj9-gfj9/GHSA-whcc-xgj9-gfj9.json index 8a68faef601..9c9bc2c5b6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-whcc-xgj9-gfj9/GHSA-whcc-xgj9-gfj9.json +++ b/advisories/unreviewed/2022/05/GHSA-whcc-xgj9-gfj9/GHSA-whcc-xgj9-gfj9.json @@ -7,12 +7,8 @@ "CVE-2005-2706" ], "details": "Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -152,9 +148,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wj4m-jprf-g224/GHSA-wj4m-jprf-g224.json b/advisories/unreviewed/2022/05/GHSA-wj4m-jprf-g224/GHSA-wj4m-jprf-g224.json index b4faaa7db37..c3ef566916b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wj4m-jprf-g224/GHSA-wj4m-jprf-g224.json +++ b/advisories/unreviewed/2022/05/GHSA-wj4m-jprf-g224/GHSA-wj4m-jprf-g224.json @@ -7,12 +7,8 @@ "CVE-2005-2705" ], "details": "Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -144,9 +140,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wj5j-gg8h-gp5m/GHSA-wj5j-gg8h-gp5m.json b/advisories/unreviewed/2022/05/GHSA-wj5j-gg8h-gp5m/GHSA-wj5j-gg8h-gp5m.json index a067adb2c6e..006cf4a607d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wj5j-gg8h-gp5m/GHSA-wj5j-gg8h-gp5m.json +++ b/advisories/unreviewed/2022/05/GHSA-wj5j-gg8h-gp5m/GHSA-wj5j-gg8h-gp5m.json @@ -7,12 +7,8 @@ "CVE-2006-3677" ], "details": "Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -204,9 +200,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wmm8-4p47-889q/GHSA-wmm8-4p47-889q.json b/advisories/unreviewed/2022/05/GHSA-wmm8-4p47-889q/GHSA-wmm8-4p47-889q.json index 909c96e5ca0..5ac237cda26 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmm8-4p47-889q/GHSA-wmm8-4p47-889q.json +++ b/advisories/unreviewed/2022/05/GHSA-wmm8-4p47-889q/GHSA-wmm8-4p47-889q.json @@ -7,12 +7,8 @@ "CVE-2006-4486" ], "details": "Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -128,9 +124,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wp4j-j8m8-qj4m/GHSA-wp4j-j8m8-qj4m.json b/advisories/unreviewed/2022/05/GHSA-wp4j-j8m8-qj4m/GHSA-wp4j-j8m8-qj4m.json index 6a588d8f5ce..57fe4d89ef8 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp4j-j8m8-qj4m/GHSA-wp4j-j8m8-qj4m.json +++ b/advisories/unreviewed/2022/05/GHSA-wp4j-j8m8-qj4m/GHSA-wp4j-j8m8-qj4m.json @@ -7,12 +7,8 @@ "CVE-2003-0962" ], "details": "Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wp5w-vcq2-q2gv/GHSA-wp5w-vcq2-q2gv.json b/advisories/unreviewed/2022/05/GHSA-wp5w-vcq2-q2gv/GHSA-wp5w-vcq2-q2gv.json index dab8e59fa23..6a1fabf3fa5 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp5w-vcq2-q2gv/GHSA-wp5w-vcq2-q2gv.json +++ b/advisories/unreviewed/2022/05/GHSA-wp5w-vcq2-q2gv/GHSA-wp5w-vcq2-q2gv.json @@ -7,12 +7,8 @@ "CVE-2006-1739" ], "details": "The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain Cascading Style Sheets (CSS) that causes an out-of-bounds array write and buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wq86-c2f2-33wf/GHSA-wq86-c2f2-33wf.json b/advisories/unreviewed/2022/05/GHSA-wq86-c2f2-33wf/GHSA-wq86-c2f2-33wf.json index 8b71123ef69..0a69ab2fac4 100644 --- a/advisories/unreviewed/2022/05/GHSA-wq86-c2f2-33wf/GHSA-wq86-c2f2-33wf.json +++ b/advisories/unreviewed/2022/05/GHSA-wq86-c2f2-33wf/GHSA-wq86-c2f2-33wf.json @@ -7,12 +7,8 @@ "CVE-2002-0359" ], "details": "xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wr7q-9p2g-rv39/GHSA-wr7q-9p2g-rv39.json b/advisories/unreviewed/2022/05/GHSA-wr7q-9p2g-rv39/GHSA-wr7q-9p2g-rv39.json index 4c6d99cf094..61fe10250a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr7q-9p2g-rv39/GHSA-wr7q-9p2g-rv39.json +++ b/advisories/unreviewed/2022/05/GHSA-wr7q-9p2g-rv39/GHSA-wr7q-9p2g-rv39.json @@ -7,12 +7,8 @@ "CVE-2005-3732" ], "details": "The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ww64-hr59-ghr5/GHSA-ww64-hr59-ghr5.json b/advisories/unreviewed/2022/05/GHSA-ww64-hr59-ghr5/GHSA-ww64-hr59-ghr5.json index d0bd78720ed..f2bd91e3e8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww64-hr59-ghr5/GHSA-ww64-hr59-ghr5.json +++ b/advisories/unreviewed/2022/05/GHSA-ww64-hr59-ghr5/GHSA-ww64-hr59-ghr5.json @@ -7,12 +7,8 @@ "CVE-2004-0695" ], "details": "Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wwrj-m97w-2rrp/GHSA-wwrj-m97w-2rrp.json b/advisories/unreviewed/2022/05/GHSA-wwrj-m97w-2rrp/GHSA-wwrj-m97w-2rrp.json index 425adbc0166..f0163394e0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwrj-m97w-2rrp/GHSA-wwrj-m97w-2rrp.json +++ b/advisories/unreviewed/2022/05/GHSA-wwrj-m97w-2rrp/GHSA-wwrj-m97w-2rrp.json @@ -7,12 +7,8 @@ "CVE-2006-3464" ], "details": "TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving \"unchecked arithmetic operations\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -156,9 +152,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x2m8-j98q-33px/GHSA-x2m8-j98q-33px.json b/advisories/unreviewed/2022/05/GHSA-x2m8-j98q-33px/GHSA-x2m8-j98q-33px.json index 5709cb6864f..015e7da4526 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2m8-j98q-33px/GHSA-x2m8-j98q-33px.json +++ b/advisories/unreviewed/2022/05/GHSA-x2m8-j98q-33px/GHSA-x2m8-j98q-33px.json @@ -7,12 +7,8 @@ "CVE-2004-0368" ], "details": "Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x2p2-g54c-2jqg/GHSA-x2p2-g54c-2jqg.json b/advisories/unreviewed/2022/05/GHSA-x2p2-g54c-2jqg/GHSA-x2p2-g54c-2jqg.json index 3ef7c69b830..3a3fb10d6f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2p2-g54c-2jqg/GHSA-x2p2-g54c-2jqg.json +++ b/advisories/unreviewed/2022/05/GHSA-x2p2-g54c-2jqg/GHSA-x2p2-g54c-2jqg.json @@ -7,12 +7,8 @@ "CVE-2009-1252" ], "details": "Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x2x8-qmfc-8j2r/GHSA-x2x8-qmfc-8j2r.json b/advisories/unreviewed/2022/05/GHSA-x2x8-qmfc-8j2r/GHSA-x2x8-qmfc-8j2r.json index fd0afcadcb1..a631e28c155 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2x8-qmfc-8j2r/GHSA-x2x8-qmfc-8j2r.json +++ b/advisories/unreviewed/2022/05/GHSA-x2x8-qmfc-8j2r/GHSA-x2x8-qmfc-8j2r.json @@ -7,12 +7,8 @@ "CVE-2005-1477" ], "details": "The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x4cx-jvhv-54ww/GHSA-x4cx-jvhv-54ww.json b/advisories/unreviewed/2022/05/GHSA-x4cx-jvhv-54ww/GHSA-x4cx-jvhv-54ww.json index da727b83a6c..f249df7ddca 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4cx-jvhv-54ww/GHSA-x4cx-jvhv-54ww.json +++ b/advisories/unreviewed/2022/05/GHSA-x4cx-jvhv-54ww/GHSA-x4cx-jvhv-54ww.json @@ -7,12 +7,8 @@ "CVE-2003-1012" ], "details": "The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x5mm-w7g6-r6fq/GHSA-x5mm-w7g6-r6fq.json b/advisories/unreviewed/2022/05/GHSA-x5mm-w7g6-r6fq/GHSA-x5mm-w7g6-r6fq.json index 11be72b15c3..aab1bf40d61 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5mm-w7g6-r6fq/GHSA-x5mm-w7g6-r6fq.json +++ b/advisories/unreviewed/2022/05/GHSA-x5mm-w7g6-r6fq/GHSA-x5mm-w7g6-r6fq.json @@ -7,12 +7,8 @@ "CVE-2006-1721" ], "details": "digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x653-3j24-7h2r/GHSA-x653-3j24-7h2r.json b/advisories/unreviewed/2022/05/GHSA-x653-3j24-7h2r/GHSA-x653-3j24-7h2r.json index 6d5887cfbed..524c2c51793 100644 --- a/advisories/unreviewed/2022/05/GHSA-x653-3j24-7h2r/GHSA-x653-3j24-7h2r.json +++ b/advisories/unreviewed/2022/05/GHSA-x653-3j24-7h2r/GHSA-x653-3j24-7h2r.json @@ -7,12 +7,8 @@ "CVE-2006-3805" ], "details": "The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -284,9 +280,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x6fq-2ggv-xgcv/GHSA-x6fq-2ggv-xgcv.json b/advisories/unreviewed/2022/05/GHSA-x6fq-2ggv-xgcv/GHSA-x6fq-2ggv-xgcv.json index 8471047d3aa..b8251be86be 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6fq-2ggv-xgcv/GHSA-x6fq-2ggv-xgcv.json +++ b/advisories/unreviewed/2022/05/GHSA-x6fq-2ggv-xgcv/GHSA-x6fq-2ggv-xgcv.json @@ -7,12 +7,8 @@ "CVE-2005-2097" ], "details": "xpdf and kpdf do not properly validate the \"loca\" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a \"broken\" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x75c-2774-mpv3/GHSA-x75c-2774-mpv3.json b/advisories/unreviewed/2022/05/GHSA-x75c-2774-mpv3/GHSA-x75c-2774-mpv3.json index 25bc9000fd4..299b75ba939 100644 --- a/advisories/unreviewed/2022/05/GHSA-x75c-2774-mpv3/GHSA-x75c-2774-mpv3.json +++ b/advisories/unreviewed/2022/05/GHSA-x75c-2774-mpv3/GHSA-x75c-2774-mpv3.json @@ -7,12 +7,8 @@ "CVE-2005-0399" ], "details": "Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x7jx-xvm5-65gq/GHSA-x7jx-xvm5-65gq.json b/advisories/unreviewed/2022/05/GHSA-x7jx-xvm5-65gq/GHSA-x7jx-xvm5-65gq.json index 456943145af..f0a1a04f6c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-x7jx-xvm5-65gq/GHSA-x7jx-xvm5-65gq.json +++ b/advisories/unreviewed/2022/05/GHSA-x7jx-xvm5-65gq/GHSA-x7jx-xvm5-65gq.json @@ -7,12 +7,8 @@ "CVE-2002-1674" ], "details": "procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function refers to.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x8hf-49vp-fmqg/GHSA-x8hf-49vp-fmqg.json b/advisories/unreviewed/2022/05/GHSA-x8hf-49vp-fmqg/GHSA-x8hf-49vp-fmqg.json index 0a0e25f8763..06c2320e886 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8hf-49vp-fmqg/GHSA-x8hf-49vp-fmqg.json +++ b/advisories/unreviewed/2022/05/GHSA-x8hf-49vp-fmqg/GHSA-x8hf-49vp-fmqg.json @@ -7,12 +7,8 @@ "CVE-2004-0535" ], "details": "The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a \"buffer overflow\" by some sources.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x92r-57vj-9h2j/GHSA-x92r-57vj-9h2j.json b/advisories/unreviewed/2022/05/GHSA-x92r-57vj-9h2j/GHSA-x92r-57vj-9h2j.json index 3c1d2f3b9c5..50323400578 100644 --- a/advisories/unreviewed/2022/05/GHSA-x92r-57vj-9h2j/GHSA-x92r-57vj-9h2j.json +++ b/advisories/unreviewed/2022/05/GHSA-x92r-57vj-9h2j/GHSA-x92r-57vj-9h2j.json @@ -7,12 +7,8 @@ "CVE-2004-0392" ], "details": "racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) \"Security Association Next Payload\" and (2) \"RESERVED\" fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x9vv-cmfc-4qwh/GHSA-x9vv-cmfc-4qwh.json b/advisories/unreviewed/2022/05/GHSA-x9vv-cmfc-4qwh/GHSA-x9vv-cmfc-4qwh.json index 79d9349ac2c..561ef5f5c5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9vv-cmfc-4qwh/GHSA-x9vv-cmfc-4qwh.json +++ b/advisories/unreviewed/2022/05/GHSA-x9vv-cmfc-4qwh/GHSA-x9vv-cmfc-4qwh.json @@ -7,12 +7,8 @@ "CVE-2005-3962" ], "details": "Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -216,9 +212,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xcj5-xcx2-vvvv/GHSA-xcj5-xcx2-vvvv.json b/advisories/unreviewed/2022/05/GHSA-xcj5-xcx2-vvvv/GHSA-xcj5-xcx2-vvvv.json index e33cb4929ac..b630738e36d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xcj5-xcx2-vvvv/GHSA-xcj5-xcx2-vvvv.json +++ b/advisories/unreviewed/2022/05/GHSA-xcj5-xcx2-vvvv/GHSA-xcj5-xcx2-vvvv.json @@ -7,12 +7,8 @@ "CVE-2004-0079" ], "details": "The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -188,9 +184,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xf39-wv64-h44p/GHSA-xf39-wv64-h44p.json b/advisories/unreviewed/2022/05/GHSA-xf39-wv64-h44p/GHSA-xf39-wv64-h44p.json index 4cc7016471e..7d79f40835c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xf39-wv64-h44p/GHSA-xf39-wv64-h44p.json +++ b/advisories/unreviewed/2022/05/GHSA-xf39-wv64-h44p/GHSA-xf39-wv64-h44p.json @@ -7,12 +7,8 @@ "CVE-2005-2582" ], "details": "Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the (1) log and (2) license directory, which allows local users to delete log files, append to arbitrary files via a symlink attack on kavmonitor.log, or delete license keys and prevent keepup2date from properly executing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xfgm-mcp9-c3v6/GHSA-xfgm-mcp9-c3v6.json b/advisories/unreviewed/2022/05/GHSA-xfgm-mcp9-c3v6/GHSA-xfgm-mcp9-c3v6.json index fec7721f898..baf3c4356c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfgm-mcp9-c3v6/GHSA-xfgm-mcp9-c3v6.json +++ b/advisories/unreviewed/2022/05/GHSA-xfgm-mcp9-c3v6/GHSA-xfgm-mcp9-c3v6.json @@ -7,12 +7,8 @@ "CVE-2003-1021" ], "details": "The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xfgm-r927-x577/GHSA-xfgm-r927-x577.json b/advisories/unreviewed/2022/05/GHSA-xfgm-r927-x577/GHSA-xfgm-r927-x577.json index 1f079975d12..fcf4e30f08f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfgm-r927-x577/GHSA-xfgm-r927-x577.json +++ b/advisories/unreviewed/2022/05/GHSA-xfgm-r927-x577/GHSA-xfgm-r927-x577.json @@ -7,12 +7,8 @@ "CVE-2009-0591" ], "details": "The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xfr7-p9r5-j92r/GHSA-xfr7-p9r5-j92r.json b/advisories/unreviewed/2022/05/GHSA-xfr7-p9r5-j92r/GHSA-xfr7-p9r5-j92r.json index deda06d3121..4f74fbec858 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfr7-p9r5-j92r/GHSA-xfr7-p9r5-j92r.json +++ b/advisories/unreviewed/2022/05/GHSA-xfr7-p9r5-j92r/GHSA-xfr7-p9r5-j92r.json @@ -7,12 +7,8 @@ "CVE-2005-2702" ], "details": "Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with \"zero-width non-joiner\" characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xg52-wr75-9hc5/GHSA-xg52-wr75-9hc5.json b/advisories/unreviewed/2022/05/GHSA-xg52-wr75-9hc5/GHSA-xg52-wr75-9hc5.json index b770a9b8b46..a1b86788c01 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg52-wr75-9hc5/GHSA-xg52-wr75-9hc5.json +++ b/advisories/unreviewed/2022/05/GHSA-xg52-wr75-9hc5/GHSA-xg52-wr75-9hc5.json @@ -7,12 +7,8 @@ "CVE-2006-4568" ], "details": "Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhvg-9hv8-ff9r/GHSA-xhvg-9hv8-ff9r.json b/advisories/unreviewed/2022/05/GHSA-xhvg-9hv8-ff9r/GHSA-xhvg-9hv8-ff9r.json index 5bb38417811..6a608072d17 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhvg-9hv8-ff9r/GHSA-xhvg-9hv8-ff9r.json +++ b/advisories/unreviewed/2022/05/GHSA-xhvg-9hv8-ff9r/GHSA-xhvg-9hv8-ff9r.json @@ -7,12 +7,8 @@ "CVE-2006-3630" ], "details": "Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xj67-5prp-p33j/GHSA-xj67-5prp-p33j.json b/advisories/unreviewed/2022/05/GHSA-xj67-5prp-p33j/GHSA-xj67-5prp-p33j.json index a98a80ba66a..74081cff1f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj67-5prp-p33j/GHSA-xj67-5prp-p33j.json +++ b/advisories/unreviewed/2022/05/GHSA-xj67-5prp-p33j/GHSA-xj67-5prp-p33j.json @@ -7,12 +7,8 @@ "CVE-2002-1232" ], "details": "Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xj67-863c-2vj3/GHSA-xj67-863c-2vj3.json b/advisories/unreviewed/2022/05/GHSA-xj67-863c-2vj3/GHSA-xj67-863c-2vj3.json index b7c3f18d3e7..5389fde30e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj67-863c-2vj3/GHSA-xj67-863c-2vj3.json +++ b/advisories/unreviewed/2022/05/GHSA-xj67-863c-2vj3/GHSA-xj67-863c-2vj3.json @@ -7,12 +7,8 @@ "CVE-2005-3192" ], "details": "Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xjff-629w-p8r7/GHSA-xjff-629w-p8r7.json b/advisories/unreviewed/2022/05/GHSA-xjff-629w-p8r7/GHSA-xjff-629w-p8r7.json index 5b8b18385ba..5267f25c731 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjff-629w-p8r7/GHSA-xjff-629w-p8r7.json +++ b/advisories/unreviewed/2022/05/GHSA-xjff-629w-p8r7/GHSA-xjff-629w-p8r7.json @@ -7,12 +7,8 @@ "CVE-2006-3462" ], "details": "Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmqm-497m-6h9h/GHSA-xmqm-497m-6h9h.json b/advisories/unreviewed/2022/05/GHSA-xmqm-497m-6h9h/GHSA-xmqm-497m-6h9h.json index 51fe8f88ddc..69ae28c4a32 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmqm-497m-6h9h/GHSA-xmqm-497m-6h9h.json +++ b/advisories/unreviewed/2022/05/GHSA-xmqm-497m-6h9h/GHSA-xmqm-497m-6h9h.json @@ -7,12 +7,8 @@ "CVE-2005-1038" ], "details": "crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xp7j-9g27-rqpj/GHSA-xp7j-9g27-rqpj.json b/advisories/unreviewed/2022/05/GHSA-xp7j-9g27-rqpj/GHSA-xp7j-9g27-rqpj.json index 604b20cf169..ead42fbff6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xp7j-9g27-rqpj/GHSA-xp7j-9g27-rqpj.json +++ b/advisories/unreviewed/2022/05/GHSA-xp7j-9g27-rqpj/GHSA-xp7j-9g27-rqpj.json @@ -7,12 +7,8 @@ "CVE-2003-0289" ], "details": "Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xpcm-qv2j-fxfr/GHSA-xpcm-qv2j-fxfr.json b/advisories/unreviewed/2022/05/GHSA-xpcm-qv2j-fxfr/GHSA-xpcm-qv2j-fxfr.json index 3ce6f3f32a6..1ffceea9603 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpcm-qv2j-fxfr/GHSA-xpcm-qv2j-fxfr.json +++ b/advisories/unreviewed/2022/05/GHSA-xpcm-qv2j-fxfr/GHSA-xpcm-qv2j-fxfr.json @@ -7,12 +7,8 @@ "CVE-2002-0820" ], "details": "FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xpr2-mv3m-jxjg/GHSA-xpr2-mv3m-jxjg.json b/advisories/unreviewed/2022/05/GHSA-xpr2-mv3m-jxjg/GHSA-xpr2-mv3m-jxjg.json index f698faf0129..33bec6769a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpr2-mv3m-jxjg/GHSA-xpr2-mv3m-jxjg.json +++ b/advisories/unreviewed/2022/05/GHSA-xpr2-mv3m-jxjg/GHSA-xpr2-mv3m-jxjg.json @@ -7,12 +7,8 @@ "CVE-2005-1126" ], "details": "The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xpw2-c8vq-gfg3/GHSA-xpw2-c8vq-gfg3.json b/advisories/unreviewed/2022/05/GHSA-xpw2-c8vq-gfg3/GHSA-xpw2-c8vq-gfg3.json index ad6cb99ff4d..62c9dfa8534 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpw2-c8vq-gfg3/GHSA-xpw2-c8vq-gfg3.json +++ b/advisories/unreviewed/2022/05/GHSA-xpw2-c8vq-gfg3/GHSA-xpw2-c8vq-gfg3.json @@ -7,12 +7,8 @@ "CVE-2004-0599" ], "details": "Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -156,9 +152,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xq98-x84m-6479/GHSA-xq98-x84m-6479.json b/advisories/unreviewed/2022/05/GHSA-xq98-x84m-6479/GHSA-xq98-x84m-6479.json index 2897ac95994..c5ec7362cf3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq98-x84m-6479/GHSA-xq98-x84m-6479.json +++ b/advisories/unreviewed/2022/05/GHSA-xq98-x84m-6479/GHSA-xq98-x84m-6479.json @@ -7,12 +7,8 @@ "CVE-2004-0370" ], "details": "The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xr4c-88wp-frr7/GHSA-xr4c-88wp-frr7.json b/advisories/unreviewed/2022/05/GHSA-xr4c-88wp-frr7/GHSA-xr4c-88wp-frr7.json index e4f7ffbcf4b..d73cb6d332b 100644 --- a/advisories/unreviewed/2022/05/GHSA-xr4c-88wp-frr7/GHSA-xr4c-88wp-frr7.json +++ b/advisories/unreviewed/2022/05/GHSA-xr4c-88wp-frr7/GHSA-xr4c-88wp-frr7.json @@ -7,12 +7,8 @@ "CVE-2006-4565" ], "details": "Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a \"minimal quantifier.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xrcj-fc8v-w45w/GHSA-xrcj-fc8v-w45w.json b/advisories/unreviewed/2022/05/GHSA-xrcj-fc8v-w45w/GHSA-xrcj-fc8v-w45w.json index 66bf1841241..cbf1faa59c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrcj-fc8v-w45w/GHSA-xrcj-fc8v-w45w.json +++ b/advisories/unreviewed/2022/05/GHSA-xrcj-fc8v-w45w/GHSA-xrcj-fc8v-w45w.json @@ -7,12 +7,8 @@ "CVE-2005-1154" ], "details": "Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka \"Cross-site scripting through global scope pollution.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xrvc-m3hh-hp9h/GHSA-xrvc-m3hh-hp9h.json b/advisories/unreviewed/2022/05/GHSA-xrvc-m3hh-hp9h/GHSA-xrvc-m3hh-hp9h.json index 31f47d0fa9f..7451548988f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrvc-m3hh-hp9h/GHSA-xrvc-m3hh-hp9h.json +++ b/advisories/unreviewed/2022/05/GHSA-xrvc-m3hh-hp9h/GHSA-xrvc-m3hh-hp9h.json @@ -7,12 +7,8 @@ "CVE-2004-0416" ], "details": "Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xvw3-ghj5-vvrf/GHSA-xvw3-ghj5-vvrf.json b/advisories/unreviewed/2022/05/GHSA-xvw3-ghj5-vvrf/GHSA-xvw3-ghj5-vvrf.json index 11164454ea7..a6c46e14cef 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvw3-ghj5-vvrf/GHSA-xvw3-ghj5-vvrf.json +++ b/advisories/unreviewed/2022/05/GHSA-xvw3-ghj5-vvrf/GHSA-xvw3-ghj5-vvrf.json @@ -7,12 +7,8 @@ "CVE-2008-2476" ], "details": "The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx8x-qm77-m9x3/GHSA-xx8x-qm77-m9x3.json b/advisories/unreviewed/2022/05/GHSA-xx8x-qm77-m9x3/GHSA-xx8x-qm77-m9x3.json index 0ae9b345fc9..a679dd0480c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx8x-qm77-m9x3/GHSA-xx8x-qm77-m9x3.json +++ b/advisories/unreviewed/2022/05/GHSA-xx8x-qm77-m9x3/GHSA-xx8x-qm77-m9x3.json @@ -7,12 +7,8 @@ "CVE-2006-2223" ], "details": "RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xxpj-63fc-3w3g/GHSA-xxpj-63fc-3w3g.json b/advisories/unreviewed/2022/05/GHSA-xxpj-63fc-3w3g/GHSA-xxpj-63fc-3w3g.json index fcaf9ed13b3..096dad64fb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-xxpj-63fc-3w3g/GHSA-xxpj-63fc-3w3g.json +++ b/advisories/unreviewed/2022/05/GHSA-xxpj-63fc-3w3g/GHSA-xxpj-63fc-3w3g.json @@ -7,12 +7,8 @@ "CVE-2008-3853" ], "details": "Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to CVE-2007-3676.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-3g9h-f994-3h4c/GHSA-3g9h-f994-3h4c.json b/advisories/unreviewed/2023/10/GHSA-3g9h-f994-3h4c/GHSA-3g9h-f994-3h4c.json index e2978f56e19..1d7e9eee0ec 100644 --- a/advisories/unreviewed/2023/10/GHSA-3g9h-f994-3h4c/GHSA-3g9h-f994-3h4c.json +++ b/advisories/unreviewed/2023/10/GHSA-3g9h-f994-3h4c/GHSA-3g9h-f994-3h4c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-3qmg-867g-8xrq/GHSA-3qmg-867g-8xrq.json b/advisories/unreviewed/2023/10/GHSA-3qmg-867g-8xrq/GHSA-3qmg-867g-8xrq.json index bd72a17115a..db2a815547d 100644 --- a/advisories/unreviewed/2023/10/GHSA-3qmg-867g-8xrq/GHSA-3qmg-867g-8xrq.json +++ b/advisories/unreviewed/2023/10/GHSA-3qmg-867g-8xrq/GHSA-3qmg-867g-8xrq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-44gc-83qm-2wcf/GHSA-44gc-83qm-2wcf.json b/advisories/unreviewed/2023/10/GHSA-44gc-83qm-2wcf/GHSA-44gc-83qm-2wcf.json index 9d0f568e194..ca347215c47 100644 --- a/advisories/unreviewed/2023/10/GHSA-44gc-83qm-2wcf/GHSA-44gc-83qm-2wcf.json +++ b/advisories/unreviewed/2023/10/GHSA-44gc-83qm-2wcf/GHSA-44gc-83qm-2wcf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-4pm7-5852-9cj6/GHSA-4pm7-5852-9cj6.json b/advisories/unreviewed/2023/10/GHSA-4pm7-5852-9cj6/GHSA-4pm7-5852-9cj6.json index 4354e3aa324..76f511202be 100644 --- a/advisories/unreviewed/2023/10/GHSA-4pm7-5852-9cj6/GHSA-4pm7-5852-9cj6.json +++ b/advisories/unreviewed/2023/10/GHSA-4pm7-5852-9cj6/GHSA-4pm7-5852-9cj6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-73x6-xjxr-3695/GHSA-73x6-xjxr-3695.json b/advisories/unreviewed/2023/10/GHSA-73x6-xjxr-3695/GHSA-73x6-xjxr-3695.json index 5f9d898b58b..09ba42d18e3 100644 --- a/advisories/unreviewed/2023/10/GHSA-73x6-xjxr-3695/GHSA-73x6-xjxr-3695.json +++ b/advisories/unreviewed/2023/10/GHSA-73x6-xjxr-3695/GHSA-73x6-xjxr-3695.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-9mh4-4vr9-p4jq/GHSA-9mh4-4vr9-p4jq.json b/advisories/unreviewed/2023/10/GHSA-9mh4-4vr9-p4jq/GHSA-9mh4-4vr9-p4jq.json index befbee88789..95183e006b3 100644 --- a/advisories/unreviewed/2023/10/GHSA-9mh4-4vr9-p4jq/GHSA-9mh4-4vr9-p4jq.json +++ b/advisories/unreviewed/2023/10/GHSA-9mh4-4vr9-p4jq/GHSA-9mh4-4vr9-p4jq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-cjrc-87qf-22gg/GHSA-cjrc-87qf-22gg.json b/advisories/unreviewed/2023/10/GHSA-cjrc-87qf-22gg/GHSA-cjrc-87qf-22gg.json index 8c630bf1fe2..28e87e609cd 100644 --- a/advisories/unreviewed/2023/10/GHSA-cjrc-87qf-22gg/GHSA-cjrc-87qf-22gg.json +++ b/advisories/unreviewed/2023/10/GHSA-cjrc-87qf-22gg/GHSA-cjrc-87qf-22gg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-h43q-h523-j594/GHSA-h43q-h523-j594.json b/advisories/unreviewed/2023/10/GHSA-h43q-h523-j594/GHSA-h43q-h523-j594.json index 30e99f2d8b9..eea50797b14 100644 --- a/advisories/unreviewed/2023/10/GHSA-h43q-h523-j594/GHSA-h43q-h523-j594.json +++ b/advisories/unreviewed/2023/10/GHSA-h43q-h523-j594/GHSA-h43q-h523-j594.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-hhqg-994q-93m3/GHSA-hhqg-994q-93m3.json b/advisories/unreviewed/2023/10/GHSA-hhqg-994q-93m3/GHSA-hhqg-994q-93m3.json index 1f6b6473822..fd6875cf300 100644 --- a/advisories/unreviewed/2023/10/GHSA-hhqg-994q-93m3/GHSA-hhqg-994q-93m3.json +++ b/advisories/unreviewed/2023/10/GHSA-hhqg-994q-93m3/GHSA-hhqg-994q-93m3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-j2q7-6q2x-2q9p/GHSA-j2q7-6q2x-2q9p.json b/advisories/unreviewed/2023/10/GHSA-j2q7-6q2x-2q9p/GHSA-j2q7-6q2x-2q9p.json index 6c6244cbe00..ea0b11504e5 100644 --- a/advisories/unreviewed/2023/10/GHSA-j2q7-6q2x-2q9p/GHSA-j2q7-6q2x-2q9p.json +++ b/advisories/unreviewed/2023/10/GHSA-j2q7-6q2x-2q9p/GHSA-j2q7-6q2x-2q9p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-j7gf-5v9f-v496/GHSA-j7gf-5v9f-v496.json b/advisories/unreviewed/2023/10/GHSA-j7gf-5v9f-v496/GHSA-j7gf-5v9f-v496.json index 213aa041bff..f14cb790ea8 100644 --- a/advisories/unreviewed/2023/10/GHSA-j7gf-5v9f-v496/GHSA-j7gf-5v9f-v496.json +++ b/advisories/unreviewed/2023/10/GHSA-j7gf-5v9f-v496/GHSA-j7gf-5v9f-v496.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-jmh8-4h3g-x5g5/GHSA-jmh8-4h3g-x5g5.json b/advisories/unreviewed/2023/10/GHSA-jmh8-4h3g-x5g5/GHSA-jmh8-4h3g-x5g5.json index 35de5432f01..cf324ebb4e8 100644 --- a/advisories/unreviewed/2023/10/GHSA-jmh8-4h3g-x5g5/GHSA-jmh8-4h3g-x5g5.json +++ b/advisories/unreviewed/2023/10/GHSA-jmh8-4h3g-x5g5/GHSA-jmh8-4h3g-x5g5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -99,9 +97,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/10/GHSA-m2cg-wrh8-h3xx/GHSA-m2cg-wrh8-h3xx.json b/advisories/unreviewed/2023/10/GHSA-m2cg-wrh8-h3xx/GHSA-m2cg-wrh8-h3xx.json index 1e02df9f23b..62937de7d7c 100644 --- a/advisories/unreviewed/2023/10/GHSA-m2cg-wrh8-h3xx/GHSA-m2cg-wrh8-h3xx.json +++ b/advisories/unreviewed/2023/10/GHSA-m2cg-wrh8-h3xx/GHSA-m2cg-wrh8-h3xx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-p32x-cxrq-r87p/GHSA-p32x-cxrq-r87p.json b/advisories/unreviewed/2023/10/GHSA-p32x-cxrq-r87p/GHSA-p32x-cxrq-r87p.json index 16804a33927..47537e37161 100644 --- a/advisories/unreviewed/2023/10/GHSA-p32x-cxrq-r87p/GHSA-p32x-cxrq-r87p.json +++ b/advisories/unreviewed/2023/10/GHSA-p32x-cxrq-r87p/GHSA-p32x-cxrq-r87p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-p678-r7cm-66fh/GHSA-p678-r7cm-66fh.json b/advisories/unreviewed/2023/10/GHSA-p678-r7cm-66fh/GHSA-p678-r7cm-66fh.json index cae5ec44a60..0aa70bc997d 100644 --- a/advisories/unreviewed/2023/10/GHSA-p678-r7cm-66fh/GHSA-p678-r7cm-66fh.json +++ b/advisories/unreviewed/2023/10/GHSA-p678-r7cm-66fh/GHSA-p678-r7cm-66fh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-48f2-4cq7-gqw6/GHSA-48f2-4cq7-gqw6.json b/advisories/unreviewed/2023/12/GHSA-48f2-4cq7-gqw6/GHSA-48f2-4cq7-gqw6.json index 64f4f55aad3..be327f9867c 100644 --- a/advisories/unreviewed/2023/12/GHSA-48f2-4cq7-gqw6/GHSA-48f2-4cq7-gqw6.json +++ b/advisories/unreviewed/2023/12/GHSA-48f2-4cq7-gqw6/GHSA-48f2-4cq7-gqw6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-3g98-33qx-2q68/GHSA-3g98-33qx-2q68.json b/advisories/unreviewed/2024/01/GHSA-3g98-33qx-2q68/GHSA-3g98-33qx-2q68.json index 6b1953ef72f..49f5a836d63 100644 --- a/advisories/unreviewed/2024/01/GHSA-3g98-33qx-2q68/GHSA-3g98-33qx-2q68.json +++ b/advisories/unreviewed/2024/01/GHSA-3g98-33qx-2q68/GHSA-3g98-33qx-2q68.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-43xx-wfwg-ffh4/GHSA-43xx-wfwg-ffh4.json b/advisories/unreviewed/2024/01/GHSA-43xx-wfwg-ffh4/GHSA-43xx-wfwg-ffh4.json index beee85452d7..a16b8fc77f6 100644 --- a/advisories/unreviewed/2024/01/GHSA-43xx-wfwg-ffh4/GHSA-43xx-wfwg-ffh4.json +++ b/advisories/unreviewed/2024/01/GHSA-43xx-wfwg-ffh4/GHSA-43xx-wfwg-ffh4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-55jq-jhw2-2vmp/GHSA-55jq-jhw2-2vmp.json b/advisories/unreviewed/2024/01/GHSA-55jq-jhw2-2vmp/GHSA-55jq-jhw2-2vmp.json index 172863dba99..8294c996328 100644 --- a/advisories/unreviewed/2024/01/GHSA-55jq-jhw2-2vmp/GHSA-55jq-jhw2-2vmp.json +++ b/advisories/unreviewed/2024/01/GHSA-55jq-jhw2-2vmp/GHSA-55jq-jhw2-2vmp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-87hh-r9jv-r2jq/GHSA-87hh-r9jv-r2jq.json b/advisories/unreviewed/2024/01/GHSA-87hh-r9jv-r2jq/GHSA-87hh-r9jv-r2jq.json index a82ce0b9265..1ce9f3980f3 100644 --- a/advisories/unreviewed/2024/01/GHSA-87hh-r9jv-r2jq/GHSA-87hh-r9jv-r2jq.json +++ b/advisories/unreviewed/2024/01/GHSA-87hh-r9jv-r2jq/GHSA-87hh-r9jv-r2jq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-893r-3jv5-xxp5/GHSA-893r-3jv5-xxp5.json b/advisories/unreviewed/2024/01/GHSA-893r-3jv5-xxp5/GHSA-893r-3jv5-xxp5.json index b4223beae70..8d373593b45 100644 --- a/advisories/unreviewed/2024/01/GHSA-893r-3jv5-xxp5/GHSA-893r-3jv5-xxp5.json +++ b/advisories/unreviewed/2024/01/GHSA-893r-3jv5-xxp5/GHSA-893r-3jv5-xxp5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-9gf5-vf62-9578/GHSA-9gf5-vf62-9578.json b/advisories/unreviewed/2024/01/GHSA-9gf5-vf62-9578/GHSA-9gf5-vf62-9578.json index 49720a41a6b..e4a5d9d93d0 100644 --- a/advisories/unreviewed/2024/01/GHSA-9gf5-vf62-9578/GHSA-9gf5-vf62-9578.json +++ b/advisories/unreviewed/2024/01/GHSA-9gf5-vf62-9578/GHSA-9gf5-vf62-9578.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-9m6f-83hx-8wwr/GHSA-9m6f-83hx-8wwr.json b/advisories/unreviewed/2024/01/GHSA-9m6f-83hx-8wwr/GHSA-9m6f-83hx-8wwr.json index 27264e7155d..32a44a4aee0 100644 --- a/advisories/unreviewed/2024/01/GHSA-9m6f-83hx-8wwr/GHSA-9m6f-83hx-8wwr.json +++ b/advisories/unreviewed/2024/01/GHSA-9m6f-83hx-8wwr/GHSA-9m6f-83hx-8wwr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-jpj8-v3w8-6gx3/GHSA-jpj8-v3w8-6gx3.json b/advisories/unreviewed/2024/01/GHSA-jpj8-v3w8-6gx3/GHSA-jpj8-v3w8-6gx3.json index 37a148d56fc..412955cab63 100644 --- a/advisories/unreviewed/2024/01/GHSA-jpj8-v3w8-6gx3/GHSA-jpj8-v3w8-6gx3.json +++ b/advisories/unreviewed/2024/01/GHSA-jpj8-v3w8-6gx3/GHSA-jpj8-v3w8-6gx3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-p6rw-gvvh-q8v4/GHSA-p6rw-gvvh-q8v4.json b/advisories/unreviewed/2024/01/GHSA-p6rw-gvvh-q8v4/GHSA-p6rw-gvvh-q8v4.json index 49a55b699b8..085443bd653 100644 --- a/advisories/unreviewed/2024/01/GHSA-p6rw-gvvh-q8v4/GHSA-p6rw-gvvh-q8v4.json +++ b/advisories/unreviewed/2024/01/GHSA-p6rw-gvvh-q8v4/GHSA-p6rw-gvvh-q8v4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-wpfm-839m-3pxg/GHSA-wpfm-839m-3pxg.json b/advisories/unreviewed/2024/01/GHSA-wpfm-839m-3pxg/GHSA-wpfm-839m-3pxg.json index b9316c7cf20..10d8a06b8f2 100644 --- a/advisories/unreviewed/2024/01/GHSA-wpfm-839m-3pxg/GHSA-wpfm-839m-3pxg.json +++ b/advisories/unreviewed/2024/01/GHSA-wpfm-839m-3pxg/GHSA-wpfm-839m-3pxg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-23v9-73rv-qxqj/GHSA-23v9-73rv-qxqj.json b/advisories/unreviewed/2024/02/GHSA-23v9-73rv-qxqj/GHSA-23v9-73rv-qxqj.json index 0553a2d053f..e0b5f57c4f9 100644 --- a/advisories/unreviewed/2024/02/GHSA-23v9-73rv-qxqj/GHSA-23v9-73rv-qxqj.json +++ b/advisories/unreviewed/2024/02/GHSA-23v9-73rv-qxqj/GHSA-23v9-73rv-qxqj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-44vw-x4jf-3q2f/GHSA-44vw-x4jf-3q2f.json b/advisories/unreviewed/2024/02/GHSA-44vw-x4jf-3q2f/GHSA-44vw-x4jf-3q2f.json index a69c630932a..4c0912dea6c 100644 --- a/advisories/unreviewed/2024/02/GHSA-44vw-x4jf-3q2f/GHSA-44vw-x4jf-3q2f.json +++ b/advisories/unreviewed/2024/02/GHSA-44vw-x4jf-3q2f/GHSA-44vw-x4jf-3q2f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-4947-vpfm-4vhf/GHSA-4947-vpfm-4vhf.json b/advisories/unreviewed/2024/02/GHSA-4947-vpfm-4vhf/GHSA-4947-vpfm-4vhf.json index dc8ee831ac9..3980f2a5a7b 100644 --- a/advisories/unreviewed/2024/02/GHSA-4947-vpfm-4vhf/GHSA-4947-vpfm-4vhf.json +++ b/advisories/unreviewed/2024/02/GHSA-4947-vpfm-4vhf/GHSA-4947-vpfm-4vhf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-4mgq-44rj-x22r/GHSA-4mgq-44rj-x22r.json b/advisories/unreviewed/2024/02/GHSA-4mgq-44rj-x22r/GHSA-4mgq-44rj-x22r.json index 10eaa502afc..841c4ee9f7b 100644 --- a/advisories/unreviewed/2024/02/GHSA-4mgq-44rj-x22r/GHSA-4mgq-44rj-x22r.json +++ b/advisories/unreviewed/2024/02/GHSA-4mgq-44rj-x22r/GHSA-4mgq-44rj-x22r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-4rgm-c3r2-2hwv/GHSA-4rgm-c3r2-2hwv.json b/advisories/unreviewed/2024/02/GHSA-4rgm-c3r2-2hwv/GHSA-4rgm-c3r2-2hwv.json index f7a5fdc0a7b..fc27117ece7 100644 --- a/advisories/unreviewed/2024/02/GHSA-4rgm-c3r2-2hwv/GHSA-4rgm-c3r2-2hwv.json +++ b/advisories/unreviewed/2024/02/GHSA-4rgm-c3r2-2hwv/GHSA-4rgm-c3r2-2hwv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-52rw-98p2-v2g3/GHSA-52rw-98p2-v2g3.json b/advisories/unreviewed/2024/02/GHSA-52rw-98p2-v2g3/GHSA-52rw-98p2-v2g3.json index 24b3a7cee0f..74a9691a4c1 100644 --- a/advisories/unreviewed/2024/02/GHSA-52rw-98p2-v2g3/GHSA-52rw-98p2-v2g3.json +++ b/advisories/unreviewed/2024/02/GHSA-52rw-98p2-v2g3/GHSA-52rw-98p2-v2g3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-55rf-79cf-hxgm/GHSA-55rf-79cf-hxgm.json b/advisories/unreviewed/2024/02/GHSA-55rf-79cf-hxgm/GHSA-55rf-79cf-hxgm.json index b29238b276e..36a20de3975 100644 --- a/advisories/unreviewed/2024/02/GHSA-55rf-79cf-hxgm/GHSA-55rf-79cf-hxgm.json +++ b/advisories/unreviewed/2024/02/GHSA-55rf-79cf-hxgm/GHSA-55rf-79cf-hxgm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-5g8q-6f25-m4g2/GHSA-5g8q-6f25-m4g2.json b/advisories/unreviewed/2024/02/GHSA-5g8q-6f25-m4g2/GHSA-5g8q-6f25-m4g2.json index e7b6e966ae6..02fc938b1b5 100644 --- a/advisories/unreviewed/2024/02/GHSA-5g8q-6f25-m4g2/GHSA-5g8q-6f25-m4g2.json +++ b/advisories/unreviewed/2024/02/GHSA-5g8q-6f25-m4g2/GHSA-5g8q-6f25-m4g2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-62qv-qwj7-9q6x/GHSA-62qv-qwj7-9q6x.json b/advisories/unreviewed/2024/02/GHSA-62qv-qwj7-9q6x/GHSA-62qv-qwj7-9q6x.json index 99ad87e94c8..a8ef3613f86 100644 --- a/advisories/unreviewed/2024/02/GHSA-62qv-qwj7-9q6x/GHSA-62qv-qwj7-9q6x.json +++ b/advisories/unreviewed/2024/02/GHSA-62qv-qwj7-9q6x/GHSA-62qv-qwj7-9q6x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-682p-65cm-q45c/GHSA-682p-65cm-q45c.json b/advisories/unreviewed/2024/02/GHSA-682p-65cm-q45c/GHSA-682p-65cm-q45c.json index 687bd4ff88a..901609963f9 100644 --- a/advisories/unreviewed/2024/02/GHSA-682p-65cm-q45c/GHSA-682p-65cm-q45c.json +++ b/advisories/unreviewed/2024/02/GHSA-682p-65cm-q45c/GHSA-682p-65cm-q45c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-6g66-738j-p78c/GHSA-6g66-738j-p78c.json b/advisories/unreviewed/2024/02/GHSA-6g66-738j-p78c/GHSA-6g66-738j-p78c.json index 25a98e414f4..f664a1cd727 100644 --- a/advisories/unreviewed/2024/02/GHSA-6g66-738j-p78c/GHSA-6g66-738j-p78c.json +++ b/advisories/unreviewed/2024/02/GHSA-6g66-738j-p78c/GHSA-6g66-738j-p78c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-7vp4-2f38-rg78/GHSA-7vp4-2f38-rg78.json b/advisories/unreviewed/2024/02/GHSA-7vp4-2f38-rg78/GHSA-7vp4-2f38-rg78.json index 84060f09bab..e5047265cb9 100644 --- a/advisories/unreviewed/2024/02/GHSA-7vp4-2f38-rg78/GHSA-7vp4-2f38-rg78.json +++ b/advisories/unreviewed/2024/02/GHSA-7vp4-2f38-rg78/GHSA-7vp4-2f38-rg78.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-8chw-9j48-7gmj/GHSA-8chw-9j48-7gmj.json b/advisories/unreviewed/2024/02/GHSA-8chw-9j48-7gmj/GHSA-8chw-9j48-7gmj.json index 063b1cfbc39..2adec42c3c7 100644 --- a/advisories/unreviewed/2024/02/GHSA-8chw-9j48-7gmj/GHSA-8chw-9j48-7gmj.json +++ b/advisories/unreviewed/2024/02/GHSA-8chw-9j48-7gmj/GHSA-8chw-9j48-7gmj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-99rx-9376-xmfc/GHSA-99rx-9376-xmfc.json b/advisories/unreviewed/2024/02/GHSA-99rx-9376-xmfc/GHSA-99rx-9376-xmfc.json index 410738e6e91..198ed001e12 100644 --- a/advisories/unreviewed/2024/02/GHSA-99rx-9376-xmfc/GHSA-99rx-9376-xmfc.json +++ b/advisories/unreviewed/2024/02/GHSA-99rx-9376-xmfc/GHSA-99rx-9376-xmfc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-9qgq-46r9-2xqc/GHSA-9qgq-46r9-2xqc.json b/advisories/unreviewed/2024/02/GHSA-9qgq-46r9-2xqc/GHSA-9qgq-46r9-2xqc.json index f5c9de266fc..59c32c36537 100644 --- a/advisories/unreviewed/2024/02/GHSA-9qgq-46r9-2xqc/GHSA-9qgq-46r9-2xqc.json +++ b/advisories/unreviewed/2024/02/GHSA-9qgq-46r9-2xqc/GHSA-9qgq-46r9-2xqc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-ch4v-95r5-xc38/GHSA-ch4v-95r5-xc38.json b/advisories/unreviewed/2024/02/GHSA-ch4v-95r5-xc38/GHSA-ch4v-95r5-xc38.json index a3b59a6ec48..eabf72e8418 100644 --- a/advisories/unreviewed/2024/02/GHSA-ch4v-95r5-xc38/GHSA-ch4v-95r5-xc38.json +++ b/advisories/unreviewed/2024/02/GHSA-ch4v-95r5-xc38/GHSA-ch4v-95r5-xc38.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-cj8g-f3w9-gg24/GHSA-cj8g-f3w9-gg24.json b/advisories/unreviewed/2024/02/GHSA-cj8g-f3w9-gg24/GHSA-cj8g-f3w9-gg24.json index 48369b05be4..e171163a95c 100644 --- a/advisories/unreviewed/2024/02/GHSA-cj8g-f3w9-gg24/GHSA-cj8g-f3w9-gg24.json +++ b/advisories/unreviewed/2024/02/GHSA-cj8g-f3w9-gg24/GHSA-cj8g-f3w9-gg24.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-cpxr-hfmm-j69h/GHSA-cpxr-hfmm-j69h.json b/advisories/unreviewed/2024/02/GHSA-cpxr-hfmm-j69h/GHSA-cpxr-hfmm-j69h.json index b45957e8f9e..8b97839c074 100644 --- a/advisories/unreviewed/2024/02/GHSA-cpxr-hfmm-j69h/GHSA-cpxr-hfmm-j69h.json +++ b/advisories/unreviewed/2024/02/GHSA-cpxr-hfmm-j69h/GHSA-cpxr-hfmm-j69h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-f4jc-jxp8-5pv7/GHSA-f4jc-jxp8-5pv7.json b/advisories/unreviewed/2024/02/GHSA-f4jc-jxp8-5pv7/GHSA-f4jc-jxp8-5pv7.json index 30a01709fab..b46be1c4bed 100644 --- a/advisories/unreviewed/2024/02/GHSA-f4jc-jxp8-5pv7/GHSA-f4jc-jxp8-5pv7.json +++ b/advisories/unreviewed/2024/02/GHSA-f4jc-jxp8-5pv7/GHSA-f4jc-jxp8-5pv7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-f7f8-8qv6-p289/GHSA-f7f8-8qv6-p289.json b/advisories/unreviewed/2024/02/GHSA-f7f8-8qv6-p289/GHSA-f7f8-8qv6-p289.json index 3f21f9c060d..cdcd3afef61 100644 --- a/advisories/unreviewed/2024/02/GHSA-f7f8-8qv6-p289/GHSA-f7f8-8qv6-p289.json +++ b/advisories/unreviewed/2024/02/GHSA-f7f8-8qv6-p289/GHSA-f7f8-8qv6-p289.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-g7hf-vv6m-6f8q/GHSA-g7hf-vv6m-6f8q.json b/advisories/unreviewed/2024/02/GHSA-g7hf-vv6m-6f8q/GHSA-g7hf-vv6m-6f8q.json index 2cf27aff1f5..e549d490da1 100644 --- a/advisories/unreviewed/2024/02/GHSA-g7hf-vv6m-6f8q/GHSA-g7hf-vv6m-6f8q.json +++ b/advisories/unreviewed/2024/02/GHSA-g7hf-vv6m-6f8q/GHSA-g7hf-vv6m-6f8q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-g9v3-2ccp-qjx4/GHSA-g9v3-2ccp-qjx4.json b/advisories/unreviewed/2024/02/GHSA-g9v3-2ccp-qjx4/GHSA-g9v3-2ccp-qjx4.json index 19edf212cef..a0ad0ec0e3e 100644 --- a/advisories/unreviewed/2024/02/GHSA-g9v3-2ccp-qjx4/GHSA-g9v3-2ccp-qjx4.json +++ b/advisories/unreviewed/2024/02/GHSA-g9v3-2ccp-qjx4/GHSA-g9v3-2ccp-qjx4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-gq9v-6frh-4qfx/GHSA-gq9v-6frh-4qfx.json b/advisories/unreviewed/2024/02/GHSA-gq9v-6frh-4qfx/GHSA-gq9v-6frh-4qfx.json index b7ad3ede4d0..816ba2d16d3 100644 --- a/advisories/unreviewed/2024/02/GHSA-gq9v-6frh-4qfx/GHSA-gq9v-6frh-4qfx.json +++ b/advisories/unreviewed/2024/02/GHSA-gq9v-6frh-4qfx/GHSA-gq9v-6frh-4qfx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-grjm-vqpg-p65p/GHSA-grjm-vqpg-p65p.json b/advisories/unreviewed/2024/02/GHSA-grjm-vqpg-p65p/GHSA-grjm-vqpg-p65p.json index 440f00cc27f..2738904c0a2 100644 --- a/advisories/unreviewed/2024/02/GHSA-grjm-vqpg-p65p/GHSA-grjm-vqpg-p65p.json +++ b/advisories/unreviewed/2024/02/GHSA-grjm-vqpg-p65p/GHSA-grjm-vqpg-p65p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-hgwr-gpf8-663p/GHSA-hgwr-gpf8-663p.json b/advisories/unreviewed/2024/02/GHSA-hgwr-gpf8-663p/GHSA-hgwr-gpf8-663p.json index b65e85921e6..3f469daa340 100644 --- a/advisories/unreviewed/2024/02/GHSA-hgwr-gpf8-663p/GHSA-hgwr-gpf8-663p.json +++ b/advisories/unreviewed/2024/02/GHSA-hgwr-gpf8-663p/GHSA-hgwr-gpf8-663p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-j5jm-rppg-h4j8/GHSA-j5jm-rppg-h4j8.json b/advisories/unreviewed/2024/02/GHSA-j5jm-rppg-h4j8/GHSA-j5jm-rppg-h4j8.json index 638387d2427..2f3b23a85b6 100644 --- a/advisories/unreviewed/2024/02/GHSA-j5jm-rppg-h4j8/GHSA-j5jm-rppg-h4j8.json +++ b/advisories/unreviewed/2024/02/GHSA-j5jm-rppg-h4j8/GHSA-j5jm-rppg-h4j8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-jc76-h9fq-qvwx/GHSA-jc76-h9fq-qvwx.json b/advisories/unreviewed/2024/02/GHSA-jc76-h9fq-qvwx/GHSA-jc76-h9fq-qvwx.json index b2bb8f54f4f..dcda205fc70 100644 --- a/advisories/unreviewed/2024/02/GHSA-jc76-h9fq-qvwx/GHSA-jc76-h9fq-qvwx.json +++ b/advisories/unreviewed/2024/02/GHSA-jc76-h9fq-qvwx/GHSA-jc76-h9fq-qvwx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-jv9f-872m-gv5x/GHSA-jv9f-872m-gv5x.json b/advisories/unreviewed/2024/02/GHSA-jv9f-872m-gv5x/GHSA-jv9f-872m-gv5x.json index bc426b736d1..08601a95d89 100644 --- a/advisories/unreviewed/2024/02/GHSA-jv9f-872m-gv5x/GHSA-jv9f-872m-gv5x.json +++ b/advisories/unreviewed/2024/02/GHSA-jv9f-872m-gv5x/GHSA-jv9f-872m-gv5x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-m4xp-mrqv-mpqc/GHSA-m4xp-mrqv-mpqc.json b/advisories/unreviewed/2024/02/GHSA-m4xp-mrqv-mpqc/GHSA-m4xp-mrqv-mpqc.json index a2b958c545c..12c9b78a305 100644 --- a/advisories/unreviewed/2024/02/GHSA-m4xp-mrqv-mpqc/GHSA-m4xp-mrqv-mpqc.json +++ b/advisories/unreviewed/2024/02/GHSA-m4xp-mrqv-mpqc/GHSA-m4xp-mrqv-mpqc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-m8q6-hf5g-rg2m/GHSA-m8q6-hf5g-rg2m.json b/advisories/unreviewed/2024/02/GHSA-m8q6-hf5g-rg2m/GHSA-m8q6-hf5g-rg2m.json index 056f273668b..ca43cdef43d 100644 --- a/advisories/unreviewed/2024/02/GHSA-m8q6-hf5g-rg2m/GHSA-m8q6-hf5g-rg2m.json +++ b/advisories/unreviewed/2024/02/GHSA-m8q6-hf5g-rg2m/GHSA-m8q6-hf5g-rg2m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-mj59-82hp-pgf4/GHSA-mj59-82hp-pgf4.json b/advisories/unreviewed/2024/02/GHSA-mj59-82hp-pgf4/GHSA-mj59-82hp-pgf4.json index d420e62824f..25c1c9d9849 100644 --- a/advisories/unreviewed/2024/02/GHSA-mj59-82hp-pgf4/GHSA-mj59-82hp-pgf4.json +++ b/advisories/unreviewed/2024/02/GHSA-mj59-82hp-pgf4/GHSA-mj59-82hp-pgf4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-mqq6-542f-w38g/GHSA-mqq6-542f-w38g.json b/advisories/unreviewed/2024/02/GHSA-mqq6-542f-w38g/GHSA-mqq6-542f-w38g.json index 264b5f1aa95..729cc6eb468 100644 --- a/advisories/unreviewed/2024/02/GHSA-mqq6-542f-w38g/GHSA-mqq6-542f-w38g.json +++ b/advisories/unreviewed/2024/02/GHSA-mqq6-542f-w38g/GHSA-mqq6-542f-w38g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-p469-qwjm-crp9/GHSA-p469-qwjm-crp9.json b/advisories/unreviewed/2024/02/GHSA-p469-qwjm-crp9/GHSA-p469-qwjm-crp9.json index 72533d06128..a14b8484e92 100644 --- a/advisories/unreviewed/2024/02/GHSA-p469-qwjm-crp9/GHSA-p469-qwjm-crp9.json +++ b/advisories/unreviewed/2024/02/GHSA-p469-qwjm-crp9/GHSA-p469-qwjm-crp9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-p72g-62xm-rq24/GHSA-p72g-62xm-rq24.json b/advisories/unreviewed/2024/02/GHSA-p72g-62xm-rq24/GHSA-p72g-62xm-rq24.json index b075cb6a4d8..72fe2b34f6b 100644 --- a/advisories/unreviewed/2024/02/GHSA-p72g-62xm-rq24/GHSA-p72g-62xm-rq24.json +++ b/advisories/unreviewed/2024/02/GHSA-p72g-62xm-rq24/GHSA-p72g-62xm-rq24.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-pg7w-g93j-pc6j/GHSA-pg7w-g93j-pc6j.json b/advisories/unreviewed/2024/02/GHSA-pg7w-g93j-pc6j/GHSA-pg7w-g93j-pc6j.json index cd789d9e7d5..60fe893fb3e 100644 --- a/advisories/unreviewed/2024/02/GHSA-pg7w-g93j-pc6j/GHSA-pg7w-g93j-pc6j.json +++ b/advisories/unreviewed/2024/02/GHSA-pg7w-g93j-pc6j/GHSA-pg7w-g93j-pc6j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-qcm3-g6g8-5572/GHSA-qcm3-g6g8-5572.json b/advisories/unreviewed/2024/02/GHSA-qcm3-g6g8-5572/GHSA-qcm3-g6g8-5572.json index 8c507f37a0e..680d81d670f 100644 --- a/advisories/unreviewed/2024/02/GHSA-qcm3-g6g8-5572/GHSA-qcm3-g6g8-5572.json +++ b/advisories/unreviewed/2024/02/GHSA-qcm3-g6g8-5572/GHSA-qcm3-g6g8-5572.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-qphc-8455-gj55/GHSA-qphc-8455-gj55.json b/advisories/unreviewed/2024/02/GHSA-qphc-8455-gj55/GHSA-qphc-8455-gj55.json index 9f0b4a842f7..ec891f77c39 100644 --- a/advisories/unreviewed/2024/02/GHSA-qphc-8455-gj55/GHSA-qphc-8455-gj55.json +++ b/advisories/unreviewed/2024/02/GHSA-qphc-8455-gj55/GHSA-qphc-8455-gj55.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-qr5h-f8v5-jqqh/GHSA-qr5h-f8v5-jqqh.json b/advisories/unreviewed/2024/02/GHSA-qr5h-f8v5-jqqh/GHSA-qr5h-f8v5-jqqh.json index 3633e542eda..847f8c5bf77 100644 --- a/advisories/unreviewed/2024/02/GHSA-qr5h-f8v5-jqqh/GHSA-qr5h-f8v5-jqqh.json +++ b/advisories/unreviewed/2024/02/GHSA-qr5h-f8v5-jqqh/GHSA-qr5h-f8v5-jqqh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-qx7r-whpj-fwx8/GHSA-qx7r-whpj-fwx8.json b/advisories/unreviewed/2024/02/GHSA-qx7r-whpj-fwx8/GHSA-qx7r-whpj-fwx8.json index a9a379d0413..eb666a1ba41 100644 --- a/advisories/unreviewed/2024/02/GHSA-qx7r-whpj-fwx8/GHSA-qx7r-whpj-fwx8.json +++ b/advisories/unreviewed/2024/02/GHSA-qx7r-whpj-fwx8/GHSA-qx7r-whpj-fwx8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-r4m8-492c-frc5/GHSA-r4m8-492c-frc5.json b/advisories/unreviewed/2024/02/GHSA-r4m8-492c-frc5/GHSA-r4m8-492c-frc5.json index 5054fb192a5..5fe8326507d 100644 --- a/advisories/unreviewed/2024/02/GHSA-r4m8-492c-frc5/GHSA-r4m8-492c-frc5.json +++ b/advisories/unreviewed/2024/02/GHSA-r4m8-492c-frc5/GHSA-r4m8-492c-frc5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-r889-rc6f-3h5m/GHSA-r889-rc6f-3h5m.json b/advisories/unreviewed/2024/02/GHSA-r889-rc6f-3h5m/GHSA-r889-rc6f-3h5m.json index ae2034abe30..86266a83124 100644 --- a/advisories/unreviewed/2024/02/GHSA-r889-rc6f-3h5m/GHSA-r889-rc6f-3h5m.json +++ b/advisories/unreviewed/2024/02/GHSA-r889-rc6f-3h5m/GHSA-r889-rc6f-3h5m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-v62h-prj4-9v6m/GHSA-v62h-prj4-9v6m.json b/advisories/unreviewed/2024/02/GHSA-v62h-prj4-9v6m/GHSA-v62h-prj4-9v6m.json index 845589e0da5..bab23ec0259 100644 --- a/advisories/unreviewed/2024/02/GHSA-v62h-prj4-9v6m/GHSA-v62h-prj4-9v6m.json +++ b/advisories/unreviewed/2024/02/GHSA-v62h-prj4-9v6m/GHSA-v62h-prj4-9v6m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-v9pp-cc53-25hp/GHSA-v9pp-cc53-25hp.json b/advisories/unreviewed/2024/02/GHSA-v9pp-cc53-25hp/GHSA-v9pp-cc53-25hp.json index 092339e769e..fecce06ac06 100644 --- a/advisories/unreviewed/2024/02/GHSA-v9pp-cc53-25hp/GHSA-v9pp-cc53-25hp.json +++ b/advisories/unreviewed/2024/02/GHSA-v9pp-cc53-25hp/GHSA-v9pp-cc53-25hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-vg4f-g292-cmwp/GHSA-vg4f-g292-cmwp.json b/advisories/unreviewed/2024/02/GHSA-vg4f-g292-cmwp/GHSA-vg4f-g292-cmwp.json index b41c21a1309..e96a7245b71 100644 --- a/advisories/unreviewed/2024/02/GHSA-vg4f-g292-cmwp/GHSA-vg4f-g292-cmwp.json +++ b/advisories/unreviewed/2024/02/GHSA-vg4f-g292-cmwp/GHSA-vg4f-g292-cmwp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-vjv2-8c96-r6jw/GHSA-vjv2-8c96-r6jw.json b/advisories/unreviewed/2024/02/GHSA-vjv2-8c96-r6jw/GHSA-vjv2-8c96-r6jw.json index 9f3a6c558db..d6bb4a78e45 100644 --- a/advisories/unreviewed/2024/02/GHSA-vjv2-8c96-r6jw/GHSA-vjv2-8c96-r6jw.json +++ b/advisories/unreviewed/2024/02/GHSA-vjv2-8c96-r6jw/GHSA-vjv2-8c96-r6jw.json @@ -7,12 +7,8 @@ "CVE-2023-5584" ], "details": "Rejected reason: We have rejected this CVE as it was determined a non-security issue by the vendor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-vmmp-h76c-g65f/GHSA-vmmp-h76c-g65f.json b/advisories/unreviewed/2024/02/GHSA-vmmp-h76c-g65f/GHSA-vmmp-h76c-g65f.json index 0e99da60baa..0f3b8db7ad3 100644 --- a/advisories/unreviewed/2024/02/GHSA-vmmp-h76c-g65f/GHSA-vmmp-h76c-g65f.json +++ b/advisories/unreviewed/2024/02/GHSA-vmmp-h76c-g65f/GHSA-vmmp-h76c-g65f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-vrq4-9579-qc8m/GHSA-vrq4-9579-qc8m.json b/advisories/unreviewed/2024/02/GHSA-vrq4-9579-qc8m/GHSA-vrq4-9579-qc8m.json index 53051f2abee..d71b4291625 100644 --- a/advisories/unreviewed/2024/02/GHSA-vrq4-9579-qc8m/GHSA-vrq4-9579-qc8m.json +++ b/advisories/unreviewed/2024/02/GHSA-vrq4-9579-qc8m/GHSA-vrq4-9579-qc8m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-vv28-qmp6-p32c/GHSA-vv28-qmp6-p32c.json b/advisories/unreviewed/2024/02/GHSA-vv28-qmp6-p32c/GHSA-vv28-qmp6-p32c.json index fdd398e74ce..c4447800bfd 100644 --- a/advisories/unreviewed/2024/02/GHSA-vv28-qmp6-p32c/GHSA-vv28-qmp6-p32c.json +++ b/advisories/unreviewed/2024/02/GHSA-vv28-qmp6-p32c/GHSA-vv28-qmp6-p32c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-w6j5-fp4m-crpf/GHSA-w6j5-fp4m-crpf.json b/advisories/unreviewed/2024/02/GHSA-w6j5-fp4m-crpf/GHSA-w6j5-fp4m-crpf.json index 3a22314e1c5..7a0e3964422 100644 --- a/advisories/unreviewed/2024/02/GHSA-w6j5-fp4m-crpf/GHSA-w6j5-fp4m-crpf.json +++ b/advisories/unreviewed/2024/02/GHSA-w6j5-fp4m-crpf/GHSA-w6j5-fp4m-crpf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-xw86-99gp-4h78/GHSA-xw86-99gp-4h78.json b/advisories/unreviewed/2024/02/GHSA-xw86-99gp-4h78/GHSA-xw86-99gp-4h78.json index 9ca9fd8a9e3..2d95552725d 100644 --- a/advisories/unreviewed/2024/02/GHSA-xw86-99gp-4h78/GHSA-xw86-99gp-4h78.json +++ b/advisories/unreviewed/2024/02/GHSA-xw86-99gp-4h78/GHSA-xw86-99gp-4h78.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-xxpm-69vv-79hr/GHSA-xxpm-69vv-79hr.json b/advisories/unreviewed/2024/02/GHSA-xxpm-69vv-79hr/GHSA-xxpm-69vv-79hr.json index 7f25dc83b98..4b9f04c5958 100644 --- a/advisories/unreviewed/2024/02/GHSA-xxpm-69vv-79hr/GHSA-xxpm-69vv-79hr.json +++ b/advisories/unreviewed/2024/02/GHSA-xxpm-69vv-79hr/GHSA-xxpm-69vv-79hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-2wm5-pffj-4758/GHSA-2wm5-pffj-4758.json b/advisories/unreviewed/2024/03/GHSA-2wm5-pffj-4758/GHSA-2wm5-pffj-4758.json index 78e6e2dadf6..dd1daa924ff 100644 --- a/advisories/unreviewed/2024/03/GHSA-2wm5-pffj-4758/GHSA-2wm5-pffj-4758.json +++ b/advisories/unreviewed/2024/03/GHSA-2wm5-pffj-4758/GHSA-2wm5-pffj-4758.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-2x9x-24qc-mmqv/GHSA-2x9x-24qc-mmqv.json b/advisories/unreviewed/2024/03/GHSA-2x9x-24qc-mmqv/GHSA-2x9x-24qc-mmqv.json index 37b28c118a3..33eb10d1502 100644 --- a/advisories/unreviewed/2024/03/GHSA-2x9x-24qc-mmqv/GHSA-2x9x-24qc-mmqv.json +++ b/advisories/unreviewed/2024/03/GHSA-2x9x-24qc-mmqv/GHSA-2x9x-24qc-mmqv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-3xgg-p2vx-fw2j/GHSA-3xgg-p2vx-fw2j.json b/advisories/unreviewed/2024/03/GHSA-3xgg-p2vx-fw2j/GHSA-3xgg-p2vx-fw2j.json index 5f1dc151264..b39f9bf103e 100644 --- a/advisories/unreviewed/2024/03/GHSA-3xgg-p2vx-fw2j/GHSA-3xgg-p2vx-fw2j.json +++ b/advisories/unreviewed/2024/03/GHSA-3xgg-p2vx-fw2j/GHSA-3xgg-p2vx-fw2j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-4rxr-8xrx-9rf3/GHSA-4rxr-8xrx-9rf3.json b/advisories/unreviewed/2024/03/GHSA-4rxr-8xrx-9rf3/GHSA-4rxr-8xrx-9rf3.json index ec7f5a71447..008fb1950a5 100644 --- a/advisories/unreviewed/2024/03/GHSA-4rxr-8xrx-9rf3/GHSA-4rxr-8xrx-9rf3.json +++ b/advisories/unreviewed/2024/03/GHSA-4rxr-8xrx-9rf3/GHSA-4rxr-8xrx-9rf3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -59,9 +57,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-525f-hw88-w4m8/GHSA-525f-hw88-w4m8.json b/advisories/unreviewed/2024/03/GHSA-525f-hw88-w4m8/GHSA-525f-hw88-w4m8.json index 1cc2ccf71ca..aba2f26d0ea 100644 --- a/advisories/unreviewed/2024/03/GHSA-525f-hw88-w4m8/GHSA-525f-hw88-w4m8.json +++ b/advisories/unreviewed/2024/03/GHSA-525f-hw88-w4m8/GHSA-525f-hw88-w4m8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-5c5p-qh6w-cqq9/GHSA-5c5p-qh6w-cqq9.json b/advisories/unreviewed/2024/03/GHSA-5c5p-qh6w-cqq9/GHSA-5c5p-qh6w-cqq9.json index df61644af12..0bfae71298f 100644 --- a/advisories/unreviewed/2024/03/GHSA-5c5p-qh6w-cqq9/GHSA-5c5p-qh6w-cqq9.json +++ b/advisories/unreviewed/2024/03/GHSA-5c5p-qh6w-cqq9/GHSA-5c5p-qh6w-cqq9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-6f82-qgq9-9h8f/GHSA-6f82-qgq9-9h8f.json b/advisories/unreviewed/2024/03/GHSA-6f82-qgq9-9h8f/GHSA-6f82-qgq9-9h8f.json index 08e8a4126dc..deb2c7ee024 100644 --- a/advisories/unreviewed/2024/03/GHSA-6f82-qgq9-9h8f/GHSA-6f82-qgq9-9h8f.json +++ b/advisories/unreviewed/2024/03/GHSA-6f82-qgq9-9h8f/GHSA-6f82-qgq9-9h8f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-6q23-jq3m-97mq/GHSA-6q23-jq3m-97mq.json b/advisories/unreviewed/2024/03/GHSA-6q23-jq3m-97mq/GHSA-6q23-jq3m-97mq.json index cc32001fb56..869214e7807 100644 --- a/advisories/unreviewed/2024/03/GHSA-6q23-jq3m-97mq/GHSA-6q23-jq3m-97mq.json +++ b/advisories/unreviewed/2024/03/GHSA-6q23-jq3m-97mq/GHSA-6q23-jq3m-97mq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-fx92-33r7-hvjw/GHSA-fx92-33r7-hvjw.json b/advisories/unreviewed/2024/03/GHSA-fx92-33r7-hvjw/GHSA-fx92-33r7-hvjw.json index c15c44ea3db..e4fa67d32cb 100644 --- a/advisories/unreviewed/2024/03/GHSA-fx92-33r7-hvjw/GHSA-fx92-33r7-hvjw.json +++ b/advisories/unreviewed/2024/03/GHSA-fx92-33r7-hvjw/GHSA-fx92-33r7-hvjw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-g9wr-74r7-x5qq/GHSA-g9wr-74r7-x5qq.json b/advisories/unreviewed/2024/03/GHSA-g9wr-74r7-x5qq/GHSA-g9wr-74r7-x5qq.json index 0c17b28686b..7c2a590be92 100644 --- a/advisories/unreviewed/2024/03/GHSA-g9wr-74r7-x5qq/GHSA-g9wr-74r7-x5qq.json +++ b/advisories/unreviewed/2024/03/GHSA-g9wr-74r7-x5qq/GHSA-g9wr-74r7-x5qq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-gqg8-h7gm-47hq/GHSA-gqg8-h7gm-47hq.json b/advisories/unreviewed/2024/03/GHSA-gqg8-h7gm-47hq/GHSA-gqg8-h7gm-47hq.json index 36cc0d74059..29f7631cc97 100644 --- a/advisories/unreviewed/2024/03/GHSA-gqg8-h7gm-47hq/GHSA-gqg8-h7gm-47hq.json +++ b/advisories/unreviewed/2024/03/GHSA-gqg8-h7gm-47hq/GHSA-gqg8-h7gm-47hq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-j6q4-78q3-g22f/GHSA-j6q4-78q3-g22f.json b/advisories/unreviewed/2024/03/GHSA-j6q4-78q3-g22f/GHSA-j6q4-78q3-g22f.json index e90489c3838..94652e422c9 100644 --- a/advisories/unreviewed/2024/03/GHSA-j6q4-78q3-g22f/GHSA-j6q4-78q3-g22f.json +++ b/advisories/unreviewed/2024/03/GHSA-j6q4-78q3-g22f/GHSA-j6q4-78q3-g22f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-m88g-7rcv-6rcx/GHSA-m88g-7rcv-6rcx.json b/advisories/unreviewed/2024/03/GHSA-m88g-7rcv-6rcx/GHSA-m88g-7rcv-6rcx.json index 357104eacfc..e8501a3258e 100644 --- a/advisories/unreviewed/2024/03/GHSA-m88g-7rcv-6rcx/GHSA-m88g-7rcv-6rcx.json +++ b/advisories/unreviewed/2024/03/GHSA-m88g-7rcv-6rcx/GHSA-m88g-7rcv-6rcx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-mj3m-pwp5-gq36/GHSA-mj3m-pwp5-gq36.json b/advisories/unreviewed/2024/03/GHSA-mj3m-pwp5-gq36/GHSA-mj3m-pwp5-gq36.json index c9286325673..c79e693a8e6 100644 --- a/advisories/unreviewed/2024/03/GHSA-mj3m-pwp5-gq36/GHSA-mj3m-pwp5-gq36.json +++ b/advisories/unreviewed/2024/03/GHSA-mj3m-pwp5-gq36/GHSA-mj3m-pwp5-gq36.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-mrx6-rgfc-x742/GHSA-mrx6-rgfc-x742.json b/advisories/unreviewed/2024/03/GHSA-mrx6-rgfc-x742/GHSA-mrx6-rgfc-x742.json index 00b7e15bd1c..2381b043997 100644 --- a/advisories/unreviewed/2024/03/GHSA-mrx6-rgfc-x742/GHSA-mrx6-rgfc-x742.json +++ b/advisories/unreviewed/2024/03/GHSA-mrx6-rgfc-x742/GHSA-mrx6-rgfc-x742.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-p594-wh4r-v877/GHSA-p594-wh4r-v877.json b/advisories/unreviewed/2024/03/GHSA-p594-wh4r-v877/GHSA-p594-wh4r-v877.json index 1474e99ad45..200b625054e 100644 --- a/advisories/unreviewed/2024/03/GHSA-p594-wh4r-v877/GHSA-p594-wh4r-v877.json +++ b/advisories/unreviewed/2024/03/GHSA-p594-wh4r-v877/GHSA-p594-wh4r-v877.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-qh2f-ppj6-8vgp/GHSA-qh2f-ppj6-8vgp.json b/advisories/unreviewed/2024/03/GHSA-qh2f-ppj6-8vgp/GHSA-qh2f-ppj6-8vgp.json index 889c7a06af0..582729d8b60 100644 --- a/advisories/unreviewed/2024/03/GHSA-qh2f-ppj6-8vgp/GHSA-qh2f-ppj6-8vgp.json +++ b/advisories/unreviewed/2024/03/GHSA-qh2f-ppj6-8vgp/GHSA-qh2f-ppj6-8vgp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-qhj3-r7hp-qwc2/GHSA-qhj3-r7hp-qwc2.json b/advisories/unreviewed/2024/03/GHSA-qhj3-r7hp-qwc2/GHSA-qhj3-r7hp-qwc2.json index bc4080bea76..554b9cc1c78 100644 --- a/advisories/unreviewed/2024/03/GHSA-qhj3-r7hp-qwc2/GHSA-qhj3-r7hp-qwc2.json +++ b/advisories/unreviewed/2024/03/GHSA-qhj3-r7hp-qwc2/GHSA-qhj3-r7hp-qwc2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-rhxj-qx46-rqjg/GHSA-rhxj-qx46-rqjg.json b/advisories/unreviewed/2024/03/GHSA-rhxj-qx46-rqjg/GHSA-rhxj-qx46-rqjg.json index 336b6206247..0ca0a44329e 100644 --- a/advisories/unreviewed/2024/03/GHSA-rhxj-qx46-rqjg/GHSA-rhxj-qx46-rqjg.json +++ b/advisories/unreviewed/2024/03/GHSA-rhxj-qx46-rqjg/GHSA-rhxj-qx46-rqjg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-vgq4-3x26-93jq/GHSA-vgq4-3x26-93jq.json b/advisories/unreviewed/2024/03/GHSA-vgq4-3x26-93jq/GHSA-vgq4-3x26-93jq.json index f3bcbbc91d2..405d6699d9b 100644 --- a/advisories/unreviewed/2024/03/GHSA-vgq4-3x26-93jq/GHSA-vgq4-3x26-93jq.json +++ b/advisories/unreviewed/2024/03/GHSA-vgq4-3x26-93jq/GHSA-vgq4-3x26-93jq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-vx74-pg4c-jq5q/GHSA-vx74-pg4c-jq5q.json b/advisories/unreviewed/2024/03/GHSA-vx74-pg4c-jq5q/GHSA-vx74-pg4c-jq5q.json index 65e2f9fc1c8..e16b6b31b72 100644 --- a/advisories/unreviewed/2024/03/GHSA-vx74-pg4c-jq5q/GHSA-vx74-pg4c-jq5q.json +++ b/advisories/unreviewed/2024/03/GHSA-vx74-pg4c-jq5q/GHSA-vx74-pg4c-jq5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-x7hw-jwrw-qw78/GHSA-x7hw-jwrw-qw78.json b/advisories/unreviewed/2024/03/GHSA-x7hw-jwrw-qw78/GHSA-x7hw-jwrw-qw78.json index d1a5173d14a..d924dfaeade 100644 --- a/advisories/unreviewed/2024/03/GHSA-x7hw-jwrw-qw78/GHSA-x7hw-jwrw-qw78.json +++ b/advisories/unreviewed/2024/03/GHSA-x7hw-jwrw-qw78/GHSA-x7hw-jwrw-qw78.json @@ -7,12 +7,8 @@ "CVE-2024-22397" ], "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3mg8-g497-8859/GHSA-3mg8-g497-8859.json b/advisories/unreviewed/2024/04/GHSA-3mg8-g497-8859/GHSA-3mg8-g497-8859.json index 106216210fd..a335fbc217d 100644 --- a/advisories/unreviewed/2024/04/GHSA-3mg8-g497-8859/GHSA-3mg8-g497-8859.json +++ b/advisories/unreviewed/2024/04/GHSA-3mg8-g497-8859/GHSA-3mg8-g497-8859.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3p64-qffv-3m42/GHSA-3p64-qffv-3m42.json b/advisories/unreviewed/2024/04/GHSA-3p64-qffv-3m42/GHSA-3p64-qffv-3m42.json index b66d8fe0b72..c0ce366e17b 100644 --- a/advisories/unreviewed/2024/04/GHSA-3p64-qffv-3m42/GHSA-3p64-qffv-3m42.json +++ b/advisories/unreviewed/2024/04/GHSA-3p64-qffv-3m42/GHSA-3p64-qffv-3m42.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-5865-p7wq-57w2/GHSA-5865-p7wq-57w2.json b/advisories/unreviewed/2024/04/GHSA-5865-p7wq-57w2/GHSA-5865-p7wq-57w2.json index 6c10bbf6fed..d103ff38061 100644 --- a/advisories/unreviewed/2024/04/GHSA-5865-p7wq-57w2/GHSA-5865-p7wq-57w2.json +++ b/advisories/unreviewed/2024/04/GHSA-5865-p7wq-57w2/GHSA-5865-p7wq-57w2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-78g6-g9hf-844c/GHSA-78g6-g9hf-844c.json b/advisories/unreviewed/2024/04/GHSA-78g6-g9hf-844c/GHSA-78g6-g9hf-844c.json index ecdaf99fe37..3a63f7f7103 100644 --- a/advisories/unreviewed/2024/04/GHSA-78g6-g9hf-844c/GHSA-78g6-g9hf-844c.json +++ b/advisories/unreviewed/2024/04/GHSA-78g6-g9hf-844c/GHSA-78g6-g9hf-844c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-9p92-qw4r-35fh/GHSA-9p92-qw4r-35fh.json b/advisories/unreviewed/2024/04/GHSA-9p92-qw4r-35fh/GHSA-9p92-qw4r-35fh.json index 8814870f380..eb35b8b03bb 100644 --- a/advisories/unreviewed/2024/04/GHSA-9p92-qw4r-35fh/GHSA-9p92-qw4r-35fh.json +++ b/advisories/unreviewed/2024/04/GHSA-9p92-qw4r-35fh/GHSA-9p92-qw4r-35fh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-cgrr-8q8m-cx6q/GHSA-cgrr-8q8m-cx6q.json b/advisories/unreviewed/2024/04/GHSA-cgrr-8q8m-cx6q/GHSA-cgrr-8q8m-cx6q.json index 0a5b79e9901..bd5e9afc916 100644 --- a/advisories/unreviewed/2024/04/GHSA-cgrr-8q8m-cx6q/GHSA-cgrr-8q8m-cx6q.json +++ b/advisories/unreviewed/2024/04/GHSA-cgrr-8q8m-cx6q/GHSA-cgrr-8q8m-cx6q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hqjh-x3mc-9p6h/GHSA-hqjh-x3mc-9p6h.json b/advisories/unreviewed/2024/04/GHSA-hqjh-x3mc-9p6h/GHSA-hqjh-x3mc-9p6h.json index a1c257bda87..53a242b1775 100644 --- a/advisories/unreviewed/2024/04/GHSA-hqjh-x3mc-9p6h/GHSA-hqjh-x3mc-9p6h.json +++ b/advisories/unreviewed/2024/04/GHSA-hqjh-x3mc-9p6h/GHSA-hqjh-x3mc-9p6h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-jh69-hv33-ww6w/GHSA-jh69-hv33-ww6w.json b/advisories/unreviewed/2024/04/GHSA-jh69-hv33-ww6w/GHSA-jh69-hv33-ww6w.json index 3354ec2b857..e8d52af690f 100644 --- a/advisories/unreviewed/2024/04/GHSA-jh69-hv33-ww6w/GHSA-jh69-hv33-ww6w.json +++ b/advisories/unreviewed/2024/04/GHSA-jh69-hv33-ww6w/GHSA-jh69-hv33-ww6w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rw9j-38rq-r4wq/GHSA-rw9j-38rq-r4wq.json b/advisories/unreviewed/2024/04/GHSA-rw9j-38rq-r4wq/GHSA-rw9j-38rq-r4wq.json index a85eb4944d7..9e83b38c3c1 100644 --- a/advisories/unreviewed/2024/04/GHSA-rw9j-38rq-r4wq/GHSA-rw9j-38rq-r4wq.json +++ b/advisories/unreviewed/2024/04/GHSA-rw9j-38rq-r4wq/GHSA-rw9j-38rq-r4wq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-w27q-43j3-7vj3/GHSA-w27q-43j3-7vj3.json b/advisories/unreviewed/2024/04/GHSA-w27q-43j3-7vj3/GHSA-w27q-43j3-7vj3.json index 983862c7f75..a0e0c1b02a4 100644 --- a/advisories/unreviewed/2024/04/GHSA-w27q-43j3-7vj3/GHSA-w27q-43j3-7vj3.json +++ b/advisories/unreviewed/2024/04/GHSA-w27q-43j3-7vj3/GHSA-w27q-43j3-7vj3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-2qwv-78pj-mrp7/GHSA-2qwv-78pj-mrp7.json b/advisories/unreviewed/2024/05/GHSA-2qwv-78pj-mrp7/GHSA-2qwv-78pj-mrp7.json index e8288d23c8e..4daf1b316bd 100644 --- a/advisories/unreviewed/2024/05/GHSA-2qwv-78pj-mrp7/GHSA-2qwv-78pj-mrp7.json +++ b/advisories/unreviewed/2024/05/GHSA-2qwv-78pj-mrp7/GHSA-2qwv-78pj-mrp7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-334h-3www-4425/GHSA-334h-3www-4425.json b/advisories/unreviewed/2024/05/GHSA-334h-3www-4425/GHSA-334h-3www-4425.json index bd186a43802..04a94fbbc8b 100644 --- a/advisories/unreviewed/2024/05/GHSA-334h-3www-4425/GHSA-334h-3www-4425.json +++ b/advisories/unreviewed/2024/05/GHSA-334h-3www-4425/GHSA-334h-3www-4425.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3cv8-cqpx-wc6m/GHSA-3cv8-cqpx-wc6m.json b/advisories/unreviewed/2024/05/GHSA-3cv8-cqpx-wc6m/GHSA-3cv8-cqpx-wc6m.json index 41237d42f8a..4261dd3d4d1 100644 --- a/advisories/unreviewed/2024/05/GHSA-3cv8-cqpx-wc6m/GHSA-3cv8-cqpx-wc6m.json +++ b/advisories/unreviewed/2024/05/GHSA-3cv8-cqpx-wc6m/GHSA-3cv8-cqpx-wc6m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-5mrp-5g6h-8p37/GHSA-5mrp-5g6h-8p37.json b/advisories/unreviewed/2024/05/GHSA-5mrp-5g6h-8p37/GHSA-5mrp-5g6h-8p37.json index fe7cf83025e..a5d8f71549c 100644 --- a/advisories/unreviewed/2024/05/GHSA-5mrp-5g6h-8p37/GHSA-5mrp-5g6h-8p37.json +++ b/advisories/unreviewed/2024/05/GHSA-5mrp-5g6h-8p37/GHSA-5mrp-5g6h-8p37.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-5vhv-m5ch-wx48/GHSA-5vhv-m5ch-wx48.json b/advisories/unreviewed/2024/05/GHSA-5vhv-m5ch-wx48/GHSA-5vhv-m5ch-wx48.json index cfb51a4ac50..23e1a98d36d 100644 --- a/advisories/unreviewed/2024/05/GHSA-5vhv-m5ch-wx48/GHSA-5vhv-m5ch-wx48.json +++ b/advisories/unreviewed/2024/05/GHSA-5vhv-m5ch-wx48/GHSA-5vhv-m5ch-wx48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-736r-j9wv-3f4j/GHSA-736r-j9wv-3f4j.json b/advisories/unreviewed/2024/05/GHSA-736r-j9wv-3f4j/GHSA-736r-j9wv-3f4j.json index b84686f7066..ccdc6ce6bd7 100644 --- a/advisories/unreviewed/2024/05/GHSA-736r-j9wv-3f4j/GHSA-736r-j9wv-3f4j.json +++ b/advisories/unreviewed/2024/05/GHSA-736r-j9wv-3f4j/GHSA-736r-j9wv-3f4j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-73hm-3cg9-j7hj/GHSA-73hm-3cg9-j7hj.json b/advisories/unreviewed/2024/05/GHSA-73hm-3cg9-j7hj/GHSA-73hm-3cg9-j7hj.json index 604afdcb2ff..45cf3345610 100644 --- a/advisories/unreviewed/2024/05/GHSA-73hm-3cg9-j7hj/GHSA-73hm-3cg9-j7hj.json +++ b/advisories/unreviewed/2024/05/GHSA-73hm-3cg9-j7hj/GHSA-73hm-3cg9-j7hj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-7g5v-cv2p-7c8v/GHSA-7g5v-cv2p-7c8v.json b/advisories/unreviewed/2024/05/GHSA-7g5v-cv2p-7c8v/GHSA-7g5v-cv2p-7c8v.json index 306d31612ba..679ba64a144 100644 --- a/advisories/unreviewed/2024/05/GHSA-7g5v-cv2p-7c8v/GHSA-7g5v-cv2p-7c8v.json +++ b/advisories/unreviewed/2024/05/GHSA-7g5v-cv2p-7c8v/GHSA-7g5v-cv2p-7c8v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-9m45-35mq-gcp6/GHSA-9m45-35mq-gcp6.json b/advisories/unreviewed/2024/05/GHSA-9m45-35mq-gcp6/GHSA-9m45-35mq-gcp6.json index 7b43118c598..a20b1e48efa 100644 --- a/advisories/unreviewed/2024/05/GHSA-9m45-35mq-gcp6/GHSA-9m45-35mq-gcp6.json +++ b/advisories/unreviewed/2024/05/GHSA-9m45-35mq-gcp6/GHSA-9m45-35mq-gcp6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-c3fw-p7pm-p363/GHSA-c3fw-p7pm-p363.json b/advisories/unreviewed/2024/05/GHSA-c3fw-p7pm-p363/GHSA-c3fw-p7pm-p363.json index 43b2cfde742..c428d279f2b 100644 --- a/advisories/unreviewed/2024/05/GHSA-c3fw-p7pm-p363/GHSA-c3fw-p7pm-p363.json +++ b/advisories/unreviewed/2024/05/GHSA-c3fw-p7pm-p363/GHSA-c3fw-p7pm-p363.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-c3mm-2w2h-vx43/GHSA-c3mm-2w2h-vx43.json b/advisories/unreviewed/2024/05/GHSA-c3mm-2w2h-vx43/GHSA-c3mm-2w2h-vx43.json index ddda57d5626..132a86f05a9 100644 --- a/advisories/unreviewed/2024/05/GHSA-c3mm-2w2h-vx43/GHSA-c3mm-2w2h-vx43.json +++ b/advisories/unreviewed/2024/05/GHSA-c3mm-2w2h-vx43/GHSA-c3mm-2w2h-vx43.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-c7gm-g64m-839f/GHSA-c7gm-g64m-839f.json b/advisories/unreviewed/2024/05/GHSA-c7gm-g64m-839f/GHSA-c7gm-g64m-839f.json index 27ccf357723..91d37265c30 100644 --- a/advisories/unreviewed/2024/05/GHSA-c7gm-g64m-839f/GHSA-c7gm-g64m-839f.json +++ b/advisories/unreviewed/2024/05/GHSA-c7gm-g64m-839f/GHSA-c7gm-g64m-839f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-f4fp-m7qr-xp52/GHSA-f4fp-m7qr-xp52.json b/advisories/unreviewed/2024/05/GHSA-f4fp-m7qr-xp52/GHSA-f4fp-m7qr-xp52.json index 7cd888ef147..b3ce8751484 100644 --- a/advisories/unreviewed/2024/05/GHSA-f4fp-m7qr-xp52/GHSA-f4fp-m7qr-xp52.json +++ b/advisories/unreviewed/2024/05/GHSA-f4fp-m7qr-xp52/GHSA-f4fp-m7qr-xp52.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-fgmj-hpfp-f2jf/GHSA-fgmj-hpfp-f2jf.json b/advisories/unreviewed/2024/05/GHSA-fgmj-hpfp-f2jf/GHSA-fgmj-hpfp-f2jf.json index 27fa97c3ea2..081f7826b9c 100644 --- a/advisories/unreviewed/2024/05/GHSA-fgmj-hpfp-f2jf/GHSA-fgmj-hpfp-f2jf.json +++ b/advisories/unreviewed/2024/05/GHSA-fgmj-hpfp-f2jf/GHSA-fgmj-hpfp-f2jf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-gcmx-rh8w-85v2/GHSA-gcmx-rh8w-85v2.json b/advisories/unreviewed/2024/05/GHSA-gcmx-rh8w-85v2/GHSA-gcmx-rh8w-85v2.json index 3b500a5d8b0..4b2abc6eef6 100644 --- a/advisories/unreviewed/2024/05/GHSA-gcmx-rh8w-85v2/GHSA-gcmx-rh8w-85v2.json +++ b/advisories/unreviewed/2024/05/GHSA-gcmx-rh8w-85v2/GHSA-gcmx-rh8w-85v2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-h69v-wwmx-68xj/GHSA-h69v-wwmx-68xj.json b/advisories/unreviewed/2024/05/GHSA-h69v-wwmx-68xj/GHSA-h69v-wwmx-68xj.json index b2717d71bb5..c622e5a5cc8 100644 --- a/advisories/unreviewed/2024/05/GHSA-h69v-wwmx-68xj/GHSA-h69v-wwmx-68xj.json +++ b/advisories/unreviewed/2024/05/GHSA-h69v-wwmx-68xj/GHSA-h69v-wwmx-68xj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-hg8r-5538-9956/GHSA-hg8r-5538-9956.json b/advisories/unreviewed/2024/05/GHSA-hg8r-5538-9956/GHSA-hg8r-5538-9956.json index 514be1bceb1..83f09098494 100644 --- a/advisories/unreviewed/2024/05/GHSA-hg8r-5538-9956/GHSA-hg8r-5538-9956.json +++ b/advisories/unreviewed/2024/05/GHSA-hg8r-5538-9956/GHSA-hg8r-5538-9956.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -55,9 +53,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-jcc2-hvjp-53qj/GHSA-jcc2-hvjp-53qj.json b/advisories/unreviewed/2024/05/GHSA-jcc2-hvjp-53qj/GHSA-jcc2-hvjp-53qj.json index 92957b32458..41c5aeb0313 100644 --- a/advisories/unreviewed/2024/05/GHSA-jcc2-hvjp-53qj/GHSA-jcc2-hvjp-53qj.json +++ b/advisories/unreviewed/2024/05/GHSA-jcc2-hvjp-53qj/GHSA-jcc2-hvjp-53qj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-m5h9-p6gp-j46h/GHSA-m5h9-p6gp-j46h.json b/advisories/unreviewed/2024/05/GHSA-m5h9-p6gp-j46h/GHSA-m5h9-p6gp-j46h.json index fe1d0d34fc2..580e4c68f95 100644 --- a/advisories/unreviewed/2024/05/GHSA-m5h9-p6gp-j46h/GHSA-m5h9-p6gp-j46h.json +++ b/advisories/unreviewed/2024/05/GHSA-m5h9-p6gp-j46h/GHSA-m5h9-p6gp-j46h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-mgjr-mwqw-6x9x/GHSA-mgjr-mwqw-6x9x.json b/advisories/unreviewed/2024/05/GHSA-mgjr-mwqw-6x9x/GHSA-mgjr-mwqw-6x9x.json index b831db2e599..ff8b653ed7d 100644 --- a/advisories/unreviewed/2024/05/GHSA-mgjr-mwqw-6x9x/GHSA-mgjr-mwqw-6x9x.json +++ b/advisories/unreviewed/2024/05/GHSA-mgjr-mwqw-6x9x/GHSA-mgjr-mwqw-6x9x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-p5m9-74cq-3h54/GHSA-p5m9-74cq-3h54.json b/advisories/unreviewed/2024/05/GHSA-p5m9-74cq-3h54/GHSA-p5m9-74cq-3h54.json index 67223b17c91..05fbfff25c1 100644 --- a/advisories/unreviewed/2024/05/GHSA-p5m9-74cq-3h54/GHSA-p5m9-74cq-3h54.json +++ b/advisories/unreviewed/2024/05/GHSA-p5m9-74cq-3h54/GHSA-p5m9-74cq-3h54.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-pcp6-6739-hm3f/GHSA-pcp6-6739-hm3f.json b/advisories/unreviewed/2024/05/GHSA-pcp6-6739-hm3f/GHSA-pcp6-6739-hm3f.json index 0b39f2ff925..d5b69315f46 100644 --- a/advisories/unreviewed/2024/05/GHSA-pcp6-6739-hm3f/GHSA-pcp6-6739-hm3f.json +++ b/advisories/unreviewed/2024/05/GHSA-pcp6-6739-hm3f/GHSA-pcp6-6739-hm3f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-q774-r932-hjpq/GHSA-q774-r932-hjpq.json b/advisories/unreviewed/2024/05/GHSA-q774-r932-hjpq/GHSA-q774-r932-hjpq.json index 6e551772b18..6e9f638b9f8 100644 --- a/advisories/unreviewed/2024/05/GHSA-q774-r932-hjpq/GHSA-q774-r932-hjpq.json +++ b/advisories/unreviewed/2024/05/GHSA-q774-r932-hjpq/GHSA-q774-r932-hjpq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-v7qq-vfrc-p9vr/GHSA-v7qq-vfrc-p9vr.json b/advisories/unreviewed/2024/05/GHSA-v7qq-vfrc-p9vr/GHSA-v7qq-vfrc-p9vr.json index fa68b7b06d9..768f1982cb3 100644 --- a/advisories/unreviewed/2024/05/GHSA-v7qq-vfrc-p9vr/GHSA-v7qq-vfrc-p9vr.json +++ b/advisories/unreviewed/2024/05/GHSA-v7qq-vfrc-p9vr/GHSA-v7qq-vfrc-p9vr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-w5j7-cgfv-4whw/GHSA-w5j7-cgfv-4whw.json b/advisories/unreviewed/2024/05/GHSA-w5j7-cgfv-4whw/GHSA-w5j7-cgfv-4whw.json index d1f0c2431b8..44b1fa95484 100644 --- a/advisories/unreviewed/2024/05/GHSA-w5j7-cgfv-4whw/GHSA-w5j7-cgfv-4whw.json +++ b/advisories/unreviewed/2024/05/GHSA-w5j7-cgfv-4whw/GHSA-w5j7-cgfv-4whw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-wjxw-8mxq-42mg/GHSA-wjxw-8mxq-42mg.json b/advisories/unreviewed/2024/05/GHSA-wjxw-8mxq-42mg/GHSA-wjxw-8mxq-42mg.json index ed55c77065f..116a82f4908 100644 --- a/advisories/unreviewed/2024/05/GHSA-wjxw-8mxq-42mg/GHSA-wjxw-8mxq-42mg.json +++ b/advisories/unreviewed/2024/05/GHSA-wjxw-8mxq-42mg/GHSA-wjxw-8mxq-42mg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-24rp-wx3g-3c5c/GHSA-24rp-wx3g-3c5c.json b/advisories/unreviewed/2024/06/GHSA-24rp-wx3g-3c5c/GHSA-24rp-wx3g-3c5c.json index 03833c5b44e..18988c16994 100644 --- a/advisories/unreviewed/2024/06/GHSA-24rp-wx3g-3c5c/GHSA-24rp-wx3g-3c5c.json +++ b/advisories/unreviewed/2024/06/GHSA-24rp-wx3g-3c5c/GHSA-24rp-wx3g-3c5c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-3mvr-pxcv-j67r/GHSA-3mvr-pxcv-j67r.json b/advisories/unreviewed/2024/06/GHSA-3mvr-pxcv-j67r/GHSA-3mvr-pxcv-j67r.json index 3f5157b497b..0aff9d4c188 100644 --- a/advisories/unreviewed/2024/06/GHSA-3mvr-pxcv-j67r/GHSA-3mvr-pxcv-j67r.json +++ b/advisories/unreviewed/2024/06/GHSA-3mvr-pxcv-j67r/GHSA-3mvr-pxcv-j67r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-5975-6qpm-2744/GHSA-5975-6qpm-2744.json b/advisories/unreviewed/2024/06/GHSA-5975-6qpm-2744/GHSA-5975-6qpm-2744.json index b013251e075..4a215bdaeec 100644 --- a/advisories/unreviewed/2024/06/GHSA-5975-6qpm-2744/GHSA-5975-6qpm-2744.json +++ b/advisories/unreviewed/2024/06/GHSA-5975-6qpm-2744/GHSA-5975-6qpm-2744.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-5cfq-mh36-cvhr/GHSA-5cfq-mh36-cvhr.json b/advisories/unreviewed/2024/06/GHSA-5cfq-mh36-cvhr/GHSA-5cfq-mh36-cvhr.json index 5a04d35e295..6b202d948ca 100644 --- a/advisories/unreviewed/2024/06/GHSA-5cfq-mh36-cvhr/GHSA-5cfq-mh36-cvhr.json +++ b/advisories/unreviewed/2024/06/GHSA-5cfq-mh36-cvhr/GHSA-5cfq-mh36-cvhr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-6mx3-v4px-m36j/GHSA-6mx3-v4px-m36j.json b/advisories/unreviewed/2024/06/GHSA-6mx3-v4px-m36j/GHSA-6mx3-v4px-m36j.json index b372b841504..b752c410314 100644 --- a/advisories/unreviewed/2024/06/GHSA-6mx3-v4px-m36j/GHSA-6mx3-v4px-m36j.json +++ b/advisories/unreviewed/2024/06/GHSA-6mx3-v4px-m36j/GHSA-6mx3-v4px-m36j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-764x-99q3-75x3/GHSA-764x-99q3-75x3.json b/advisories/unreviewed/2024/06/GHSA-764x-99q3-75x3/GHSA-764x-99q3-75x3.json index 7b0d95b5a9b..b13468d4a09 100644 --- a/advisories/unreviewed/2024/06/GHSA-764x-99q3-75x3/GHSA-764x-99q3-75x3.json +++ b/advisories/unreviewed/2024/06/GHSA-764x-99q3-75x3/GHSA-764x-99q3-75x3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-76m6-2m38-53cq/GHSA-76m6-2m38-53cq.json b/advisories/unreviewed/2024/06/GHSA-76m6-2m38-53cq/GHSA-76m6-2m38-53cq.json index 0ecfab2c80f..338d02393bf 100644 --- a/advisories/unreviewed/2024/06/GHSA-76m6-2m38-53cq/GHSA-76m6-2m38-53cq.json +++ b/advisories/unreviewed/2024/06/GHSA-76m6-2m38-53cq/GHSA-76m6-2m38-53cq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-7fhq-9c6m-3fj2/GHSA-7fhq-9c6m-3fj2.json b/advisories/unreviewed/2024/06/GHSA-7fhq-9c6m-3fj2/GHSA-7fhq-9c6m-3fj2.json index 7690d30d392..1d865264b95 100644 --- a/advisories/unreviewed/2024/06/GHSA-7fhq-9c6m-3fj2/GHSA-7fhq-9c6m-3fj2.json +++ b/advisories/unreviewed/2024/06/GHSA-7fhq-9c6m-3fj2/GHSA-7fhq-9c6m-3fj2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-8wh8-c2xr-4hxj/GHSA-8wh8-c2xr-4hxj.json b/advisories/unreviewed/2024/06/GHSA-8wh8-c2xr-4hxj/GHSA-8wh8-c2xr-4hxj.json index 432bba7b270..87887eac933 100644 --- a/advisories/unreviewed/2024/06/GHSA-8wh8-c2xr-4hxj/GHSA-8wh8-c2xr-4hxj.json +++ b/advisories/unreviewed/2024/06/GHSA-8wh8-c2xr-4hxj/GHSA-8wh8-c2xr-4hxj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-f4mj-f2mf-98w6/GHSA-f4mj-f2mf-98w6.json b/advisories/unreviewed/2024/06/GHSA-f4mj-f2mf-98w6/GHSA-f4mj-f2mf-98w6.json index 628bd0a4d95..2b35d76ae0f 100644 --- a/advisories/unreviewed/2024/06/GHSA-f4mj-f2mf-98w6/GHSA-f4mj-f2mf-98w6.json +++ b/advisories/unreviewed/2024/06/GHSA-f4mj-f2mf-98w6/GHSA-f4mj-f2mf-98w6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-f5f7-2gvp-276p/GHSA-f5f7-2gvp-276p.json b/advisories/unreviewed/2024/06/GHSA-f5f7-2gvp-276p/GHSA-f5f7-2gvp-276p.json index 3b82658f822..5330372077d 100644 --- a/advisories/unreviewed/2024/06/GHSA-f5f7-2gvp-276p/GHSA-f5f7-2gvp-276p.json +++ b/advisories/unreviewed/2024/06/GHSA-f5f7-2gvp-276p/GHSA-f5f7-2gvp-276p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-fmp9-4pq7-hvhc/GHSA-fmp9-4pq7-hvhc.json b/advisories/unreviewed/2024/06/GHSA-fmp9-4pq7-hvhc/GHSA-fmp9-4pq7-hvhc.json index 31dcba72279..e358ada7625 100644 --- a/advisories/unreviewed/2024/06/GHSA-fmp9-4pq7-hvhc/GHSA-fmp9-4pq7-hvhc.json +++ b/advisories/unreviewed/2024/06/GHSA-fmp9-4pq7-hvhc/GHSA-fmp9-4pq7-hvhc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-g9q9-wh2q-x3pm/GHSA-g9q9-wh2q-x3pm.json b/advisories/unreviewed/2024/06/GHSA-g9q9-wh2q-x3pm/GHSA-g9q9-wh2q-x3pm.json index 34f70180860..63fd3c2c894 100644 --- a/advisories/unreviewed/2024/06/GHSA-g9q9-wh2q-x3pm/GHSA-g9q9-wh2q-x3pm.json +++ b/advisories/unreviewed/2024/06/GHSA-g9q9-wh2q-x3pm/GHSA-g9q9-wh2q-x3pm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-gh33-mw8r-hv99/GHSA-gh33-mw8r-hv99.json b/advisories/unreviewed/2024/06/GHSA-gh33-mw8r-hv99/GHSA-gh33-mw8r-hv99.json index 729d57230ad..eb14db75907 100644 --- a/advisories/unreviewed/2024/06/GHSA-gh33-mw8r-hv99/GHSA-gh33-mw8r-hv99.json +++ b/advisories/unreviewed/2024/06/GHSA-gh33-mw8r-hv99/GHSA-gh33-mw8r-hv99.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-jgwr-47p2-7rr2/GHSA-jgwr-47p2-7rr2.json b/advisories/unreviewed/2024/06/GHSA-jgwr-47p2-7rr2/GHSA-jgwr-47p2-7rr2.json index d3991398625..8bbcdb816ae 100644 --- a/advisories/unreviewed/2024/06/GHSA-jgwr-47p2-7rr2/GHSA-jgwr-47p2-7rr2.json +++ b/advisories/unreviewed/2024/06/GHSA-jgwr-47p2-7rr2/GHSA-jgwr-47p2-7rr2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-mxc5-jmfp-8w6f/GHSA-mxc5-jmfp-8w6f.json b/advisories/unreviewed/2024/06/GHSA-mxc5-jmfp-8w6f/GHSA-mxc5-jmfp-8w6f.json index 06601602ce6..bc4faa973de 100644 --- a/advisories/unreviewed/2024/06/GHSA-mxc5-jmfp-8w6f/GHSA-mxc5-jmfp-8w6f.json +++ b/advisories/unreviewed/2024/06/GHSA-mxc5-jmfp-8w6f/GHSA-mxc5-jmfp-8w6f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-p826-3x73-p9j2/GHSA-p826-3x73-p9j2.json b/advisories/unreviewed/2024/06/GHSA-p826-3x73-p9j2/GHSA-p826-3x73-p9j2.json index 5068ccf7aea..0fed497a2e6 100644 --- a/advisories/unreviewed/2024/06/GHSA-p826-3x73-p9j2/GHSA-p826-3x73-p9j2.json +++ b/advisories/unreviewed/2024/06/GHSA-p826-3x73-p9j2/GHSA-p826-3x73-p9j2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-phmr-8fx6-6wjm/GHSA-phmr-8fx6-6wjm.json b/advisories/unreviewed/2024/06/GHSA-phmr-8fx6-6wjm/GHSA-phmr-8fx6-6wjm.json index 922ac77bc52..cec6fc89ea4 100644 --- a/advisories/unreviewed/2024/06/GHSA-phmr-8fx6-6wjm/GHSA-phmr-8fx6-6wjm.json +++ b/advisories/unreviewed/2024/06/GHSA-phmr-8fx6-6wjm/GHSA-phmr-8fx6-6wjm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-qhm8-98h3-r464/GHSA-qhm8-98h3-r464.json b/advisories/unreviewed/2024/06/GHSA-qhm8-98h3-r464/GHSA-qhm8-98h3-r464.json index 07154563e53..8756292425f 100644 --- a/advisories/unreviewed/2024/06/GHSA-qhm8-98h3-r464/GHSA-qhm8-98h3-r464.json +++ b/advisories/unreviewed/2024/06/GHSA-qhm8-98h3-r464/GHSA-qhm8-98h3-r464.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-r7v6-7rjj-ww63/GHSA-r7v6-7rjj-ww63.json b/advisories/unreviewed/2024/06/GHSA-r7v6-7rjj-ww63/GHSA-r7v6-7rjj-ww63.json index bba4763e7cb..6cc76e83fc8 100644 --- a/advisories/unreviewed/2024/06/GHSA-r7v6-7rjj-ww63/GHSA-r7v6-7rjj-ww63.json +++ b/advisories/unreviewed/2024/06/GHSA-r7v6-7rjj-ww63/GHSA-r7v6-7rjj-ww63.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-v7rg-6cx2-mgr8/GHSA-v7rg-6cx2-mgr8.json b/advisories/unreviewed/2024/06/GHSA-v7rg-6cx2-mgr8/GHSA-v7rg-6cx2-mgr8.json index cb50d87712e..bf344ab5295 100644 --- a/advisories/unreviewed/2024/06/GHSA-v7rg-6cx2-mgr8/GHSA-v7rg-6cx2-mgr8.json +++ b/advisories/unreviewed/2024/06/GHSA-v7rg-6cx2-mgr8/GHSA-v7rg-6cx2-mgr8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-vhgg-c8h4-x9hr/GHSA-vhgg-c8h4-x9hr.json b/advisories/unreviewed/2024/06/GHSA-vhgg-c8h4-x9hr/GHSA-vhgg-c8h4-x9hr.json index 93d827af646..34a683ed3d7 100644 --- a/advisories/unreviewed/2024/06/GHSA-vhgg-c8h4-x9hr/GHSA-vhgg-c8h4-x9hr.json +++ b/advisories/unreviewed/2024/06/GHSA-vhgg-c8h4-x9hr/GHSA-vhgg-c8h4-x9hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-vhrp-8vx7-m46h/GHSA-vhrp-8vx7-m46h.json b/advisories/unreviewed/2024/06/GHSA-vhrp-8vx7-m46h/GHSA-vhrp-8vx7-m46h.json index eb906f25829..2c646c4e8e8 100644 --- a/advisories/unreviewed/2024/06/GHSA-vhrp-8vx7-m46h/GHSA-vhrp-8vx7-m46h.json +++ b/advisories/unreviewed/2024/06/GHSA-vhrp-8vx7-m46h/GHSA-vhrp-8vx7-m46h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-vwh8-pv47-v9mx/GHSA-vwh8-pv47-v9mx.json b/advisories/unreviewed/2024/06/GHSA-vwh8-pv47-v9mx/GHSA-vwh8-pv47-v9mx.json index 10bc2de5686..dbab40656e5 100644 --- a/advisories/unreviewed/2024/06/GHSA-vwh8-pv47-v9mx/GHSA-vwh8-pv47-v9mx.json +++ b/advisories/unreviewed/2024/06/GHSA-vwh8-pv47-v9mx/GHSA-vwh8-pv47-v9mx.json @@ -7,12 +7,8 @@ "CVE-2024-5089" ], "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-w6x8-pprj-4vqq/GHSA-w6x8-pprj-4vqq.json b/advisories/unreviewed/2024/06/GHSA-w6x8-pprj-4vqq/GHSA-w6x8-pprj-4vqq.json index b2199fad226..e463416e221 100644 --- a/advisories/unreviewed/2024/06/GHSA-w6x8-pprj-4vqq/GHSA-w6x8-pprj-4vqq.json +++ b/advisories/unreviewed/2024/06/GHSA-w6x8-pprj-4vqq/GHSA-w6x8-pprj-4vqq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-wpvg-pwvm-4ff2/GHSA-wpvg-pwvm-4ff2.json b/advisories/unreviewed/2024/06/GHSA-wpvg-pwvm-4ff2/GHSA-wpvg-pwvm-4ff2.json index 640095ab36f..c8693f45e74 100644 --- a/advisories/unreviewed/2024/06/GHSA-wpvg-pwvm-4ff2/GHSA-wpvg-pwvm-4ff2.json +++ b/advisories/unreviewed/2024/06/GHSA-wpvg-pwvm-4ff2/GHSA-wpvg-pwvm-4ff2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-xfjh-8mwq-67xv/GHSA-xfjh-8mwq-67xv.json b/advisories/unreviewed/2024/06/GHSA-xfjh-8mwq-67xv/GHSA-xfjh-8mwq-67xv.json index 68d3fb099ed..d7997d1f7a7 100644 --- a/advisories/unreviewed/2024/06/GHSA-xfjh-8mwq-67xv/GHSA-xfjh-8mwq-67xv.json +++ b/advisories/unreviewed/2024/06/GHSA-xfjh-8mwq-67xv/GHSA-xfjh-8mwq-67xv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-xj54-8cp7-f54r/GHSA-xj54-8cp7-f54r.json b/advisories/unreviewed/2024/06/GHSA-xj54-8cp7-f54r/GHSA-xj54-8cp7-f54r.json index 720b9f2c6b2..c796dae3b8c 100644 --- a/advisories/unreviewed/2024/06/GHSA-xj54-8cp7-f54r/GHSA-xj54-8cp7-f54r.json +++ b/advisories/unreviewed/2024/06/GHSA-xj54-8cp7-f54r/GHSA-xj54-8cp7-f54r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-xqr2-65hp-h5j3/GHSA-xqr2-65hp-h5j3.json b/advisories/unreviewed/2024/06/GHSA-xqr2-65hp-h5j3/GHSA-xqr2-65hp-h5j3.json index d93b8d232da..8201cab9cd1 100644 --- a/advisories/unreviewed/2024/06/GHSA-xqr2-65hp-h5j3/GHSA-xqr2-65hp-h5j3.json +++ b/advisories/unreviewed/2024/06/GHSA-xqr2-65hp-h5j3/GHSA-xqr2-65hp-h5j3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-5gg7-q62c-m2hp/GHSA-5gg7-q62c-m2hp.json b/advisories/unreviewed/2024/07/GHSA-5gg7-q62c-m2hp/GHSA-5gg7-q62c-m2hp.json index 9013f5ad4a9..c5d58f30cfc 100644 --- a/advisories/unreviewed/2024/07/GHSA-5gg7-q62c-m2hp/GHSA-5gg7-q62c-m2hp.json +++ b/advisories/unreviewed/2024/07/GHSA-5gg7-q62c-m2hp/GHSA-5gg7-q62c-m2hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-5pr4-6wfv-6xhj/GHSA-5pr4-6wfv-6xhj.json b/advisories/unreviewed/2024/07/GHSA-5pr4-6wfv-6xhj/GHSA-5pr4-6wfv-6xhj.json index f024f791f50..8e90b8e40f9 100644 --- a/advisories/unreviewed/2024/07/GHSA-5pr4-6wfv-6xhj/GHSA-5pr4-6wfv-6xhj.json +++ b/advisories/unreviewed/2024/07/GHSA-5pr4-6wfv-6xhj/GHSA-5pr4-6wfv-6xhj.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-5w32-hrcv-cfhw/GHSA-5w32-hrcv-cfhw.json b/advisories/unreviewed/2024/07/GHSA-5w32-hrcv-cfhw/GHSA-5w32-hrcv-cfhw.json index 449e6d3fb80..224237f5c20 100644 --- a/advisories/unreviewed/2024/07/GHSA-5w32-hrcv-cfhw/GHSA-5w32-hrcv-cfhw.json +++ b/advisories/unreviewed/2024/07/GHSA-5w32-hrcv-cfhw/GHSA-5w32-hrcv-cfhw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-6vqv-rxj8-5fq9/GHSA-6vqv-rxj8-5fq9.json b/advisories/unreviewed/2024/07/GHSA-6vqv-rxj8-5fq9/GHSA-6vqv-rxj8-5fq9.json index a3fc00d5c4b..06c0965de45 100644 --- a/advisories/unreviewed/2024/07/GHSA-6vqv-rxj8-5fq9/GHSA-6vqv-rxj8-5fq9.json +++ b/advisories/unreviewed/2024/07/GHSA-6vqv-rxj8-5fq9/GHSA-6vqv-rxj8-5fq9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-7ggq-cf75-fcfc/GHSA-7ggq-cf75-fcfc.json b/advisories/unreviewed/2024/07/GHSA-7ggq-cf75-fcfc/GHSA-7ggq-cf75-fcfc.json index 0888c02e41e..232ba88e4ed 100644 --- a/advisories/unreviewed/2024/07/GHSA-7ggq-cf75-fcfc/GHSA-7ggq-cf75-fcfc.json +++ b/advisories/unreviewed/2024/07/GHSA-7ggq-cf75-fcfc/GHSA-7ggq-cf75-fcfc.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-985r-jphv-4gqf/GHSA-985r-jphv-4gqf.json b/advisories/unreviewed/2024/07/GHSA-985r-jphv-4gqf/GHSA-985r-jphv-4gqf.json index c42ec031092..a756b6b8af8 100644 --- a/advisories/unreviewed/2024/07/GHSA-985r-jphv-4gqf/GHSA-985r-jphv-4gqf.json +++ b/advisories/unreviewed/2024/07/GHSA-985r-jphv-4gqf/GHSA-985r-jphv-4gqf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-9jp8-rx43-82gm/GHSA-9jp8-rx43-82gm.json b/advisories/unreviewed/2024/07/GHSA-9jp8-rx43-82gm/GHSA-9jp8-rx43-82gm.json index 49b65d2ff79..27a34ecbd72 100644 --- a/advisories/unreviewed/2024/07/GHSA-9jp8-rx43-82gm/GHSA-9jp8-rx43-82gm.json +++ b/advisories/unreviewed/2024/07/GHSA-9jp8-rx43-82gm/GHSA-9jp8-rx43-82gm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-f6fw-cqcj-3c9q/GHSA-f6fw-cqcj-3c9q.json b/advisories/unreviewed/2024/07/GHSA-f6fw-cqcj-3c9q/GHSA-f6fw-cqcj-3c9q.json index e9fb849ad75..f036a33761f 100644 --- a/advisories/unreviewed/2024/07/GHSA-f6fw-cqcj-3c9q/GHSA-f6fw-cqcj-3c9q.json +++ b/advisories/unreviewed/2024/07/GHSA-f6fw-cqcj-3c9q/GHSA-f6fw-cqcj-3c9q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-gvgv-928v-rm28/GHSA-gvgv-928v-rm28.json b/advisories/unreviewed/2024/07/GHSA-gvgv-928v-rm28/GHSA-gvgv-928v-rm28.json index 5545f5ce35e..ce385f1c3ee 100644 --- a/advisories/unreviewed/2024/07/GHSA-gvgv-928v-rm28/GHSA-gvgv-928v-rm28.json +++ b/advisories/unreviewed/2024/07/GHSA-gvgv-928v-rm28/GHSA-gvgv-928v-rm28.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-h3pp-hqpg-9qmw/GHSA-h3pp-hqpg-9qmw.json b/advisories/unreviewed/2024/07/GHSA-h3pp-hqpg-9qmw/GHSA-h3pp-hqpg-9qmw.json index dff78fa751d..98544db4a91 100644 --- a/advisories/unreviewed/2024/07/GHSA-h3pp-hqpg-9qmw/GHSA-h3pp-hqpg-9qmw.json +++ b/advisories/unreviewed/2024/07/GHSA-h3pp-hqpg-9qmw/GHSA-h3pp-hqpg-9qmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-hm79-2wxc-w993/GHSA-hm79-2wxc-w993.json b/advisories/unreviewed/2024/07/GHSA-hm79-2wxc-w993/GHSA-hm79-2wxc-w993.json index 78c10381344..72027627cdb 100644 --- a/advisories/unreviewed/2024/07/GHSA-hm79-2wxc-w993/GHSA-hm79-2wxc-w993.json +++ b/advisories/unreviewed/2024/07/GHSA-hm79-2wxc-w993/GHSA-hm79-2wxc-w993.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-jvf5-642m-hpc3/GHSA-jvf5-642m-hpc3.json b/advisories/unreviewed/2024/07/GHSA-jvf5-642m-hpc3/GHSA-jvf5-642m-hpc3.json index d34ab24c2de..0b8956afbf6 100644 --- a/advisories/unreviewed/2024/07/GHSA-jvf5-642m-hpc3/GHSA-jvf5-642m-hpc3.json +++ b/advisories/unreviewed/2024/07/GHSA-jvf5-642m-hpc3/GHSA-jvf5-642m-hpc3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-m6j2-r46q-f3p4/GHSA-m6j2-r46q-f3p4.json b/advisories/unreviewed/2024/07/GHSA-m6j2-r46q-f3p4/GHSA-m6j2-r46q-f3p4.json index 978fec16364..ece8a003040 100644 --- a/advisories/unreviewed/2024/07/GHSA-m6j2-r46q-f3p4/GHSA-m6j2-r46q-f3p4.json +++ b/advisories/unreviewed/2024/07/GHSA-m6j2-r46q-f3p4/GHSA-m6j2-r46q-f3p4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-p38f-j88p-777r/GHSA-p38f-j88p-777r.json b/advisories/unreviewed/2024/07/GHSA-p38f-j88p-777r/GHSA-p38f-j88p-777r.json index f23d01dab91..9f70cb506ae 100644 --- a/advisories/unreviewed/2024/07/GHSA-p38f-j88p-777r/GHSA-p38f-j88p-777r.json +++ b/advisories/unreviewed/2024/07/GHSA-p38f-j88p-777r/GHSA-p38f-j88p-777r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-ppp5-xp4m-gr3q/GHSA-ppp5-xp4m-gr3q.json b/advisories/unreviewed/2024/07/GHSA-ppp5-xp4m-gr3q/GHSA-ppp5-xp4m-gr3q.json index 2c40a8b2f98..c936661f928 100644 --- a/advisories/unreviewed/2024/07/GHSA-ppp5-xp4m-gr3q/GHSA-ppp5-xp4m-gr3q.json +++ b/advisories/unreviewed/2024/07/GHSA-ppp5-xp4m-gr3q/GHSA-ppp5-xp4m-gr3q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-vg5j-h7r8-88x8/GHSA-vg5j-h7r8-88x8.json b/advisories/unreviewed/2024/07/GHSA-vg5j-h7r8-88x8/GHSA-vg5j-h7r8-88x8.json index 13002d0bec6..519e3b13dd5 100644 --- a/advisories/unreviewed/2024/07/GHSA-vg5j-h7r8-88x8/GHSA-vg5j-h7r8-88x8.json +++ b/advisories/unreviewed/2024/07/GHSA-vg5j-h7r8-88x8/GHSA-vg5j-h7r8-88x8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-x5wj-v66v-v62h/GHSA-x5wj-v66v-v62h.json b/advisories/unreviewed/2024/07/GHSA-x5wj-v66v-v62h/GHSA-x5wj-v66v-v62h.json index 11e41220170..99546fe988a 100644 --- a/advisories/unreviewed/2024/07/GHSA-x5wj-v66v-v62h/GHSA-x5wj-v66v-v62h.json +++ b/advisories/unreviewed/2024/07/GHSA-x5wj-v66v-v62h/GHSA-x5wj-v66v-v62h.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-39gw-3p56-qj4r/GHSA-39gw-3p56-qj4r.json b/advisories/unreviewed/2024/08/GHSA-39gw-3p56-qj4r/GHSA-39gw-3p56-qj4r.json index 0adf3f3d44f..f0ecf9ceb20 100644 --- a/advisories/unreviewed/2024/08/GHSA-39gw-3p56-qj4r/GHSA-39gw-3p56-qj4r.json +++ b/advisories/unreviewed/2024/08/GHSA-39gw-3p56-qj4r/GHSA-39gw-3p56-qj4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-3g75-fphf-x94q/GHSA-3g75-fphf-x94q.json b/advisories/unreviewed/2024/08/GHSA-3g75-fphf-x94q/GHSA-3g75-fphf-x94q.json index 1d8cd893258..8232ea0af8a 100644 --- a/advisories/unreviewed/2024/08/GHSA-3g75-fphf-x94q/GHSA-3g75-fphf-x94q.json +++ b/advisories/unreviewed/2024/08/GHSA-3g75-fphf-x94q/GHSA-3g75-fphf-x94q.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-4429-9xv8-3xpm/GHSA-4429-9xv8-3xpm.json b/advisories/unreviewed/2024/08/GHSA-4429-9xv8-3xpm/GHSA-4429-9xv8-3xpm.json index 89e09b580b3..58ddf586374 100644 --- a/advisories/unreviewed/2024/08/GHSA-4429-9xv8-3xpm/GHSA-4429-9xv8-3xpm.json +++ b/advisories/unreviewed/2024/08/GHSA-4429-9xv8-3xpm/GHSA-4429-9xv8-3xpm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-4r4m-v89p-5c69/GHSA-4r4m-v89p-5c69.json b/advisories/unreviewed/2024/08/GHSA-4r4m-v89p-5c69/GHSA-4r4m-v89p-5c69.json index 82d16d4b8fd..2a76c3c573b 100644 --- a/advisories/unreviewed/2024/08/GHSA-4r4m-v89p-5c69/GHSA-4r4m-v89p-5c69.json +++ b/advisories/unreviewed/2024/08/GHSA-4r4m-v89p-5c69/GHSA-4r4m-v89p-5c69.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-4rmr-gg5h-g325/GHSA-4rmr-gg5h-g325.json b/advisories/unreviewed/2024/08/GHSA-4rmr-gg5h-g325/GHSA-4rmr-gg5h-g325.json index 6e104682eb6..910e7a82436 100644 --- a/advisories/unreviewed/2024/08/GHSA-4rmr-gg5h-g325/GHSA-4rmr-gg5h-g325.json +++ b/advisories/unreviewed/2024/08/GHSA-4rmr-gg5h-g325/GHSA-4rmr-gg5h-g325.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7fwc-22ch-m5hj/GHSA-7fwc-22ch-m5hj.json b/advisories/unreviewed/2024/08/GHSA-7fwc-22ch-m5hj/GHSA-7fwc-22ch-m5hj.json index 3a97bc25ce5..7c83c0fad60 100644 --- a/advisories/unreviewed/2024/08/GHSA-7fwc-22ch-m5hj/GHSA-7fwc-22ch-m5hj.json +++ b/advisories/unreviewed/2024/08/GHSA-7fwc-22ch-m5hj/GHSA-7fwc-22ch-m5hj.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7jrh-j28c-296f/GHSA-7jrh-j28c-296f.json b/advisories/unreviewed/2024/08/GHSA-7jrh-j28c-296f/GHSA-7jrh-j28c-296f.json index 0b239da2e93..9fbb96d1e80 100644 --- a/advisories/unreviewed/2024/08/GHSA-7jrh-j28c-296f/GHSA-7jrh-j28c-296f.json +++ b/advisories/unreviewed/2024/08/GHSA-7jrh-j28c-296f/GHSA-7jrh-j28c-296f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-89fp-7f25-27m5/GHSA-89fp-7f25-27m5.json b/advisories/unreviewed/2024/08/GHSA-89fp-7f25-27m5/GHSA-89fp-7f25-27m5.json index e59f2b36641..6305112d44c 100644 --- a/advisories/unreviewed/2024/08/GHSA-89fp-7f25-27m5/GHSA-89fp-7f25-27m5.json +++ b/advisories/unreviewed/2024/08/GHSA-89fp-7f25-27m5/GHSA-89fp-7f25-27m5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-9mv8-jqq2-5m57/GHSA-9mv8-jqq2-5m57.json b/advisories/unreviewed/2024/08/GHSA-9mv8-jqq2-5m57/GHSA-9mv8-jqq2-5m57.json index e90ef9ea0cc..f1a61cc0b4f 100644 --- a/advisories/unreviewed/2024/08/GHSA-9mv8-jqq2-5m57/GHSA-9mv8-jqq2-5m57.json +++ b/advisories/unreviewed/2024/08/GHSA-9mv8-jqq2-5m57/GHSA-9mv8-jqq2-5m57.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-c8p5-pv85-r8m8/GHSA-c8p5-pv85-r8m8.json b/advisories/unreviewed/2024/08/GHSA-c8p5-pv85-r8m8/GHSA-c8p5-pv85-r8m8.json index be4dc0539eb..ce316ec648b 100644 --- a/advisories/unreviewed/2024/08/GHSA-c8p5-pv85-r8m8/GHSA-c8p5-pv85-r8m8.json +++ b/advisories/unreviewed/2024/08/GHSA-c8p5-pv85-r8m8/GHSA-c8p5-pv85-r8m8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-f97v-4q2m-vp42/GHSA-f97v-4q2m-vp42.json b/advisories/unreviewed/2024/08/GHSA-f97v-4q2m-vp42/GHSA-f97v-4q2m-vp42.json index a11ddade75d..df60cf870d9 100644 --- a/advisories/unreviewed/2024/08/GHSA-f97v-4q2m-vp42/GHSA-f97v-4q2m-vp42.json +++ b/advisories/unreviewed/2024/08/GHSA-f97v-4q2m-vp42/GHSA-f97v-4q2m-vp42.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-fxpg-42g8-chm6/GHSA-fxpg-42g8-chm6.json b/advisories/unreviewed/2024/08/GHSA-fxpg-42g8-chm6/GHSA-fxpg-42g8-chm6.json index f4e6e1aecd8..18e0e03bb35 100644 --- a/advisories/unreviewed/2024/08/GHSA-fxpg-42g8-chm6/GHSA-fxpg-42g8-chm6.json +++ b/advisories/unreviewed/2024/08/GHSA-fxpg-42g8-chm6/GHSA-fxpg-42g8-chm6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-m5jc-q94g-mx3w/GHSA-m5jc-q94g-mx3w.json b/advisories/unreviewed/2024/08/GHSA-m5jc-q94g-mx3w/GHSA-m5jc-q94g-mx3w.json index 04d9d394992..bc603c59130 100644 --- a/advisories/unreviewed/2024/08/GHSA-m5jc-q94g-mx3w/GHSA-m5jc-q94g-mx3w.json +++ b/advisories/unreviewed/2024/08/GHSA-m5jc-q94g-mx3w/GHSA-m5jc-q94g-mx3w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-m5rr-qpcg-cm8h/GHSA-m5rr-qpcg-cm8h.json b/advisories/unreviewed/2024/08/GHSA-m5rr-qpcg-cm8h/GHSA-m5rr-qpcg-cm8h.json index 2273f7f1f03..762c83529e2 100644 --- a/advisories/unreviewed/2024/08/GHSA-m5rr-qpcg-cm8h/GHSA-m5rr-qpcg-cm8h.json +++ b/advisories/unreviewed/2024/08/GHSA-m5rr-qpcg-cm8h/GHSA-m5rr-qpcg-cm8h.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-ppfv-j8g7-xg43/GHSA-ppfv-j8g7-xg43.json b/advisories/unreviewed/2024/08/GHSA-ppfv-j8g7-xg43/GHSA-ppfv-j8g7-xg43.json index d084f36de50..9d1d568b61c 100644 --- a/advisories/unreviewed/2024/08/GHSA-ppfv-j8g7-xg43/GHSA-ppfv-j8g7-xg43.json +++ b/advisories/unreviewed/2024/08/GHSA-ppfv-j8g7-xg43/GHSA-ppfv-j8g7-xg43.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-q4gh-23q4-v22c/GHSA-q4gh-23q4-v22c.json b/advisories/unreviewed/2024/08/GHSA-q4gh-23q4-v22c/GHSA-q4gh-23q4-v22c.json index 61be15b106f..1a181892067 100644 --- a/advisories/unreviewed/2024/08/GHSA-q4gh-23q4-v22c/GHSA-q4gh-23q4-v22c.json +++ b/advisories/unreviewed/2024/08/GHSA-q4gh-23q4-v22c/GHSA-q4gh-23q4-v22c.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-q85h-vwv7-2c2h/GHSA-q85h-vwv7-2c2h.json b/advisories/unreviewed/2024/08/GHSA-q85h-vwv7-2c2h/GHSA-q85h-vwv7-2c2h.json index b39ed27e508..418b0e89bc8 100644 --- a/advisories/unreviewed/2024/08/GHSA-q85h-vwv7-2c2h/GHSA-q85h-vwv7-2c2h.json +++ b/advisories/unreviewed/2024/08/GHSA-q85h-vwv7-2c2h/GHSA-q85h-vwv7-2c2h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-rmmg-jpmw-c98j/GHSA-rmmg-jpmw-c98j.json b/advisories/unreviewed/2024/08/GHSA-rmmg-jpmw-c98j/GHSA-rmmg-jpmw-c98j.json index d8954ff0b30..b2629fd8ef8 100644 --- a/advisories/unreviewed/2024/08/GHSA-rmmg-jpmw-c98j/GHSA-rmmg-jpmw-c98j.json +++ b/advisories/unreviewed/2024/08/GHSA-rmmg-jpmw-c98j/GHSA-rmmg-jpmw-c98j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-vqxv-47fr-xm3x/GHSA-vqxv-47fr-xm3x.json b/advisories/unreviewed/2024/08/GHSA-vqxv-47fr-xm3x/GHSA-vqxv-47fr-xm3x.json index b68cb178739..f8511e0a541 100644 --- a/advisories/unreviewed/2024/08/GHSA-vqxv-47fr-xm3x/GHSA-vqxv-47fr-xm3x.json +++ b/advisories/unreviewed/2024/08/GHSA-vqxv-47fr-xm3x/GHSA-vqxv-47fr-xm3x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-w8m2-fjpm-xwwh/GHSA-w8m2-fjpm-xwwh.json b/advisories/unreviewed/2024/08/GHSA-w8m2-fjpm-xwwh/GHSA-w8m2-fjpm-xwwh.json index 9c82d8687a4..8342a29ede2 100644 --- a/advisories/unreviewed/2024/08/GHSA-w8m2-fjpm-xwwh/GHSA-w8m2-fjpm-xwwh.json +++ b/advisories/unreviewed/2024/08/GHSA-w8m2-fjpm-xwwh/GHSA-w8m2-fjpm-xwwh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-whp7-r8fh-f38c/GHSA-whp7-r8fh-f38c.json b/advisories/unreviewed/2024/08/GHSA-whp7-r8fh-f38c/GHSA-whp7-r8fh-f38c.json index 1c9c425cfb4..8aad1b780a8 100644 --- a/advisories/unreviewed/2024/08/GHSA-whp7-r8fh-f38c/GHSA-whp7-r8fh-f38c.json +++ b/advisories/unreviewed/2024/08/GHSA-whp7-r8fh-f38c/GHSA-whp7-r8fh-f38c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-x2qm-672h-5482/GHSA-x2qm-672h-5482.json b/advisories/unreviewed/2024/08/GHSA-x2qm-672h-5482/GHSA-x2qm-672h-5482.json index 736bef8b41e..6959821de55 100644 --- a/advisories/unreviewed/2024/08/GHSA-x2qm-672h-5482/GHSA-x2qm-672h-5482.json +++ b/advisories/unreviewed/2024/08/GHSA-x2qm-672h-5482/GHSA-x2qm-672h-5482.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xpf5-rhc4-rvvh/GHSA-xpf5-rhc4-rvvh.json b/advisories/unreviewed/2024/08/GHSA-xpf5-rhc4-rvvh/GHSA-xpf5-rhc4-rvvh.json index 0520c85c058..9eb6eb3cf8e 100644 --- a/advisories/unreviewed/2024/08/GHSA-xpf5-rhc4-rvvh/GHSA-xpf5-rhc4-rvvh.json +++ b/advisories/unreviewed/2024/08/GHSA-xpf5-rhc4-rvvh/GHSA-xpf5-rhc4-rvvh.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-626x-78v2-wjj7/GHSA-626x-78v2-wjj7.json b/advisories/unreviewed/2024/09/GHSA-626x-78v2-wjj7/GHSA-626x-78v2-wjj7.json index 8b49390fa96..9f85dcbced6 100644 --- a/advisories/unreviewed/2024/09/GHSA-626x-78v2-wjj7/GHSA-626x-78v2-wjj7.json +++ b/advisories/unreviewed/2024/09/GHSA-626x-78v2-wjj7/GHSA-626x-78v2-wjj7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-67f9-f6gx-hhq7/GHSA-67f9-f6gx-hhq7.json b/advisories/unreviewed/2024/09/GHSA-67f9-f6gx-hhq7/GHSA-67f9-f6gx-hhq7.json index e72ca2c2afd..9228bc37fb2 100644 --- a/advisories/unreviewed/2024/09/GHSA-67f9-f6gx-hhq7/GHSA-67f9-f6gx-hhq7.json +++ b/advisories/unreviewed/2024/09/GHSA-67f9-f6gx-hhq7/GHSA-67f9-f6gx-hhq7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-6gf3-qc4m-f686/GHSA-6gf3-qc4m-f686.json b/advisories/unreviewed/2024/09/GHSA-6gf3-qc4m-f686/GHSA-6gf3-qc4m-f686.json index a17608aff24..3634a704dc9 100644 --- a/advisories/unreviewed/2024/09/GHSA-6gf3-qc4m-f686/GHSA-6gf3-qc4m-f686.json +++ b/advisories/unreviewed/2024/09/GHSA-6gf3-qc4m-f686/GHSA-6gf3-qc4m-f686.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-84x7-6ff7-9cj2/GHSA-84x7-6ff7-9cj2.json b/advisories/unreviewed/2024/09/GHSA-84x7-6ff7-9cj2/GHSA-84x7-6ff7-9cj2.json index 83b551f8ab6..4a596577441 100644 --- a/advisories/unreviewed/2024/09/GHSA-84x7-6ff7-9cj2/GHSA-84x7-6ff7-9cj2.json +++ b/advisories/unreviewed/2024/09/GHSA-84x7-6ff7-9cj2/GHSA-84x7-6ff7-9cj2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-mg39-cgxc-7mgj/GHSA-mg39-cgxc-7mgj.json b/advisories/unreviewed/2024/09/GHSA-mg39-cgxc-7mgj/GHSA-mg39-cgxc-7mgj.json index 70d74fcd9a0..fc48056b5c8 100644 --- a/advisories/unreviewed/2024/09/GHSA-mg39-cgxc-7mgj/GHSA-mg39-cgxc-7mgj.json +++ b/advisories/unreviewed/2024/09/GHSA-mg39-cgxc-7mgj/GHSA-mg39-cgxc-7mgj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-mq59-j27v-h664/GHSA-mq59-j27v-h664.json b/advisories/unreviewed/2024/09/GHSA-mq59-j27v-h664/GHSA-mq59-j27v-h664.json index f8c8f2fb4a1..fd7375e6646 100644 --- a/advisories/unreviewed/2024/09/GHSA-mq59-j27v-h664/GHSA-mq59-j27v-h664.json +++ b/advisories/unreviewed/2024/09/GHSA-mq59-j27v-h664/GHSA-mq59-j27v-h664.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rvfh-6hc5-7vqc/GHSA-rvfh-6hc5-7vqc.json b/advisories/unreviewed/2024/09/GHSA-rvfh-6hc5-7vqc/GHSA-rvfh-6hc5-7vqc.json index 959149c4046..1a0e7a4df06 100644 --- a/advisories/unreviewed/2024/09/GHSA-rvfh-6hc5-7vqc/GHSA-rvfh-6hc5-7vqc.json +++ b/advisories/unreviewed/2024/09/GHSA-rvfh-6hc5-7vqc/GHSA-rvfh-6hc5-7vqc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-vpgf-5c72-x83x/GHSA-vpgf-5c72-x83x.json b/advisories/unreviewed/2024/09/GHSA-vpgf-5c72-x83x/GHSA-vpgf-5c72-x83x.json index cb0d3df00b3..7a9728ee2f9 100644 --- a/advisories/unreviewed/2024/09/GHSA-vpgf-5c72-x83x/GHSA-vpgf-5c72-x83x.json +++ b/advisories/unreviewed/2024/09/GHSA-vpgf-5c72-x83x/GHSA-vpgf-5c72-x83x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-x9c2-9mp9-fq3m/GHSA-x9c2-9mp9-fq3m.json b/advisories/unreviewed/2024/09/GHSA-x9c2-9mp9-fq3m/GHSA-x9c2-9mp9-fq3m.json index bf06417c786..0811f0d7c01 100644 --- a/advisories/unreviewed/2024/09/GHSA-x9c2-9mp9-fq3m/GHSA-x9c2-9mp9-fq3m.json +++ b/advisories/unreviewed/2024/09/GHSA-x9c2-9mp9-fq3m/GHSA-x9c2-9mp9-fq3m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",