netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-11-04 12:34:14 +00:00
parent debc975799
commit bfd544fd3e
49 changed files with 1231 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/06/GHSA-xgqc-3vhw-cphp/GHSA-xgqc-3vhw-cphp.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xgqc-3vhw-cphp",
"modified": "2024-06-06T21:30:37Z",
"modified": "2024-11-04T12:32:55Z",
"published": "2024-06-06T21:30:37Z",
"aliases": [
"CVE-2024-5124"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5124"
},
{
"type": "WEB",
"url": "https://github.com/gaizhenbiao/chuanhuchatgpt/commit/e46ec4ecd896bc3c88eb9a2f44e8593f3c6761b4"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/e85ec077-930a-4597-975f-9341d2805641"
advisories/unreviewed/2024/10/GHSA-28pg-93m7-9jmx/GHSA-28pg-93m7-9jmx.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-28pg-93m7-9jmx",
"modified": "2024-10-29T18:30:35Z",
"modified": "2024-11-04T12:32:55Z",
"published": "2024-10-28T03:30:39Z",
"aliases": [
"CVE-2024-50067"
@@ -24,6 +24,14 @@
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/373b9338c9722a368925d83bc622c596896b328e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/537ad4a431f6dddbf15d40d19f24bb9ee12b55cb"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/9e5f93788c9dd4309e75a56860a1ac44a8e117b9"
}
],
"database_specific": {
advisories/unreviewed/2024/10/GHSA-5cmh-766g-p8jx/GHSA-5cmh-766g-p8jx.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5cmh-766g-p8jx",
"modified": "2024-10-21T21:30:49Z",
"modified": "2024-11-04T12:32:55Z",
"published": "2024-10-21T21:30:49Z",
"aliases": [
"CVE-2024-50010"
@@ -18,10 +18,22 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50010"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/0bdf77be2330062b3a64f2bec39f62ab874a6796"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/0d16f53c91111cec914f0811fcc526a2ba77b20d"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/0d196e7589cefe207d5d41f37a0a28a1fdeeb7c6"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/b723f96407a0a078cf75970e4dbf16b46d286a61"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/d62ba2a5536df83473a2ac15ab302258e3845251"
advisories/unreviewed/2024/10/GHSA-v8h5-cghp-q3c4/GHSA-v8h5-cghp-q3c4.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v8h5-cghp-q3c4",
"modified": "2024-10-24T06:30:29Z",
"modified": "2024-11-04T12:32:55Z",
"published": "2024-10-21T21:30:54Z",
"aliases": [
"CVE-2024-50058"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50058"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/399927f0f875b93f3d5a0336d382ba48b8671eb2"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/602babaa84d627923713acaf5f7e9a4369e77473"
@@ -29,6 +33,10 @@
"type": "WEB",
"url": "https://git.kernel.org/stable/c/76ed24a34223bb2c6b6162e1d8389ec4e602a290"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/d7b5876a6e74cdf8468a478be6b23f2f5464ac7a"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/e418d91195d29d5f9c9685ff309b92b04b41dc40"
advisories/unreviewed/2024/11/GHSA-2w43-52vj-94gx/GHSA-2w43-52vj-94gx.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2w43-52vj-94gx",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-38410"
],
"details": "Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38410"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:07Z"
}
}
advisories/unreviewed/2024/11/GHSA-34x9-x6hh-cvvw/GHSA-34x9-x6hh-cvvw.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-34x9-x6hh-cvvw",
"modified": "2024-11-04T03:30:40Z",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T03:30:40Z",
"aliases": [
"CVE-2024-20120"
],
"details": "In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08956986; Issue ID: MSV-1575.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T02:15:17Z"
advisories/unreviewed/2024/11/GHSA-3925-h58h-pr2m/GHSA-3925-h58h-pr2m.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3925-h58h-pr2m",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-33029"
],
"details": "Memory corruption while handling the PDR in driver for getting the remote heap maps.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33029"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:05Z"
}
}
advisories/unreviewed/2024/11/GHSA-3qgc-vrvv-mv2r/GHSA-3qgc-vrvv-mv2r.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3qgc-vrvv-mv2r",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-38422"
],
"details": "Memory corruption while processing voice packet with arbitrary data received from ADSP.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38422"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-680"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:08Z"
}
}
advisories/unreviewed/2024/11/GHSA-3r6h-pxfq-6cr9/GHSA-3r6h-pxfq-6cr9.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3r6h-pxfq-6cr9",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-38424"
],
"details": "Memory corruption during GNSS HAL process initialization.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38424"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:09Z"
}
}
advisories/unreviewed/2024/11/GHSA-49j5-25jj-6293/GHSA-49j5-25jj-6293.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-49j5-25jj-6293",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-38403"
],
"details": "Transient DOS while parsing BTM ML IE when per STA profile is not included.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38403"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:06Z"
}
}
advisories/unreviewed/2024/11/GHSA-4g7x-pvhw-3mph/GHSA-4g7x-pvhw-3mph.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4g7x-pvhw-3mph",
"modified": "2024-11-04T03:30:40Z",
"modified": "2024-11-04T12:32:55Z",
"published": "2024-11-04T03:30:40Z",
"aliases": [
"CVE-2024-20112"
],
"details": "In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-125"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T02:15:16Z"
advisories/unreviewed/2024/11/GHSA-4qm8-phhf-q2q2/GHSA-4qm8-phhf-q2q2.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4qm8-phhf-q2q2",
"modified": "2024-11-04T12:32:57Z",
"published": "2024-11-04T12:32:57Z",
"aliases": [
"CVE-2024-48878"
],
"details": "Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48878"
},
{
"type": "WEB",
"url": "https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2024-48878.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T11:15:06Z"
}
}
advisories/unreviewed/2024/11/GHSA-4r9r-m8vg-chxf/GHSA-4r9r-m8vg-chxf.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4r9r-m8vg-chxf",
"modified": "2024-11-04T03:30:40Z",
"modified": "2024-11-04T12:32:55Z",
"published": "2024-11-04T03:30:40Z",
"aliases": [
"CVE-2024-20117"
],
"details": "In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-125"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T02:15:17Z"
advisories/unreviewed/2024/11/GHSA-5jgq-h327-whqc/GHSA-5jgq-h327-whqc.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5jgq-h327-whqc",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-38415"
],
"details": "Memory corruption while handling session errors from firmware.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38415"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:08Z"
}
}
advisories/unreviewed/2024/11/GHSA-6cwr-j8fg-5c5x/GHSA-6cwr-j8fg-5c5x.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6cwr-j8fg-5c5x",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-23377"
],
"details": "Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23377"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-823"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:04Z"
}
}
advisories/unreviewed/2024/11/GHSA-72ch-892x-fp25/GHSA-72ch-892x-fp25.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-72ch-892x-fp25",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-38406"
],
"details": "Memory corruption while handling IOCTL calls in JPEG Encoder driver.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38406"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-367"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:07Z"
}
}
advisories/unreviewed/2024/11/GHSA-752q-72qc-rc66/GHSA-752q-72qc-rc66.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-752q-72qc-rc66",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-23590"
],
"details": "Session Fixation vulnerability in Apache Kylin.\n\nThis issue affects Apache Kylin: from 2.0.0 through 4.x.\n\nUsers are recommended to upgrade to version 5.0.0 or above, which fixes the issue.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23590"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread/7161154h0k6zygr9917qq0g95p39szml"
}
],
"database_specific": {
"cwe_ids": [
"CWE-384"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:04Z"
}
}
advisories/unreviewed/2024/11/GHSA-79m4-m83j-wqr4/GHSA-79m4-m83j-wqr4.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-79m4-m83j-wqr4",
"modified": "2024-11-04T03:30:39Z",
"modified": "2024-11-04T12:32:55Z",
"published": "2024-11-04T03:30:39Z",
"aliases": [
"CVE-2024-20104"
],
"details": "In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09073261; Issue ID: MSV-1772.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T02:15:15Z"
advisories/unreviewed/2024/11/GHSA-7h5w-r4x3-245g/GHSA-7h5w-r4x3-245g.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7h5w-r4x3-245g",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-33068"
],
"details": "Transient DOS while parsing fragments of MBSSID IE from beacon frame.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33068"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:06Z"
}
}
advisories/unreviewed/2024/11/GHSA-98cj-759m-rr93/GHSA-98cj-759m-rr93.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-98cj-759m-rr93",
"modified": "2024-11-04T12:32:56Z",
"published": "2024-11-04T12:32:56Z",
"aliases": [
"CVE-2024-38407"
],
"details": "Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38407"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-367"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-04T10:15:07Z"
}
}

Some files were not shown because too many files have changed in this diff Show More