Publish Advisories

GHSA-8wcv-54w6-5c6v
GHSA-322f-7555-6qf5
GHSA-7523-56gq-473q
GHSA-9whp-6cg8-4p5h
GHSA-rvw4-7ggj-6vq9
GHSA-v98w-rc85-gp5v
GHSA-5w7f-6vpf-234p
GHSA-3679-fhxh-v7gp
GHSA-x295-2h73-x8gp
This commit is contained in:
advisory-database[bot]
2024-12-06 03:32:31 +00:00
parent 86271f19a9
commit c3027c3f1c
9 changed files with 96 additions and 18 deletions
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -43,9 +41,7 @@
}
],
"database_specific": {
"cwe_ids": [
],
"cwe_ids": [],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
"CWE-269",
"CWE-276"
],
"severity": "HIGH",
"github_reviewed": false,
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -36,6 +34,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-287",
"CWE-863"
],
"severity": "CRITICAL",
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9whp-6cg8-4p5h",
"modified": "2024-03-14T00:31:05Z",
"modified": "2024-12-06T03:31:09Z",
"published": "2024-03-08T03:31:24Z",
"aliases": [
"CVE-2024-23250"
],
"details": "An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to access Bluetooth-connected microphones without user permission.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
}
],
"affected": [],
"references": [
{
@@ -45,7 +50,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-08T02:15:48Z"
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -62,7 +62,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
"CWE-200",
"CWE-362"
],
"severity": "HIGH",
"github_reviewed": false,
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5w7f-6vpf-234p",
"modified": "2024-11-23T06:32:47Z",
"modified": "2024-12-06T03:31:09Z",
"published": "2024-11-23T06:32:47Z",
"aliases": [
"CVE-2024-10961"
@@ -19,6 +19,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10961"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3201046"
},
{
"type": "WEB",
"url": "https://wordpress.org/plugins/oa-social-login"
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3679-fhxh-v7gp",
"modified": "2024-12-06T03:31:09Z",
"published": "2024-12-06T03:31:09Z",
"aliases": [
"CVE-2024-11149"
],
"details": "In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11149"
},
{
"type": "WEB",
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/014_vmm.patch.sig"
}
],
"database_specific": {
"cwe_ids": [],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-06T02:15:18Z"
}
}
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x295-2h73-x8gp",
"modified": "2024-12-06T03:31:09Z",
"published": "2024-12-06T03:31:09Z",
"aliases": [
"CVE-2024-49041"
],
"details": "Microsoft Edge (Chromium-based) Spoofing Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49041"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49041"
}
],
"database_specific": {
"cwe_ids": [
"CWE-449"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-06T02:15:18Z"
}
}