netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-48vv-2pmq-9fvv
GHSA-j7mj-748x-7p78
This commit is contained in:
advisory-database[bot]
2024-10-09 21:09:52 +00:00
parent ef29e7d4a1
commit c3a13f73cb
2 changed files with 74 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2018/07/GHSA-48vv-2pmq-9fvv/GHSA-48vv-2pmq-9fvv.json
+19 -4
View File
@@ -1,15 +1,22 @@
{
"schema_version": "1.4.0",
"id": "GHSA-48vv-2pmq-9fvv",
"modified": "2021-08-31T21:48:47Z",
"modified": "2024-10-09T21:08:59Z",
"published": "2018-07-23T19:51:14Z",
"aliases": [
"CVE-2012-6661"
],
"summary": "Moderate severity vulnerability that affects Plone and Zope2",
"summary": "Plone and Zope2 do not reseed pseudo-random number generator",
"details": "Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability types (ADT2).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
@@ -94,6 +101,14 @@
"type": "WEB",
"url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-51.yaml"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-76.yaml"
},
{
"type": "WEB",
"url": "https://plone.org/products/plone-hotfix/releases/20121124"
@@ -111,7 +126,7 @@
"cwe_ids": [
"CWE-336"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2020-06-16T20:57:52Z",
"nvd_published_at": null
advisories/github-reviewed/2019/10/GHSA-j7mj-748x-7p78/GHSA-j7mj-748x-7p78.json
+55 -43
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j7mj-748x-7p78",
"modified": "2024-03-26T18:15:45Z",
"modified": "2024-10-09T21:07:19Z",
"published": "2019-10-22T14:40:42Z",
"aliases": [
"CVE-2019-16865"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -50,47 +54,7 @@
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0566"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0578"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0580"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0681"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0683"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0694"
},
{
"type": "PACKAGE",
"url": "https://github.com/python-pillow/Pillow"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EMJBUZQGQ2Q7HXYCQVRLU7OXNC7CAWWU"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYDXD7EE4YAEVSTNIFZKNVPRVJX5ZOG3"
},
{
"type": "WEB",
"url": "https://pillow.readthedocs.io/en/latest/releasenotes/6.2.0.html"
},
{
"type": "WEB",
"url": "https://ubuntu.com/security/notices/USN-4272-1"
"url": "https://www.debian.org/security/2020/dsa-4631"
},
{
"type": "WEB",
@@ -98,7 +62,55 @@
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2020/dsa-4631"
"url": "https://ubuntu.com/security/notices/USN-4272-1"
},
{
"type": "WEB",
"url": "https://pillow.readthedocs.io/en/latest/releasenotes/6.2.0.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYDXD7EE4YAEVSTNIFZKNVPRVJX5ZOG3"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EMJBUZQGQ2Q7HXYCQVRLU7OXNC7CAWWU"
},
{
"type": "PACKAGE",
"url": "https://github.com/python-pillow/Pillow"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2019-110.yaml"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-j7mj-748x-7p78"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0694"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0683"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0681"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0580"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0578"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0566"
}
],
"database_specific": {