Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2024-08-27 18:38:17 +00:00
parent dcdacdc3d7
commit cd9b0ae769
98 changed files with 1024 additions and 248 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2wrp-6fg6-hmc5",
-  "modified": "2024-06-10T18:30:55Z",
+  "modified": "2024-08-27T18:36:46Z",
  "published": "2024-04-16T06:30:28Z",
  "aliases": [
    "CVE-2024-22262"
@@ -97,7 +97,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-601"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-j5fm-fr9f-2w9w",
-  "modified": "2022-04-29T02:58:22Z",
+  "modified": "2024-08-27T18:31:33Z",
  "published": "2022-04-29T02:58:22Z",
  "aliases": [
    "CVE-2004-0798"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-249x-3qx4-8h7p",
-  "modified": "2022-05-17T01:09:24Z",
+  "modified": "2024-08-27T18:31:33Z",
  "published": "2022-05-17T01:09:24Z",
  "aliases": [
    "CVE-2015-8261"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-6hrr-q3r6-mc76",
-  "modified": "2022-05-17T01:45:47Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2022-05-17T01:45:47Z",
  "aliases": [
    "CVE-2012-2601"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4fr6-x37h-wjwr",
-  "modified": "2024-01-11T18:31:22Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-01-03T21:30:31Z",
  "aliases": [
    "CVE-2023-5880"
@@ -28,7 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-79"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qf96-mmrf-rj2q",
-  "modified": "2024-01-19T21:30:34Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-01-16T09:30:19Z",
  "aliases": [
    "CVE-2023-52114"
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-269"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-xr5r-3m93-q3f2",
-  "modified": "2024-01-19T21:30:34Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-01-16T12:30:26Z",
  "aliases": [
    "CVE-2023-52105"
@@ -36,7 +36,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-27"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-gqvf-8g7j-7gh5",
-  "modified": "2024-02-21T09:31:01Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-02-21T09:31:01Z",
  "aliases": [
    "CVE-2023-42942"
  ],
  "details": "This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. A malicious app may be able to gain root privileges.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -47,7 +50,7 @@
    "cwe_ids": [

    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-02-21T07:15:50Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-29hx-fjxp-2fcx",
-  "modified": "2024-03-11T21:31:27Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-03-11T21:31:27Z",
  "aliases": [
    "CVE-2024-27236"
  ],
  "details": "In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -25,9 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-843"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-11T19:15:49Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-42pj-35w6-4jwg",
-  "modified": "2024-03-28T18:30:47Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-03-28T18:30:47Z",
  "aliases": [
    "CVE-2023-42974"
  ],
  "details": "A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to execute arbitrary code with kernel privileges.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -41,9 +44,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-362"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-28T16:15:08Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-54mj-hcw7-m39p",
-  "modified": "2024-03-18T03:30:32Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-03-18T03:30:32Z",
  "aliases": [
    "CVE-2022-47036"
  ],
  "details": "Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for \"debug login\" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, its is fixed in newer hardware, which would typically bs used with firmware 2.1.1 or later.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -25,9 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-284"
    ],
-    "severity": null,
+    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-18T03:15:05Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-985m-w4vj-29hv",
-  "modified": "2024-03-11T21:31:25Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-03-11T21:31:25Z",
  "aliases": [
    "CVE-2024-25988"
  ],
  "details": "In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -25,9 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-125"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-11T19:15:47Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-mghx-3qf4-fx45",
-  "modified": "2024-03-11T21:31:26Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-03-11T21:31:26Z",
  "aliases": [
    "CVE-2024-27226"
  ],
  "details": "In tmu_config_gov_params of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -25,9 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-787"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-11T19:15:48Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-mjxv-wcxg-9mv9",
-  "modified": "2024-03-11T21:31:23Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-03-11T21:31:23Z",
  "aliases": [
    "CVE-2024-22005"
  ],
  "details": "In TBD of TBD, there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -25,9 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-787"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-11T19:15:47Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rvw4-7ggj-6vq9",
-  "modified": "2024-03-14T00:31:05Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-03-08T03:31:24Z",
  "aliases": [
    "CVE-2024-23234"
  ],
  "details": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to execute arbitrary code with kernel privileges.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -45,9 +48,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-787"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-08T02:15:47Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-v223-c39x-4wxf",
-  "modified": "2024-03-11T21:31:26Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-03-11T21:31:26Z",
  "aliases": [
    "CVE-2024-27208"
  ],
  "details": "In TBD of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -25,9 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-787"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-11T19:15:48Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2wvh-6639-8hph",
-  "modified": "2024-04-30T00:30:35Z",
+  "modified": "2024-08-27T18:31:35Z",
  "published": "2024-04-30T00:30:35Z",
  "aliases": [
    "CVE-2024-34048"
  ],
  "details": "O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -29,9 +32,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-129"
    ],
-    "severity": null,
+    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-04-30T00:15:07Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-363m-3jp4-qg24",
-  "modified": "2024-04-01T06:30:31Z",
+  "modified": "2024-08-27T18:31:34Z",
  "published": "2024-04-01T06:30:31Z",
  "aliases": [
    "CVE-2024-2263"
  ],
  "details": "Themify  WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
  ],
  "affected": [

@@ -27,7 +30,7 @@
    "cwe_ids": [

    ],
-    "severity": null,
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-04-01T05:15:07Z"
--- a/Show More
+++ b/Show More