netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-11-19 21:32:44 +00:00
parent fcd481e32a
commit ce61bcd005
65 changed files with 1375 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-24mx-5rm6-qcm5/GHSA-24mx-5rm6-qcm5.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-24mx-5rm6-qcm5",
"modified": "2022-05-13T01:13:34Z",
"modified": "2024-11-19T21:31:29Z",
"published": "2022-05-13T01:13:34Z",
"aliases": [
"CVE-2019-3821"
advisories/unreviewed/2023/07/GHSA-w7wp-hxj3-m732/GHSA-w7wp-hxj3-m732.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-863"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-wgxh-v2xq-j8vr/GHSA-wgxh-v2xq-j8vr.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2023/11/GHSA-95cc-jq89-8hvw/GHSA-95cc-jq89-8hvw.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-95cc-jq89-8hvw",
"modified": "2023-11-02T18:30:25Z",
"modified": "2024-11-19T21:31:30Z",
"published": "2023-11-02T18:30:25Z",
"aliases": [
"CVE-2022-4900"
advisories/unreviewed/2024/03/GHSA-33r2-8g93-5hm2/GHSA-33r2-8g93-5hm2.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-436"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-9gv2-h67q-4h2v/GHSA-9gv2-h67q-4h2v.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9gv2-h67q-4h2v",
"modified": "2024-03-27T06:30:32Z",
"modified": "2024-11-19T21:31:30Z",
"published": "2024-03-27T06:30:32Z",
"aliases": [
"CVE-2023-45922"
],
"details": "glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-754"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-27T05:15:47Z"
advisories/unreviewed/2024/03/GHSA-g5x6-qxv4-vxw3/GHSA-g5x6-qxv4-vxw3.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g5x6-qxv4-vxw3",
"modified": "2024-03-28T03:30:59Z",
"modified": "2024-11-19T21:31:30Z",
"published": "2024-03-28T03:30:59Z",
"aliases": [
"CVE-2024-28013"
],
"details": "Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN and MR02LN all versions allows a attacker to change settings via the internet.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-330"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T01:15:47Z"
advisories/unreviewed/2024/03/GHSA-qcg7-33w2-mc2x/GHSA-qcg7-33w2-mc2x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qcg7-33w2-mc2x",
"modified": "2024-03-18T06:30:50Z",
"modified": "2024-11-19T21:31:30Z",
"published": "2024-03-18T06:30:50Z",
"aliases": [
"CVE-2024-28745"
],
"details": "Improper export of Android application components issue exists in 'ABEMA' App for Android prior to 10.65.0 allowing another app installed on the user's device to access an arbitrary URL on 'ABEMA' App for Android via Intent. If this vulnerability is exploited, an arbitrary website may be displayed on the app, and as a result, the user may become a victim of a phishing attack.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-732"
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T04:15:09Z"
advisories/unreviewed/2024/03/GHSA-rh7m-5r57-4m46/GHSA-rh7m-5r57-4m46.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rh7m-5r57-4m46",
"modified": "2024-03-04T03:30:26Z",
"modified": "2024-11-19T21:31:30Z",
"published": "2024-03-04T03:30:26Z",
"aliases": [
"CVE-2024-20038"
],
"details": "In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495932; Issue ID: ALPS08495932.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-04T03:15:07Z"
advisories/unreviewed/2024/04/GHSA-wc5v-66fr-qmw9/GHSA-wc5v-66fr-qmw9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wc5v-66fr-qmw9",
"modified": "2024-04-08T15:30:33Z",
"modified": "2024-11-19T21:31:30Z",
"published": "2024-04-08T15:30:33Z",
"aliases": [
"CVE-2024-31813"
],
"details": "TOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-08T13:15:08Z"
advisories/unreviewed/2024/05/GHSA-5wp7-92wc-c55h/GHSA-5wp7-92wc-c55h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5wp7-92wc-c55h",
"modified": "2024-05-22T18:30:43Z",
"modified": "2024-11-19T21:31:30Z",
"published": "2024-05-22T18:30:43Z",
"aliases": [
"CVE-2024-31617"
],
"details": "OpenLiteSpeed before 1.8.1 mishandles chunked encoding.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-770"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-22T18:15:10Z"
advisories/unreviewed/2024/11/GHSA-25mm-w878-4w74/GHSA-25mm-w878-4w74.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-25mm-w878-4w74",
"modified": "2024-11-19T21:31:33Z",
"published": "2024-11-19T21:31:33Z",
"aliases": [
"CVE-2024-45420"
],
"details": "Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45420"
},
{
"type": "WEB",
"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-24042"
}
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T20:15:31Z"
}
}
advisories/unreviewed/2024/11/GHSA-2pfx-377q-35vr/GHSA-2pfx-377q-35vr.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2pfx-377q-35vr",
"modified": "2024-11-19T21:31:33Z",
"published": "2024-11-19T21:31:33Z",
"aliases": [
"CVE-2024-45419"
],
"details": "Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45419"
},
{
"type": "WEB",
"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-24041"
}
],
"database_specific": {
"cwe_ids": [
"CWE-252"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T20:15:30Z"
}
}
advisories/unreviewed/2024/11/GHSA-2w64-4c9j-pq4x/GHSA-2w64-4c9j-pq4x.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2w64-4c9j-pq4x",
"modified": "2024-11-19T21:31:32Z",
"published": "2024-11-19T21:31:32Z",
"aliases": [
"CVE-2018-9368"
],
"details": "In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead to local escalation of privilege with system  execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9368"
},
{
"type": "WEB",
"url": "https://source.android.com/security/bulletin/2018-06-01"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T20:15:27Z"
}
}
advisories/unreviewed/2024/11/GHSA-3h9f-v388-6w84/GHSA-3h9f-v388-6w84.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3h9f-v388-6w84",
"modified": "2024-11-19T21:31:33Z",
"published": "2024-11-19T21:31:33Z",
"aliases": [
"CVE-2024-11395"
],
"details": "Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11395"
},
{
"type": "WEB",
"url": "https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop_19.html"
},
{
"type": "WEB",
"url": "https://issues.chromium.org/issues/377384894"
}
],
"database_specific": {
"cwe_ids": [
"CWE-843"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T20:15:29Z"
}
}
advisories/unreviewed/2024/11/GHSA-47g9-6fvg-823p/GHSA-47g9-6fvg-823p.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-47g9-6fvg-823p",
"modified": "2024-11-19T21:31:32Z",
"published": "2024-11-19T21:31:32Z",
"aliases": [
"CVE-2018-9366"
],
"details": "In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9366"
},
{
"type": "WEB",
"url": "https://source.android.com/security/bulletin/2018-06-01"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T20:15:27Z"
}
}
advisories/unreviewed/2024/11/GHSA-4mfx-rj6g-3m4p/GHSA-4mfx-rj6g-3m4p.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4mfx-rj6g-3m4p",
"modified": "2024-11-19T21:31:32Z",
"published": "2024-11-19T21:31:32Z",
"aliases": [
"CVE-2024-50430"
],
"details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Stored XSS.This issue affects Beaver Builder: from n/a through 2.8.3.7.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50430"
},
{
"type": "WEB",
"url": "https://patchstack.com/database/vulnerability/beaver-builder-lite-version/wordpress-beaver-builder-plugin-2-8-3-7-cross-site-scripting-xss-vulnerability?_s_id=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T19:15:08Z"
}
}
advisories/unreviewed/2024/11/GHSA-4pcq-7rw3-2jvx/GHSA-4pcq-7rw3-2jvx.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4pcq-7rw3-2jvx",
"modified": "2024-11-15T00:31:51Z",
"modified": "2024-11-19T21:31:31Z",
"published": "2024-11-15T00:31:51Z",
"aliases": [
"CVE-2017-13227"
],
"details": "In the autofill service, the package name that is provided by the app process is trusted inappropriately.  This could lead to information disclosure with no additional execution privileges needed.  User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-14T23:15:05Z"
advisories/unreviewed/2024/11/GHSA-5qh7-385v-fmqf/GHSA-5qh7-385v-fmqf.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5qh7-385v-fmqf",
"modified": "2024-11-19T21:31:32Z",
"published": "2024-11-19T21:31:32Z",
"aliases": [
"CVE-2018-9348"
],
"details": "In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhaustion with no additional execution privileges needed. User interaction is needed for exploitation.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9348"
},
{
"type": "WEB",
"url": "https://source.android.com/security/bulletin/2018-06-01"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T20:15:27Z"
}
}
advisories/unreviewed/2024/11/GHSA-5v6c-5897-pqv6/GHSA-5v6c-5897-pqv6.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5v6c-5897-pqv6",
"modified": "2024-11-19T21:31:33Z",
"published": "2024-11-19T21:31:33Z",
"aliases": [
"CVE-2018-9410"
],
"details": "In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9410"
},
{
"type": "WEB",
"url": "https://source.android.com/security/bulletin/2018-07-01"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T21:15:05Z"
}
}

Some files were not shown because too many files have changed in this diff Show More