Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2023-06-27 15:31:55 +00:00
parent 3efb0e9e67
commit cf835e98b3
71 changed files with 1339 additions and 52 deletions
@@ -28,6 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1390",
+      "CWE-287",
      "CWE-863"
    ],
    "severity": "CRITICAL",
@@ -32,6 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-119",
      "CWE-416",
      "CWE-787"
    ],
@@ -40,6 +40,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-158",
      "CWE-74"
    ],
    "severity": "HIGH",
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-22",
      "CWE-94"
    ],
    "severity": "CRITICAL",
@@ -32,7 +32,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-668"
+      "CWE-497",
+      "CWE-668",
+      "CWE-862"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-284",
      "CWE-863"
    ],
    "severity": "MODERATE",
@@ -41,6 +41,7 @@
  "database_specific": {
    "cwe_ids": [
      "CWE-121",
+      "CWE-125",
      "CWE-787"
    ],
    "severity": "HIGH",
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-787"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-862"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-416"
+      "CWE-416",
+      "CWE-476"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1188",
      "CWE-453"
    ],
    "severity": "MODERATE",
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-200"
+      "CWE-200",
+      "CWE-269"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2x7r-m54m-f2pf",
+  "modified": "2023-06-27T15:30:28Z",
+  "published": "2023-06-27T15:30:28Z",
+  "aliases": [
+    "CVE-2023-2877"
+  ],
+  "details": "The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons. This allows a user with a role as low as Subscriber to install and activate arbitrary plugins of arbitrary versions from the WordPress.org plugin repository onto the site, leading to Remote Code Execution.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2877"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/33765da5-c56e-42c1-83dd-fcaad976b402"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": null
+  }
+}
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2xjf-f4mq-m3q5",
+  "modified": "2023-06-27T15:30:28Z",
+  "published": "2023-06-27T15:30:28Z",
+  "aliases": [
+    "CVE-2023-2624"
+  ],
+  "details": "The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrator",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2624"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/dc3a841d-a95b-462e-be4b-acaa44e77264"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": null
+  }
+}
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3992-5mfp-43q5",
+  "modified": "2023-06-27T15:30:28Z",
+  "published": "2023-06-27T15:30:28Z",
+  "aliases": [
+    "CVE-2023-2326"
+  ],
+  "details": "The Gravity Forms Google Sheet Connector WordPress plugin before 1.3.5, gsheetconnector-gravityforms-pro WordPress plugin through 1.3.5 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2326"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/f922695a-b803-4edf-aadc-80c79d99bebb"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": null
+  }
+}
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3hmp-qggx-jm2c",
+  "modified": "2023-06-27T15:30:28Z",
+  "published": "2023-06-27T15:30:28Z",
+  "aliases": [
+    "CVE-2023-2744"
+  ],
+  "details": "The ERP WordPress plugin before 1.12.4 does not properly sanitise and escape the `type` parameter in the `erp/v1/accounting/v1/people` REST API endpoint before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2744"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/435da8a1-9955-46d7-a508-b5738259e731"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": null
+  }
+}
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3rqp-wp5p-mhrc",
+  "modified": "2023-06-27T15:30:28Z",
+  "published": "2023-06-27T15:30:28Z",
+  "aliases": [
+    "CVE-2023-2601"
+  ],
+  "details": "The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2601"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/57769468-3802-4985-bf5e-44ec1d59f5fd"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": null
+  }
+}
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3x5r-c923-f923",
-  "modified": "2023-06-23T18:30:24Z",
+  "modified": "2023-06-27T15:30:28Z",
  "published": "2023-06-23T18:30:24Z",
  "aliases": [
    "CVE-2023-32373"
  ],
  "details": "A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -45,7 +48,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-416"
    ],
    "severity": null,
    "github_reviewed": false,
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-433m-h5jj-8j5m",
-  "modified": "2023-06-19T12:30:22Z",
+  "modified": "2023-06-27T15:30:27Z",
  "published": "2023-06-19T12:30:22Z",
  "aliases": [
    "CVE-2023-2805"
  ],
  "details": "The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the agents[] parameter in the set_add_agent_leaves AJAX function before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

--- a/Show More
+++ b/Show More