diff --git a/advisories/github-reviewed/2022/05/GHSA-4ppj-4p4v-jf4p/GHSA-4ppj-4p4v-jf4p.json b/advisories/github-reviewed/2022/05/GHSA-4ppj-4p4v-jf4p/GHSA-4ppj-4p4v-jf4p.json index 5623a11394e..5b33507c744 100644 --- a/advisories/github-reviewed/2022/05/GHSA-4ppj-4p4v-jf4p/GHSA-4ppj-4p4v-jf4p.json +++ b/advisories/github-reviewed/2022/05/GHSA-4ppj-4p4v-jf4p/GHSA-4ppj-4p4v-jf4p.json @@ -8,9 +8,7 @@ ], "summary": "OpenStack Keystone Denial of Service vulnerability via a large HTTP request", "details": "OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a large HTTP request, as demonstrated by a long tenant_name when requesting a token.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2023/07/GHSA-gch5-hwqf-mxhp/GHSA-gch5-hwqf-mxhp.json b/advisories/github-reviewed/2023/07/GHSA-gch5-hwqf-mxhp/GHSA-gch5-hwqf-mxhp.json index de43aa0a86b..ae78217410c 100644 --- a/advisories/github-reviewed/2023/07/GHSA-gch5-hwqf-mxhp/GHSA-gch5-hwqf-mxhp.json +++ b/advisories/github-reviewed/2023/07/GHSA-gch5-hwqf-mxhp/GHSA-gch5-hwqf-mxhp.json @@ -3,14 +3,10 @@ "id": "GHSA-gch5-hwqf-mxhp", "modified": "2023-07-27T19:29:41Z", "published": "2023-07-27T19:29:41Z", - "aliases": [ - - ], + "aliases": [], "summary": "Unsoundness in `intern` methods on `intaglio` symbol interners", "details": "Affected versions of this crate have a stacked borrows violation when creating\nreferences to interned contents. All interner types are affected.\n\nThe flaw was corrected in version 1.9.0 by reordering move and borrowing\noperations and storing interned contents by raw pointer instead of as a `Box`.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-07-27T19:29:41Z", diff --git a/advisories/github-reviewed/2023/09/GHSA-hq58-p9mv-338c/GHSA-hq58-p9mv-338c.json b/advisories/github-reviewed/2023/09/GHSA-hq58-p9mv-338c/GHSA-hq58-p9mv-338c.json index 68c216e8571..b199da5de49 100644 --- a/advisories/github-reviewed/2023/09/GHSA-hq58-p9mv-338c/GHSA-hq58-p9mv-338c.json +++ b/advisories/github-reviewed/2023/09/GHSA-hq58-p9mv-338c/GHSA-hq58-p9mv-338c.json @@ -3,14 +3,10 @@ "id": "GHSA-hq58-p9mv-338c", "modified": "2024-03-27T12:52:13Z", "published": "2023-09-29T20:38:40Z", - "aliases": [ - - ], + "aliases": [], "summary": "CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation", "details": "## Amulet Security Advisory for CometBFT: ASA-2023-002\n\n**Component**: CometBFT\n**Criticality:** Low\n**Affected versions:** All\n**Affected users:** Validators, Chain Builders + Maintainers\n\n# Summary\n\nA default configuration in CometBFT has been found to be large for common use cases, and may affect block times and consensus participation when fully utilized by chain participants. It is advised that chains consider their specific needs for their use case when setting the `BlockParams.MaxBytes` consensus parameter. Chains are encouraged to evaluate the impact of having proposed blocks with the maximum allowed block size, especially on bandwidth usage and block latency. Additionally, the `timeout_propose` parameter should be computed using the maximum allowed block size as a reference. This issue does not represent an actively exploitable vulnerability that would result in a direct loss of funds, however it may have a slight impact on block latency depending on a network’s topography.\n\nWhen setting a large `BlockParams.MaxBytes`, there are two main implications:\n* Increased bandwidth to propagate a block\n* Increased latency to propagate a block\n\nWhen combined, this may result in less round participation, and in some cases additional rounds may be required to meet the consensus threshold, which could lead to timeouts depending on the topography of a network and environmental factors. These factors can include the number of validators on a network, geographic distribution, network connectivity (including latency, bandwidth, and reachability), the functionality of the modules implementing the logic for a transaction in your chain, etc.  The cost to propagate a 21MB block, the default value for `BlockParams.MaxBytes`, will be far higher than the cost of propagating a smaller 1MB block. CometBFT recommends tuning this parameter to a smaller limit if full initial-round participation is an important quality for your chain.\n\n# Considerations\nCometBFT is designed to be configurable by chains, and implements many different configuration variables and parameters to allow chain developers, validators, node operators, and chain participants to customize it best to their use case. A high-performing validator may find it necessary to experiment with tuning local configuration, optimizing network and compute resources, and implementing controls to inhibit spam.\n\n\n# Next Steps for Chains and Validators\n\nTo increase awareness of the potential impacts of this default parameter, the CometBFT team has updated the documentation (https://github.com/cometbft/cometbft/pull/1405, [v0.34.x](https://docs.cometbft.com/v0.34/spec/abci/apps#blockparamsmaxbytes), [v0.37.x](https://docs.cometbft.com/v0.37/spec/abci/abci++_app_requirements#blockparamsmaxbytes), [v0.38.x](https://docs.cometbft.com/v0.38/spec/abci/abci++_app_requirements#blockparamsmaxbytes)) for builders and maintainers of chain applications. Additionally, it is recommended that:\n\n\n* Chain ecosystems and their maintainers set a `BlockParams.MaxBytes` configuration appropriate for their use case at the application level; in some cases, fine-tuning `BlockParams` may require a network upgrade.\n* Chain ecosystems and their maintainers evaluate how gas is used and required on their chain, including gas and fee parameters, no-fee or fee-exempt message policies, and ensure that any custom modules integrate with the gas and fee frameworks. This is especially important for chains that may have implemented custom modules or functionality to allow IBC messages to bypass fees.\n* Chain ecosystems and their maintainers audit all of their currently-set parameters and configurations to ensure that they are appropriate for their use case.\n\n* All validators develop and implement anti-spam measures on their nodes. Amulet encourages validators to form working groups to collaborate on spam prevention and on tooling that can be implemented by node operators across the Interchain.\n* All validators consider developing and implementing tooling that would allow them to sample incoming transactions to enable them to fine-tune the level of service they would like to provide to be resilient in slowdown scenarios. Amulet also encourages validators to collaborate on tooling that can be implemented by node operators across the Interchain.\n\n\nThe CometBFT team has also revisited all the checks performed by the consensus protocol regarding proposed blocks. This investigation has confirmed that proposed blocks with size exceeding the `BlockParams.MaxBytes` limit established by the application are not accepted by nodes. The team notwithstanding has decided to introduce additional sanity checks for the size of proposed blocks (https://github.com/cometbft/cometbft/pull/1408), allowing for an early identification and rejection of invalid or oversized blocks. These code changes will be included in the _next_ release of each branch of CometBFT.\n\nAs more chains adopt the Interchain Stack for new and cutting-edge use cases, the CometBFT team recommends that all chains regularly evaluate their parameters and configurations to ensure they meet the needs of their ecosystem as their networks mature. \n\n\nFor more information about CometBFT, see [https://docs.cometbft.com](https://docs.cometbft.com/). \n\n\n\n\n\nThis issue was reported via the vulnerability disclosure channel at [security@interchain.io](mailto:security@interchain.io) on Friday, September 23, 2023. If you believe you have found a bug in the Interchain Stack or would like to contribute to the program by reporting a bug, please see [https://hackerone.com/cosmos](https://hackerone.com/cosmos). \n\n\n*****\n\n \nNote from Amulet on the Security Advisory Process:\n\n\nIn the interest of timely resolution of this issue for validators and node operators, the Amulet team has chosen to use existing processes and resources for distributing security advisories within the Cosmos and Interchain Ecosystems. Stay tuned as we implement an improved, more robust security advisory distribution system that will provide equitable access to information about security issues in the Interchain Stack.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -113,9 +109,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-09-29T20:38:40Z", diff --git a/advisories/github-reviewed/2023/11/GHSA-48m6-wm5p-rr6h/GHSA-48m6-wm5p-rr6h.json b/advisories/github-reviewed/2023/11/GHSA-48m6-wm5p-rr6h/GHSA-48m6-wm5p-rr6h.json index a540ca2f8bb..c7ff0914b12 100644 --- a/advisories/github-reviewed/2023/11/GHSA-48m6-wm5p-rr6h/GHSA-48m6-wm5p-rr6h.json +++ b/advisories/github-reviewed/2023/11/GHSA-48m6-wm5p-rr6h/GHSA-48m6-wm5p-rr6h.json @@ -3,14 +3,10 @@ "id": "GHSA-48m6-wm5p-rr6h", "modified": "2023-11-14T18:32:20Z", "published": "2023-11-14T18:32:20Z", - "aliases": [ - - ], + "aliases": [], "summary": "Insufficient covariance check makes self_cell unsound", "details": "All public versions prior to `1.02` used an insufficient check to ensure that users correctly marked the dependent type as either `covariant` or `not_covariant`. This allowed users to mark a dependent as covariant even though its type was not covariant but invariant, for certain invariant types involving trait object lifetimes. One example for such a dependent type is `type Dependent<'a> = RefCell>`. Such a type allowed unsound usage in purely safe user code that leads to undefined behavior. The patched versions now produce a compile time error if such a type is marked as `covariant`.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -66,9 +62,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-11-14T18:32:20Z", diff --git a/advisories/github-reviewed/2024/01/GHSA-9vm7-v8wj-3fqw/GHSA-9vm7-v8wj-3fqw.json b/advisories/github-reviewed/2024/01/GHSA-9vm7-v8wj-3fqw/GHSA-9vm7-v8wj-3fqw.json index 89307df43ab..8cd045be148 100644 --- a/advisories/github-reviewed/2024/01/GHSA-9vm7-v8wj-3fqw/GHSA-9vm7-v8wj-3fqw.json +++ b/advisories/github-reviewed/2024/01/GHSA-9vm7-v8wj-3fqw/GHSA-9vm7-v8wj-3fqw.json @@ -3,14 +3,10 @@ "id": "GHSA-9vm7-v8wj-3fqw", "modified": "2024-01-23T14:43:50Z", "published": "2024-01-23T14:43:50Z", - "aliases": [ - - ], + "aliases": [], "summary": "keycloak-core: open redirect via \"form_post.jwt\" JARM response mode", "details": "An incomplete fix was found in Keycloak Core patch. An attacker can steal authorization codes or tokens from clients using a wildcard in the JARM response mode \"form_post.jwt\". It is observed that changing the response_mode parameter in the original proof of concept from \"form_post\" to \"form_post.jwt\" can bypass the security patch implemented to address CVE-2023-6134.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/01/GHSA-c8v3-jhv9-4ppc/GHSA-c8v3-jhv9-4ppc.json b/advisories/github-reviewed/2024/01/GHSA-c8v3-jhv9-4ppc/GHSA-c8v3-jhv9-4ppc.json index 278bfa606ba..d3e00f81e2d 100644 --- a/advisories/github-reviewed/2024/01/GHSA-c8v3-jhv9-4ppc/GHSA-c8v3-jhv9-4ppc.json +++ b/advisories/github-reviewed/2024/01/GHSA-c8v3-jhv9-4ppc/GHSA-c8v3-jhv9-4ppc.json @@ -3,14 +3,10 @@ "id": "GHSA-c8v3-jhv9-4ppc", "modified": "2024-01-23T20:10:48Z", "published": "2024-01-23T20:10:48Z", - "aliases": [ - - ], + "aliases": [], "summary": "Use-after-free when setting the locale", "details": "Version 3.0.0 introduced an `AtomicStr` type, that is used to store the current locale. It stores the locale as a raw pointer to an `Arc`. The locale can be read with `AtomicStr::as_str()`. `AtomicStr::as_str()` does not increment the usage counter of the `Arc`.\n\nIf the locale is changed in one thread, another thread can have a stale -- possibly already freed -- reference to the stored string.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/01/GHSA-g47j-3m2m-74qv/GHSA-g47j-3m2m-74qv.json b/advisories/github-reviewed/2024/01/GHSA-g47j-3m2m-74qv/GHSA-g47j-3m2m-74qv.json index ec452c0ee7f..16b74a509a2 100644 --- a/advisories/github-reviewed/2024/01/GHSA-g47j-3m2m-74qv/GHSA-g47j-3m2m-74qv.json +++ b/advisories/github-reviewed/2024/01/GHSA-g47j-3m2m-74qv/GHSA-g47j-3m2m-74qv.json @@ -4,9 +4,7 @@ "modified": "2024-01-23T21:30:53Z", "published": "2024-01-04T21:30:24Z", "withdrawn": "2024-01-05T15:32:43Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: httparty has multipart/form-data request tampering vulnerability", "details": "### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-5pq7-52mg-hr42. This link is maintained to preserve external references.\n\n### Original Description\nhttparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames being written.\n\n", "severity": [ diff --git a/advisories/github-reviewed/2024/03/GHSA-6pwg-gg6j-5crm/GHSA-6pwg-gg6j-5crm.json b/advisories/github-reviewed/2024/03/GHSA-6pwg-gg6j-5crm/GHSA-6pwg-gg6j-5crm.json index fed66f6b835..c30f9132206 100644 --- a/advisories/github-reviewed/2024/03/GHSA-6pwg-gg6j-5crm/GHSA-6pwg-gg6j-5crm.json +++ b/advisories/github-reviewed/2024/03/GHSA-6pwg-gg6j-5crm/GHSA-6pwg-gg6j-5crm.json @@ -8,9 +8,7 @@ ], "summary": "Ignite Realtime Openfire privilege escalation vulnerability", "details": "An issue in Ignite Realtime Openfire v.4.8.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/03/GHSA-87qp-7cw8-8q9c/GHSA-87qp-7cw8-8q9c.json b/advisories/github-reviewed/2024/03/GHSA-87qp-7cw8-8q9c/GHSA-87qp-7cw8-8q9c.json index 9fac622640d..536402e4ee3 100644 --- a/advisories/github-reviewed/2024/03/GHSA-87qp-7cw8-8q9c/GHSA-87qp-7cw8-8q9c.json +++ b/advisories/github-reviewed/2024/03/GHSA-87qp-7cw8-8q9c/GHSA-87qp-7cw8-8q9c.json @@ -4,9 +4,7 @@ "modified": "2024-03-27T21:57:36Z", "published": "2024-03-25T06:30:24Z", "withdrawn": "2024-03-27T21:57:36Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: web3-utils Prototype Pollution vulnerability", "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-2g4c-8fpm-c46v. This link is maintained to preserve external references.\n\n## Original Description\nVersions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge.\nAn attacker can manipulate an object's prototype, potentially leading to the alteration of the behavior of all objects inheriting from the affected prototype by passing specially crafted input to these functions.", "severity": [ diff --git a/advisories/unreviewed/2022/02/GHSA-4wcp-phx2-2w2x/GHSA-4wcp-phx2-2w2x.json b/advisories/unreviewed/2022/02/GHSA-4wcp-phx2-2w2x/GHSA-4wcp-phx2-2w2x.json index ac37dc4cbda..0a75742243d 100644 --- a/advisories/unreviewed/2022/02/GHSA-4wcp-phx2-2w2x/GHSA-4wcp-phx2-2w2x.json +++ b/advisories/unreviewed/2022/02/GHSA-4wcp-phx2-2w2x/GHSA-4wcp-phx2-2w2x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-7c99-6mgq-969f/GHSA-7c99-6mgq-969f.json b/advisories/unreviewed/2022/02/GHSA-7c99-6mgq-969f/GHSA-7c99-6mgq-969f.json index 35b3e27664a..b1348a2b328 100644 --- a/advisories/unreviewed/2022/02/GHSA-7c99-6mgq-969f/GHSA-7c99-6mgq-969f.json +++ b/advisories/unreviewed/2022/02/GHSA-7c99-6mgq-969f/GHSA-7c99-6mgq-969f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-78r5-7x2j-c24f/GHSA-78r5-7x2j-c24f.json b/advisories/unreviewed/2022/03/GHSA-78r5-7x2j-c24f/GHSA-78r5-7x2j-c24f.json index 5e3a19b79f6..06196296a9d 100644 --- a/advisories/unreviewed/2022/03/GHSA-78r5-7x2j-c24f/GHSA-78r5-7x2j-c24f.json +++ b/advisories/unreviewed/2022/03/GHSA-78r5-7x2j-c24f/GHSA-78r5-7x2j-c24f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-fj9g-qqr2-c949/GHSA-fj9g-qqr2-c949.json b/advisories/unreviewed/2022/03/GHSA-fj9g-qqr2-c949/GHSA-fj9g-qqr2-c949.json index fd7d2df46a0..b6fa43ff2ad 100644 --- a/advisories/unreviewed/2022/03/GHSA-fj9g-qqr2-c949/GHSA-fj9g-qqr2-c949.json +++ b/advisories/unreviewed/2022/03/GHSA-fj9g-qqr2-c949/GHSA-fj9g-qqr2-c949.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-rwc4-w23c-gc77/GHSA-rwc4-w23c-gc77.json b/advisories/unreviewed/2022/03/GHSA-rwc4-w23c-gc77/GHSA-rwc4-w23c-gc77.json index 2276a02860b..58e90611eca 100644 --- a/advisories/unreviewed/2022/03/GHSA-rwc4-w23c-gc77/GHSA-rwc4-w23c-gc77.json +++ b/advisories/unreviewed/2022/03/GHSA-rwc4-w23c-gc77/GHSA-rwc4-w23c-gc77.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3f48-pqw5-hg2j/GHSA-3f48-pqw5-hg2j.json b/advisories/unreviewed/2022/04/GHSA-3f48-pqw5-hg2j/GHSA-3f48-pqw5-hg2j.json index 4a2e53270db..0a4f55a654c 100644 --- a/advisories/unreviewed/2022/04/GHSA-3f48-pqw5-hg2j/GHSA-3f48-pqw5-hg2j.json +++ b/advisories/unreviewed/2022/04/GHSA-3f48-pqw5-hg2j/GHSA-3f48-pqw5-hg2j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8cc8-674c-8354/GHSA-8cc8-674c-8354.json b/advisories/unreviewed/2022/04/GHSA-8cc8-674c-8354/GHSA-8cc8-674c-8354.json index dff419ee462..e46b73cf231 100644 --- a/advisories/unreviewed/2022/04/GHSA-8cc8-674c-8354/GHSA-8cc8-674c-8354.json +++ b/advisories/unreviewed/2022/04/GHSA-8cc8-674c-8354/GHSA-8cc8-674c-8354.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-hmc6-55c7-7cq8/GHSA-hmc6-55c7-7cq8.json b/advisories/unreviewed/2022/04/GHSA-hmc6-55c7-7cq8/GHSA-hmc6-55c7-7cq8.json index 778c2b265a3..80cc559f28c 100644 --- a/advisories/unreviewed/2022/04/GHSA-hmc6-55c7-7cq8/GHSA-hmc6-55c7-7cq8.json +++ b/advisories/unreviewed/2022/04/GHSA-hmc6-55c7-7cq8/GHSA-hmc6-55c7-7cq8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-vgf4-3x2c-798r/GHSA-vgf4-3x2c-798r.json b/advisories/unreviewed/2022/04/GHSA-vgf4-3x2c-798r/GHSA-vgf4-3x2c-798r.json index ec746f04314..91833f6f27f 100644 --- a/advisories/unreviewed/2022/04/GHSA-vgf4-3x2c-798r/GHSA-vgf4-3x2c-798r.json +++ b/advisories/unreviewed/2022/04/GHSA-vgf4-3x2c-798r/GHSA-vgf4-3x2c-798r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-22w5-vw2x-wqp3/GHSA-22w5-vw2x-wqp3.json b/advisories/unreviewed/2022/05/GHSA-22w5-vw2x-wqp3/GHSA-22w5-vw2x-wqp3.json index 081bca87469..420593f4d0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-22w5-vw2x-wqp3/GHSA-22w5-vw2x-wqp3.json +++ b/advisories/unreviewed/2022/05/GHSA-22w5-vw2x-wqp3/GHSA-22w5-vw2x-wqp3.json @@ -7,12 +7,8 @@ "CVE-2011-5307" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in the PhotoSmash plugin 1.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-23w8-jvp8-xp5w/GHSA-23w8-jvp8-xp5w.json b/advisories/unreviewed/2022/05/GHSA-23w8-jvp8-xp5w/GHSA-23w8-jvp8-xp5w.json index 916dc37840a..80bef3a6f41 100644 --- a/advisories/unreviewed/2022/05/GHSA-23w8-jvp8-xp5w/GHSA-23w8-jvp8-xp5w.json +++ b/advisories/unreviewed/2022/05/GHSA-23w8-jvp8-xp5w/GHSA-23w8-jvp8-xp5w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2526-24jx-77pp/GHSA-2526-24jx-77pp.json b/advisories/unreviewed/2022/05/GHSA-2526-24jx-77pp/GHSA-2526-24jx-77pp.json index 24f91b1737a..e5bef5c5ec9 100644 --- a/advisories/unreviewed/2022/05/GHSA-2526-24jx-77pp/GHSA-2526-24jx-77pp.json +++ b/advisories/unreviewed/2022/05/GHSA-2526-24jx-77pp/GHSA-2526-24jx-77pp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-255j-gp8h-r5hh/GHSA-255j-gp8h-r5hh.json b/advisories/unreviewed/2022/05/GHSA-255j-gp8h-r5hh/GHSA-255j-gp8h-r5hh.json index 93c634e0f55..66278d5103b 100644 --- a/advisories/unreviewed/2022/05/GHSA-255j-gp8h-r5hh/GHSA-255j-gp8h-r5hh.json +++ b/advisories/unreviewed/2022/05/GHSA-255j-gp8h-r5hh/GHSA-255j-gp8h-r5hh.json @@ -7,12 +7,8 @@ "CVE-2014-9049" ], "details": "The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26g3-v5f7-pgv9/GHSA-26g3-v5f7-pgv9.json b/advisories/unreviewed/2022/05/GHSA-26g3-v5f7-pgv9/GHSA-26g3-v5f7-pgv9.json index fd9efe0a66b..5702119329c 100644 --- a/advisories/unreviewed/2022/05/GHSA-26g3-v5f7-pgv9/GHSA-26g3-v5f7-pgv9.json +++ b/advisories/unreviewed/2022/05/GHSA-26g3-v5f7-pgv9/GHSA-26g3-v5f7-pgv9.json @@ -7,12 +7,8 @@ "CVE-2014-3645" ], "details": "arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26j6-35gg-48f6/GHSA-26j6-35gg-48f6.json b/advisories/unreviewed/2022/05/GHSA-26j6-35gg-48f6/GHSA-26j6-35gg-48f6.json index 58ccee165e7..b8dfe4cfdd1 100644 --- a/advisories/unreviewed/2022/05/GHSA-26j6-35gg-48f6/GHSA-26j6-35gg-48f6.json +++ b/advisories/unreviewed/2022/05/GHSA-26j6-35gg-48f6/GHSA-26j6-35gg-48f6.json @@ -7,12 +7,8 @@ "CVE-2011-5308" ], "details": "Multiple SQL injection vulnerabilities in cdnvote-post.php in the cdnvote plugin before 0.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) cdnvote_post_id or (2) cdnvote_point parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26p7-g5hj-f2q3/GHSA-26p7-g5hj-f2q3.json b/advisories/unreviewed/2022/05/GHSA-26p7-g5hj-f2q3/GHSA-26p7-g5hj-f2q3.json index c07776ced3d..dbbd958fa38 100644 --- a/advisories/unreviewed/2022/05/GHSA-26p7-g5hj-f2q3/GHSA-26p7-g5hj-f2q3.json +++ b/advisories/unreviewed/2022/05/GHSA-26p7-g5hj-f2q3/GHSA-26p7-g5hj-f2q3.json @@ -7,12 +7,8 @@ "CVE-2015-4525" ], "details": "The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26x7-rj23-279v/GHSA-26x7-rj23-279v.json b/advisories/unreviewed/2022/05/GHSA-26x7-rj23-279v/GHSA-26x7-rj23-279v.json index 61cef2fae05..a22935ee6ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-26x7-rj23-279v/GHSA-26x7-rj23-279v.json +++ b/advisories/unreviewed/2022/05/GHSA-26x7-rj23-279v/GHSA-26x7-rj23-279v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-26xh-4mrc-q8jf/GHSA-26xh-4mrc-q8jf.json b/advisories/unreviewed/2022/05/GHSA-26xh-4mrc-q8jf/GHSA-26xh-4mrc-q8jf.json index fd2d39646fe..372437d8178 100644 --- a/advisories/unreviewed/2022/05/GHSA-26xh-4mrc-q8jf/GHSA-26xh-4mrc-q8jf.json +++ b/advisories/unreviewed/2022/05/GHSA-26xh-4mrc-q8jf/GHSA-26xh-4mrc-q8jf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-27xp-xm97-jqhm/GHSA-27xp-xm97-jqhm.json b/advisories/unreviewed/2022/05/GHSA-27xp-xm97-jqhm/GHSA-27xp-xm97-jqhm.json index 3f8cfb4bbd8..deac0ae6d9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-27xp-xm97-jqhm/GHSA-27xp-xm97-jqhm.json +++ b/advisories/unreviewed/2022/05/GHSA-27xp-xm97-jqhm/GHSA-27xp-xm97-jqhm.json @@ -7,12 +7,8 @@ "CVE-2015-0889" ], "details": "KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vectors involving an article.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-28ch-34rw-p44w/GHSA-28ch-34rw-p44w.json b/advisories/unreviewed/2022/05/GHSA-28ch-34rw-p44w/GHSA-28ch-34rw-p44w.json index 3fd4d9f031a..8c8499de84d 100644 --- a/advisories/unreviewed/2022/05/GHSA-28ch-34rw-p44w/GHSA-28ch-34rw-p44w.json +++ b/advisories/unreviewed/2022/05/GHSA-28ch-34rw-p44w/GHSA-28ch-34rw-p44w.json @@ -7,12 +7,8 @@ "CVE-2011-5300" ], "details": "Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark PR16.1 allows remote attackers to hijack the authentication of administrators for requests that modify credentials via certain admin_ parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28vm-gc6v-5rwj/GHSA-28vm-gc6v-5rwj.json b/advisories/unreviewed/2022/05/GHSA-28vm-gc6v-5rwj/GHSA-28vm-gc6v-5rwj.json index 7027354a39e..c48bd4c3326 100644 --- a/advisories/unreviewed/2022/05/GHSA-28vm-gc6v-5rwj/GHSA-28vm-gc6v-5rwj.json +++ b/advisories/unreviewed/2022/05/GHSA-28vm-gc6v-5rwj/GHSA-28vm-gc6v-5rwj.json @@ -7,12 +7,8 @@ "CVE-2014-7539" ], "details": "The Zhang Zhijun Taiwan Visit 2014-06-25 (aka com.zizizzi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2968-xc5j-q436/GHSA-2968-xc5j-q436.json b/advisories/unreviewed/2022/05/GHSA-2968-xc5j-q436/GHSA-2968-xc5j-q436.json index 64e573bb5d3..1f5ae88a22b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2968-xc5j-q436/GHSA-2968-xc5j-q436.json +++ b/advisories/unreviewed/2022/05/GHSA-2968-xc5j-q436/GHSA-2968-xc5j-q436.json @@ -7,12 +7,8 @@ "CVE-2014-9046" ], "details": "The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c3p-p5cx-vpxj/GHSA-2c3p-p5cx-vpxj.json b/advisories/unreviewed/2022/05/GHSA-2c3p-p5cx-vpxj/GHSA-2c3p-p5cx-vpxj.json index d4b7ed42a3a..98f4d7674aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c3p-p5cx-vpxj/GHSA-2c3p-p5cx-vpxj.json +++ b/advisories/unreviewed/2022/05/GHSA-2c3p-p5cx-vpxj/GHSA-2c3p-p5cx-vpxj.json @@ -7,12 +7,8 @@ "CVE-2015-0883" ], "details": "SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2f85-775h-gh3c/GHSA-2f85-775h-gh3c.json b/advisories/unreviewed/2022/05/GHSA-2f85-775h-gh3c/GHSA-2f85-775h-gh3c.json index 13d1cf9dbd7..5bc353c733f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2f85-775h-gh3c/GHSA-2f85-775h-gh3c.json +++ b/advisories/unreviewed/2022/05/GHSA-2f85-775h-gh3c/GHSA-2f85-775h-gh3c.json @@ -7,12 +7,8 @@ "CVE-2015-0893" ], "details": "Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gv2-jvp7-24hf/GHSA-2gv2-jvp7-24hf.json b/advisories/unreviewed/2022/05/GHSA-2gv2-jvp7-24hf/GHSA-2gv2-jvp7-24hf.json index b4c4ab45f36..3f227d2db0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gv2-jvp7-24hf/GHSA-2gv2-jvp7-24hf.json +++ b/advisories/unreviewed/2022/05/GHSA-2gv2-jvp7-24hf/GHSA-2gv2-jvp7-24hf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2gw9-fcg7-wj2g/GHSA-2gw9-fcg7-wj2g.json b/advisories/unreviewed/2022/05/GHSA-2gw9-fcg7-wj2g/GHSA-2gw9-fcg7-wj2g.json index 0dd0735a6ab..8f563d3d31c 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gw9-fcg7-wj2g/GHSA-2gw9-fcg7-wj2g.json +++ b/advisories/unreviewed/2022/05/GHSA-2gw9-fcg7-wj2g/GHSA-2gw9-fcg7-wj2g.json @@ -7,12 +7,8 @@ "CVE-2014-9593" ], "details": "Apache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private keys via a listSslCerts API call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2h25-8p7c-58m2/GHSA-2h25-8p7c-58m2.json b/advisories/unreviewed/2022/05/GHSA-2h25-8p7c-58m2/GHSA-2h25-8p7c-58m2.json index 719a5c2eecd..5f24c910b07 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h25-8p7c-58m2/GHSA-2h25-8p7c-58m2.json +++ b/advisories/unreviewed/2022/05/GHSA-2h25-8p7c-58m2/GHSA-2h25-8p7c-58m2.json @@ -7,12 +7,8 @@ "CVE-2014-6302" ], "details": "The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2h78-fqf4-59qg/GHSA-2h78-fqf4-59qg.json b/advisories/unreviewed/2022/05/GHSA-2h78-fqf4-59qg/GHSA-2h78-fqf4-59qg.json index d9e208f18d0..468df18f615 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h78-fqf4-59qg/GHSA-2h78-fqf4-59qg.json +++ b/advisories/unreviewed/2022/05/GHSA-2h78-fqf4-59qg/GHSA-2h78-fqf4-59qg.json @@ -7,12 +7,8 @@ "CVE-2015-2849" ], "details": "SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2hf4-pxq2-63h5/GHSA-2hf4-pxq2-63h5.json b/advisories/unreviewed/2022/05/GHSA-2hf4-pxq2-63h5/GHSA-2hf4-pxq2-63h5.json index c5c4bc55d40..71de33db2f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hf4-pxq2-63h5/GHSA-2hf4-pxq2-63h5.json +++ b/advisories/unreviewed/2022/05/GHSA-2hf4-pxq2-63h5/GHSA-2hf4-pxq2-63h5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2hp3-89rw-p99p/GHSA-2hp3-89rw-p99p.json b/advisories/unreviewed/2022/05/GHSA-2hp3-89rw-p99p/GHSA-2hp3-89rw-p99p.json index bc28261766b..4c3861e9b50 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hp3-89rw-p99p/GHSA-2hp3-89rw-p99p.json +++ b/advisories/unreviewed/2022/05/GHSA-2hp3-89rw-p99p/GHSA-2hp3-89rw-p99p.json @@ -7,12 +7,8 @@ "CVE-2015-2086" ], "details": "Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2mc6-x8h4-86rp/GHSA-2mc6-x8h4-86rp.json b/advisories/unreviewed/2022/05/GHSA-2mc6-x8h4-86rp/GHSA-2mc6-x8h4-86rp.json index 046e77cd4ff..92406323019 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mc6-x8h4-86rp/GHSA-2mc6-x8h4-86rp.json +++ b/advisories/unreviewed/2022/05/GHSA-2mc6-x8h4-86rp/GHSA-2mc6-x8h4-86rp.json @@ -7,12 +7,8 @@ "CVE-2014-8414" ], "details": "ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes, which allows remote attackers to cause a denial of service (channel hang and memory consumption) by causing transitions to be delayed, which triggers a state change from hung up to waiting for media.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2p99-xhhp-cvww/GHSA-2p99-xhhp-cvww.json b/advisories/unreviewed/2022/05/GHSA-2p99-xhhp-cvww/GHSA-2p99-xhhp-cvww.json index 7f4d24455fc..bec5fda27c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p99-xhhp-cvww/GHSA-2p99-xhhp-cvww.json +++ b/advisories/unreviewed/2022/05/GHSA-2p99-xhhp-cvww/GHSA-2p99-xhhp-cvww.json @@ -7,12 +7,8 @@ "CVE-2014-8927" ], "details": "Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service (CPU consumption or application crash) via a crafted XML query, a different vulnerability than CVE-2014-8926.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2phc-7cq6-m4fq/GHSA-2phc-7cq6-m4fq.json b/advisories/unreviewed/2022/05/GHSA-2phc-7cq6-m4fq/GHSA-2phc-7cq6-m4fq.json index eaf56c6164c..7e1e05fed3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2phc-7cq6-m4fq/GHSA-2phc-7cq6-m4fq.json +++ b/advisories/unreviewed/2022/05/GHSA-2phc-7cq6-m4fq/GHSA-2phc-7cq6-m4fq.json @@ -7,12 +7,8 @@ "CVE-2015-0941" ], "details": "The Inetc plugin for Nullsoft Scriptable Install System (NSIS), as used in CERT/CC Failure Observation Engine (FOE) and other products, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and possibly execute arbitrary code by sending a crafted certificate in a download session for Windows executable files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2pr3-45mh-ph8r/GHSA-2pr3-45mh-ph8r.json b/advisories/unreviewed/2022/05/GHSA-2pr3-45mh-ph8r/GHSA-2pr3-45mh-ph8r.json index 3cb5eb3c5d4..f07f48c38bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-2pr3-45mh-ph8r/GHSA-2pr3-45mh-ph8r.json +++ b/advisories/unreviewed/2022/05/GHSA-2pr3-45mh-ph8r/GHSA-2pr3-45mh-ph8r.json @@ -7,12 +7,8 @@ "CVE-2011-5301" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the story_url parameter to add_story.php, (2) the email parameter to editprofile.php, (3) the title parameter to adm/content_add.php, or (4) the username parameter to adm/admin_edit.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2pxm-qg5m-jmf9/GHSA-2pxm-qg5m-jmf9.json b/advisories/unreviewed/2022/05/GHSA-2pxm-qg5m-jmf9/GHSA-2pxm-qg5m-jmf9.json index e4a78faafe1..c6e27019fd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-2pxm-qg5m-jmf9/GHSA-2pxm-qg5m-jmf9.json +++ b/advisories/unreviewed/2022/05/GHSA-2pxm-qg5m-jmf9/GHSA-2pxm-qg5m-jmf9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2qf9-7qgg-cxxh/GHSA-2qf9-7qgg-cxxh.json b/advisories/unreviewed/2022/05/GHSA-2qf9-7qgg-cxxh/GHSA-2qf9-7qgg-cxxh.json index a482c82977e..5c35b10c519 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qf9-7qgg-cxxh/GHSA-2qf9-7qgg-cxxh.json +++ b/advisories/unreviewed/2022/05/GHSA-2qf9-7qgg-cxxh/GHSA-2qf9-7qgg-cxxh.json @@ -7,12 +7,8 @@ "CVE-2014-9041" ], "details": "The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2qgm-x7hp-jc9q/GHSA-2qgm-x7hp-jc9q.json b/advisories/unreviewed/2022/05/GHSA-2qgm-x7hp-jc9q/GHSA-2qgm-x7hp-jc9q.json index 6e47ac57904..2b543170f5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qgm-x7hp-jc9q/GHSA-2qgm-x7hp-jc9q.json +++ b/advisories/unreviewed/2022/05/GHSA-2qgm-x7hp-jc9q/GHSA-2qgm-x7hp-jc9q.json @@ -7,12 +7,8 @@ "CVE-2015-0722" ], "details": "The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service (process restart or device reload) via a flood of crafted IP packets, aka Bug ID CSCuj68952.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2rf7-3m77-hq9h/GHSA-2rf7-3m77-hq9h.json b/advisories/unreviewed/2022/05/GHSA-2rf7-3m77-hq9h/GHSA-2rf7-3m77-hq9h.json index 0a90781e8f1..8a204b625a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rf7-3m77-hq9h/GHSA-2rf7-3m77-hq9h.json +++ b/advisories/unreviewed/2022/05/GHSA-2rf7-3m77-hq9h/GHSA-2rf7-3m77-hq9h.json @@ -7,12 +7,8 @@ "CVE-2015-1479" ], "details": "SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rgm-7354-cfw6/GHSA-2rgm-7354-cfw6.json b/advisories/unreviewed/2022/05/GHSA-2rgm-7354-cfw6/GHSA-2rgm-7354-cfw6.json index ba4a0a5e3da..b57de0a3852 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rgm-7354-cfw6/GHSA-2rgm-7354-cfw6.json +++ b/advisories/unreviewed/2022/05/GHSA-2rgm-7354-cfw6/GHSA-2rgm-7354-cfw6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rm2-cr56-79w2/GHSA-2rm2-cr56-79w2.json b/advisories/unreviewed/2022/05/GHSA-2rm2-cr56-79w2/GHSA-2rm2-cr56-79w2.json index a10de2533df..b561c072a42 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rm2-cr56-79w2/GHSA-2rm2-cr56-79w2.json +++ b/advisories/unreviewed/2022/05/GHSA-2rm2-cr56-79w2/GHSA-2rm2-cr56-79w2.json @@ -7,12 +7,8 @@ "CVE-2014-0604" ], "details": "Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2vxj-2qq6-h8r7/GHSA-2vxj-2qq6-h8r7.json b/advisories/unreviewed/2022/05/GHSA-2vxj-2qq6-h8r7/GHSA-2vxj-2qq6-h8r7.json index e0be178a7ef..17771071cf7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vxj-2qq6-h8r7/GHSA-2vxj-2qq6-h8r7.json +++ b/advisories/unreviewed/2022/05/GHSA-2vxj-2qq6-h8r7/GHSA-2vxj-2qq6-h8r7.json @@ -7,12 +7,8 @@ "CVE-2015-1496" ], "details": "Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerService.exe, which allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2w58-g8q7-6hhx/GHSA-2w58-g8q7-6hhx.json b/advisories/unreviewed/2022/05/GHSA-2w58-g8q7-6hhx/GHSA-2w58-g8q7-6hhx.json index cf6cf8a49eb..0ec50f53054 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w58-g8q7-6hhx/GHSA-2w58-g8q7-6hhx.json +++ b/advisories/unreviewed/2022/05/GHSA-2w58-g8q7-6hhx/GHSA-2w58-g8q7-6hhx.json @@ -7,12 +7,8 @@ "CVE-2014-8384" ], "details": "The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2wcv-jc5c-753w/GHSA-2wcv-jc5c-753w.json b/advisories/unreviewed/2022/05/GHSA-2wcv-jc5c-753w/GHSA-2wcv-jc5c-753w.json index b8c0bda2a4b..862df975d47 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wcv-jc5c-753w/GHSA-2wcv-jc5c-753w.json +++ b/advisories/unreviewed/2022/05/GHSA-2wcv-jc5c-753w/GHSA-2wcv-jc5c-753w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2x3g-5wc5-pwch/GHSA-2x3g-5wc5-pwch.json b/advisories/unreviewed/2022/05/GHSA-2x3g-5wc5-pwch/GHSA-2x3g-5wc5-pwch.json index 80846c51939..a6fd9eb902c 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x3g-5wc5-pwch/GHSA-2x3g-5wc5-pwch.json +++ b/advisories/unreviewed/2022/05/GHSA-2x3g-5wc5-pwch/GHSA-2x3g-5wc5-pwch.json @@ -7,12 +7,8 @@ "CVE-2011-5297" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in TTChat 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter to default.php or (2) the username parameter to chat_form.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x77-gppq-9cj5/GHSA-2x77-gppq-9cj5.json b/advisories/unreviewed/2022/05/GHSA-2x77-gppq-9cj5/GHSA-2x77-gppq-9cj5.json index f04e0fd555e..0c83bdc4bd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x77-gppq-9cj5/GHSA-2x77-gppq-9cj5.json +++ b/advisories/unreviewed/2022/05/GHSA-2x77-gppq-9cj5/GHSA-2x77-gppq-9cj5.json @@ -7,12 +7,8 @@ "CVE-2015-1582" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via the appid parameter in a registration task to the default URI or remote administrators to inject arbitrary web script or HTML via the (2) asc_or_desc, (3) order_by, (4) page_number, (5) serch_or_not, or (6) search_events_by_title parameter in (a) the Spider_Facebook_manage page to wp-admin/admin.php or a (b) selectpagesforfacebook or (c) selectpostsforfacebook action to wp-admin/admin-ajax.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xc2-qjvp-7mf4/GHSA-2xc2-qjvp-7mf4.json b/advisories/unreviewed/2022/05/GHSA-2xc2-qjvp-7mf4/GHSA-2xc2-qjvp-7mf4.json index 4ecfbb189f9..91c4c5fb9b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xc2-qjvp-7mf4/GHSA-2xc2-qjvp-7mf4.json +++ b/advisories/unreviewed/2022/05/GHSA-2xc2-qjvp-7mf4/GHSA-2xc2-qjvp-7mf4.json @@ -7,12 +7,8 @@ "CVE-2015-0977" ], "details": "Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xg4-jx3q-qjrp/GHSA-2xg4-jx3q-qjrp.json b/advisories/unreviewed/2022/05/GHSA-2xg4-jx3q-qjrp/GHSA-2xg4-jx3q-qjrp.json index 9682e202d64..9c84df1958f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xg4-jx3q-qjrp/GHSA-2xg4-jx3q-qjrp.json +++ b/advisories/unreviewed/2022/05/GHSA-2xg4-jx3q-qjrp/GHSA-2xg4-jx3q-qjrp.json @@ -7,12 +7,8 @@ "CVE-2015-1315" ], "details": "Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-32vh-qxr3-mf7f/GHSA-32vh-qxr3-mf7f.json b/advisories/unreviewed/2022/05/GHSA-32vh-qxr3-mf7f/GHSA-32vh-qxr3-mf7f.json index 2103944f349..0e13a763a7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-32vh-qxr3-mf7f/GHSA-32vh-qxr3-mf7f.json +++ b/advisories/unreviewed/2022/05/GHSA-32vh-qxr3-mf7f/GHSA-32vh-qxr3-mf7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-33fg-65f8-58pv/GHSA-33fg-65f8-58pv.json b/advisories/unreviewed/2022/05/GHSA-33fg-65f8-58pv/GHSA-33fg-65f8-58pv.json index b1c96d71a17..ba9fa1eea4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-33fg-65f8-58pv/GHSA-33fg-65f8-58pv.json +++ b/advisories/unreviewed/2022/05/GHSA-33fg-65f8-58pv/GHSA-33fg-65f8-58pv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-356h-vw92-46hh/GHSA-356h-vw92-46hh.json b/advisories/unreviewed/2022/05/GHSA-356h-vw92-46hh/GHSA-356h-vw92-46hh.json index 03f356a08e7..5499f549553 100644 --- a/advisories/unreviewed/2022/05/GHSA-356h-vw92-46hh/GHSA-356h-vw92-46hh.json +++ b/advisories/unreviewed/2022/05/GHSA-356h-vw92-46hh/GHSA-356h-vw92-46hh.json @@ -7,12 +7,8 @@ "CVE-2015-0930" ], "details": "The web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a100 has a hardcoded administrative password, which makes it easier for remote attackers to obtain access via an HTTP session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-35qx-m8hh-rrjv/GHSA-35qx-m8hh-rrjv.json b/advisories/unreviewed/2022/05/GHSA-35qx-m8hh-rrjv/GHSA-35qx-m8hh-rrjv.json index c4cf1db092b..21755b390fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-35qx-m8hh-rrjv/GHSA-35qx-m8hh-rrjv.json +++ b/advisories/unreviewed/2022/05/GHSA-35qx-m8hh-rrjv/GHSA-35qx-m8hh-rrjv.json @@ -7,12 +7,8 @@ "CVE-2014-1447" ], "details": "Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-365w-7g5c-m7q2/GHSA-365w-7g5c-m7q2.json b/advisories/unreviewed/2022/05/GHSA-365w-7g5c-m7q2/GHSA-365w-7g5c-m7q2.json index 8e56c19e544..ade6cbe2237 100644 --- a/advisories/unreviewed/2022/05/GHSA-365w-7g5c-m7q2/GHSA-365w-7g5c-m7q2.json +++ b/advisories/unreviewed/2022/05/GHSA-365w-7g5c-m7q2/GHSA-365w-7g5c-m7q2.json @@ -7,12 +7,8 @@ "CVE-2015-1402" ], "details": "Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36h4-8mh8-f386/GHSA-36h4-8mh8-f386.json b/advisories/unreviewed/2022/05/GHSA-36h4-8mh8-f386/GHSA-36h4-8mh8-f386.json index af0d4e2c7bf..0405fe7c91a 100644 --- a/advisories/unreviewed/2022/05/GHSA-36h4-8mh8-f386/GHSA-36h4-8mh8-f386.json +++ b/advisories/unreviewed/2022/05/GHSA-36h4-8mh8-f386/GHSA-36h4-8mh8-f386.json @@ -7,12 +7,8 @@ "CVE-2015-2048" ], "details": "Cross-site request forgery (CSRF) vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36v5-f5vm-q9j3/GHSA-36v5-f5vm-q9j3.json b/advisories/unreviewed/2022/05/GHSA-36v5-f5vm-q9j3/GHSA-36v5-f5vm-q9j3.json index b73ca8eb1b9..ea61a42381d 100644 --- a/advisories/unreviewed/2022/05/GHSA-36v5-f5vm-q9j3/GHSA-36v5-f5vm-q9j3.json +++ b/advisories/unreviewed/2022/05/GHSA-36v5-f5vm-q9j3/GHSA-36v5-f5vm-q9j3.json @@ -7,12 +7,8 @@ "CVE-2015-2184" ], "details": "ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls the phpinfo function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-374h-xqp9-v748/GHSA-374h-xqp9-v748.json b/advisories/unreviewed/2022/05/GHSA-374h-xqp9-v748/GHSA-374h-xqp9-v748.json index 037b417ecef..c26bd7494bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-374h-xqp9-v748/GHSA-374h-xqp9-v748.json +++ b/advisories/unreviewed/2022/05/GHSA-374h-xqp9-v748/GHSA-374h-xqp9-v748.json @@ -7,12 +7,8 @@ "CVE-2015-2969" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37q4-xqq6-qvgv/GHSA-37q4-xqq6-qvgv.json b/advisories/unreviewed/2022/05/GHSA-37q4-xqq6-qvgv/GHSA-37q4-xqq6-qvgv.json index db5ee9b7d02..0a6e4c7996e 100644 --- a/advisories/unreviewed/2022/05/GHSA-37q4-xqq6-qvgv/GHSA-37q4-xqq6-qvgv.json +++ b/advisories/unreviewed/2022/05/GHSA-37q4-xqq6-qvgv/GHSA-37q4-xqq6-qvgv.json @@ -7,12 +7,8 @@ "CVE-2014-9308" ], "details": "Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka WordPress Shopping Cart) plugin before 3.0.9 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in products/banners/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3fcf-g2vg-gpwm/GHSA-3fcf-g2vg-gpwm.json b/advisories/unreviewed/2022/05/GHSA-3fcf-g2vg-gpwm/GHSA-3fcf-g2vg-gpwm.json index a10e474a51f..14ee5498fb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fcf-g2vg-gpwm/GHSA-3fcf-g2vg-gpwm.json +++ b/advisories/unreviewed/2022/05/GHSA-3fcf-g2vg-gpwm/GHSA-3fcf-g2vg-gpwm.json @@ -7,12 +7,8 @@ "CVE-2015-1192" ], "details": "Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3fjj-qfv3-f9fj/GHSA-3fjj-qfv3-f9fj.json b/advisories/unreviewed/2022/05/GHSA-3fjj-qfv3-f9fj/GHSA-3fjj-qfv3-f9fj.json index 9841ce17783..c9c795a90e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fjj-qfv3-f9fj/GHSA-3fjj-qfv3-f9fj.json +++ b/advisories/unreviewed/2022/05/GHSA-3fjj-qfv3-f9fj/GHSA-3fjj-qfv3-f9fj.json @@ -7,12 +7,8 @@ "CVE-2014-9300" ], "details": "Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition before 5.0.a allows remote attackers to hijack the authentication of users for requests that access unauthorized URLs and obtain user credentials via a URL in the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hrm-jr5c-jm96/GHSA-3hrm-jr5c-jm96.json b/advisories/unreviewed/2022/05/GHSA-3hrm-jr5c-jm96/GHSA-3hrm-jr5c-jm96.json index 3910c56f0a0..4ccef7f1d85 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hrm-jr5c-jm96/GHSA-3hrm-jr5c-jm96.json +++ b/advisories/unreviewed/2022/05/GHSA-3hrm-jr5c-jm96/GHSA-3hrm-jr5c-jm96.json @@ -7,12 +7,8 @@ "CVE-2015-0146" ], "details": "IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended document-access restrictions and obtain sensitive information via a crafted search query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3jwg-r279-2xj2/GHSA-3jwg-r279-2xj2.json b/advisories/unreviewed/2022/05/GHSA-3jwg-r279-2xj2/GHSA-3jwg-r279-2xj2.json index 64b57d743b8..ba6ab32834a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jwg-r279-2xj2/GHSA-3jwg-r279-2xj2.json +++ b/advisories/unreviewed/2022/05/GHSA-3jwg-r279-2xj2/GHSA-3jwg-r279-2xj2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mp2-6574-pq2h/GHSA-3mp2-6574-pq2h.json b/advisories/unreviewed/2022/05/GHSA-3mp2-6574-pq2h/GHSA-3mp2-6574-pq2h.json index 0699105ca49..3d5f7a661e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mp2-6574-pq2h/GHSA-3mp2-6574-pq2h.json +++ b/advisories/unreviewed/2022/05/GHSA-3mp2-6574-pq2h/GHSA-3mp2-6574-pq2h.json @@ -7,12 +7,8 @@ "CVE-2014-5428" ], "details": "Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to execute arbitrary code by uploading a shell script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3mxr-r8gm-qxvv/GHSA-3mxr-r8gm-qxvv.json b/advisories/unreviewed/2022/05/GHSA-3mxr-r8gm-qxvv/GHSA-3mxr-r8gm-qxvv.json index 696470f462e..fade1219133 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mxr-r8gm-qxvv/GHSA-3mxr-r8gm-qxvv.json +++ b/advisories/unreviewed/2022/05/GHSA-3mxr-r8gm-qxvv/GHSA-3mxr-r8gm-qxvv.json @@ -7,12 +7,8 @@ "CVE-2014-0154" ], "details": "oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3p5h-4qjv-qqvw/GHSA-3p5h-4qjv-qqvw.json b/advisories/unreviewed/2022/05/GHSA-3p5h-4qjv-qqvw/GHSA-3p5h-4qjv-qqvw.json index 70e0df29c49..93043066dc7 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p5h-4qjv-qqvw/GHSA-3p5h-4qjv-qqvw.json +++ b/advisories/unreviewed/2022/05/GHSA-3p5h-4qjv-qqvw/GHSA-3p5h-4qjv-qqvw.json @@ -7,12 +7,8 @@ "CVE-2014-100037" ], "details": "Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to archives/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pf4-qj7m-gfhw/GHSA-3pf4-qj7m-gfhw.json b/advisories/unreviewed/2022/05/GHSA-3pf4-qj7m-gfhw/GHSA-3pf4-qj7m-gfhw.json index 644079e3a82..cc07132fdd9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pf4-qj7m-gfhw/GHSA-3pf4-qj7m-gfhw.json +++ b/advisories/unreviewed/2022/05/GHSA-3pf4-qj7m-gfhw/GHSA-3pf4-qj7m-gfhw.json @@ -7,12 +7,8 @@ "CVE-2015-0676" ], "details": "The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 before 8.4(7.28), 8.5 before 8.5(1.24), 8.6 before 8.6(1.17), 8.7 before 8.7(1.16), 9.0 before 9.0(4.33), 9.1 before 9.1(6.1), 9.2 before 9.2(3.4), and 9.3 before 9.3(3) allows man-in-the-middle attackers to cause a denial of service (memory consumption or device outage) by triggering outbound DNS queries and then sending crafted responses to these queries, aka Bug ID CSCuq77655.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pfx-7985-7wqj/GHSA-3pfx-7985-7wqj.json b/advisories/unreviewed/2022/05/GHSA-3pfx-7985-7wqj/GHSA-3pfx-7985-7wqj.json index 4fbd4af2932..8841d4cefe3 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pfx-7985-7wqj/GHSA-3pfx-7985-7wqj.json +++ b/advisories/unreviewed/2022/05/GHSA-3pfx-7985-7wqj/GHSA-3pfx-7985-7wqj.json @@ -7,12 +7,8 @@ "CVE-2014-9561" ], "details": "Cross-site scripting (XSS) vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to inject arbitrary web script or HTML via the post parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q4p-j7gc-q3r2/GHSA-3q4p-j7gc-q3r2.json b/advisories/unreviewed/2022/05/GHSA-3q4p-j7gc-q3r2/GHSA-3q4p-j7gc-q3r2.json index 7a4406c95ed..ac08d917d03 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q4p-j7gc-q3r2/GHSA-3q4p-j7gc-q3r2.json +++ b/advisories/unreviewed/2022/05/GHSA-3q4p-j7gc-q3r2/GHSA-3q4p-j7gc-q3r2.json @@ -7,12 +7,8 @@ "CVE-2014-6301" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the tables-management module in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r5q-837q-4j58/GHSA-3r5q-837q-4j58.json b/advisories/unreviewed/2022/05/GHSA-3r5q-837q-4j58/GHSA-3r5q-837q-4j58.json index 2c113e412c0..947ccd7e6ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r5q-837q-4j58/GHSA-3r5q-837q-4j58.json +++ b/advisories/unreviewed/2022/05/GHSA-3r5q-837q-4j58/GHSA-3r5q-837q-4j58.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3r95-9fm6-xqcf/GHSA-3r95-9fm6-xqcf.json b/advisories/unreviewed/2022/05/GHSA-3r95-9fm6-xqcf/GHSA-3r95-9fm6-xqcf.json index 66baebb8a90..6cd5002ece5 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r95-9fm6-xqcf/GHSA-3r95-9fm6-xqcf.json +++ b/advisories/unreviewed/2022/05/GHSA-3r95-9fm6-xqcf/GHSA-3r95-9fm6-xqcf.json @@ -7,12 +7,8 @@ "CVE-2013-6436" ], "details": "The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) via a guest in the shutdown status, as demonstrated by the \"virsh memtune\" command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3rc4-q7c3-jfpm/GHSA-3rc4-q7c3-jfpm.json b/advisories/unreviewed/2022/05/GHSA-3rc4-q7c3-jfpm/GHSA-3rc4-q7c3-jfpm.json index 3ac0d78ee4e..cf57d5f240c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rc4-q7c3-jfpm/GHSA-3rc4-q7c3-jfpm.json +++ b/advisories/unreviewed/2022/05/GHSA-3rc4-q7c3-jfpm/GHSA-3rc4-q7c3-jfpm.json @@ -7,12 +7,8 @@ "CVE-2015-0132" ], "details": "The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before 4.0.7 iFix3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3vpx-4fr4-h263/GHSA-3vpx-4fr4-h263.json b/advisories/unreviewed/2022/05/GHSA-3vpx-4fr4-h263/GHSA-3vpx-4fr4-h263.json index 3fbf503b7f9..5cf6b79aa19 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vpx-4fr4-h263/GHSA-3vpx-4fr4-h263.json +++ b/advisories/unreviewed/2022/05/GHSA-3vpx-4fr4-h263/GHSA-3vpx-4fr4-h263.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3vr7-3mpv-x63w/GHSA-3vr7-3mpv-x63w.json b/advisories/unreviewed/2022/05/GHSA-3vr7-3mpv-x63w/GHSA-3vr7-3mpv-x63w.json index 7b70491206e..8672b4c9443 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vr7-3mpv-x63w/GHSA-3vr7-3mpv-x63w.json +++ b/advisories/unreviewed/2022/05/GHSA-3vr7-3mpv-x63w/GHSA-3vr7-3mpv-x63w.json @@ -7,12 +7,8 @@ "CVE-2015-0875" ], "details": "The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file containing input data from the user, which allows attackers to obtain sensitive information by reading a file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3w3h-xp3m-9w36/GHSA-3w3h-xp3m-9w36.json b/advisories/unreviewed/2022/05/GHSA-3w3h-xp3m-9w36/GHSA-3w3h-xp3m-9w36.json index e8513c6c2ca..fce8a8ea901 100644 --- a/advisories/unreviewed/2022/05/GHSA-3w3h-xp3m-9w36/GHSA-3w3h-xp3m-9w36.json +++ b/advisories/unreviewed/2022/05/GHSA-3w3h-xp3m-9w36/GHSA-3w3h-xp3m-9w36.json @@ -7,12 +7,8 @@ "CVE-2014-10022" ], "details": "Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3x78-7j32-qc4w/GHSA-3x78-7j32-qc4w.json b/advisories/unreviewed/2022/05/GHSA-3x78-7j32-qc4w/GHSA-3x78-7j32-qc4w.json index e91342911e2..95c20f2fe67 100644 --- a/advisories/unreviewed/2022/05/GHSA-3x78-7j32-qc4w/GHSA-3x78-7j32-qc4w.json +++ b/advisories/unreviewed/2022/05/GHSA-3x78-7j32-qc4w/GHSA-3x78-7j32-qc4w.json @@ -7,12 +7,8 @@ "CVE-2015-1308" ], "details": "kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-424c-xcc5-xgcj/GHSA-424c-xcc5-xgcj.json b/advisories/unreviewed/2022/05/GHSA-424c-xcc5-xgcj/GHSA-424c-xcc5-xgcj.json index ebb9186e006..ade11bbc036 100644 --- a/advisories/unreviewed/2022/05/GHSA-424c-xcc5-xgcj/GHSA-424c-xcc5-xgcj.json +++ b/advisories/unreviewed/2022/05/GHSA-424c-xcc5-xgcj/GHSA-424c-xcc5-xgcj.json @@ -7,12 +7,8 @@ "CVE-2015-1398" ], "details": "Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote authenticated users to include and execute certain PHP files via (1) .. (dot dot) sequences in the PATH_INFO to index.php or (2) vectors involving a block value in the ___directive parameter to the Cms_Wysiwyg controller in the Adminhtml module, related to the blockDirective function and the auto loading mechanism. NOTE: vector 2 might not cross privilege boundaries, since administrators might already have the privileges to execute code and upload files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4362-8cgf-69g7/GHSA-4362-8cgf-69g7.json b/advisories/unreviewed/2022/05/GHSA-4362-8cgf-69g7/GHSA-4362-8cgf-69g7.json index f9837afcf19..160507cc1f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-4362-8cgf-69g7/GHSA-4362-8cgf-69g7.json +++ b/advisories/unreviewed/2022/05/GHSA-4362-8cgf-69g7/GHSA-4362-8cgf-69g7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-436f-chr9-2p6r/GHSA-436f-chr9-2p6r.json b/advisories/unreviewed/2022/05/GHSA-436f-chr9-2p6r/GHSA-436f-chr9-2p6r.json index 5fb5b4340cf..0fe24b295b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-436f-chr9-2p6r/GHSA-436f-chr9-2p6r.json +++ b/advisories/unreviewed/2022/05/GHSA-436f-chr9-2p6r/GHSA-436f-chr9-2p6r.json @@ -7,12 +7,8 @@ "CVE-2014-9197" ], "details": "The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-43fj-2mp7-xmm4/GHSA-43fj-2mp7-xmm4.json b/advisories/unreviewed/2022/05/GHSA-43fj-2mp7-xmm4/GHSA-43fj-2mp7-xmm4.json index 0d1313c82a2..d01e8d1656d 100644 --- a/advisories/unreviewed/2022/05/GHSA-43fj-2mp7-xmm4/GHSA-43fj-2mp7-xmm4.json +++ b/advisories/unreviewed/2022/05/GHSA-43fj-2mp7-xmm4/GHSA-43fj-2mp7-xmm4.json @@ -7,12 +7,8 @@ "CVE-2015-0913" ], "details": "Cross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-447v-97c3-8w6x/GHSA-447v-97c3-8w6x.json b/advisories/unreviewed/2022/05/GHSA-447v-97c3-8w6x/GHSA-447v-97c3-8w6x.json index 5e7ba666ad0..a8e00c03d34 100644 --- a/advisories/unreviewed/2022/05/GHSA-447v-97c3-8w6x/GHSA-447v-97c3-8w6x.json +++ b/advisories/unreviewed/2022/05/GHSA-447v-97c3-8w6x/GHSA-447v-97c3-8w6x.json @@ -7,12 +7,8 @@ "CVE-2015-0925" ], "details": "The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4559-h45q-86vm/GHSA-4559-h45q-86vm.json b/advisories/unreviewed/2022/05/GHSA-4559-h45q-86vm/GHSA-4559-h45q-86vm.json index b9e55b68164..8d5a6ba9dce 100644 --- a/advisories/unreviewed/2022/05/GHSA-4559-h45q-86vm/GHSA-4559-h45q-86vm.json +++ b/advisories/unreviewed/2022/05/GHSA-4559-h45q-86vm/GHSA-4559-h45q-86vm.json @@ -7,12 +7,8 @@ "CVE-2015-2970" ], "details": "index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-45x6-999p-rm3h/GHSA-45x6-999p-rm3h.json b/advisories/unreviewed/2022/05/GHSA-45x6-999p-rm3h/GHSA-45x6-999p-rm3h.json index bda20d71eac..f8ba8c1c22a 100644 --- a/advisories/unreviewed/2022/05/GHSA-45x6-999p-rm3h/GHSA-45x6-999p-rm3h.json +++ b/advisories/unreviewed/2022/05/GHSA-45x6-999p-rm3h/GHSA-45x6-999p-rm3h.json @@ -7,12 +7,8 @@ "CVE-2014-9042" ], "details": "Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote authenticated users to inject arbitrary web script or HTML by importing a link with an unspecified protocol. NOTE: this can be leveraged by remote attackers using CVE-2014-9041.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-46hx-7mg5-6vx7/GHSA-46hx-7mg5-6vx7.json b/advisories/unreviewed/2022/05/GHSA-46hx-7mg5-6vx7/GHSA-46hx-7mg5-6vx7.json index c4bc0b154ae..6dfcc0293ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-46hx-7mg5-6vx7/GHSA-46hx-7mg5-6vx7.json +++ b/advisories/unreviewed/2022/05/GHSA-46hx-7mg5-6vx7/GHSA-46hx-7mg5-6vx7.json @@ -7,12 +7,8 @@ "CVE-2014-3653" ], "details": "Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-48fp-5r97-g5gv/GHSA-48fp-5r97-g5gv.json b/advisories/unreviewed/2022/05/GHSA-48fp-5r97-g5gv/GHSA-48fp-5r97-g5gv.json index 94f8347562c..fa278da9fc2 100644 --- a/advisories/unreviewed/2022/05/GHSA-48fp-5r97-g5gv/GHSA-48fp-5r97-g5gv.json +++ b/advisories/unreviewed/2022/05/GHSA-48fp-5r97-g5gv/GHSA-48fp-5r97-g5gv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -51,9 +49,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-48gc-8h5h-9m7v/GHSA-48gc-8h5h-9m7v.json b/advisories/unreviewed/2022/05/GHSA-48gc-8h5h-9m7v/GHSA-48gc-8h5h-9m7v.json index 2b9e0399d6a..9f4e3a5ebce 100644 --- a/advisories/unreviewed/2022/05/GHSA-48gc-8h5h-9m7v/GHSA-48gc-8h5h-9m7v.json +++ b/advisories/unreviewed/2022/05/GHSA-48gc-8h5h-9m7v/GHSA-48gc-8h5h-9m7v.json @@ -7,12 +7,8 @@ "CVE-2014-9498" ], "details": "Cross-site scripting (XSS) vulnerability in the Webform Invitation module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.4 for Drupal allows remote authenticated users with the Webform: Create new content, Webform: Edit own content, or Webform: Edit any content permission to inject arbitrary web script or HTML via a node title.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49f2-jmg7-87jc/GHSA-49f2-jmg7-87jc.json b/advisories/unreviewed/2022/05/GHSA-49f2-jmg7-87jc/GHSA-49f2-jmg7-87jc.json index 1ff413beb2f..32a2bdd84ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-49f2-jmg7-87jc/GHSA-49f2-jmg7-87jc.json +++ b/advisories/unreviewed/2022/05/GHSA-49f2-jmg7-87jc/GHSA-49f2-jmg7-87jc.json @@ -7,12 +7,8 @@ "CVE-2011-5309" ], "details": "Cross-site scripting (XSS) vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49v5-72w5-rv6v/GHSA-49v5-72w5-rv6v.json b/advisories/unreviewed/2022/05/GHSA-49v5-72w5-rv6v/GHSA-49v5-72w5-rv6v.json index af3254beaa5..6a92ff6d7e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-49v5-72w5-rv6v/GHSA-49v5-72w5-rv6v.json +++ b/advisories/unreviewed/2022/05/GHSA-49v5-72w5-rv6v/GHSA-49v5-72w5-rv6v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4c8j-w686-c2jw/GHSA-4c8j-w686-c2jw.json b/advisories/unreviewed/2022/05/GHSA-4c8j-w686-c2jw/GHSA-4c8j-w686-c2jw.json index 0391232d726..3cb64927920 100644 --- a/advisories/unreviewed/2022/05/GHSA-4c8j-w686-c2jw/GHSA-4c8j-w686-c2jw.json +++ b/advisories/unreviewed/2022/05/GHSA-4c8j-w686-c2jw/GHSA-4c8j-w686-c2jw.json @@ -7,12 +7,8 @@ "CVE-2013-6456" ], "details": "The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to \"paths under /proc/$PID/root\" and the virInitctlSetRunLevel function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4chp-8xpr-5v25/GHSA-4chp-8xpr-5v25.json b/advisories/unreviewed/2022/05/GHSA-4chp-8xpr-5v25/GHSA-4chp-8xpr-5v25.json index 12c2be7e902..a41f09cc8ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-4chp-8xpr-5v25/GHSA-4chp-8xpr-5v25.json +++ b/advisories/unreviewed/2022/05/GHSA-4chp-8xpr-5v25/GHSA-4chp-8xpr-5v25.json @@ -7,12 +7,8 @@ "CVE-2015-1569" ], "details": "Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4fjr-9g6q-8mgq/GHSA-4fjr-9g6q-8mgq.json b/advisories/unreviewed/2022/05/GHSA-4fjr-9g6q-8mgq/GHSA-4fjr-9g6q-8mgq.json index d49b4283697..a32b9df8746 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fjr-9g6q-8mgq/GHSA-4fjr-9g6q-8mgq.json +++ b/advisories/unreviewed/2022/05/GHSA-4fjr-9g6q-8mgq/GHSA-4fjr-9g6q-8mgq.json @@ -7,12 +7,8 @@ "CVE-2011-5293" ], "details": "The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fmg-h3g8-q9j8/GHSA-4fmg-h3g8-q9j8.json b/advisories/unreviewed/2022/05/GHSA-4fmg-h3g8-q9j8/GHSA-4fmg-h3g8-q9j8.json index f81f7214f46..518ce95b88c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fmg-h3g8-q9j8/GHSA-4fmg-h3g8-q9j8.json +++ b/advisories/unreviewed/2022/05/GHSA-4fmg-h3g8-q9j8/GHSA-4fmg-h3g8-q9j8.json @@ -7,12 +7,8 @@ "CVE-2014-5286" ], "details": "The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4g84-qrqg-4cjp/GHSA-4g84-qrqg-4cjp.json b/advisories/unreviewed/2022/05/GHSA-4g84-qrqg-4cjp/GHSA-4g84-qrqg-4cjp.json index 3f5302f0c5b..a2adc3ca28c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4g84-qrqg-4cjp/GHSA-4g84-qrqg-4cjp.json +++ b/advisories/unreviewed/2022/05/GHSA-4g84-qrqg-4cjp/GHSA-4g84-qrqg-4cjp.json @@ -7,12 +7,8 @@ "CVE-2014-9562" ], "details": "Cross-site scripting (XSS) vulnerability in display_dialog.php in M2 OptimalSite 0.1 and 2.4 allows remote attackers to inject arbitrary web script or HTML via the image parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4gcc-5wr8-pxrj/GHSA-4gcc-5wr8-pxrj.json b/advisories/unreviewed/2022/05/GHSA-4gcc-5wr8-pxrj/GHSA-4gcc-5wr8-pxrj.json index a1ed706d8e2..010e363a708 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gcc-5wr8-pxrj/GHSA-4gcc-5wr8-pxrj.json +++ b/advisories/unreviewed/2022/05/GHSA-4gcc-5wr8-pxrj/GHSA-4gcc-5wr8-pxrj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4grh-2j47-c9j6/GHSA-4grh-2j47-c9j6.json b/advisories/unreviewed/2022/05/GHSA-4grh-2j47-c9j6/GHSA-4grh-2j47-c9j6.json index c5343e97176..f2fef900103 100644 --- a/advisories/unreviewed/2022/05/GHSA-4grh-2j47-c9j6/GHSA-4grh-2j47-c9j6.json +++ b/advisories/unreviewed/2022/05/GHSA-4grh-2j47-c9j6/GHSA-4grh-2j47-c9j6.json @@ -7,12 +7,8 @@ "CVE-2015-0671" ], "details": "The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a denial of service (CPU consumption and network-resource consumption) via crafted packets, aka Bug ID CSCun15911.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4gxm-8q9g-qvqr/GHSA-4gxm-8q9g-qvqr.json b/advisories/unreviewed/2022/05/GHSA-4gxm-8q9g-qvqr/GHSA-4gxm-8q9g-qvqr.json index 92600a828ec..4874bccad94 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gxm-8q9g-qvqr/GHSA-4gxm-8q9g-qvqr.json +++ b/advisories/unreviewed/2022/05/GHSA-4gxm-8q9g-qvqr/GHSA-4gxm-8q9g-qvqr.json @@ -7,12 +7,8 @@ "CVE-2014-9457" ], "details": "SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the id parameter to catalog.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hcw-c7xh-xh77/GHSA-4hcw-c7xh-xh77.json b/advisories/unreviewed/2022/05/GHSA-4hcw-c7xh-xh77/GHSA-4hcw-c7xh-xh77.json index b6919a056e3..a990e430fad 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hcw-c7xh-xh77/GHSA-4hcw-c7xh-xh77.json +++ b/advisories/unreviewed/2022/05/GHSA-4hcw-c7xh-xh77/GHSA-4hcw-c7xh-xh77.json @@ -7,12 +7,8 @@ "CVE-2014-5341" ], "details": "The SFTP external storage driver (files_external) in ownCloud Server before 6.0.5 validates the RSA Host key after login, which allows remote attackers to obtain sensitive information by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jc8-q5x5-vc98/GHSA-4jc8-q5x5-vc98.json b/advisories/unreviewed/2022/05/GHSA-4jc8-q5x5-vc98/GHSA-4jc8-q5x5-vc98.json index 0bbe4eb3fa9..b19ae8b6703 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jc8-q5x5-vc98/GHSA-4jc8-q5x5-vc98.json +++ b/advisories/unreviewed/2022/05/GHSA-4jc8-q5x5-vc98/GHSA-4jc8-q5x5-vc98.json @@ -7,12 +7,8 @@ "CVE-2013-7391" ], "details": "The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote attackers to read restricted entities via the (1) field, (2) header, or (3) footer of a View. NOTE: this identifier was SPLIT from CVE-2013-4273 per ADT5 due to different researcher organizations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4p44-v5hf-p3fg/GHSA-4p44-v5hf-p3fg.json b/advisories/unreviewed/2022/05/GHSA-4p44-v5hf-p3fg/GHSA-4p44-v5hf-p3fg.json index dfbea112126..62704796dd0 100644 --- a/advisories/unreviewed/2022/05/GHSA-4p44-v5hf-p3fg/GHSA-4p44-v5hf-p3fg.json +++ b/advisories/unreviewed/2022/05/GHSA-4p44-v5hf-p3fg/GHSA-4p44-v5hf-p3fg.json @@ -7,12 +7,8 @@ "CVE-2015-0623" ], "details": "Cross-site scripting (XSS) vulnerability in the Administrator report page on Cisco Web Security Appliance (WSA) devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus40627.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4p8w-3wgq-3cqc/GHSA-4p8w-3wgq-3cqc.json b/advisories/unreviewed/2022/05/GHSA-4p8w-3wgq-3cqc/GHSA-4p8w-3wgq-3cqc.json index cf425844683..7684e35a29c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4p8w-3wgq-3cqc/GHSA-4p8w-3wgq-3cqc.json +++ b/advisories/unreviewed/2022/05/GHSA-4p8w-3wgq-3cqc/GHSA-4p8w-3wgq-3cqc.json @@ -7,12 +7,8 @@ "CVE-2012-4046" ], "details": "The D-Link DCS-932L camera with firmware 1.02 allows remote attackers to discover the password via a UDP broadcast packet, as demonstrated by running the D-Link Setup Wizard and reading the _paramR[\"P\"] value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4pmx-jrq3-v88q/GHSA-4pmx-jrq3-v88q.json b/advisories/unreviewed/2022/05/GHSA-4pmx-jrq3-v88q/GHSA-4pmx-jrq3-v88q.json index 2a968e2559c..d98fa1794d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pmx-jrq3-v88q/GHSA-4pmx-jrq3-v88q.json +++ b/advisories/unreviewed/2022/05/GHSA-4pmx-jrq3-v88q/GHSA-4pmx-jrq3-v88q.json @@ -7,12 +7,8 @@ "CVE-2015-0713" ], "details": "The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before 3.0(1.27), Cisco TelePresence ISDN Gateway Software before 2.2(1.94), Cisco TelePresence MCU Software before 4.4(3.54) and 4.5 before 4.5(1.45), Cisco TelePresence MSE Supervisor Software before 2.3(1.38), Cisco TelePresence Serial Gateway Series Software before 1.0(1.42), Cisco TelePresence Server Software for Hardware before 3.1(1.98), and Cisco TelePresence Server Software for Virtual Machine before 4.1(1.79) allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors, aka Bug IDs CSCul55968, CSCur08993, CSCur15803, CSCur15807, CSCur15825, CSCur15832, CSCur15842, CSCur15850, and CSCur15855.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4pq5-8wmq-j893/GHSA-4pq5-8wmq-j893.json b/advisories/unreviewed/2022/05/GHSA-4pq5-8wmq-j893/GHSA-4pq5-8wmq-j893.json index f825113e4a8..ccc9349272b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pq5-8wmq-j893/GHSA-4pq5-8wmq-j893.json +++ b/advisories/unreviewed/2022/05/GHSA-4pq5-8wmq-j893/GHSA-4pq5-8wmq-j893.json @@ -7,12 +7,8 @@ "CVE-2015-2198" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) homepage_url, (2) pic_url, or (3) avatar_url parameter, which are not properly handled in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4pqf-22vq-mvr9/GHSA-4pqf-22vq-mvr9.json b/advisories/unreviewed/2022/05/GHSA-4pqf-22vq-mvr9/GHSA-4pqf-22vq-mvr9.json index 2b77ee2f7fd..ac7e5e2d253 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pqf-22vq-mvr9/GHSA-4pqf-22vq-mvr9.json +++ b/advisories/unreviewed/2022/05/GHSA-4pqf-22vq-mvr9/GHSA-4pqf-22vq-mvr9.json @@ -7,12 +7,8 @@ "CVE-2014-0605" ], "details": "Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4pxc-x6cm-mjjv/GHSA-4pxc-x6cm-mjjv.json b/advisories/unreviewed/2022/05/GHSA-4pxc-x6cm-mjjv/GHSA-4pxc-x6cm-mjjv.json index 9282641a7cd..ddc54bfea00 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pxc-x6cm-mjjv/GHSA-4pxc-x6cm-mjjv.json +++ b/advisories/unreviewed/2022/05/GHSA-4pxc-x6cm-mjjv/GHSA-4pxc-x6cm-mjjv.json @@ -7,12 +7,8 @@ "CVE-2015-0994" ], "details": "Inductive Automation Ignition 7.7.2 allows remote authenticated users to bypass a brute-force protection mechanism by using different session ID values in a series of HTTP requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4qfh-mfjq-f23c/GHSA-4qfh-mfjq-f23c.json b/advisories/unreviewed/2022/05/GHSA-4qfh-mfjq-f23c/GHSA-4qfh-mfjq-f23c.json index 60e7cce97b7..db8b3ee5244 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qfh-mfjq-f23c/GHSA-4qfh-mfjq-f23c.json +++ b/advisories/unreviewed/2022/05/GHSA-4qfh-mfjq-f23c/GHSA-4qfh-mfjq-f23c.json @@ -7,12 +7,8 @@ "CVE-2015-1371" ], "details": "Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in custom/uploads/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4vvp-mmqw-cp8p/GHSA-4vvp-mmqw-cp8p.json b/advisories/unreviewed/2022/05/GHSA-4vvp-mmqw-cp8p/GHSA-4vvp-mmqw-cp8p.json index a09eb4c0761..8b260dbfb12 100644 --- a/advisories/unreviewed/2022/05/GHSA-4vvp-mmqw-cp8p/GHSA-4vvp-mmqw-cp8p.json +++ b/advisories/unreviewed/2022/05/GHSA-4vvp-mmqw-cp8p/GHSA-4vvp-mmqw-cp8p.json @@ -7,12 +7,8 @@ "CVE-2015-2043" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the (1) bt, (2) variable, or (3) et parameter to myspeed/db/historyitem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4w6m-9wfj-675v/GHSA-4w6m-9wfj-675v.json b/advisories/unreviewed/2022/05/GHSA-4w6m-9wfj-675v/GHSA-4w6m-9wfj-675v.json index 8b4338ab9bd..824413742b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w6m-9wfj-675v/GHSA-4w6m-9wfj-675v.json +++ b/advisories/unreviewed/2022/05/GHSA-4w6m-9wfj-675v/GHSA-4w6m-9wfj-675v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4wm9-67gx-ghh4/GHSA-4wm9-67gx-ghh4.json b/advisories/unreviewed/2022/05/GHSA-4wm9-67gx-ghh4/GHSA-4wm9-67gx-ghh4.json index 3a41af36856..421e348db48 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wm9-67gx-ghh4/GHSA-4wm9-67gx-ghh4.json +++ b/advisories/unreviewed/2022/05/GHSA-4wm9-67gx-ghh4/GHSA-4wm9-67gx-ghh4.json @@ -7,12 +7,8 @@ "CVE-2011-1476" ], "details": "Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 platforms allows local users to cause a denial of service (memory corruption) by leveraging write access to /dev/sequencer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4wmm-jv69-r852/GHSA-4wmm-jv69-r852.json b/advisories/unreviewed/2022/05/GHSA-4wmm-jv69-r852/GHSA-4wmm-jv69-r852.json index ebafe03389b..d10eb148b88 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wmm-jv69-r852/GHSA-4wmm-jv69-r852.json +++ b/advisories/unreviewed/2022/05/GHSA-4wmm-jv69-r852/GHSA-4wmm-jv69-r852.json @@ -7,12 +7,8 @@ "CVE-2015-4254" ], "details": "Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.1(1.40) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90732.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4wvm-346h-cg2w/GHSA-4wvm-346h-cg2w.json b/advisories/unreviewed/2022/05/GHSA-4wvm-346h-cg2w/GHSA-4wvm-346h-cg2w.json index a8d6abb7498..e62900bd33a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wvm-346h-cg2w/GHSA-4wvm-346h-cg2w.json +++ b/advisories/unreviewed/2022/05/GHSA-4wvm-346h-cg2w/GHSA-4wvm-346h-cg2w.json @@ -7,12 +7,8 @@ "CVE-2015-2563" ], "details": "SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands via the order_by parameter. NOTE: The cat parameter vector is already covered by CVE-2008-4157.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-52q4-cch2-8pvw/GHSA-52q4-cch2-8pvw.json b/advisories/unreviewed/2022/05/GHSA-52q4-cch2-8pvw/GHSA-52q4-cch2-8pvw.json index 5147ca64cf7..94c5887fb62 100644 --- a/advisories/unreviewed/2022/05/GHSA-52q4-cch2-8pvw/GHSA-52q4-cch2-8pvw.json +++ b/advisories/unreviewed/2022/05/GHSA-52q4-cch2-8pvw/GHSA-52q4-cch2-8pvw.json @@ -7,12 +7,8 @@ "CVE-2015-0991" ], "details": "Inductive Automation Ignition 7.7.2 allows remote attackers to obtain sensitive information by reading an error message about an unhandled exception, as demonstrated by pathname information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-532q-828w-j62v/GHSA-532q-828w-j62v.json b/advisories/unreviewed/2022/05/GHSA-532q-828w-j62v/GHSA-532q-828w-j62v.json index 7bb0c344e5f..ccf4bb1d6cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-532q-828w-j62v/GHSA-532q-828w-j62v.json +++ b/advisories/unreviewed/2022/05/GHSA-532q-828w-j62v/GHSA-532q-828w-j62v.json @@ -7,12 +7,8 @@ "CVE-2015-1618" ], "details": "The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53q7-57w3-2j4r/GHSA-53q7-57w3-2j4r.json b/advisories/unreviewed/2022/05/GHSA-53q7-57w3-2j4r/GHSA-53q7-57w3-2j4r.json index e3858ee0c0c..a81e159adc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-53q7-57w3-2j4r/GHSA-53q7-57w3-2j4r.json +++ b/advisories/unreviewed/2022/05/GHSA-53q7-57w3-2j4r/GHSA-53q7-57w3-2j4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-53vj-w3fj-vrq3/GHSA-53vj-w3fj-vrq3.json b/advisories/unreviewed/2022/05/GHSA-53vj-w3fj-vrq3/GHSA-53vj-w3fj-vrq3.json index 323d6435dad..6ec0a58c783 100644 --- a/advisories/unreviewed/2022/05/GHSA-53vj-w3fj-vrq3/GHSA-53vj-w3fj-vrq3.json +++ b/advisories/unreviewed/2022/05/GHSA-53vj-w3fj-vrq3/GHSA-53vj-w3fj-vrq3.json @@ -7,12 +7,8 @@ "CVE-2015-0990" ], "details": "Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-546f-q8mw-j4qj/GHSA-546f-q8mw-j4qj.json b/advisories/unreviewed/2022/05/GHSA-546f-q8mw-j4qj/GHSA-546f-q8mw-j4qj.json index a9e0d2d189e..34aec330613 100644 --- a/advisories/unreviewed/2022/05/GHSA-546f-q8mw-j4qj/GHSA-546f-q8mw-j4qj.json +++ b/advisories/unreviewed/2022/05/GHSA-546f-q8mw-j4qj/GHSA-546f-q8mw-j4qj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54x7-8555-9hp2/GHSA-54x7-8555-9hp2.json b/advisories/unreviewed/2022/05/GHSA-54x7-8555-9hp2/GHSA-54x7-8555-9hp2.json index e15b720148b..f07b34adefb 100644 --- a/advisories/unreviewed/2022/05/GHSA-54x7-8555-9hp2/GHSA-54x7-8555-9hp2.json +++ b/advisories/unreviewed/2022/05/GHSA-54x7-8555-9hp2/GHSA-54x7-8555-9hp2.json @@ -7,12 +7,8 @@ "CVE-2015-0120" ], "details": "Buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 has unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5575-w787-j9qq/GHSA-5575-w787-j9qq.json b/advisories/unreviewed/2022/05/GHSA-5575-w787-j9qq/GHSA-5575-w787-j9qq.json index 362abf4b01d..8fa2301201c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5575-w787-j9qq/GHSA-5575-w787-j9qq.json +++ b/advisories/unreviewed/2022/05/GHSA-5575-w787-j9qq/GHSA-5575-w787-j9qq.json @@ -7,12 +7,8 @@ "CVE-2015-1477" ], "details": "SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad task to classifieds/offerring-ads.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-55gj-vmg5-qqmm/GHSA-55gj-vmg5-qqmm.json b/advisories/unreviewed/2022/05/GHSA-55gj-vmg5-qqmm/GHSA-55gj-vmg5-qqmm.json index b7122a89014..dd160907d0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-55gj-vmg5-qqmm/GHSA-55gj-vmg5-qqmm.json +++ b/advisories/unreviewed/2022/05/GHSA-55gj-vmg5-qqmm/GHSA-55gj-vmg5-qqmm.json @@ -7,12 +7,8 @@ "CVE-2015-2264" ], "details": "Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse (a) csunsapi.dll, (b) swift.dll, (c) nfhwcrhk.dll, or (d) surewarehook.dll file in an unspecified directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-55q8-w68v-qm3q/GHSA-55q8-w68v-qm3q.json b/advisories/unreviewed/2022/05/GHSA-55q8-w68v-qm3q/GHSA-55q8-w68v-qm3q.json index 7c98d2003bf..842fd19e374 100644 --- a/advisories/unreviewed/2022/05/GHSA-55q8-w68v-qm3q/GHSA-55q8-w68v-qm3q.json +++ b/advisories/unreviewed/2022/05/GHSA-55q8-w68v-qm3q/GHSA-55q8-w68v-qm3q.json @@ -7,12 +7,8 @@ "CVE-2015-0907" ], "details": "Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-56j7-64g2-rfvw/GHSA-56j7-64g2-rfvw.json b/advisories/unreviewed/2022/05/GHSA-56j7-64g2-rfvw/GHSA-56j7-64g2-rfvw.json index 094a1d4e2ae..fedb3efcd11 100644 --- a/advisories/unreviewed/2022/05/GHSA-56j7-64g2-rfvw/GHSA-56j7-64g2-rfvw.json +++ b/advisories/unreviewed/2022/05/GHSA-56j7-64g2-rfvw/GHSA-56j7-64g2-rfvw.json @@ -7,12 +7,8 @@ "CVE-2014-9101" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall 1.7.0 (build 7907 and 7906) and SkaDate Lite 2.0 (build 7651) allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks or possibly have other unspecified impact via the (1) label parameter to admin/users/roles/, (2) lang[1][base][questions_account_type_5615100a931845eca8da20cfdf7327e0] in an AddAccountType action or (3) qst_name parameter in an addQuestion action to admin/questions/ajax-responder/, or (4) form_name or (5) restrictedUsername parameter to admin/restricted-usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5726-3m5v-m8q4/GHSA-5726-3m5v-m8q4.json b/advisories/unreviewed/2022/05/GHSA-5726-3m5v-m8q4/GHSA-5726-3m5v-m8q4.json index 82fe90a1cba..c0b84686bb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-5726-3m5v-m8q4/GHSA-5726-3m5v-m8q4.json +++ b/advisories/unreviewed/2022/05/GHSA-5726-3m5v-m8q4/GHSA-5726-3m5v-m8q4.json @@ -7,12 +7,8 @@ "CVE-2011-5292" ], "details": "The EaseWeFtp.FtpLibrary ActiveX control in EaseWeFtp.ocx in Easewe FTP OCX 4.5.0.9 does not restrict access to certain methods, which allows remote attackers to execute arbitrary files via a pathname in the first argument to the (1) Execute or (2) Run method, (3) write to arbitrary files via a pathname in the argument to the CreateLocalFile method, (4) create arbitrary directories via a pathname in the argument to the CreateLocalFolder method, or (5) delete arbitrary files via a pathname in the argument to the DeleteLocalFile method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-57xj-x7jh-222m/GHSA-57xj-x7jh-222m.json b/advisories/unreviewed/2022/05/GHSA-57xj-x7jh-222m/GHSA-57xj-x7jh-222m.json index 19f4784aa32..b8a59d11314 100644 --- a/advisories/unreviewed/2022/05/GHSA-57xj-x7jh-222m/GHSA-57xj-x7jh-222m.json +++ b/advisories/unreviewed/2022/05/GHSA-57xj-x7jh-222m/GHSA-57xj-x7jh-222m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -123,9 +121,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-59g5-g83q-2fr7/GHSA-59g5-g83q-2fr7.json b/advisories/unreviewed/2022/05/GHSA-59g5-g83q-2fr7/GHSA-59g5-g83q-2fr7.json index a7fd0aaca83..8188bcb2e18 100644 --- a/advisories/unreviewed/2022/05/GHSA-59g5-g83q-2fr7/GHSA-59g5-g83q-2fr7.json +++ b/advisories/unreviewed/2022/05/GHSA-59g5-g83q-2fr7/GHSA-59g5-g83q-2fr7.json @@ -7,12 +7,8 @@ "CVE-2014-1902" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote authenticated users to inject arbitrary web script or HTML via the (1) SYSCONTACT parameter to form/identityApply, as triggered using en/identity.asp; (2) PASSWD parameter to form/accAdd, as triggered using en/account/accedit.asp; (3) NTPSERVER parameter to form/clockApply, as triggered using en/clock.asp; (4) SERVER parameter to form/smtpclientApply, as triggered using en/smtpclient.asp; (5) SERVER parameter to form/ftpApply, as triggered using en/ftp.asp; or (6) SERVER parameter to form/httpEventApply, as triggered using en/httpevent.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5c52-j627-9mh6/GHSA-5c52-j627-9mh6.json b/advisories/unreviewed/2022/05/GHSA-5c52-j627-9mh6/GHSA-5c52-j627-9mh6.json index cf95c343645..c8e332fab56 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c52-j627-9mh6/GHSA-5c52-j627-9mh6.json +++ b/advisories/unreviewed/2022/05/GHSA-5c52-j627-9mh6/GHSA-5c52-j627-9mh6.json @@ -7,12 +7,8 @@ "CVE-2015-1377" ], "details": "The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cc7-vxhf-927p/GHSA-5cc7-vxhf-927p.json b/advisories/unreviewed/2022/05/GHSA-5cc7-vxhf-927p/GHSA-5cc7-vxhf-927p.json index 4638017b2da..f7d97d06ec4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cc7-vxhf-927p/GHSA-5cc7-vxhf-927p.json +++ b/advisories/unreviewed/2022/05/GHSA-5cc7-vxhf-927p/GHSA-5cc7-vxhf-927p.json @@ -7,12 +7,8 @@ "CVE-2015-0878" ], "details": "Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cpc-mfjx-7gh7/GHSA-5cpc-mfjx-7gh7.json b/advisories/unreviewed/2022/05/GHSA-5cpc-mfjx-7gh7/GHSA-5cpc-mfjx-7gh7.json index 2aef0a50b1e..7f0684717a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cpc-mfjx-7gh7/GHSA-5cpc-mfjx-7gh7.json +++ b/advisories/unreviewed/2022/05/GHSA-5cpc-mfjx-7gh7/GHSA-5cpc-mfjx-7gh7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5ffj-x2ff-2jp7/GHSA-5ffj-x2ff-2jp7.json b/advisories/unreviewed/2022/05/GHSA-5ffj-x2ff-2jp7/GHSA-5ffj-x2ff-2jp7.json index fab333d8f65..736b3a25ce6 100644 --- a/advisories/unreviewed/2022/05/GHSA-5ffj-x2ff-2jp7/GHSA-5ffj-x2ff-2jp7.json +++ b/advisories/unreviewed/2022/05/GHSA-5ffj-x2ff-2jp7/GHSA-5ffj-x2ff-2jp7.json @@ -7,12 +7,8 @@ "CVE-2014-2927" ], "details": "The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remote attackers to read or write to arbitrary files via a cmi request to the ConfigSync IP address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5jvp-fc8c-xjhx/GHSA-5jvp-fc8c-xjhx.json b/advisories/unreviewed/2022/05/GHSA-5jvp-fc8c-xjhx/GHSA-5jvp-fc8c-xjhx.json index 976e7693486..6f59c71dc29 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jvp-fc8c-xjhx/GHSA-5jvp-fc8c-xjhx.json +++ b/advisories/unreviewed/2022/05/GHSA-5jvp-fc8c-xjhx/GHSA-5jvp-fc8c-xjhx.json @@ -7,12 +7,8 @@ "CVE-2015-0868" ], "details": "Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromuku(bu2)BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5p6r-pf49-94px/GHSA-5p6r-pf49-94px.json b/advisories/unreviewed/2022/05/GHSA-5p6r-pf49-94px/GHSA-5p6r-pf49-94px.json index 9c0c905226b..00a55ac1556 100644 --- a/advisories/unreviewed/2022/05/GHSA-5p6r-pf49-94px/GHSA-5p6r-pf49-94px.json +++ b/advisories/unreviewed/2022/05/GHSA-5p6r-pf49-94px/GHSA-5p6r-pf49-94px.json @@ -7,12 +7,8 @@ "CVE-2015-1364" ], "details": "SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5prv-83cx-r2j9/GHSA-5prv-83cx-r2j9.json b/advisories/unreviewed/2022/05/GHSA-5prv-83cx-r2j9/GHSA-5prv-83cx-r2j9.json index bd12df28e34..1e63bba4384 100644 --- a/advisories/unreviewed/2022/05/GHSA-5prv-83cx-r2j9/GHSA-5prv-83cx-r2j9.json +++ b/advisories/unreviewed/2022/05/GHSA-5prv-83cx-r2j9/GHSA-5prv-83cx-r2j9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5q6j-xccq-37qv/GHSA-5q6j-xccq-37qv.json b/advisories/unreviewed/2022/05/GHSA-5q6j-xccq-37qv/GHSA-5q6j-xccq-37qv.json index f7f544a87b6..f9ffc2a42c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q6j-xccq-37qv/GHSA-5q6j-xccq-37qv.json +++ b/advisories/unreviewed/2022/05/GHSA-5q6j-xccq-37qv/GHSA-5q6j-xccq-37qv.json @@ -7,12 +7,8 @@ "CVE-2015-0862" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details when a message is unqueued, such as headers or arguments; (2) policy names, which are not properly handled when viewing policies; (3) details for AMQP network clients, such as the version; allow remote authenticated administrators to inject arbitrary web script or HTML via (4) user names, (5) the cluster name; or allow RabbitMQ cluster administrators to (6) modify unspecified content.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5q9g-5gmg-f4cc/GHSA-5q9g-5gmg-f4cc.json b/advisories/unreviewed/2022/05/GHSA-5q9g-5gmg-f4cc/GHSA-5q9g-5gmg-f4cc.json index 5798fa3abb7..c3e355a6a88 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q9g-5gmg-f4cc/GHSA-5q9g-5gmg-f4cc.json +++ b/advisories/unreviewed/2022/05/GHSA-5q9g-5gmg-f4cc/GHSA-5q9g-5gmg-f4cc.json @@ -7,12 +7,8 @@ "CVE-2015-3028" ], "details": "McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5rw8-mcp9-pvpg/GHSA-5rw8-mcp9-pvpg.json b/advisories/unreviewed/2022/05/GHSA-5rw8-mcp9-pvpg/GHSA-5rw8-mcp9-pvpg.json index abd199322df..b6be5aae2e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rw8-mcp9-pvpg/GHSA-5rw8-mcp9-pvpg.json +++ b/advisories/unreviewed/2022/05/GHSA-5rw8-mcp9-pvpg/GHSA-5rw8-mcp9-pvpg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5vc4-qrjm-vvp6/GHSA-5vc4-qrjm-vvp6.json b/advisories/unreviewed/2022/05/GHSA-5vc4-qrjm-vvp6/GHSA-5vc4-qrjm-vvp6.json index b42d685dff8..9e2c7de3a6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vc4-qrjm-vvp6/GHSA-5vc4-qrjm-vvp6.json +++ b/advisories/unreviewed/2022/05/GHSA-5vc4-qrjm-vvp6/GHSA-5vc4-qrjm-vvp6.json @@ -7,12 +7,8 @@ "CVE-2012-5451" ], "details": "Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote attackers to cause a denial of service (tvMobiliService service crash) via a long string in a (1) GET or (2) HEAD request to TCP port 30888.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5vj2-r6rf-wx98/GHSA-5vj2-r6rf-wx98.json b/advisories/unreviewed/2022/05/GHSA-5vj2-r6rf-wx98/GHSA-5vj2-r6rf-wx98.json index c660740a39c..de550decad3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vj2-r6rf-wx98/GHSA-5vj2-r6rf-wx98.json +++ b/advisories/unreviewed/2022/05/GHSA-5vj2-r6rf-wx98/GHSA-5vj2-r6rf-wx98.json @@ -7,12 +7,8 @@ "CVE-2011-4403" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for requests that (1) delete a product via a delete_product_confirm action to product.php or (2) disable a product via a setflag action to categories.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5vm2-x4wp-rqq8/GHSA-5vm2-x4wp-rqq8.json b/advisories/unreviewed/2022/05/GHSA-5vm2-x4wp-rqq8/GHSA-5vm2-x4wp-rqq8.json index 19e09f56ad7..0484aec1486 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vm2-x4wp-rqq8/GHSA-5vm2-x4wp-rqq8.json +++ b/advisories/unreviewed/2022/05/GHSA-5vm2-x4wp-rqq8/GHSA-5vm2-x4wp-rqq8.json @@ -7,12 +7,8 @@ "CVE-2015-0113" ], "details": "The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next Generation 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Engineering Lifecycle Manager 4.0.3 through 4.0.7 and 5.0 through 5.0.2, Rational Rhapsody Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, and Rational Software Architect Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2 allows remote attackers to read JSP source code via a crafted request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w28-vv2q-8hr9/GHSA-5w28-vv2q-8hr9.json b/advisories/unreviewed/2022/05/GHSA-5w28-vv2q-8hr9/GHSA-5w28-vv2q-8hr9.json index 3aeb36fce01..a90cad6a276 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w28-vv2q-8hr9/GHSA-5w28-vv2q-8hr9.json +++ b/advisories/unreviewed/2022/05/GHSA-5w28-vv2q-8hr9/GHSA-5w28-vv2q-8hr9.json @@ -7,12 +7,8 @@ "CVE-2014-8752" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in view.php in JCE-Tech PHP Video Script (aka Video Niche Script) 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) video or (2) title parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wc2-754f-76rp/GHSA-5wc2-754f-76rp.json b/advisories/unreviewed/2022/05/GHSA-5wc2-754f-76rp/GHSA-5wc2-754f-76rp.json index ca0042c10e1..3595261a241 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wc2-754f-76rp/GHSA-5wc2-754f-76rp.json +++ b/advisories/unreviewed/2022/05/GHSA-5wc2-754f-76rp/GHSA-5wc2-754f-76rp.json @@ -7,12 +7,8 @@ "CVE-2015-1599" ], "details": "The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restrictions by leveraging a filesystem architectural error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5x2w-qcvq-rh6f/GHSA-5x2w-qcvq-rh6f.json b/advisories/unreviewed/2022/05/GHSA-5x2w-qcvq-rh6f/GHSA-5x2w-qcvq-rh6f.json index d641a51468f..7e094f28111 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x2w-qcvq-rh6f/GHSA-5x2w-qcvq-rh6f.json +++ b/advisories/unreviewed/2022/05/GHSA-5x2w-qcvq-rh6f/GHSA-5x2w-qcvq-rh6f.json @@ -7,12 +7,8 @@ "CVE-2015-2199" ], "details": "Multiple SQL injection vulnerabilities in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow (1) remote authenticated users to execute arbitrary SQL commands via the item[id] parameter in a wonderplugin_audio_save_item action to wp-admin/admin-ajax.php or remote administrators to execute arbitrary SQL commands via the itemid parameter in the (2) wonderplugin_audio_show_item, (3) wonderplugin_audio_show_items, or (4) wonderplugin_audio_edit_item page to wp-admin/admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xc2-6hw3-rpp5/GHSA-5xc2-6hw3-rpp5.json b/advisories/unreviewed/2022/05/GHSA-5xc2-6hw3-rpp5/GHSA-5xc2-6hw3-rpp5.json index 505fdac517a..2045e47114d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xc2-6hw3-rpp5/GHSA-5xc2-6hw3-rpp5.json +++ b/advisories/unreviewed/2022/05/GHSA-5xc2-6hw3-rpp5/GHSA-5xc2-6hw3-rpp5.json @@ -7,12 +7,8 @@ "CVE-2014-6115" ], "details": "IBM Rational Insight 1.1.1.5 allows remote attackers to bypass authentication and obtain sensitive information via a crafted request to a Jazz Reporting Service (JRS) report URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62h3-759x-4mfp/GHSA-62h3-759x-4mfp.json b/advisories/unreviewed/2022/05/GHSA-62h3-759x-4mfp/GHSA-62h3-759x-4mfp.json index 66c846f4c6b..045226a6577 100644 --- a/advisories/unreviewed/2022/05/GHSA-62h3-759x-4mfp/GHSA-62h3-759x-4mfp.json +++ b/advisories/unreviewed/2022/05/GHSA-62h3-759x-4mfp/GHSA-62h3-759x-4mfp.json @@ -7,12 +7,8 @@ "CVE-2015-2247" ], "details": "Unspecified vulnerability in Boosted Boards skateboards allows physically proximate attackers to modify skateboard movement, cause human injury, or cause physical damage via vectors related to an \"injection attack\" that blocks and hijacks a Bluetooth signal.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6332-g6vw-9444/GHSA-6332-g6vw-9444.json b/advisories/unreviewed/2022/05/GHSA-6332-g6vw-9444/GHSA-6332-g6vw-9444.json index d37b76ca979..2577a7a3581 100644 --- a/advisories/unreviewed/2022/05/GHSA-6332-g6vw-9444/GHSA-6332-g6vw-9444.json +++ b/advisories/unreviewed/2022/05/GHSA-6332-g6vw-9444/GHSA-6332-g6vw-9444.json @@ -7,12 +7,8 @@ "CVE-2014-9428" ], "details": "The batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service (mesh-node system crash) via fragmented packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-652v-gjf6-q685/GHSA-652v-gjf6-q685.json b/advisories/unreviewed/2022/05/GHSA-652v-gjf6-q685/GHSA-652v-gjf6-q685.json index 0952293cf3f..156a5fc5603 100644 --- a/advisories/unreviewed/2022/05/GHSA-652v-gjf6-q685/GHSA-652v-gjf6-q685.json +++ b/advisories/unreviewed/2022/05/GHSA-652v-gjf6-q685/GHSA-652v-gjf6-q685.json @@ -7,12 +7,8 @@ "CVE-2014-4774" ], "details": "Cross-site request forgery (CSRF) vulnerability in the login page in IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 allows remote attackers to hijack the authentication of arbitrary users via vectors involving a FRAME element.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6566-59fx-g225/GHSA-6566-59fx-g225.json b/advisories/unreviewed/2022/05/GHSA-6566-59fx-g225/GHSA-6566-59fx-g225.json index ed837200236..144622df4ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-6566-59fx-g225/GHSA-6566-59fx-g225.json +++ b/advisories/unreviewed/2022/05/GHSA-6566-59fx-g225/GHSA-6566-59fx-g225.json @@ -7,12 +7,8 @@ "CVE-2015-0929" ], "details": "time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attackers to bypass authentication and obtain administrative access by leveraging a cookie received in an HTTP response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-657c-v2h8-hpvj/GHSA-657c-v2h8-hpvj.json b/advisories/unreviewed/2022/05/GHSA-657c-v2h8-hpvj/GHSA-657c-v2h8-hpvj.json index 5f6a216de60..7592ef7a7c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-657c-v2h8-hpvj/GHSA-657c-v2h8-hpvj.json +++ b/advisories/unreviewed/2022/05/GHSA-657c-v2h8-hpvj/GHSA-657c-v2h8-hpvj.json @@ -7,12 +7,8 @@ "CVE-2015-2792" ], "details": "The WPML plugin before 3.1.9 for WordPress does not properly handle multiple actions in a request, which allows remote attackers to bypass nonce checks and perform arbitrary actions via a request containing an action POST parameter, an action GET parameter, and a valid nonce for the action GET parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-657g-vhpr-8xv5/GHSA-657g-vhpr-8xv5.json b/advisories/unreviewed/2022/05/GHSA-657g-vhpr-8xv5/GHSA-657g-vhpr-8xv5.json index 2f3ca101e42..a157eaaa850 100644 --- a/advisories/unreviewed/2022/05/GHSA-657g-vhpr-8xv5/GHSA-657g-vhpr-8xv5.json +++ b/advisories/unreviewed/2022/05/GHSA-657g-vhpr-8xv5/GHSA-657g-vhpr-8xv5.json @@ -7,12 +7,8 @@ "CVE-2015-0119" ], "details": "FastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote attackers to execute arbitrary code by connecting to the Mount port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-65h5-8qpr-9m3v/GHSA-65h5-8qpr-9m3v.json b/advisories/unreviewed/2022/05/GHSA-65h5-8qpr-9m3v/GHSA-65h5-8qpr-9m3v.json index 05fccd3f20e..fdc914f3ca5 100644 --- a/advisories/unreviewed/2022/05/GHSA-65h5-8qpr-9m3v/GHSA-65h5-8qpr-9m3v.json +++ b/advisories/unreviewed/2022/05/GHSA-65h5-8qpr-9m3v/GHSA-65h5-8qpr-9m3v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -55,9 +53,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6672-57h5-f9rw/GHSA-6672-57h5-f9rw.json b/advisories/unreviewed/2022/05/GHSA-6672-57h5-f9rw/GHSA-6672-57h5-f9rw.json index 9248e17c0dd..37c77c97722 100644 --- a/advisories/unreviewed/2022/05/GHSA-6672-57h5-f9rw/GHSA-6672-57h5-f9rw.json +++ b/advisories/unreviewed/2022/05/GHSA-6672-57h5-f9rw/GHSA-6672-57h5-f9rw.json @@ -7,12 +7,8 @@ "CVE-2014-8360" ], "details": "Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6783-fxr3-9p6m/GHSA-6783-fxr3-9p6m.json b/advisories/unreviewed/2022/05/GHSA-6783-fxr3-9p6m/GHSA-6783-fxr3-9p6m.json index 00324a97416..7455a28a897 100644 --- a/advisories/unreviewed/2022/05/GHSA-6783-fxr3-9p6m/GHSA-6783-fxr3-9p6m.json +++ b/advisories/unreviewed/2022/05/GHSA-6783-fxr3-9p6m/GHSA-6783-fxr3-9p6m.json @@ -7,12 +7,8 @@ "CVE-2015-2785" ], "details": "The GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds heap write and crash) or possibly execute arbitrary code via a crafted Byzanz debug data recording (ByzanzRecording file) to the byzanz-playback command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67h3-48c6-8fgj/GHSA-67h3-48c6-8fgj.json b/advisories/unreviewed/2022/05/GHSA-67h3-48c6-8fgj/GHSA-67h3-48c6-8fgj.json index df72772e9cc..adbb176d930 100644 --- a/advisories/unreviewed/2022/05/GHSA-67h3-48c6-8fgj/GHSA-67h3-48c6-8fgj.json +++ b/advisories/unreviewed/2022/05/GHSA-67h3-48c6-8fgj/GHSA-67h3-48c6-8fgj.json @@ -7,12 +7,8 @@ "CVE-2011-5306" ], "details": "Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in CosmoShop ePRO 10.05.00 allows remote attackers to hijack the authentication of administrators for requests that modify settings via a setup action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67xf-j6pp-53w9/GHSA-67xf-j6pp-53w9.json b/advisories/unreviewed/2022/05/GHSA-67xf-j6pp-53w9/GHSA-67xf-j6pp-53w9.json index 41f3b8edc4a..be97a904194 100644 --- a/advisories/unreviewed/2022/05/GHSA-67xf-j6pp-53w9/GHSA-67xf-j6pp-53w9.json +++ b/advisories/unreviewed/2022/05/GHSA-67xf-j6pp-53w9/GHSA-67xf-j6pp-53w9.json @@ -7,12 +7,8 @@ "CVE-2015-2850" ], "details": "Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-68vx-rhrw-hrp5/GHSA-68vx-rhrw-hrp5.json b/advisories/unreviewed/2022/05/GHSA-68vx-rhrw-hrp5/GHSA-68vx-rhrw-hrp5.json index 9e9969c4b7c..709976a284b 100644 --- a/advisories/unreviewed/2022/05/GHSA-68vx-rhrw-hrp5/GHSA-68vx-rhrw-hrp5.json +++ b/advisories/unreviewed/2022/05/GHSA-68vx-rhrw-hrp5/GHSA-68vx-rhrw-hrp5.json @@ -7,12 +7,8 @@ "CVE-2014-9447" ], "details": "Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6cwm-9xcg-xhpj/GHSA-6cwm-9xcg-xhpj.json b/advisories/unreviewed/2022/05/GHSA-6cwm-9xcg-xhpj/GHSA-6cwm-9xcg-xhpj.json index edfad2032b7..91e10378c62 100644 --- a/advisories/unreviewed/2022/05/GHSA-6cwm-9xcg-xhpj/GHSA-6cwm-9xcg-xhpj.json +++ b/advisories/unreviewed/2022/05/GHSA-6cwm-9xcg-xhpj/GHSA-6cwm-9xcg-xhpj.json @@ -7,12 +7,8 @@ "CVE-2014-9371" ], "details": "The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code via a crafted JSON object.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fmc-q554-pfq3/GHSA-6fmc-q554-pfq3.json b/advisories/unreviewed/2022/05/GHSA-6fmc-q554-pfq3/GHSA-6fmc-q554-pfq3.json index 52c40e1e2fb..81aa7bf2612 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fmc-q554-pfq3/GHSA-6fmc-q554-pfq3.json +++ b/advisories/unreviewed/2022/05/GHSA-6fmc-q554-pfq3/GHSA-6fmc-q554-pfq3.json @@ -7,12 +7,8 @@ "CVE-2015-0443" ], "details": "Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6fp3-8qwr-86ww/GHSA-6fp3-8qwr-86ww.json b/advisories/unreviewed/2022/05/GHSA-6fp3-8qwr-86ww/GHSA-6fp3-8qwr-86ww.json index 506ebe13a92..fc84c5376e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fp3-8qwr-86ww/GHSA-6fp3-8qwr-86ww.json +++ b/advisories/unreviewed/2022/05/GHSA-6fp3-8qwr-86ww/GHSA-6fp3-8qwr-86ww.json @@ -7,12 +7,8 @@ "CVE-2014-9480" ], "details": "Cross-site scripting (XSS) vulnerability in the Hovercards extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors related to text extracts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6g7q-8rf2-4r98/GHSA-6g7q-8rf2-4r98.json b/advisories/unreviewed/2022/05/GHSA-6g7q-8rf2-4r98/GHSA-6g7q-8rf2-4r98.json index e5d88522560..8016f01b10f 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g7q-8rf2-4r98/GHSA-6g7q-8rf2-4r98.json +++ b/advisories/unreviewed/2022/05/GHSA-6g7q-8rf2-4r98/GHSA-6g7q-8rf2-4r98.json @@ -7,12 +7,8 @@ "CVE-2015-1372" ], "details": "SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6gh2-pm27-44gj/GHSA-6gh2-pm27-44gj.json b/advisories/unreviewed/2022/05/GHSA-6gh2-pm27-44gj/GHSA-6gh2-pm27-44gj.json index 5c8a16b0e70..66a382a861c 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gh2-pm27-44gj/GHSA-6gh2-pm27-44gj.json +++ b/advisories/unreviewed/2022/05/GHSA-6gh2-pm27-44gj/GHSA-6gh2-pm27-44gj.json @@ -7,12 +7,8 @@ "CVE-2011-5290" ], "details": "The SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100_EDA1811C.ocx in IDrive Online Backup 3.4.0 allows remote attackers to write to arbitrary files via a pathname in the first argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6ghq-8w3w-7q28/GHSA-6ghq-8w3w-7q28.json b/advisories/unreviewed/2022/05/GHSA-6ghq-8w3w-7q28/GHSA-6ghq-8w3w-7q28.json index bea2b755f5b..8935f091312 100644 --- a/advisories/unreviewed/2022/05/GHSA-6ghq-8w3w-7q28/GHSA-6ghq-8w3w-7q28.json +++ b/advisories/unreviewed/2022/05/GHSA-6ghq-8w3w-7q28/GHSA-6ghq-8w3w-7q28.json @@ -7,12 +7,8 @@ "CVE-2015-0914" ], "details": "EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6h32-4p7v-9572/GHSA-6h32-4p7v-9572.json b/advisories/unreviewed/2022/05/GHSA-6h32-4p7v-9572/GHSA-6h32-4p7v-9572.json index 58f5134b437..754f3da1020 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h32-4p7v-9572/GHSA-6h32-4p7v-9572.json +++ b/advisories/unreviewed/2022/05/GHSA-6h32-4p7v-9572/GHSA-6h32-4p7v-9572.json @@ -7,12 +7,8 @@ "CVE-2011-2727" ], "details": "The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jjp-88fv-mj7g/GHSA-6jjp-88fv-mj7g.json b/advisories/unreviewed/2022/05/GHSA-6jjp-88fv-mj7g/GHSA-6jjp-88fv-mj7g.json index b25eed38088..e7761272eb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jjp-88fv-mj7g/GHSA-6jjp-88fv-mj7g.json +++ b/advisories/unreviewed/2022/05/GHSA-6jjp-88fv-mj7g/GHSA-6jjp-88fv-mj7g.json @@ -7,12 +7,8 @@ "CVE-2014-9398" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the mashtlb_twitter_username parameter in the twitter-liveblog.php page to wp-admin/options-general.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6m6w-fm4p-c28p/GHSA-6m6w-fm4p-c28p.json b/advisories/unreviewed/2022/05/GHSA-6m6w-fm4p-c28p/GHSA-6m6w-fm4p-c28p.json index fcea9a635ee..4863bfdddae 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m6w-fm4p-c28p/GHSA-6m6w-fm4p-c28p.json +++ b/advisories/unreviewed/2022/05/GHSA-6m6w-fm4p-c28p/GHSA-6m6w-fm4p-c28p.json @@ -7,12 +7,8 @@ "CVE-2015-0903" ], "details": "Buffer overflow in Saitoh Kikaku Maruo Editor 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted .hmbook file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6p98-p2jm-47xc/GHSA-6p98-p2jm-47xc.json b/advisories/unreviewed/2022/05/GHSA-6p98-p2jm-47xc/GHSA-6p98-p2jm-47xc.json index aeeefffb8b3..a2107ce86ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p98-p2jm-47xc/GHSA-6p98-p2jm-47xc.json +++ b/advisories/unreviewed/2022/05/GHSA-6p98-p2jm-47xc/GHSA-6p98-p2jm-47xc.json @@ -7,12 +7,8 @@ "CVE-2011-5289" ], "details": "The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote attackers to write to arbitrary files via a pathname in the argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6prr-pwcp-42fh/GHSA-6prr-pwcp-42fh.json b/advisories/unreviewed/2022/05/GHSA-6prr-pwcp-42fh/GHSA-6prr-pwcp-42fh.json index a09c08de1d5..123b9b9021b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6prr-pwcp-42fh/GHSA-6prr-pwcp-42fh.json +++ b/advisories/unreviewed/2022/05/GHSA-6prr-pwcp-42fh/GHSA-6prr-pwcp-42fh.json @@ -7,12 +7,8 @@ "CVE-2014-9446" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Staff client in Koha before 3.16.6 and 3.18.x before 3.18.2 allow remote attackers to inject arbitrary web script or HTML via the sort_by parameter to the (1) opac parameter in opac-search.pl or (2) intranet parameter in catalogue/search.pl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6q69-fr9m-p8qh/GHSA-6q69-fr9m-p8qh.json b/advisories/unreviewed/2022/05/GHSA-6q69-fr9m-p8qh/GHSA-6q69-fr9m-p8qh.json index cad31560b99..24c72b9a652 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q69-fr9m-p8qh/GHSA-6q69-fr9m-p8qh.json +++ b/advisories/unreviewed/2022/05/GHSA-6q69-fr9m-p8qh/GHSA-6q69-fr9m-p8qh.json @@ -7,12 +7,8 @@ "CVE-2014-8267" ], "details": "Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6r2q-685v-m7vm/GHSA-6r2q-685v-m7vm.json b/advisories/unreviewed/2022/05/GHSA-6r2q-685v-m7vm/GHSA-6r2q-685v-m7vm.json index 4c06c0ab76f..7b19b446a04 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r2q-685v-m7vm/GHSA-6r2q-685v-m7vm.json +++ b/advisories/unreviewed/2022/05/GHSA-6r2q-685v-m7vm/GHSA-6r2q-685v-m7vm.json @@ -7,12 +7,8 @@ "CVE-2015-1570" ], "details": "The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6rmw-j786-cqhp/GHSA-6rmw-j786-cqhp.json b/advisories/unreviewed/2022/05/GHSA-6rmw-j786-cqhp/GHSA-6rmw-j786-cqhp.json index 79bd4d56eb8..de7fc20189a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rmw-j786-cqhp/GHSA-6rmw-j786-cqhp.json +++ b/advisories/unreviewed/2022/05/GHSA-6rmw-j786-cqhp/GHSA-6rmw-j786-cqhp.json @@ -7,12 +7,8 @@ "CVE-2015-0894" ], "details": "SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6v7r-4g8j-8pj9/GHSA-6v7r-4g8j-8pj9.json b/advisories/unreviewed/2022/05/GHSA-6v7r-4g8j-8pj9/GHSA-6v7r-4g8j-8pj9.json index a8b2c6d262e..f6d96daed9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6v7r-4g8j-8pj9/GHSA-6v7r-4g8j-8pj9.json +++ b/advisories/unreviewed/2022/05/GHSA-6v7r-4g8j-8pj9/GHSA-6v7r-4g8j-8pj9.json @@ -7,12 +7,8 @@ "CVE-2014-8268" ], "details": "QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6vrf-5pp8-7pf9/GHSA-6vrf-5pp8-7pf9.json b/advisories/unreviewed/2022/05/GHSA-6vrf-5pp8-7pf9/GHSA-6vrf-5pp8-7pf9.json index 268bc611e7a..5393dab46ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vrf-5pp8-7pf9/GHSA-6vrf-5pp8-7pf9.json +++ b/advisories/unreviewed/2022/05/GHSA-6vrf-5pp8-7pf9/GHSA-6vrf-5pp8-7pf9.json @@ -7,12 +7,8 @@ "CVE-2014-10006" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site scripting (XSS) attacks via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/load_flv.js.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6w7r-5f8c-8jvm/GHSA-6w7r-5f8c-8jvm.json b/advisories/unreviewed/2022/05/GHSA-6w7r-5f8c-8jvm/GHSA-6w7r-5f8c-8jvm.json index c39dee32e92..a2348731ae9 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w7r-5f8c-8jvm/GHSA-6w7r-5f8c-8jvm.json +++ b/advisories/unreviewed/2022/05/GHSA-6w7r-5f8c-8jvm/GHSA-6w7r-5f8c-8jvm.json @@ -7,12 +7,8 @@ "CVE-2015-1604" ], "details": "Unrestricted file upload vulnerability in asys/site/files.php in Adminsystems CMS before 4.0.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/files/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6wc7-hw64-vxcp/GHSA-6wc7-hw64-vxcp.json b/advisories/unreviewed/2022/05/GHSA-6wc7-hw64-vxcp/GHSA-6wc7-hw64-vxcp.json index 38661f2c899..cbf188032b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wc7-hw64-vxcp/GHSA-6wc7-hw64-vxcp.json +++ b/advisories/unreviewed/2022/05/GHSA-6wc7-hw64-vxcp/GHSA-6wc7-hw64-vxcp.json @@ -7,12 +7,8 @@ "CVE-2011-5312" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Gollos 2.8 allow remote attackers to inject arbitrary web script or HTML via the returnurl parameter to (1) register.aspx, (2) publication/info.aspx, or (3) user/add.aspx, or (4) the q parameter to product/list.aspx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6x6m-mjfv-c6h2/GHSA-6x6m-mjfv-c6h2.json b/advisories/unreviewed/2022/05/GHSA-6x6m-mjfv-c6h2/GHSA-6x6m-mjfv-c6h2.json index 981aaf14274..03280fbfb42 100644 --- a/advisories/unreviewed/2022/05/GHSA-6x6m-mjfv-c6h2/GHSA-6x6m-mjfv-c6h2.json +++ b/advisories/unreviewed/2022/05/GHSA-6x6m-mjfv-c6h2/GHSA-6x6m-mjfv-c6h2.json @@ -7,12 +7,8 @@ "CVE-2013-3737" ], "details": "The MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13, when using the file-based session store (Apache::Session::File) and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and caches via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-724p-pmj5-xjvx/GHSA-724p-pmj5-xjvx.json b/advisories/unreviewed/2022/05/GHSA-724p-pmj5-xjvx/GHSA-724p-pmj5-xjvx.json index 72d6b6de6e6..24f600d76ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-724p-pmj5-xjvx/GHSA-724p-pmj5-xjvx.json +++ b/advisories/unreviewed/2022/05/GHSA-724p-pmj5-xjvx/GHSA-724p-pmj5-xjvx.json @@ -7,12 +7,8 @@ "CVE-2014-7247" ], "details": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-72jf-24fc-r5xq/GHSA-72jf-24fc-r5xq.json b/advisories/unreviewed/2022/05/GHSA-72jf-24fc-r5xq/GHSA-72jf-24fc-r5xq.json index 00861471044..5a5b536a766 100644 --- a/advisories/unreviewed/2022/05/GHSA-72jf-24fc-r5xq/GHSA-72jf-24fc-r5xq.json +++ b/advisories/unreviewed/2022/05/GHSA-72jf-24fc-r5xq/GHSA-72jf-24fc-r5xq.json @@ -7,12 +7,8 @@ "CVE-2015-0136" ], "details": "powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-72p5-q5c2-xpr7/GHSA-72p5-q5c2-xpr7.json b/advisories/unreviewed/2022/05/GHSA-72p5-q5c2-xpr7/GHSA-72p5-q5c2-xpr7.json index e84c697ee14..196cb306841 100644 --- a/advisories/unreviewed/2022/05/GHSA-72p5-q5c2-xpr7/GHSA-72p5-q5c2-xpr7.json +++ b/advisories/unreviewed/2022/05/GHSA-72p5-q5c2-xpr7/GHSA-72p5-q5c2-xpr7.json @@ -7,12 +7,8 @@ "CVE-2011-5287" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in HESK before 2.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) hesk_settings[tmp_title] or (2) hesklang[ENCODING] parameter to inc/header.inc.php; the hesklang[attempt] parameter to (3) inc/assignment_search.inc.php, (4) inc/attachments.inc.php, (5) inc/common.inc.php, (6) inc/database.inc.php, (7) inc/prepare_ticket_search.inc.php, (8) inc/print_tickets.inc.php, (9) inc/show_admin_nav.inc.php, (10) inc/show_search_form.inc.php, or (11) inc/ticket_list.inc.php; or (12) the PATH_INFO to language/en/text.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7372-r443-x5p7/GHSA-7372-r443-x5p7.json b/advisories/unreviewed/2022/05/GHSA-7372-r443-x5p7/GHSA-7372-r443-x5p7.json index dc50ed587d9..0ede86e8c28 100644 --- a/advisories/unreviewed/2022/05/GHSA-7372-r443-x5p7/GHSA-7372-r443-x5p7.json +++ b/advisories/unreviewed/2022/05/GHSA-7372-r443-x5p7/GHSA-7372-r443-x5p7.json @@ -7,12 +7,8 @@ "CVE-2015-1581" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the Mobile Domain plugin 1.5.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) domain, (3) text, (4) font, (5) fontcolor, (6) color, or (7) padding parameter in an add-domain action in the mobile-domain page to wp-admin/options-general.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7477-3362-gvv3/GHSA-7477-3362-gvv3.json b/advisories/unreviewed/2022/05/GHSA-7477-3362-gvv3/GHSA-7477-3362-gvv3.json index f89a784a719..73f80b56575 100644 --- a/advisories/unreviewed/2022/05/GHSA-7477-3362-gvv3/GHSA-7477-3362-gvv3.json +++ b/advisories/unreviewed/2022/05/GHSA-7477-3362-gvv3/GHSA-7477-3362-gvv3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -51,9 +49,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7477-j2vf-36wv/GHSA-7477-j2vf-36wv.json b/advisories/unreviewed/2022/05/GHSA-7477-j2vf-36wv/GHSA-7477-j2vf-36wv.json index 123096267fd..8a551cda98b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7477-j2vf-36wv/GHSA-7477-j2vf-36wv.json +++ b/advisories/unreviewed/2022/05/GHSA-7477-j2vf-36wv/GHSA-7477-j2vf-36wv.json @@ -7,12 +7,8 @@ "CVE-2015-3379" ], "details": "The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to the default views configurations, which allows remote authenticated users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-747c-3wrr-q63m/GHSA-747c-3wrr-q63m.json b/advisories/unreviewed/2022/05/GHSA-747c-3wrr-q63m/GHSA-747c-3wrr-q63m.json index 7ee0c290f94..b601bafe8a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-747c-3wrr-q63m/GHSA-747c-3wrr-q63m.json +++ b/advisories/unreviewed/2022/05/GHSA-747c-3wrr-q63m/GHSA-747c-3wrr-q63m.json @@ -7,12 +7,8 @@ "CVE-2014-9301" ], "details": "Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-74wx-cgv2-vqc6/GHSA-74wx-cgv2-vqc6.json b/advisories/unreviewed/2022/05/GHSA-74wx-cgv2-vqc6/GHSA-74wx-cgv2-vqc6.json index 8d567837b80..fce0bfa68c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-74wx-cgv2-vqc6/GHSA-74wx-cgv2-vqc6.json +++ b/advisories/unreviewed/2022/05/GHSA-74wx-cgv2-vqc6/GHSA-74wx-cgv2-vqc6.json @@ -7,12 +7,8 @@ "CVE-2015-1397" ], "details": "SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularity[field_expr] parameter when the popularity[from] or popularity[to] parameter is set.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-75xc-rff6-hh5r/GHSA-75xc-rff6-hh5r.json b/advisories/unreviewed/2022/05/GHSA-75xc-rff6-hh5r/GHSA-75xc-rff6-hh5r.json index f04abc156b3..97206c98f55 100644 --- a/advisories/unreviewed/2022/05/GHSA-75xc-rff6-hh5r/GHSA-75xc-rff6-hh5r.json +++ b/advisories/unreviewed/2022/05/GHSA-75xc-rff6-hh5r/GHSA-75xc-rff6-hh5r.json @@ -7,12 +7,8 @@ "CVE-2014-8175" ], "details": "Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraging an account defined in the users.properties file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-76m6-h6vf-x33v/GHSA-76m6-h6vf-x33v.json b/advisories/unreviewed/2022/05/GHSA-76m6-h6vf-x33v/GHSA-76m6-h6vf-x33v.json index 5508810f824..ba685d00242 100644 --- a/advisories/unreviewed/2022/05/GHSA-76m6-h6vf-x33v/GHSA-76m6-h6vf-x33v.json +++ b/advisories/unreviewed/2022/05/GHSA-76m6-h6vf-x33v/GHSA-76m6-h6vf-x33v.json @@ -7,12 +7,8 @@ "CVE-2014-0028" ], "details": "libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-77mj-72fj-fgxg/GHSA-77mj-72fj-fgxg.json b/advisories/unreviewed/2022/05/GHSA-77mj-72fj-fgxg/GHSA-77mj-72fj-fgxg.json index ad20eb557c2..73ab7b145f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-77mj-72fj-fgxg/GHSA-77mj-72fj-fgxg.json +++ b/advisories/unreviewed/2022/05/GHSA-77mj-72fj-fgxg/GHSA-77mj-72fj-fgxg.json @@ -7,12 +7,8 @@ "CVE-2015-1455" ], "details": "Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-78gh-4h95-c4v2/GHSA-78gh-4h95-c4v2.json b/advisories/unreviewed/2022/05/GHSA-78gh-4h95-c4v2/GHSA-78gh-4h95-c4v2.json index ffc69e46fa8..609741be83c 100644 --- a/advisories/unreviewed/2022/05/GHSA-78gh-4h95-c4v2/GHSA-78gh-4h95-c4v2.json +++ b/advisories/unreviewed/2022/05/GHSA-78gh-4h95-c4v2/GHSA-78gh-4h95-c4v2.json @@ -7,12 +7,8 @@ "CVE-2011-5313" ], "details": "Multiple SQL injection vulnerabilities in includes/password.php in Redaxscript 0.3.2 allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) password parameter to the password_reset program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-792h-j2jm-mf8x/GHSA-792h-j2jm-mf8x.json b/advisories/unreviewed/2022/05/GHSA-792h-j2jm-mf8x/GHSA-792h-j2jm-mf8x.json index 9dd56d245eb..62174c8d726 100644 --- a/advisories/unreviewed/2022/05/GHSA-792h-j2jm-mf8x/GHSA-792h-j2jm-mf8x.json +++ b/advisories/unreviewed/2022/05/GHSA-792h-j2jm-mf8x/GHSA-792h-j2jm-mf8x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7967-g4mf-2w52/GHSA-7967-g4mf-2w52.json b/advisories/unreviewed/2022/05/GHSA-7967-g4mf-2w52/GHSA-7967-g4mf-2w52.json index 0cd431ad671..13282a2eac4 100644 --- a/advisories/unreviewed/2022/05/GHSA-7967-g4mf-2w52/GHSA-7967-g4mf-2w52.json +++ b/advisories/unreviewed/2022/05/GHSA-7967-g4mf-2w52/GHSA-7967-g4mf-2w52.json @@ -7,12 +7,8 @@ "CVE-2014-0764" ], "details": "Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7c84-xmm4-5pcv/GHSA-7c84-xmm4-5pcv.json b/advisories/unreviewed/2022/05/GHSA-7c84-xmm4-5pcv/GHSA-7c84-xmm4-5pcv.json index c965098815b..d9373ab61c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c84-xmm4-5pcv/GHSA-7c84-xmm4-5pcv.json +++ b/advisories/unreviewed/2022/05/GHSA-7c84-xmm4-5pcv/GHSA-7c84-xmm4-5pcv.json @@ -7,12 +7,8 @@ "CVE-2015-1471" ], "details": "SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7cxr-6g78-9f3p/GHSA-7cxr-6g78-9f3p.json b/advisories/unreviewed/2022/05/GHSA-7cxr-6g78-9f3p/GHSA-7cxr-6g78-9f3p.json index 57f6605d93b..f09cf726549 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cxr-6g78-9f3p/GHSA-7cxr-6g78-9f3p.json +++ b/advisories/unreviewed/2022/05/GHSA-7cxr-6g78-9f3p/GHSA-7cxr-6g78-9f3p.json @@ -7,12 +7,8 @@ "CVE-2014-8733" ], "details": "Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7f48-7whf-6c52/GHSA-7f48-7whf-6c52.json b/advisories/unreviewed/2022/05/GHSA-7f48-7whf-6c52/GHSA-7f48-7whf-6c52.json index ff523152c23..e9e53c0e171 100644 --- a/advisories/unreviewed/2022/05/GHSA-7f48-7whf-6c52/GHSA-7f48-7whf-6c52.json +++ b/advisories/unreviewed/2022/05/GHSA-7f48-7whf-6c52/GHSA-7f48-7whf-6c52.json @@ -7,12 +7,8 @@ "CVE-2014-3065" ], "details": "Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7ff4-j347-7wj6/GHSA-7ff4-j347-7wj6.json b/advisories/unreviewed/2022/05/GHSA-7ff4-j347-7wj6/GHSA-7ff4-j347-7wj6.json index 850b7d2114b..59dd7c63ea2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7ff4-j347-7wj6/GHSA-7ff4-j347-7wj6.json +++ b/advisories/unreviewed/2022/05/GHSA-7ff4-j347-7wj6/GHSA-7ff4-j347-7wj6.json @@ -7,12 +7,8 @@ "CVE-2014-8115" ], "details": "The default authorization constrains in KIE Workbench 6.0.x allows remote authenticated users to read or write to arbitrary files, bypass intended access restrictions, and possibly have other unspecified impact via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7fj9-wg8v-v4f2/GHSA-7fj9-wg8v-v4f2.json b/advisories/unreviewed/2022/05/GHSA-7fj9-wg8v-v4f2/GHSA-7fj9-wg8v-v4f2.json index 56e63a0cb96..8f815394ff5 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fj9-wg8v-v4f2/GHSA-7fj9-wg8v-v4f2.json +++ b/advisories/unreviewed/2022/05/GHSA-7fj9-wg8v-v4f2/GHSA-7fj9-wg8v-v4f2.json @@ -7,12 +7,8 @@ "CVE-2014-5403" ], "details": "Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7frw-vqvw-65vj/GHSA-7frw-vqvw-65vj.json b/advisories/unreviewed/2022/05/GHSA-7frw-vqvw-65vj/GHSA-7frw-vqvw-65vj.json index ad465053dcc..9346c68ffff 100644 --- a/advisories/unreviewed/2022/05/GHSA-7frw-vqvw-65vj/GHSA-7frw-vqvw-65vj.json +++ b/advisories/unreviewed/2022/05/GHSA-7frw-vqvw-65vj/GHSA-7frw-vqvw-65vj.json @@ -7,12 +7,8 @@ "CVE-2014-6384" ], "details": "Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D15, 12.3 before 12.3R9, 13.1 before 13.1R4-S3, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 does not properly handle double quotes in authorization attributes in the TACACS+ configuration, which allows local users to bypass the security policy and execute commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7h76-vwxh-8g2x/GHSA-7h76-vwxh-8g2x.json b/advisories/unreviewed/2022/05/GHSA-7h76-vwxh-8g2x/GHSA-7h76-vwxh-8g2x.json index 05c1de22467..b1dca283480 100644 --- a/advisories/unreviewed/2022/05/GHSA-7h76-vwxh-8g2x/GHSA-7h76-vwxh-8g2x.json +++ b/advisories/unreviewed/2022/05/GHSA-7h76-vwxh-8g2x/GHSA-7h76-vwxh-8g2x.json @@ -7,12 +7,8 @@ "CVE-2014-9507" ], "details": "MediaWiki 1.21.x, 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgContentHandlerUseDB is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks by setting the content model for a revision to JS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7jw8-8g5w-f8mh/GHSA-7jw8-8g5w-f8mh.json b/advisories/unreviewed/2022/05/GHSA-7jw8-8g5w-f8mh/GHSA-7jw8-8g5w-f8mh.json index 9f06db7a214..00a50be39ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jw8-8g5w-f8mh/GHSA-7jw8-8g5w-f8mh.json +++ b/advisories/unreviewed/2022/05/GHSA-7jw8-8g5w-f8mh/GHSA-7jw8-8g5w-f8mh.json @@ -7,12 +7,8 @@ "CVE-2015-1596" ], "details": "The Siemens SPCanywhere application for Android and iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7m49-jjgq-fmqf/GHSA-7m49-jjgq-fmqf.json b/advisories/unreviewed/2022/05/GHSA-7m49-jjgq-fmqf/GHSA-7m49-jjgq-fmqf.json index 448e78c3e13..afecb0b1fe4 100644 --- a/advisories/unreviewed/2022/05/GHSA-7m49-jjgq-fmqf/GHSA-7m49-jjgq-fmqf.json +++ b/advisories/unreviewed/2022/05/GHSA-7m49-jjgq-fmqf/GHSA-7m49-jjgq-fmqf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7m6m-38f5-wg3j/GHSA-7m6m-38f5-wg3j.json b/advisories/unreviewed/2022/05/GHSA-7m6m-38f5-wg3j/GHSA-7m6m-38f5-wg3j.json index 853550dadca..db5ef61f652 100644 --- a/advisories/unreviewed/2022/05/GHSA-7m6m-38f5-wg3j/GHSA-7m6m-38f5-wg3j.json +++ b/advisories/unreviewed/2022/05/GHSA-7m6m-38f5-wg3j/GHSA-7m6m-38f5-wg3j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7m6v-2369-j7f2/GHSA-7m6v-2369-j7f2.json b/advisories/unreviewed/2022/05/GHSA-7m6v-2369-j7f2/GHSA-7m6v-2369-j7f2.json index c4daca1d720..b56544a82cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-7m6v-2369-j7f2/GHSA-7m6v-2369-j7f2.json +++ b/advisories/unreviewed/2022/05/GHSA-7m6v-2369-j7f2/GHSA-7m6v-2369-j7f2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7m98-6gvg-8j73/GHSA-7m98-6gvg-8j73.json b/advisories/unreviewed/2022/05/GHSA-7m98-6gvg-8j73/GHSA-7m98-6gvg-8j73.json index 18a0910b404..42ae0b02425 100644 --- a/advisories/unreviewed/2022/05/GHSA-7m98-6gvg-8j73/GHSA-7m98-6gvg-8j73.json +++ b/advisories/unreviewed/2022/05/GHSA-7m98-6gvg-8j73/GHSA-7m98-6gvg-8j73.json @@ -7,12 +7,8 @@ "CVE-2014-1905" ], "details": "Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, and then accessing the file via a direct request to a wp-content/plugins/videowhisper-live-streaming-integration/ls/snapshots/ pathname, as demonstrated by a .php.jpg filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mfj-2v57-x86j/GHSA-7mfj-2v57-x86j.json b/advisories/unreviewed/2022/05/GHSA-7mfj-2v57-x86j/GHSA-7mfj-2v57-x86j.json index 1ecfc1dd67f..7c9fcee91c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mfj-2v57-x86j/GHSA-7mfj-2v57-x86j.json +++ b/advisories/unreviewed/2022/05/GHSA-7mfj-2v57-x86j/GHSA-7mfj-2v57-x86j.json @@ -7,12 +7,8 @@ "CVE-2015-5455" ], "details": "Cross-site scripting (XSS) vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to install/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mh2-4rfm-qrpw/GHSA-7mh2-4rfm-qrpw.json b/advisories/unreviewed/2022/05/GHSA-7mh2-4rfm-qrpw/GHSA-7mh2-4rfm-qrpw.json index d11ca742a4a..1ab9ac0ec37 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mh2-4rfm-qrpw/GHSA-7mh2-4rfm-qrpw.json +++ b/advisories/unreviewed/2022/05/GHSA-7mh2-4rfm-qrpw/GHSA-7mh2-4rfm-qrpw.json @@ -7,12 +7,8 @@ "CVE-2015-2769" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7pwm-xh4r-gcg3/GHSA-7pwm-xh4r-gcg3.json b/advisories/unreviewed/2022/05/GHSA-7pwm-xh4r-gcg3/GHSA-7pwm-xh4r-gcg3.json index f67788e2795..2dbf55186d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pwm-xh4r-gcg3/GHSA-7pwm-xh4r-gcg3.json +++ b/advisories/unreviewed/2022/05/GHSA-7pwm-xh4r-gcg3/GHSA-7pwm-xh4r-gcg3.json @@ -7,12 +7,8 @@ "CVE-2014-8672" ], "details": "Cross-site scripting (XSS) vulnerability in the RewardingYourself application for Android and BlackBerry OS allows remote attackers to inject arbitrary web script or HTML via a crafted QR code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7qcc-4wfp-2fj5/GHSA-7qcc-4wfp-2fj5.json b/advisories/unreviewed/2022/05/GHSA-7qcc-4wfp-2fj5/GHSA-7qcc-4wfp-2fj5.json index f580223eb5c..ef8462d64c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qcc-4wfp-2fj5/GHSA-7qcc-4wfp-2fj5.json +++ b/advisories/unreviewed/2022/05/GHSA-7qcc-4wfp-2fj5/GHSA-7qcc-4wfp-2fj5.json @@ -7,12 +7,8 @@ "CVE-2012-4398" ], "details": "The __request_module function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service (memory consumption) via a crafted application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7rmj-95p6-6864/GHSA-7rmj-95p6-6864.json b/advisories/unreviewed/2022/05/GHSA-7rmj-95p6-6864/GHSA-7rmj-95p6-6864.json index ca529742aa6..f64add35909 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rmj-95p6-6864/GHSA-7rmj-95p6-6864.json +++ b/advisories/unreviewed/2022/05/GHSA-7rmj-95p6-6864/GHSA-7rmj-95p6-6864.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7rwv-vwp5-wfxw/GHSA-7rwv-vwp5-wfxw.json b/advisories/unreviewed/2022/05/GHSA-7rwv-vwp5-wfxw/GHSA-7rwv-vwp5-wfxw.json index a51e56e3faa..f84d366b3da 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rwv-vwp5-wfxw/GHSA-7rwv-vwp5-wfxw.json +++ b/advisories/unreviewed/2022/05/GHSA-7rwv-vwp5-wfxw/GHSA-7rwv-vwp5-wfxw.json @@ -7,12 +7,8 @@ "CVE-2014-9689" ], "details": "content/renderer/device_sensors/device_orientation_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that listens for ondeviceorientation events, a different vulnerability than CVE-2015-1231.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7vh4-m9mj-3v2r/GHSA-7vh4-m9mj-3v2r.json b/advisories/unreviewed/2022/05/GHSA-7vh4-m9mj-3v2r/GHSA-7vh4-m9mj-3v2r.json index 85302805b83..3f585a6abd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vh4-m9mj-3v2r/GHSA-7vh4-m9mj-3v2r.json +++ b/advisories/unreviewed/2022/05/GHSA-7vh4-m9mj-3v2r/GHSA-7vh4-m9mj-3v2r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7vjj-gj5f-v5h6/GHSA-7vjj-gj5f-v5h6.json b/advisories/unreviewed/2022/05/GHSA-7vjj-gj5f-v5h6/GHSA-7vjj-gj5f-v5h6.json index f396d1a9761..fa5dabeae52 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vjj-gj5f-v5h6/GHSA-7vjj-gj5f-v5h6.json +++ b/advisories/unreviewed/2022/05/GHSA-7vjj-gj5f-v5h6/GHSA-7vjj-gj5f-v5h6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7wgh-f3wv-prq6/GHSA-7wgh-f3wv-prq6.json b/advisories/unreviewed/2022/05/GHSA-7wgh-f3wv-prq6/GHSA-7wgh-f3wv-prq6.json index d85ae422d0f..22c4a40993b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wgh-f3wv-prq6/GHSA-7wgh-f3wv-prq6.json +++ b/advisories/unreviewed/2022/05/GHSA-7wgh-f3wv-prq6/GHSA-7wgh-f3wv-prq6.json @@ -7,12 +7,8 @@ "CVE-2011-5318" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles via a save_post action to admin/news/saveNEWS_ID/, (2) modify settings via a save_post action to admin/site/save2/, or (3) modify credentials via a save_post action to admin/usersite/save2/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7wxw-9v42-w9g6/GHSA-7wxw-9v42-w9g6.json b/advisories/unreviewed/2022/05/GHSA-7wxw-9v42-w9g6/GHSA-7wxw-9v42-w9g6.json index b110b14d1fa..d924edeba54 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wxw-9v42-w9g6/GHSA-7wxw-9v42-w9g6.json +++ b/advisories/unreviewed/2022/05/GHSA-7wxw-9v42-w9g6/GHSA-7wxw-9v42-w9g6.json @@ -7,12 +7,8 @@ "CVE-2014-5256" ], "details": "Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service (memory corruption and application crash) via deep JSON objects whose parsing lets this interrupt mask an overflow of the program stack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7xqv-43pf-x9r2/GHSA-7xqv-43pf-x9r2.json b/advisories/unreviewed/2022/05/GHSA-7xqv-43pf-x9r2/GHSA-7xqv-43pf-x9r2.json index dc8a6b6da61..a2decafda72 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xqv-43pf-x9r2/GHSA-7xqv-43pf-x9r2.json +++ b/advisories/unreviewed/2022/05/GHSA-7xqv-43pf-x9r2/GHSA-7xqv-43pf-x9r2.json @@ -7,12 +7,8 @@ "CVE-2014-8925" ], "details": "Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout or insert XSS sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8258-9w54-3r97/GHSA-8258-9w54-3r97.json b/advisories/unreviewed/2022/05/GHSA-8258-9w54-3r97/GHSA-8258-9w54-3r97.json index 7369ff1aa62..cf0c539a31d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8258-9w54-3r97/GHSA-8258-9w54-3r97.json +++ b/advisories/unreviewed/2022/05/GHSA-8258-9w54-3r97/GHSA-8258-9w54-3r97.json @@ -7,12 +7,8 @@ "CVE-2014-9424" ], "details": "Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a certain length-verification error during processing of a DTLS handshake.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-83v8-g5cj-f4m7/GHSA-83v8-g5cj-f4m7.json b/advisories/unreviewed/2022/05/GHSA-83v8-g5cj-f4m7/GHSA-83v8-g5cj-f4m7.json index eefce057dfc..e7684923183 100644 --- a/advisories/unreviewed/2022/05/GHSA-83v8-g5cj-f4m7/GHSA-83v8-g5cj-f4m7.json +++ b/advisories/unreviewed/2022/05/GHSA-83v8-g5cj-f4m7/GHSA-83v8-g5cj-f4m7.json @@ -7,12 +7,8 @@ "CVE-2015-1460" ], "details": "Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-83vh-6f9v-p6j4/GHSA-83vh-6f9v-p6j4.json b/advisories/unreviewed/2022/05/GHSA-83vh-6f9v-p6j4/GHSA-83vh-6f9v-p6j4.json index 26efde3c9ae..cb75449439b 100644 --- a/advisories/unreviewed/2022/05/GHSA-83vh-6f9v-p6j4/GHSA-83vh-6f9v-p6j4.json +++ b/advisories/unreviewed/2022/05/GHSA-83vh-6f9v-p6j4/GHSA-83vh-6f9v-p6j4.json @@ -7,12 +7,8 @@ "CVE-2014-10015" ], "details": "SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-83vx-rxxm-g8g3/GHSA-83vx-rxxm-g8g3.json b/advisories/unreviewed/2022/05/GHSA-83vx-rxxm-g8g3/GHSA-83vx-rxxm-g8g3.json index 3cc47fff344..53dfea65280 100644 --- a/advisories/unreviewed/2022/05/GHSA-83vx-rxxm-g8g3/GHSA-83vx-rxxm-g8g3.json +++ b/advisories/unreviewed/2022/05/GHSA-83vx-rxxm-g8g3/GHSA-83vx-rxxm-g8g3.json @@ -7,12 +7,8 @@ "CVE-2015-0985" ], "details": "Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that modify the default user's password via a GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-847m-mg92-99r2/GHSA-847m-mg92-99r2.json b/advisories/unreviewed/2022/05/GHSA-847m-mg92-99r2/GHSA-847m-mg92-99r2.json index 1c100da54d3..31738df8d2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-847m-mg92-99r2/GHSA-847m-mg92-99r2.json +++ b/advisories/unreviewed/2022/05/GHSA-847m-mg92-99r2/GHSA-847m-mg92-99r2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84hc-7w5w-q3hv/GHSA-84hc-7w5w-q3hv.json b/advisories/unreviewed/2022/05/GHSA-84hc-7w5w-q3hv/GHSA-84hc-7w5w-q3hv.json index cfee9ff2f13..256fc86b393 100644 --- a/advisories/unreviewed/2022/05/GHSA-84hc-7w5w-q3hv/GHSA-84hc-7w5w-q3hv.json +++ b/advisories/unreviewed/2022/05/GHSA-84hc-7w5w-q3hv/GHSA-84hc-7w5w-q3hv.json @@ -7,12 +7,8 @@ "CVE-2015-1359" ], "details": "Multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted PDF document, related to an \"intra-object-overflow\" issue, a different vulnerability than CVE-2015-1205.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8579-2x6q-pv42/GHSA-8579-2x6q-pv42.json b/advisories/unreviewed/2022/05/GHSA-8579-2x6q-pv42/GHSA-8579-2x6q-pv42.json index 5fde4df8955..bab43a84ccc 100644 --- a/advisories/unreviewed/2022/05/GHSA-8579-2x6q-pv42/GHSA-8579-2x6q-pv42.json +++ b/advisories/unreviewed/2022/05/GHSA-8579-2x6q-pv42/GHSA-8579-2x6q-pv42.json @@ -7,12 +7,8 @@ "CVE-2015-1362" ], "details": "Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary code via a long string in the maker element in an XML file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-85jr-wq3p-ggcq/GHSA-85jr-wq3p-ggcq.json b/advisories/unreviewed/2022/05/GHSA-85jr-wq3p-ggcq/GHSA-85jr-wq3p-ggcq.json index e79c779a225..44941443266 100644 --- a/advisories/unreviewed/2022/05/GHSA-85jr-wq3p-ggcq/GHSA-85jr-wq3p-ggcq.json +++ b/advisories/unreviewed/2022/05/GHSA-85jr-wq3p-ggcq/GHSA-85jr-wq3p-ggcq.json @@ -7,12 +7,8 @@ "CVE-2013-7436" ], "details": "noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-85xw-3959-c57v/GHSA-85xw-3959-c57v.json b/advisories/unreviewed/2022/05/GHSA-85xw-3959-c57v/GHSA-85xw-3959-c57v.json index 2faab864bf3..99d2a230e9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-85xw-3959-c57v/GHSA-85xw-3959-c57v.json +++ b/advisories/unreviewed/2022/05/GHSA-85xw-3959-c57v/GHSA-85xw-3959-c57v.json @@ -7,12 +7,8 @@ "CVE-2011-5303" ], "details": "Cross-site scripting (XSS) vulnerability in Spitfire CMS 1.0.436 allows remote attackers to inject arbitrary web script or HTML via a cms_username cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-869p-rj24-pjcc/GHSA-869p-rj24-pjcc.json b/advisories/unreviewed/2022/05/GHSA-869p-rj24-pjcc/GHSA-869p-rj24-pjcc.json index 276322e6fe0..ed388078685 100644 --- a/advisories/unreviewed/2022/05/GHSA-869p-rj24-pjcc/GHSA-869p-rj24-pjcc.json +++ b/advisories/unreviewed/2022/05/GHSA-869p-rj24-pjcc/GHSA-869p-rj24-pjcc.json @@ -7,12 +7,8 @@ "CVE-2014-4778" ], "details": "IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in response to requests for the login page, which allows remote attackers to conduct clickjacking attacks via vectors involving a FRAME element.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-86mj-xr5g-8j98/GHSA-86mj-xr5g-8j98.json b/advisories/unreviewed/2022/05/GHSA-86mj-xr5g-8j98/GHSA-86mj-xr5g-8j98.json index 15ec0bd4d65..61c1564ac04 100644 --- a/advisories/unreviewed/2022/05/GHSA-86mj-xr5g-8j98/GHSA-86mj-xr5g-8j98.json +++ b/advisories/unreviewed/2022/05/GHSA-86mj-xr5g-8j98/GHSA-86mj-xr5g-8j98.json @@ -7,12 +7,8 @@ "CVE-2015-2088" ], "details": "Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Term Queue module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-86pg-877h-rfr2/GHSA-86pg-877h-rfr2.json b/advisories/unreviewed/2022/05/GHSA-86pg-877h-rfr2/GHSA-86pg-877h-rfr2.json index 9d5ea9aa114..628a0947aec 100644 --- a/advisories/unreviewed/2022/05/GHSA-86pg-877h-rfr2/GHSA-86pg-877h-rfr2.json +++ b/advisories/unreviewed/2022/05/GHSA-86pg-877h-rfr2/GHSA-86pg-877h-rfr2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-86wx-gxm3-m74j/GHSA-86wx-gxm3-m74j.json b/advisories/unreviewed/2022/05/GHSA-86wx-gxm3-m74j/GHSA-86wx-gxm3-m74j.json index ec411550a2c..5d6bad63087 100644 --- a/advisories/unreviewed/2022/05/GHSA-86wx-gxm3-m74j/GHSA-86wx-gxm3-m74j.json +++ b/advisories/unreviewed/2022/05/GHSA-86wx-gxm3-m74j/GHSA-86wx-gxm3-m74j.json @@ -7,12 +7,8 @@ "CVE-2015-0160" ], "details": "IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-87pg-pf34-8crf/GHSA-87pg-pf34-8crf.json b/advisories/unreviewed/2022/05/GHSA-87pg-pf34-8crf/GHSA-87pg-pf34-8crf.json index 812821f0f8c..43238d6616c 100644 --- a/advisories/unreviewed/2022/05/GHSA-87pg-pf34-8crf/GHSA-87pg-pf34-8crf.json +++ b/advisories/unreviewed/2022/05/GHSA-87pg-pf34-8crf/GHSA-87pg-pf34-8crf.json @@ -7,12 +7,8 @@ "CVE-2014-10030" ], "details": "Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-87xm-xm7r-rf42/GHSA-87xm-xm7r-rf42.json b/advisories/unreviewed/2022/05/GHSA-87xm-xm7r-rf42/GHSA-87xm-xm7r-rf42.json index 91205e409e0..3ff677951e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-87xm-xm7r-rf42/GHSA-87xm-xm7r-rf42.json +++ b/advisories/unreviewed/2022/05/GHSA-87xm-xm7r-rf42/GHSA-87xm-xm7r-rf42.json @@ -7,12 +7,8 @@ "CVE-2015-0510" ], "details": "Unspecified vulnerability in the Oracle Commerce Platform component in Oracle Commerce Platform 9.4, 10.0, and 10.2 allows remote attackers to affect integrity via vectors related to Dynamo Application Framework - HTML Admin User Interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-88h7-p773-gw4x/GHSA-88h7-p773-gw4x.json b/advisories/unreviewed/2022/05/GHSA-88h7-p773-gw4x/GHSA-88h7-p773-gw4x.json index ba2d0523a09..76e00c4924a 100644 --- a/advisories/unreviewed/2022/05/GHSA-88h7-p773-gw4x/GHSA-88h7-p773-gw4x.json +++ b/advisories/unreviewed/2022/05/GHSA-88h7-p773-gw4x/GHSA-88h7-p773-gw4x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-893j-mp6c-6pj8/GHSA-893j-mp6c-6pj8.json b/advisories/unreviewed/2022/05/GHSA-893j-mp6c-6pj8/GHSA-893j-mp6c-6pj8.json index 023d5d747b8..c38730cea35 100644 --- a/advisories/unreviewed/2022/05/GHSA-893j-mp6c-6pj8/GHSA-893j-mp6c-6pj8.json +++ b/advisories/unreviewed/2022/05/GHSA-893j-mp6c-6pj8/GHSA-893j-mp6c-6pj8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8973-h52f-9cxp/GHSA-8973-h52f-9cxp.json b/advisories/unreviewed/2022/05/GHSA-8973-h52f-9cxp/GHSA-8973-h52f-9cxp.json index da6ad65b42c..bf8bbf48cc1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8973-h52f-9cxp/GHSA-8973-h52f-9cxp.json +++ b/advisories/unreviewed/2022/05/GHSA-8973-h52f-9cxp/GHSA-8973-h52f-9cxp.json @@ -7,12 +7,8 @@ "CVE-2014-7843" ], "details": "The __clear_user function in arch/arm64/lib/clear_user.S in the Linux kernel before 3.17.4 on the ARM64 platform allows local users to cause a denial of service (system crash) by reading one byte beyond a /dev/zero page boundary.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8ccr-r6v5-rj2f/GHSA-8ccr-r6v5-rj2f.json b/advisories/unreviewed/2022/05/GHSA-8ccr-r6v5-rj2f/GHSA-8ccr-r6v5-rj2f.json index 9ac22744e18..989681478f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-8ccr-r6v5-rj2f/GHSA-8ccr-r6v5-rj2f.json +++ b/advisories/unreviewed/2022/05/GHSA-8ccr-r6v5-rj2f/GHSA-8ccr-r6v5-rj2f.json @@ -7,12 +7,8 @@ "CVE-2014-9648" ], "details": "components/navigation_interception/intercept_navigation_resource_throttle.cc in Google Chrome before 40.0.2214.91 on Android does not properly restrict use of intent: URLs to open an application after navigation to a web site, which allows remote attackers to cause a denial of service (loss of browser access to that site) via crafted JavaScript code, as demonstrated by pandora.com and the Pandora application, a different vulnerability than CVE-2015-1205.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8ch7-q54x-q3wc/GHSA-8ch7-q54x-q3wc.json b/advisories/unreviewed/2022/05/GHSA-8ch7-q54x-q3wc/GHSA-8ch7-q54x-q3wc.json index 1d634502f7b..d0f3ed19fe6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8ch7-q54x-q3wc/GHSA-8ch7-q54x-q3wc.json +++ b/advisories/unreviewed/2022/05/GHSA-8ch7-q54x-q3wc/GHSA-8ch7-q54x-q3wc.json @@ -7,12 +7,8 @@ "CVE-2014-5418" ], "details": "GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8f4f-ggxg-h39w/GHSA-8f4f-ggxg-h39w.json b/advisories/unreviewed/2022/05/GHSA-8f4f-ggxg-h39w/GHSA-8f4f-ggxg-h39w.json index 6cd9b45754b..97e895ef6e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f4f-ggxg-h39w/GHSA-8f4f-ggxg-h39w.json +++ b/advisories/unreviewed/2022/05/GHSA-8f4f-ggxg-h39w/GHSA-8f4f-ggxg-h39w.json @@ -7,12 +7,8 @@ "CVE-2014-9399" ], "details": "Cross-site request forgery (CSRF) vulnerability in the TweetScribe plugin 1.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the tweetscribe_username parameter in a save action in the tweetscribe.php page to wp-admin/options-general.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8fr8-vvgp-v7f5/GHSA-8fr8-vvgp-v7f5.json b/advisories/unreviewed/2022/05/GHSA-8fr8-vvgp-v7f5/GHSA-8fr8-vvgp-v7f5.json index 6cdf2ca1041..08e82f4df74 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fr8-vvgp-v7f5/GHSA-8fr8-vvgp-v7f5.json +++ b/advisories/unreviewed/2022/05/GHSA-8fr8-vvgp-v7f5/GHSA-8fr8-vvgp-v7f5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8h4h-9mrm-w826/GHSA-8h4h-9mrm-w826.json b/advisories/unreviewed/2022/05/GHSA-8h4h-9mrm-w826/GHSA-8h4h-9mrm-w826.json index 3c3d6421988..d4780b83966 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h4h-9mrm-w826/GHSA-8h4h-9mrm-w826.json +++ b/advisories/unreviewed/2022/05/GHSA-8h4h-9mrm-w826/GHSA-8h4h-9mrm-w826.json @@ -7,12 +7,8 @@ "CVE-2014-8802" ], "details": "The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8hxv-c53j-pffp/GHSA-8hxv-c53j-pffp.json b/advisories/unreviewed/2022/05/GHSA-8hxv-c53j-pffp/GHSA-8hxv-c53j-pffp.json index c83a22ef5ab..35e341ab9fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hxv-c53j-pffp/GHSA-8hxv-c53j-pffp.json +++ b/advisories/unreviewed/2022/05/GHSA-8hxv-c53j-pffp/GHSA-8hxv-c53j-pffp.json @@ -7,12 +7,8 @@ "CVE-2014-100039" ], "details": "mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a crafted size in an unspecified IOCTL call, which triggers an out-of-bounds read. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8jr7-f4h9-8mjr/GHSA-8jr7-f4h9-8mjr.json b/advisories/unreviewed/2022/05/GHSA-8jr7-f4h9-8mjr/GHSA-8jr7-f4h9-8mjr.json index 4a997c526f0..779a2bdd406 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jr7-f4h9-8mjr/GHSA-8jr7-f4h9-8mjr.json +++ b/advisories/unreviewed/2022/05/GHSA-8jr7-f4h9-8mjr/GHSA-8jr7-f4h9-8mjr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8mcc-pj2q-27x2/GHSA-8mcc-pj2q-27x2.json b/advisories/unreviewed/2022/05/GHSA-8mcc-pj2q-27x2/GHSA-8mcc-pj2q-27x2.json index 8ffca453180..eed37c5790a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mcc-pj2q-27x2/GHSA-8mcc-pj2q-27x2.json +++ b/advisories/unreviewed/2022/05/GHSA-8mcc-pj2q-27x2/GHSA-8mcc-pj2q-27x2.json @@ -7,12 +7,8 @@ "CVE-2011-5304" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Sodahead Polls plugin before 2.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via (1) the poll_id parameter to customizer.php or (2) the customize parameter to poll.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8r8q-88h7-vv6g/GHSA-8r8q-88h7-vv6g.json b/advisories/unreviewed/2022/05/GHSA-8r8q-88h7-vv6g/GHSA-8r8q-88h7-vv6g.json index 55aefcd63bb..5386b5123b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r8q-88h7-vv6g/GHSA-8r8q-88h7-vv6g.json +++ b/advisories/unreviewed/2022/05/GHSA-8r8q-88h7-vv6g/GHSA-8r8q-88h7-vv6g.json @@ -7,12 +7,8 @@ "CVE-2015-1500" ], "details": "Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rg6-4v99-qp5v/GHSA-8rg6-4v99-qp5v.json b/advisories/unreviewed/2022/05/GHSA-8rg6-4v99-qp5v/GHSA-8rg6-4v99-qp5v.json index bcf79c4f6cc..d3c83525071 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rg6-4v99-qp5v/GHSA-8rg6-4v99-qp5v.json +++ b/advisories/unreviewed/2022/05/GHSA-8rg6-4v99-qp5v/GHSA-8rg6-4v99-qp5v.json @@ -7,12 +7,8 @@ "CVE-2015-1361" ], "details": "platform/image-decoders/ImageFrame.h in Blink, as used in Google Chrome before 40.0.2214.91, does not initialize a variable that is used in calls to the Skia SkBitmap::setAlphaType function, which might allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document, a different vulnerability than CVE-2015-1205.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8rpr-82j7-7cc3/GHSA-8rpr-82j7-7cc3.json b/advisories/unreviewed/2022/05/GHSA-8rpr-82j7-7cc3/GHSA-8rpr-82j7-7cc3.json index 8bff8dc2e76..5be45a81633 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rpr-82j7-7cc3/GHSA-8rpr-82j7-7cc3.json +++ b/advisories/unreviewed/2022/05/GHSA-8rpr-82j7-7cc3/GHSA-8rpr-82j7-7cc3.json @@ -7,12 +7,8 @@ "CVE-2015-0103" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified data fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8v3h-64w8-c2mx/GHSA-8v3h-64w8-c2mx.json b/advisories/unreviewed/2022/05/GHSA-8v3h-64w8-c2mx/GHSA-8v3h-64w8-c2mx.json index 1b7afe4bbbe..26631db650d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v3h-64w8-c2mx/GHSA-8v3h-64w8-c2mx.json +++ b/advisories/unreviewed/2022/05/GHSA-8v3h-64w8-c2mx/GHSA-8v3h-64w8-c2mx.json @@ -7,12 +7,8 @@ "CVE-2014-7266" ], "details": "Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service (CPU consumption) via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1983.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8vp2-6q4j-5ch3/GHSA-8vp2-6q4j-5ch3.json b/advisories/unreviewed/2022/05/GHSA-8vp2-6q4j-5ch3/GHSA-8vp2-6q4j-5ch3.json index 3104b540855..aa5fabca869 100644 --- a/advisories/unreviewed/2022/05/GHSA-8vp2-6q4j-5ch3/GHSA-8vp2-6q4j-5ch3.json +++ b/advisories/unreviewed/2022/05/GHSA-8vp2-6q4j-5ch3/GHSA-8vp2-6q4j-5ch3.json @@ -7,12 +7,8 @@ "CVE-2014-7731" ], "details": "The Radio de la Cato (aka com.radio.de.la.cato) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8vrj-4vfg-m6f7/GHSA-8vrj-4vfg-m6f7.json b/advisories/unreviewed/2022/05/GHSA-8vrj-4vfg-m6f7/GHSA-8vrj-4vfg-m6f7.json index cbfcc8f2231..41a95b09333 100644 --- a/advisories/unreviewed/2022/05/GHSA-8vrj-4vfg-m6f7/GHSA-8vrj-4vfg-m6f7.json +++ b/advisories/unreviewed/2022/05/GHSA-8vrj-4vfg-m6f7/GHSA-8vrj-4vfg-m6f7.json @@ -7,12 +7,8 @@ "CVE-2015-1476" ], "details": "Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the (1) productbycat parameter to product.php, or (2) username or (3) password parameter to __admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8w74-cvch-c5gj/GHSA-8w74-cvch-c5gj.json b/advisories/unreviewed/2022/05/GHSA-8w74-cvch-c5gj/GHSA-8w74-cvch-c5gj.json index 69f05894074..224daacb486 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w74-cvch-c5gj/GHSA-8w74-cvch-c5gj.json +++ b/advisories/unreviewed/2022/05/GHSA-8w74-cvch-c5gj/GHSA-8w74-cvch-c5gj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-92r5-r4p4-4mw3/GHSA-92r5-r4p4-4mw3.json b/advisories/unreviewed/2022/05/GHSA-92r5-r4p4-4mw3/GHSA-92r5-r4p4-4mw3.json index 7ec44f8ad7b..dd4eb1028f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-92r5-r4p4-4mw3/GHSA-92r5-r4p4-4mw3.json +++ b/advisories/unreviewed/2022/05/GHSA-92r5-r4p4-4mw3/GHSA-92r5-r4p4-4mw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-938v-g6cx-wx99/GHSA-938v-g6cx-wx99.json b/advisories/unreviewed/2022/05/GHSA-938v-g6cx-wx99/GHSA-938v-g6cx-wx99.json index 5cbbbb4ab80..d33b9930629 100644 --- a/advisories/unreviewed/2022/05/GHSA-938v-g6cx-wx99/GHSA-938v-g6cx-wx99.json +++ b/advisories/unreviewed/2022/05/GHSA-938v-g6cx-wx99/GHSA-938v-g6cx-wx99.json @@ -7,12 +7,8 @@ "CVE-2015-1879" ], "details": "Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-943w-2h4r-hrm7/GHSA-943w-2h4r-hrm7.json b/advisories/unreviewed/2022/05/GHSA-943w-2h4r-hrm7/GHSA-943w-2h4r-hrm7.json index 5f8f1eb2d0d..9a461f62f6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-943w-2h4r-hrm7/GHSA-943w-2h4r-hrm7.json +++ b/advisories/unreviewed/2022/05/GHSA-943w-2h4r-hrm7/GHSA-943w-2h4r-hrm7.json @@ -7,12 +7,8 @@ "CVE-2014-9560" ], "details": "SQL injection vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-947v-7fmp-4jgf/GHSA-947v-7fmp-4jgf.json b/advisories/unreviewed/2022/05/GHSA-947v-7fmp-4jgf/GHSA-947v-7fmp-4jgf.json index 4192ad4c1f7..53a76b4bd46 100644 --- a/advisories/unreviewed/2022/05/GHSA-947v-7fmp-4jgf/GHSA-947v-7fmp-4jgf.json +++ b/advisories/unreviewed/2022/05/GHSA-947v-7fmp-4jgf/GHSA-947v-7fmp-4jgf.json @@ -7,12 +7,8 @@ "CVE-2015-0971" ], "details": "The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-95rx-r6wx-gg6q/GHSA-95rx-r6wx-gg6q.json b/advisories/unreviewed/2022/05/GHSA-95rx-r6wx-gg6q/GHSA-95rx-r6wx-gg6q.json index f4419a2bdf3..bed6229ffad 100644 --- a/advisories/unreviewed/2022/05/GHSA-95rx-r6wx-gg6q/GHSA-95rx-r6wx-gg6q.json +++ b/advisories/unreviewed/2022/05/GHSA-95rx-r6wx-gg6q/GHSA-95rx-r6wx-gg6q.json @@ -7,12 +7,8 @@ "CVE-2015-0980" ], "details": "Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-96r7-r3g8-r8v7/GHSA-96r7-r3g8-r8v7.json b/advisories/unreviewed/2022/05/GHSA-96r7-r3g8-r8v7/GHSA-96r7-r3g8-r8v7.json index 5abcd366794..cc11779464f 100644 --- a/advisories/unreviewed/2022/05/GHSA-96r7-r3g8-r8v7/GHSA-96r7-r3g8-r8v7.json +++ b/advisories/unreviewed/2022/05/GHSA-96r7-r3g8-r8v7/GHSA-96r7-r3g8-r8v7.json @@ -7,12 +7,8 @@ "CVE-2013-4866" ], "details": "The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption (water or heat) or user discomfort.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-99r4-f28q-8364/GHSA-99r4-f28q-8364.json b/advisories/unreviewed/2022/05/GHSA-99r4-f28q-8364/GHSA-99r4-f28q-8364.json index ddd56f8370f..44ef2f3104f 100644 --- a/advisories/unreviewed/2022/05/GHSA-99r4-f28q-8364/GHSA-99r4-f28q-8364.json +++ b/advisories/unreviewed/2022/05/GHSA-99r4-f28q-8364/GHSA-99r4-f28q-8364.json @@ -7,12 +7,8 @@ "CVE-2015-0906" ], "details": "Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9c8x-r6mr-gg2w/GHSA-9c8x-r6mr-gg2w.json b/advisories/unreviewed/2022/05/GHSA-9c8x-r6mr-gg2w/GHSA-9c8x-r6mr-gg2w.json index ad96c916c70..44ee7bf61f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-9c8x-r6mr-gg2w/GHSA-9c8x-r6mr-gg2w.json +++ b/advisories/unreviewed/2022/05/GHSA-9c8x-r6mr-gg2w/GHSA-9c8x-r6mr-gg2w.json @@ -7,12 +7,8 @@ "CVE-2015-1307" ], "details": "plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cjv-7h5g-g7c3/GHSA-9cjv-7h5g-g7c3.json b/advisories/unreviewed/2022/05/GHSA-9cjv-7h5g-g7c3/GHSA-9cjv-7h5g-g7c3.json index 0d575f5fad6..6aebc6d91b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cjv-7h5g-g7c3/GHSA-9cjv-7h5g-g7c3.json +++ b/advisories/unreviewed/2022/05/GHSA-9cjv-7h5g-g7c3/GHSA-9cjv-7h5g-g7c3.json @@ -7,12 +7,8 @@ "CVE-2015-2197" ], "details": "Cross-site scripting (XSS) vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a field label in the Token API.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cx9-3r2j-m5xx/GHSA-9cx9-3r2j-m5xx.json b/advisories/unreviewed/2022/05/GHSA-9cx9-3r2j-m5xx/GHSA-9cx9-3r2j-m5xx.json index fee363ee199..083eff493cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cx9-3r2j-m5xx/GHSA-9cx9-3r2j-m5xx.json +++ b/advisories/unreviewed/2022/05/GHSA-9cx9-3r2j-m5xx/GHSA-9cx9-3r2j-m5xx.json @@ -7,12 +7,8 @@ "CVE-2014-9566" ], "details": "Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) before 11.5, NetFlow Traffic Analyzer (NTA) before 4.1, Network Configuration Manager (NCM) before 7.3.2, IP Address Manager (IPAM) before 4.3, User Device Tracker (UDT) before 3.2, VoIP & Network Quality Manager (VNQM) before 4.2, Server & Application Manager (SAM) before 6.2, Web Performance Monitor (WPM) before 2.2, and possibly other Solarwinds products, allow remote authenticated users to execute arbitrary SQL commands via the (1) dir or (2) sort parameter to the (a) GetAccounts or (b) GetAccountGroups endpoint.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f92-h589-mwgg/GHSA-9f92-h589-mwgg.json b/advisories/unreviewed/2022/05/GHSA-9f92-h589-mwgg/GHSA-9f92-h589-mwgg.json index 8d7578e9d97..870161ed9f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f92-h589-mwgg/GHSA-9f92-h589-mwgg.json +++ b/advisories/unreviewed/2022/05/GHSA-9f92-h589-mwgg/GHSA-9f92-h589-mwgg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9h8w-qh9f-6j2h/GHSA-9h8w-qh9f-6j2h.json b/advisories/unreviewed/2022/05/GHSA-9h8w-qh9f-6j2h/GHSA-9h8w-qh9f-6j2h.json index 02549b951ed..8b738afabed 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h8w-qh9f-6j2h/GHSA-9h8w-qh9f-6j2h.json +++ b/advisories/unreviewed/2022/05/GHSA-9h8w-qh9f-6j2h/GHSA-9h8w-qh9f-6j2h.json @@ -7,12 +7,8 @@ "CVE-2011-5286" ], "details": "SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the rA array parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9h94-x739-g6f4/GHSA-9h94-x739-g6f4.json b/advisories/unreviewed/2022/05/GHSA-9h94-x739-g6f4/GHSA-9h94-x739-g6f4.json index b55e067f351..07620a62ec0 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h94-x739-g6f4/GHSA-9h94-x739-g6f4.json +++ b/advisories/unreviewed/2022/05/GHSA-9h94-x739-g6f4/GHSA-9h94-x739-g6f4.json @@ -7,12 +7,8 @@ "CVE-2014-4644" ], "details": "SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9hm3-jc34-7fjc/GHSA-9hm3-jc34-7fjc.json b/advisories/unreviewed/2022/05/GHSA-9hm3-jc34-7fjc/GHSA-9hm3-jc34-7fjc.json index 40cc54368f3..785e12f5595 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hm3-jc34-7fjc/GHSA-9hm3-jc34-7fjc.json +++ b/advisories/unreviewed/2022/05/GHSA-9hm3-jc34-7fjc/GHSA-9hm3-jc34-7fjc.json @@ -7,12 +7,8 @@ "CVE-2015-0880" ], "details": "Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9hqh-qqff-45p6/GHSA-9hqh-qqff-45p6.json b/advisories/unreviewed/2022/05/GHSA-9hqh-qqff-45p6/GHSA-9hqh-qqff-45p6.json index 1af7a0bdfc4..f4646a186e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hqh-qqff-45p6/GHSA-9hqh-qqff-45p6.json +++ b/advisories/unreviewed/2022/05/GHSA-9hqh-qqff-45p6/GHSA-9hqh-qqff-45p6.json @@ -7,12 +7,8 @@ "CVE-2013-6458" ], "details": "Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9hvq-3353-7ph5/GHSA-9hvq-3353-7ph5.json b/advisories/unreviewed/2022/05/GHSA-9hvq-3353-7ph5/GHSA-9hvq-3353-7ph5.json index 4ac2860e3aa..8094bced127 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hvq-3353-7ph5/GHSA-9hvq-3353-7ph5.json +++ b/advisories/unreviewed/2022/05/GHSA-9hvq-3353-7ph5/GHSA-9hvq-3353-7ph5.json @@ -7,12 +7,8 @@ "CVE-2015-1605" ], "details": "Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) GetClientPackage.aspx or (2) GetProcessedPackage.aspx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9mjw-2qw9-2fvr/GHSA-9mjw-2qw9-2fvr.json b/advisories/unreviewed/2022/05/GHSA-9mjw-2qw9-2fvr/GHSA-9mjw-2qw9-2fvr.json index c1aa8104551..5424dd7df4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mjw-2qw9-2fvr/GHSA-9mjw-2qw9-2fvr.json +++ b/advisories/unreviewed/2022/05/GHSA-9mjw-2qw9-2fvr/GHSA-9mjw-2qw9-2fvr.json @@ -7,12 +7,8 @@ "CVE-2011-5319" ], "details": "content/renderer/device_sensors/device_motion_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate accelerometer data, which makes it easier for remote attackers to capture keystrokes via a crafted web site that listens for ondevicemotion events, a different vulnerability than CVE-2015-1231.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9mvw-cqg2-v8j4/GHSA-9mvw-cqg2-v8j4.json b/advisories/unreviewed/2022/05/GHSA-9mvw-cqg2-v8j4/GHSA-9mvw-cqg2-v8j4.json index 54c64205ef9..86f638b4f9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mvw-cqg2-v8j4/GHSA-9mvw-cqg2-v8j4.json +++ b/advisories/unreviewed/2022/05/GHSA-9mvw-cqg2-v8j4/GHSA-9mvw-cqg2-v8j4.json @@ -7,12 +7,8 @@ "CVE-2014-9282" ], "details": "Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pf4-6pr2-9j32/GHSA-9pf4-6pr2-9j32.json b/advisories/unreviewed/2022/05/GHSA-9pf4-6pr2-9j32/GHSA-9pf4-6pr2-9j32.json index 2569804298a..dba9a5a31e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pf4-6pr2-9j32/GHSA-9pf4-6pr2-9j32.json +++ b/advisories/unreviewed/2022/05/GHSA-9pf4-6pr2-9j32/GHSA-9pf4-6pr2-9j32.json @@ -7,12 +7,8 @@ "CVE-2014-6134" ], "details": "IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pg7-c25m-5jpc/GHSA-9pg7-c25m-5jpc.json b/advisories/unreviewed/2022/05/GHSA-9pg7-c25m-5jpc/GHSA-9pg7-c25m-5jpc.json index d54f8ce877e..cdb28de6e75 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pg7-c25m-5jpc/GHSA-9pg7-c25m-5jpc.json +++ b/advisories/unreviewed/2022/05/GHSA-9pg7-c25m-5jpc/GHSA-9pg7-c25m-5jpc.json @@ -7,12 +7,8 @@ "CVE-2014-9146" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the (1) view, (2) id, (3) page, or (4) app parameter to the default URI or the (5) act parameter to dapur/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pm2-m7rx-v47m/GHSA-9pm2-m7rx-v47m.json b/advisories/unreviewed/2022/05/GHSA-9pm2-m7rx-v47m/GHSA-9pm2-m7rx-v47m.json index 75414183ba3..f87e0f18483 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pm2-m7rx-v47m/GHSA-9pm2-m7rx-v47m.json +++ b/advisories/unreviewed/2022/05/GHSA-9pm2-m7rx-v47m/GHSA-9pm2-m7rx-v47m.json @@ -7,12 +7,8 @@ "CVE-2015-1011" ], "details": "Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pv3-28r4-ch49/GHSA-9pv3-28r4-ch49.json b/advisories/unreviewed/2022/05/GHSA-9pv3-28r4-ch49/GHSA-9pv3-28r4-ch49.json index 0fbce54dc7e..0fc0a58a21e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pv3-28r4-ch49/GHSA-9pv3-28r4-ch49.json +++ b/advisories/unreviewed/2022/05/GHSA-9pv3-28r4-ch49/GHSA-9pv3-28r4-ch49.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9qrg-6cxh-q9gp/GHSA-9qrg-6cxh-q9gp.json b/advisories/unreviewed/2022/05/GHSA-9qrg-6cxh-q9gp/GHSA-9qrg-6cxh-q9gp.json index 70b6ccbebd9..62657574359 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qrg-6cxh-q9gp/GHSA-9qrg-6cxh-q9gp.json +++ b/advisories/unreviewed/2022/05/GHSA-9qrg-6cxh-q9gp/GHSA-9qrg-6cxh-q9gp.json @@ -7,12 +7,8 @@ "CVE-2014-9479" ], "details": "Cross-site scripting (XSS) vulnerability in the preview in the TemplateSandbox extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via the text parameter to Special:TemplateSandbox.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9qrw-j2qh-47hj/GHSA-9qrw-j2qh-47hj.json b/advisories/unreviewed/2022/05/GHSA-9qrw-j2qh-47hj/GHSA-9qrw-j2qh-47hj.json index 39b2c39e0ba..73e8da799f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qrw-j2qh-47hj/GHSA-9qrw-j2qh-47hj.json +++ b/advisories/unreviewed/2022/05/GHSA-9qrw-j2qh-47hj/GHSA-9qrw-j2qh-47hj.json @@ -7,12 +7,8 @@ "CVE-2015-3912" ], "details": "Huawei E355s Mobile WiFi with firmware before 22.158.45.02.625 and WEBUI before 13.100.04.01.625 allows remote attackers to obtain sensitive configuration information by sniffing the network or sending unspecified commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vj3-3jwh-389x/GHSA-9vj3-3jwh-389x.json b/advisories/unreviewed/2022/05/GHSA-9vj3-3jwh-389x/GHSA-9vj3-3jwh-389x.json index b916ff2133c..290a5bded3f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vj3-3jwh-389x/GHSA-9vj3-3jwh-389x.json +++ b/advisories/unreviewed/2022/05/GHSA-9vj3-3jwh-389x/GHSA-9vj3-3jwh-389x.json @@ -7,12 +7,8 @@ "CVE-2013-4273" ], "details": "The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remote authenticated users to read the comments via unspecified vectors. NOTE: this identifier was SPLIT per ADT5 due to different researcher organizations. CVE-2013-7391 was assigned for the View vector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9vww-crq7-mh6j/GHSA-9vww-crq7-mh6j.json b/advisories/unreviewed/2022/05/GHSA-9vww-crq7-mh6j/GHSA-9vww-crq7-mh6j.json index 79c77898335..86e77d4b591 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vww-crq7-mh6j/GHSA-9vww-crq7-mh6j.json +++ b/advisories/unreviewed/2022/05/GHSA-9vww-crq7-mh6j/GHSA-9vww-crq7-mh6j.json @@ -7,12 +7,8 @@ "CVE-2015-0976" ], "details": "Cross-site scripting (XSS) vulnerability in Inductive Automation Ignition 7.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9w37-w4vj-p33m/GHSA-9w37-w4vj-p33m.json b/advisories/unreviewed/2022/05/GHSA-9w37-w4vj-p33m/GHSA-9w37-w4vj-p33m.json index 776ab9d5542..7bf95d2af8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9w37-w4vj-p33m/GHSA-9w37-w4vj-p33m.json +++ b/advisories/unreviewed/2022/05/GHSA-9w37-w4vj-p33m/GHSA-9w37-w4vj-p33m.json @@ -7,12 +7,8 @@ "CVE-2015-0647" ], "details": "Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) UDP packets, aka Bug ID CSCum98371.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9w77-vr2w-558v/GHSA-9w77-vr2w-558v.json b/advisories/unreviewed/2022/05/GHSA-9w77-vr2w-558v/GHSA-9w77-vr2w-558v.json index 00560c90b39..1cf73b5ea2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-9w77-vr2w-558v/GHSA-9w77-vr2w-558v.json +++ b/advisories/unreviewed/2022/05/GHSA-9w77-vr2w-558v/GHSA-9w77-vr2w-558v.json @@ -7,12 +7,8 @@ "CVE-2012-2319" ], "details": "Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9wc3-hxvm-mpc2/GHSA-9wc3-hxvm-mpc2.json b/advisories/unreviewed/2022/05/GHSA-9wc3-hxvm-mpc2/GHSA-9wc3-hxvm-mpc2.json index b51501ab304..832c290f1cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wc3-hxvm-mpc2/GHSA-9wc3-hxvm-mpc2.json +++ b/advisories/unreviewed/2022/05/GHSA-9wc3-hxvm-mpc2/GHSA-9wc3-hxvm-mpc2.json @@ -7,12 +7,8 @@ "CVE-2014-1900" ], "details": "Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote attackers to bypass authentication and obtain sensitive information via a leading \"/./\" in a request to en/account/accedit.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9wrp-xjr2-x4qw/GHSA-9wrp-xjr2-x4qw.json b/advisories/unreviewed/2022/05/GHSA-9wrp-xjr2-x4qw/GHSA-9wrp-xjr2-x4qw.json index 061dd763bc0..2e1cebcdc33 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wrp-xjr2-x4qw/GHSA-9wrp-xjr2-x4qw.json +++ b/advisories/unreviewed/2022/05/GHSA-9wrp-xjr2-x4qw/GHSA-9wrp-xjr2-x4qw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9x2g-v43f-pj3g/GHSA-9x2g-v43f-pj3g.json b/advisories/unreviewed/2022/05/GHSA-9x2g-v43f-pj3g/GHSA-9x2g-v43f-pj3g.json index 2413d3cbf9f..8ac2b384398 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x2g-v43f-pj3g/GHSA-9x2g-v43f-pj3g.json +++ b/advisories/unreviewed/2022/05/GHSA-9x2g-v43f-pj3g/GHSA-9x2g-v43f-pj3g.json @@ -7,12 +7,8 @@ "CVE-2014-10027" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that (1) change the MAC filter restrict mode, (2) add a MAC address to the filter, or (3) remove a MAC address from the filter via a crafted request to index.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9xgq-hv63-rmpj/GHSA-9xgq-hv63-rmpj.json b/advisories/unreviewed/2022/05/GHSA-9xgq-hv63-rmpj/GHSA-9xgq-hv63-rmpj.json index 8ff5425863d..c29d6428d19 100644 --- a/advisories/unreviewed/2022/05/GHSA-9xgq-hv63-rmpj/GHSA-9xgq-hv63-rmpj.json +++ b/advisories/unreviewed/2022/05/GHSA-9xgq-hv63-rmpj/GHSA-9xgq-hv63-rmpj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c2p2-53fr-grg7/GHSA-c2p2-53fr-grg7.json b/advisories/unreviewed/2022/05/GHSA-c2p2-53fr-grg7/GHSA-c2p2-53fr-grg7.json index b13f7326a63..142ec9592f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-c2p2-53fr-grg7/GHSA-c2p2-53fr-grg7.json +++ b/advisories/unreviewed/2022/05/GHSA-c2p2-53fr-grg7/GHSA-c2p2-53fr-grg7.json @@ -7,12 +7,8 @@ "CVE-2014-8678" ], "details": "The ConfigSaveServlet servlet in ManageEngine OpUtils before build 71024 allows remote attackers to \"disclose\" files via a crafted filename, related to \"saveFile.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c382-mwfr-3hp6/GHSA-c382-mwfr-3hp6.json b/advisories/unreviewed/2022/05/GHSA-c382-mwfr-3hp6/GHSA-c382-mwfr-3hp6.json index 388ab37618f..c1fbe4941e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-c382-mwfr-3hp6/GHSA-c382-mwfr-3hp6.json +++ b/advisories/unreviewed/2022/05/GHSA-c382-mwfr-3hp6/GHSA-c382-mwfr-3hp6.json @@ -7,12 +7,8 @@ "CVE-2015-0900" ], "details": "Cross-site scripting (XSS) vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c42w-m5hw-2wxv/GHSA-c42w-m5hw-2wxv.json b/advisories/unreviewed/2022/05/GHSA-c42w-m5hw-2wxv/GHSA-c42w-m5hw-2wxv.json index eecf2f73450..1dcb25f46a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-c42w-m5hw-2wxv/GHSA-c42w-m5hw-2wxv.json +++ b/advisories/unreviewed/2022/05/GHSA-c42w-m5hw-2wxv/GHSA-c42w-m5hw-2wxv.json @@ -7,12 +7,8 @@ "CVE-2011-5291" ], "details": "The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c4fw-9cmg-96mf/GHSA-c4fw-9cmg-96mf.json b/advisories/unreviewed/2022/05/GHSA-c4fw-9cmg-96mf/GHSA-c4fw-9cmg-96mf.json index cebf9a03f0e..9806014269f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4fw-9cmg-96mf/GHSA-c4fw-9cmg-96mf.json +++ b/advisories/unreviewed/2022/05/GHSA-c4fw-9cmg-96mf/GHSA-c4fw-9cmg-96mf.json @@ -7,12 +7,8 @@ "CVE-2015-0677" ], "details": "The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6), 9.2 before 9.2(3.4), and 9.3 before 9.3(3), when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a denial of service (VPN outage or device reload) via a crafted XML document, aka Bug ID CSCus95290.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c4vr-q6g4-rm93/GHSA-c4vr-q6g4-rm93.json b/advisories/unreviewed/2022/05/GHSA-c4vr-q6g4-rm93/GHSA-c4vr-q6g4-rm93.json index 65c8fe36613..575d5ae3a27 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4vr-q6g4-rm93/GHSA-c4vr-q6g4-rm93.json +++ b/advisories/unreviewed/2022/05/GHSA-c4vr-q6g4-rm93/GHSA-c4vr-q6g4-rm93.json @@ -7,12 +7,8 @@ "CVE-2014-9372" ], "details": "Directory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password Manager Pro (PMP) before 7103 allows remote attackers to delete arbitrary files via a .. (dot dot) in a filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c55r-pfvh-5v9w/GHSA-c55r-pfvh-5v9w.json b/advisories/unreviewed/2022/05/GHSA-c55r-pfvh-5v9w/GHSA-c55r-pfvh-5v9w.json index 7656d3b57ff..74945e9c5f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-c55r-pfvh-5v9w/GHSA-c55r-pfvh-5v9w.json +++ b/advisories/unreviewed/2022/05/GHSA-c55r-pfvh-5v9w/GHSA-c55r-pfvh-5v9w.json @@ -7,12 +7,8 @@ "CVE-2014-9209" ], "details": "Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c5gm-gj7m-3h35/GHSA-c5gm-gj7m-3h35.json b/advisories/unreviewed/2022/05/GHSA-c5gm-gj7m-3h35/GHSA-c5gm-gj7m-3h35.json index f42976fde92..8ff02f5f095 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5gm-gj7m-3h35/GHSA-c5gm-gj7m-3h35.json +++ b/advisories/unreviewed/2022/05/GHSA-c5gm-gj7m-3h35/GHSA-c5gm-gj7m-3h35.json @@ -7,12 +7,8 @@ "CVE-2014-3692" ], "details": "The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c5gr-p444-69m5/GHSA-c5gr-p444-69m5.json b/advisories/unreviewed/2022/05/GHSA-c5gr-p444-69m5/GHSA-c5gr-p444-69m5.json index 06ac55c39d2..2afc5eb9a00 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5gr-p444-69m5/GHSA-c5gr-p444-69m5.json +++ b/advisories/unreviewed/2022/05/GHSA-c5gr-p444-69m5/GHSA-c5gr-p444-69m5.json @@ -7,12 +7,8 @@ "CVE-2014-8926" ], "details": "Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service (CPU consumption or application crash) via a crafted XML query, a different vulnerability than CVE-2014-8927.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c5hh-9w58-4367/GHSA-c5hh-9w58-4367.json b/advisories/unreviewed/2022/05/GHSA-c5hh-9w58-4367/GHSA-c5hh-9w58-4367.json index 3137bc92513..52af0be3139 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5hh-9w58-4367/GHSA-c5hh-9w58-4367.json +++ b/advisories/unreviewed/2022/05/GHSA-c5hh-9w58-4367/GHSA-c5hh-9w58-4367.json @@ -7,12 +7,8 @@ "CVE-2015-1040" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lrealname field in the editProfile form to index.php/home/profile; the (2) data[title] or (3) data[description] field in the addQuickItem form to index.php; the (4) \"note text\" field in the saveNote form to index.php/areas; or the (5) titleBEObject or (6) tagsArea field in the updateForm form to index.php/documents/view.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c67h-89mw-v4vj/GHSA-c67h-89mw-v4vj.json b/advisories/unreviewed/2022/05/GHSA-c67h-89mw-v4vj/GHSA-c67h-89mw-v4vj.json index 526cddd6671..4b4df01d601 100644 --- a/advisories/unreviewed/2022/05/GHSA-c67h-89mw-v4vj/GHSA-c67h-89mw-v4vj.json +++ b/advisories/unreviewed/2022/05/GHSA-c67h-89mw-v4vj/GHSA-c67h-89mw-v4vj.json @@ -7,12 +7,8 @@ "CVE-2012-1665" ], "details": "Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or (2) remote administrators to execute arbitrary SQL commands via the status parameter to admin/stats_monthly_sales.php or (3) country parameter in a process action to admin/create_account_process.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c78c-4rr3-x2m3/GHSA-c78c-4rr3-x2m3.json b/advisories/unreviewed/2022/05/GHSA-c78c-4rr3-x2m3/GHSA-c78c-4rr3-x2m3.json index 4f7ae9f1d4d..39b6229c814 100644 --- a/advisories/unreviewed/2022/05/GHSA-c78c-4rr3-x2m3/GHSA-c78c-4rr3-x2m3.json +++ b/advisories/unreviewed/2022/05/GHSA-c78c-4rr3-x2m3/GHSA-c78c-4rr3-x2m3.json @@ -7,12 +7,8 @@ "CVE-2015-0105" ], "details": "Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c7cr-fg7w-ffr5/GHSA-c7cr-fg7w-ffr5.json b/advisories/unreviewed/2022/05/GHSA-c7cr-fg7w-ffr5/GHSA-c7cr-fg7w-ffr5.json index 253c2b10cd3..36a65808eaa 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7cr-fg7w-ffr5/GHSA-c7cr-fg7w-ffr5.json +++ b/advisories/unreviewed/2022/05/GHSA-c7cr-fg7w-ffr5/GHSA-c7cr-fg7w-ffr5.json @@ -7,12 +7,8 @@ "CVE-2015-0140" ], "details": "An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c7f2-5336-87pq/GHSA-c7f2-5336-87pq.json b/advisories/unreviewed/2022/05/GHSA-c7f2-5336-87pq/GHSA-c7f2-5336-87pq.json index e1a63ef99f4..03e6f4b9e3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7f2-5336-87pq/GHSA-c7f2-5336-87pq.json +++ b/advisories/unreviewed/2022/05/GHSA-c7f2-5336-87pq/GHSA-c7f2-5336-87pq.json @@ -7,12 +7,8 @@ "CVE-2014-100035" ], "details": "SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c7rv-hg7f-px75/GHSA-c7rv-hg7f-px75.json b/advisories/unreviewed/2022/05/GHSA-c7rv-hg7f-px75/GHSA-c7rv-hg7f-px75.json index 8d3a3180ddf..85c2f56c81f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7rv-hg7f-px75/GHSA-c7rv-hg7f-px75.json +++ b/advisories/unreviewed/2022/05/GHSA-c7rv-hg7f-px75/GHSA-c7rv-hg7f-px75.json @@ -7,12 +7,8 @@ "CVE-2014-4040" ], "details": "snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c8jw-jmv9-x2gf/GHSA-c8jw-jmv9-x2gf.json b/advisories/unreviewed/2022/05/GHSA-c8jw-jmv9-x2gf/GHSA-c8jw-jmv9-x2gf.json index 287e593697b..9528f27a295 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8jw-jmv9-x2gf/GHSA-c8jw-jmv9-x2gf.json +++ b/advisories/unreviewed/2022/05/GHSA-c8jw-jmv9-x2gf/GHSA-c8jw-jmv9-x2gf.json @@ -7,12 +7,8 @@ "CVE-2015-3357" ], "details": "Cross-site scripting (XSS) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the \"access wishlists\" permission to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a log message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8qm-mw37-wjwg/GHSA-c8qm-mw37-wjwg.json b/advisories/unreviewed/2022/05/GHSA-c8qm-mw37-wjwg/GHSA-c8qm-mw37-wjwg.json index 7907a1942f5..d76a3435aca 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8qm-mw37-wjwg/GHSA-c8qm-mw37-wjwg.json +++ b/advisories/unreviewed/2022/05/GHSA-c8qm-mw37-wjwg/GHSA-c8qm-mw37-wjwg.json @@ -7,12 +7,8 @@ "CVE-2014-9254" ], "details": "bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection attacks via the code parameter in an unsubscribe action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8xf-wqwr-mjmq/GHSA-c8xf-wqwr-mjmq.json b/advisories/unreviewed/2022/05/GHSA-c8xf-wqwr-mjmq/GHSA-c8xf-wqwr-mjmq.json index d71dd229928..a5cc046e949 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8xf-wqwr-mjmq/GHSA-c8xf-wqwr-mjmq.json +++ b/advisories/unreviewed/2022/05/GHSA-c8xf-wqwr-mjmq/GHSA-c8xf-wqwr-mjmq.json @@ -7,12 +7,8 @@ "CVE-2015-0867" ], "details": "Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows remote attackers to read arbitrary files via a crafted filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c9f5-5gcg-ffrp/GHSA-c9f5-5gcg-ffrp.json b/advisories/unreviewed/2022/05/GHSA-c9f5-5gcg-ffrp/GHSA-c9f5-5gcg-ffrp.json index 6d14c61d903..1759a85542d 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9f5-5gcg-ffrp/GHSA-c9f5-5gcg-ffrp.json +++ b/advisories/unreviewed/2022/05/GHSA-c9f5-5gcg-ffrp/GHSA-c9f5-5gcg-ffrp.json @@ -7,12 +7,8 @@ "CVE-2014-6228" ], "details": "Integer overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted arguments to the chunk_split function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c9w9-m25r-3pcx/GHSA-c9w9-m25r-3pcx.json b/advisories/unreviewed/2022/05/GHSA-c9w9-m25r-3pcx/GHSA-c9w9-m25r-3pcx.json index cdacb2c3127..17dd3ff299e 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9w9-m25r-3pcx/GHSA-c9w9-m25r-3pcx.json +++ b/advisories/unreviewed/2022/05/GHSA-c9w9-m25r-3pcx/GHSA-c9w9-m25r-3pcx.json @@ -7,12 +7,8 @@ "CVE-2015-1576" ], "details": "Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter to (1) copy2.php, (2) localize.php, (3) metai.php, (4) nc.php, (5) new2.php, or (6) rename2.php in u5admin/; (7) c parameter to u5admin/editor.php; (8) typ parameter to u5admin/meta2.php; or (9) newname parameter to u5admin/rename2.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cf2w-8rhm-45w6/GHSA-cf2w-8rhm-45w6.json b/advisories/unreviewed/2022/05/GHSA-cf2w-8rhm-45w6/GHSA-cf2w-8rhm-45w6.json index 269b6bbc80c..36de09efd63 100644 --- a/advisories/unreviewed/2022/05/GHSA-cf2w-8rhm-45w6/GHSA-cf2w-8rhm-45w6.json +++ b/advisories/unreviewed/2022/05/GHSA-cf2w-8rhm-45w6/GHSA-cf2w-8rhm-45w6.json @@ -7,12 +7,8 @@ "CVE-2015-0995" ], "details": "Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cfh9-r7f4-q6vh/GHSA-cfh9-r7f4-q6vh.json b/advisories/unreviewed/2022/05/GHSA-cfh9-r7f4-q6vh/GHSA-cfh9-r7f4-q6vh.json index b26100a03d7..297cfc90da4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfh9-r7f4-q6vh/GHSA-cfh9-r7f4-q6vh.json +++ b/advisories/unreviewed/2022/05/GHSA-cfh9-r7f4-q6vh/GHSA-cfh9-r7f4-q6vh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgvm-m8vm-pwf2/GHSA-cgvm-m8vm-pwf2.json b/advisories/unreviewed/2022/05/GHSA-cgvm-m8vm-pwf2/GHSA-cgvm-m8vm-pwf2.json index 2b260a68fd1..c0417ff1b0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgvm-m8vm-pwf2/GHSA-cgvm-m8vm-pwf2.json +++ b/advisories/unreviewed/2022/05/GHSA-cgvm-m8vm-pwf2/GHSA-cgvm-m8vm-pwf2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ch25-8vj3-jr7x/GHSA-ch25-8vj3-jr7x.json b/advisories/unreviewed/2022/05/GHSA-ch25-8vj3-jr7x/GHSA-ch25-8vj3-jr7x.json index 3bc06c29169..a763e9c09bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-ch25-8vj3-jr7x/GHSA-ch25-8vj3-jr7x.json +++ b/advisories/unreviewed/2022/05/GHSA-ch25-8vj3-jr7x/GHSA-ch25-8vj3-jr7x.json @@ -7,12 +7,8 @@ "CVE-2014-9587" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to (1) address book operations or the (2) ACL or (3) Managesieve plugins.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ch4g-m2mp-wfj8/GHSA-ch4g-m2mp-wfj8.json b/advisories/unreviewed/2022/05/GHSA-ch4g-m2mp-wfj8/GHSA-ch4g-m2mp-wfj8.json index 0ee211daf8a..641ee1b308c 100644 --- a/advisories/unreviewed/2022/05/GHSA-ch4g-m2mp-wfj8/GHSA-ch4g-m2mp-wfj8.json +++ b/advisories/unreviewed/2022/05/GHSA-ch4g-m2mp-wfj8/GHSA-ch4g-m2mp-wfj8.json @@ -7,12 +7,8 @@ "CVE-2014-9737" ], "details": "Open redirect vulnerability in the Language Switcher Dropdown module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a block.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ch63-v82m-94gx/GHSA-ch63-v82m-94gx.json b/advisories/unreviewed/2022/05/GHSA-ch63-v82m-94gx/GHSA-ch63-v82m-94gx.json index a7c143e6757..8c24c713447 100644 --- a/advisories/unreviewed/2022/05/GHSA-ch63-v82m-94gx/GHSA-ch63-v82m-94gx.json +++ b/advisories/unreviewed/2022/05/GHSA-ch63-v82m-94gx/GHSA-ch63-v82m-94gx.json @@ -7,12 +7,8 @@ "CVE-2015-1204" ], "details": "Cross-site scripting (XSS) vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fs[resource] parameter in the wp-slim-view-2 page to wp-admin/admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chcw-6743-7jr7/GHSA-chcw-6743-7jr7.json b/advisories/unreviewed/2022/05/GHSA-chcw-6743-7jr7/GHSA-chcw-6743-7jr7.json index f91d4091654..cd174675de9 100644 --- a/advisories/unreviewed/2022/05/GHSA-chcw-6743-7jr7/GHSA-chcw-6743-7jr7.json +++ b/advisories/unreviewed/2022/05/GHSA-chcw-6743-7jr7/GHSA-chcw-6743-7jr7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chfm-w5r6-r24m/GHSA-chfm-w5r6-r24m.json b/advisories/unreviewed/2022/05/GHSA-chfm-w5r6-r24m/GHSA-chfm-w5r6-r24m.json index b526a4020c0..3613ff55d4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-chfm-w5r6-r24m/GHSA-chfm-w5r6-r24m.json +++ b/advisories/unreviewed/2022/05/GHSA-chfm-w5r6-r24m/GHSA-chfm-w5r6-r24m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cj4w-9xfh-m2w2/GHSA-cj4w-9xfh-m2w2.json b/advisories/unreviewed/2022/05/GHSA-cj4w-9xfh-m2w2/GHSA-cj4w-9xfh-m2w2.json index ed12f67ab63..e6b29d021a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-cj4w-9xfh-m2w2/GHSA-cj4w-9xfh-m2w2.json +++ b/advisories/unreviewed/2022/05/GHSA-cj4w-9xfh-m2w2/GHSA-cj4w-9xfh-m2w2.json @@ -7,12 +7,8 @@ "CVE-2014-8921" ], "details": "The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials by conducting a phishing attack involving an encrypted e-mail message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cj93-76vr-mmxw/GHSA-cj93-76vr-mmxw.json b/advisories/unreviewed/2022/05/GHSA-cj93-76vr-mmxw/GHSA-cj93-76vr-mmxw.json index 6c0dd4d2c31..0d8ac6aa0a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-cj93-76vr-mmxw/GHSA-cj93-76vr-mmxw.json +++ b/advisories/unreviewed/2022/05/GHSA-cj93-76vr-mmxw/GHSA-cj93-76vr-mmxw.json @@ -7,12 +7,8 @@ "CVE-2015-2293" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote attackers to hijack the authentication of certain users for requests that conduct SQL injection attacks via the (1) order_by or (2) order parameter in the wpseo_bulk-editor page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjjp-rwp6-p4pv/GHSA-cjjp-rwp6-p4pv.json b/advisories/unreviewed/2022/05/GHSA-cjjp-rwp6-p4pv/GHSA-cjjp-rwp6-p4pv.json index 5433ed90849..326fa8c58ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjjp-rwp6-p4pv/GHSA-cjjp-rwp6-p4pv.json +++ b/advisories/unreviewed/2022/05/GHSA-cjjp-rwp6-p4pv/GHSA-cjjp-rwp6-p4pv.json @@ -7,12 +7,8 @@ "CVE-2015-1363" ], "details": "Cross-site scripting (XSS) vulnerability in Free Reprintables ArticleFR 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter to search/v/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjp4-r8mp-227x/GHSA-cjp4-r8mp-227x.json b/advisories/unreviewed/2022/05/GHSA-cjp4-r8mp-227x/GHSA-cjp4-r8mp-227x.json index 2f50432f997..91310bf627a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjp4-r8mp-227x/GHSA-cjp4-r8mp-227x.json +++ b/advisories/unreviewed/2022/05/GHSA-cjp4-r8mp-227x/GHSA-cjp4-r8mp-227x.json @@ -7,12 +7,8 @@ "CVE-2015-0992" ], "details": "Inductive Automation Ignition 7.7.2 stores cleartext OPC Server credentials, which allows local users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq2x-f2q5-8gm2/GHSA-cq2x-f2q5-8gm2.json b/advisories/unreviewed/2022/05/GHSA-cq2x-f2q5-8gm2/GHSA-cq2x-f2q5-8gm2.json index 9e0b076b7a0..b497bdf8b3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq2x-f2q5-8gm2/GHSA-cq2x-f2q5-8gm2.json +++ b/advisories/unreviewed/2022/05/GHSA-cq2x-f2q5-8gm2/GHSA-cq2x-f2q5-8gm2.json @@ -7,12 +7,8 @@ "CVE-2015-1360" ], "details": "Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data that is improperly handled during text drawing, related to gpu/GrBitmapTextContext.cpp and gpu/GrDistanceFieldTextContext.cpp, a different vulnerability than CVE-2015-1205.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cqq8-x3rc-74x7/GHSA-cqq8-x3rc-74x7.json b/advisories/unreviewed/2022/05/GHSA-cqq8-x3rc-74x7/GHSA-cqq8-x3rc-74x7.json index dbd4d78920a..6ea05e7c7d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqq8-x3rc-74x7/GHSA-cqq8-x3rc-74x7.json +++ b/advisories/unreviewed/2022/05/GHSA-cqq8-x3rc-74x7/GHSA-cqq8-x3rc-74x7.json @@ -7,12 +7,8 @@ "CVE-2014-7269" ], "details": "ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cr4v-rcwf-qpv3/GHSA-cr4v-rcwf-qpv3.json b/advisories/unreviewed/2022/05/GHSA-cr4v-rcwf-qpv3/GHSA-cr4v-rcwf-qpv3.json index 2855fe82d81..d06e693a329 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr4v-rcwf-qpv3/GHSA-cr4v-rcwf-qpv3.json +++ b/advisories/unreviewed/2022/05/GHSA-cr4v-rcwf-qpv3/GHSA-cr4v-rcwf-qpv3.json @@ -7,12 +7,8 @@ "CVE-2015-0915" ], "details": "Cross-site scripting (XSS) vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted attachment filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cr72-56w8-rrw3/GHSA-cr72-56w8-rrw3.json b/advisories/unreviewed/2022/05/GHSA-cr72-56w8-rrw3/GHSA-cr72-56w8-rrw3.json index f93b5d1fe33..f143bca848e 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr72-56w8-rrw3/GHSA-cr72-56w8-rrw3.json +++ b/advisories/unreviewed/2022/05/GHSA-cr72-56w8-rrw3/GHSA-cr72-56w8-rrw3.json @@ -7,12 +7,8 @@ "CVE-2013-2184" ], "details": "Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-crmx-635f-fqm6/GHSA-crmx-635f-fqm6.json b/advisories/unreviewed/2022/05/GHSA-crmx-635f-fqm6/GHSA-crmx-635f-fqm6.json index fc222137d7d..5bb01e1540b 100644 --- a/advisories/unreviewed/2022/05/GHSA-crmx-635f-fqm6/GHSA-crmx-635f-fqm6.json +++ b/advisories/unreviewed/2022/05/GHSA-crmx-635f-fqm6/GHSA-crmx-635f-fqm6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cv75-3cm8-vg66/GHSA-cv75-3cm8-vg66.json b/advisories/unreviewed/2022/05/GHSA-cv75-3cm8-vg66/GHSA-cv75-3cm8-vg66.json index aa437e3ec21..67459598e0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv75-3cm8-vg66/GHSA-cv75-3cm8-vg66.json +++ b/advisories/unreviewed/2022/05/GHSA-cv75-3cm8-vg66/GHSA-cv75-3cm8-vg66.json @@ -7,12 +7,8 @@ "CVE-2014-5211" ], "details": "Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvpw-fqmx-ggx7/GHSA-cvpw-fqmx-ggx7.json b/advisories/unreviewed/2022/05/GHSA-cvpw-fqmx-ggx7/GHSA-cvpw-fqmx-ggx7.json index ccabeadfb12..db0e7ba43e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvpw-fqmx-ggx7/GHSA-cvpw-fqmx-ggx7.json +++ b/advisories/unreviewed/2022/05/GHSA-cvpw-fqmx-ggx7/GHSA-cvpw-fqmx-ggx7.json @@ -7,12 +7,8 @@ "CVE-2014-4467" ], "details": "WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cw6x-8qwh-8q47/GHSA-cw6x-8qwh-8q47.json b/advisories/unreviewed/2022/05/GHSA-cw6x-8qwh-8q47/GHSA-cw6x-8qwh-8q47.json index e79023e25d4..0e95c1f6fcd 100644 --- a/advisories/unreviewed/2022/05/GHSA-cw6x-8qwh-8q47/GHSA-cw6x-8qwh-8q47.json +++ b/advisories/unreviewed/2022/05/GHSA-cw6x-8qwh-8q47/GHSA-cw6x-8qwh-8q47.json @@ -7,12 +7,8 @@ "CVE-2013-6457" ], "details": "The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cx5g-6x76-2jh4/GHSA-cx5g-6x76-2jh4.json b/advisories/unreviewed/2022/05/GHSA-cx5g-6x76-2jh4/GHSA-cx5g-6x76-2jh4.json index 743289579b6..b6be668bada 100644 --- a/advisories/unreviewed/2022/05/GHSA-cx5g-6x76-2jh4/GHSA-cx5g-6x76-2jh4.json +++ b/advisories/unreviewed/2022/05/GHSA-cx5g-6x76-2jh4/GHSA-cx5g-6x76-2jh4.json @@ -7,12 +7,8 @@ "CVE-2014-7293" ], "details": "Cross-site scripting (XSS) vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services (PDS) allows remote attackers to inject arbitrary web script or HTML via the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxhq-365x-27h7/GHSA-cxhq-365x-27h7.json b/advisories/unreviewed/2022/05/GHSA-cxhq-365x-27h7/GHSA-cxhq-365x-27h7.json index f18155b284a..55d04d7123a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxhq-365x-27h7/GHSA-cxhq-365x-27h7.json +++ b/advisories/unreviewed/2022/05/GHSA-cxhq-365x-27h7/GHSA-cxhq-365x-27h7.json @@ -7,12 +7,8 @@ "CVE-2014-5400" ], "details": "The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f29g-f7p5-49vf/GHSA-f29g-f7p5-49vf.json b/advisories/unreviewed/2022/05/GHSA-f29g-f7p5-49vf/GHSA-f29g-f7p5-49vf.json index 2c007c577f8..acb47a87b29 100644 --- a/advisories/unreviewed/2022/05/GHSA-f29g-f7p5-49vf/GHSA-f29g-f7p5-49vf.json +++ b/advisories/unreviewed/2022/05/GHSA-f29g-f7p5-49vf/GHSA-f29g-f7p5-49vf.json @@ -7,12 +7,8 @@ "CVE-2014-9325" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in TWiki 6.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) QUERYSTRING variable in lib/TWiki.pm or (2) QUERYPARAMSTRING variable in lib/TWiki/UI/View.pm, as demonstrated by the QUERY_STRING to do/view/Main/TWikiPreferences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f2vf-fwp8-754v/GHSA-f2vf-fwp8-754v.json b/advisories/unreviewed/2022/05/GHSA-f2vf-fwp8-754v/GHSA-f2vf-fwp8-754v.json index 92b9e7d9d0c..ea11f3a33dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2vf-fwp8-754v/GHSA-f2vf-fwp8-754v.json +++ b/advisories/unreviewed/2022/05/GHSA-f2vf-fwp8-754v/GHSA-f2vf-fwp8-754v.json @@ -7,12 +7,8 @@ "CVE-2011-5317" ], "details": "Cross-site scripting (XSS) vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f38j-5h8r-wwqf/GHSA-f38j-5h8r-wwqf.json b/advisories/unreviewed/2022/05/GHSA-f38j-5h8r-wwqf/GHSA-f38j-5h8r-wwqf.json index 76970dc9c98..afd80c5d774 100644 --- a/advisories/unreviewed/2022/05/GHSA-f38j-5h8r-wwqf/GHSA-f38j-5h8r-wwqf.json +++ b/advisories/unreviewed/2022/05/GHSA-f38j-5h8r-wwqf/GHSA-f38j-5h8r-wwqf.json @@ -7,12 +7,8 @@ "CVE-2014-9559" ], "details": "Cross-site scripting (XSS) vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTML via the query parameter to /snipsnap-search.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f47g-66v9-rjwr/GHSA-f47g-66v9-rjwr.json b/advisories/unreviewed/2022/05/GHSA-f47g-66v9-rjwr/GHSA-f47g-66v9-rjwr.json index cce24b45b31..38d00be572d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f47g-66v9-rjwr/GHSA-f47g-66v9-rjwr.json +++ b/advisories/unreviewed/2022/05/GHSA-f47g-66v9-rjwr/GHSA-f47g-66v9-rjwr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4c8-vf94-3wc7/GHSA-f4c8-vf94-3wc7.json b/advisories/unreviewed/2022/05/GHSA-f4c8-vf94-3wc7/GHSA-f4c8-vf94-3wc7.json index a2f737627f1..90732345941 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4c8-vf94-3wc7/GHSA-f4c8-vf94-3wc7.json +++ b/advisories/unreviewed/2022/05/GHSA-f4c8-vf94-3wc7/GHSA-f4c8-vf94-3wc7.json @@ -7,12 +7,8 @@ "CVE-2015-2284" ], "details": "userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f54h-2c95-465j/GHSA-f54h-2c95-465j.json b/advisories/unreviewed/2022/05/GHSA-f54h-2c95-465j/GHSA-f54h-2c95-465j.json index 5ee65a99af3..7eb1f365e4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f54h-2c95-465j/GHSA-f54h-2c95-465j.json +++ b/advisories/unreviewed/2022/05/GHSA-f54h-2c95-465j/GHSA-f54h-2c95-465j.json @@ -7,12 +7,8 @@ "CVE-2015-2244" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via the (1) param, (2) center, (3) lap, (4) termid, or (5) nyelv_id parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f74v-f2hp-gm4w/GHSA-f74v-f2hp-gm4w.json b/advisories/unreviewed/2022/05/GHSA-f74v-f2hp-gm4w/GHSA-f74v-f2hp-gm4w.json index 64c7108694a..3113932c7c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-f74v-f2hp-gm4w/GHSA-f74v-f2hp-gm4w.json +++ b/advisories/unreviewed/2022/05/GHSA-f74v-f2hp-gm4w/GHSA-f74v-f2hp-gm4w.json @@ -7,12 +7,8 @@ "CVE-2015-0912" ], "details": "EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f855-w73j-47jr/GHSA-f855-w73j-47jr.json b/advisories/unreviewed/2022/05/GHSA-f855-w73j-47jr/GHSA-f855-w73j-47jr.json index 1906487adf2..3a5fba1e843 100644 --- a/advisories/unreviewed/2022/05/GHSA-f855-w73j-47jr/GHSA-f855-w73j-47jr.json +++ b/advisories/unreviewed/2022/05/GHSA-f855-w73j-47jr/GHSA-f855-w73j-47jr.json @@ -7,12 +7,8 @@ "CVE-2015-1483" ], "details": "Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaScript code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f8hg-rhq8-h2gr/GHSA-f8hg-rhq8-h2gr.json b/advisories/unreviewed/2022/05/GHSA-f8hg-rhq8-h2gr/GHSA-f8hg-rhq8-h2gr.json index 5a08038a52a..1f50e6faf26 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8hg-rhq8-h2gr/GHSA-f8hg-rhq8-h2gr.json +++ b/advisories/unreviewed/2022/05/GHSA-f8hg-rhq8-h2gr/GHSA-f8hg-rhq8-h2gr.json @@ -7,12 +7,8 @@ "CVE-2014-8172" ], "details": "The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f8hr-c3f3-c266/GHSA-f8hr-c3f3-c266.json b/advisories/unreviewed/2022/05/GHSA-f8hr-c3f3-c266/GHSA-f8hr-c3f3-c266.json index 438fc451cf0..1a9e556cbc8 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8hr-c3f3-c266/GHSA-f8hr-c3f3-c266.json +++ b/advisories/unreviewed/2022/05/GHSA-f8hr-c3f3-c266/GHSA-f8hr-c3f3-c266.json @@ -7,12 +7,8 @@ "CVE-2015-1321" ], "details": "Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f96w-cfm9-cphc/GHSA-f96w-cfm9-cphc.json b/advisories/unreviewed/2022/05/GHSA-f96w-cfm9-cphc/GHSA-f96w-cfm9-cphc.json index d4fbe0642fd..e32bc461ec8 100644 --- a/advisories/unreviewed/2022/05/GHSA-f96w-cfm9-cphc/GHSA-f96w-cfm9-cphc.json +++ b/advisories/unreviewed/2022/05/GHSA-f96w-cfm9-cphc/GHSA-f96w-cfm9-cphc.json @@ -7,12 +7,8 @@ "CVE-2015-0707" ], "details": "Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f986-qxxg-7f4v/GHSA-f986-qxxg-7f4v.json b/advisories/unreviewed/2022/05/GHSA-f986-qxxg-7f4v/GHSA-f986-qxxg-7f4v.json index bb45a16c2c2..eda4f4675a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-f986-qxxg-7f4v/GHSA-f986-qxxg-7f4v.json +++ b/advisories/unreviewed/2022/05/GHSA-f986-qxxg-7f4v/GHSA-f986-qxxg-7f4v.json @@ -7,12 +7,8 @@ "CVE-2014-9459" ], "details": "Cross-site request forgery (CSRF) vulnerability in the AdminObserver function in e107_admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via the id parameter in an admin action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f9m9-635m-g7gh/GHSA-f9m9-635m-g7gh.json b/advisories/unreviewed/2022/05/GHSA-f9m9-635m-g7gh/GHSA-f9m9-635m-g7gh.json index da453c8f0fc..499d32c280e 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9m9-635m-g7gh/GHSA-f9m9-635m-g7gh.json +++ b/advisories/unreviewed/2022/05/GHSA-f9m9-635m-g7gh/GHSA-f9m9-635m-g7gh.json @@ -7,12 +7,8 @@ "CVE-2014-9045" ], "details": "The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fc68-f87v-4vcm/GHSA-fc68-f87v-4vcm.json b/advisories/unreviewed/2022/05/GHSA-fc68-f87v-4vcm/GHSA-fc68-f87v-4vcm.json index 4a45e309e4d..611f23e9d37 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc68-f87v-4vcm/GHSA-fc68-f87v-4vcm.json +++ b/advisories/unreviewed/2022/05/GHSA-fc68-f87v-4vcm/GHSA-fc68-f87v-4vcm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fcm7-r499-j5pw/GHSA-fcm7-r499-j5pw.json b/advisories/unreviewed/2022/05/GHSA-fcm7-r499-j5pw/GHSA-fcm7-r499-j5pw.json index 02691bcfbb8..24a75b53e0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcm7-r499-j5pw/GHSA-fcm7-r499-j5pw.json +++ b/advisories/unreviewed/2022/05/GHSA-fcm7-r499-j5pw/GHSA-fcm7-r499-j5pw.json @@ -7,12 +7,8 @@ "CVE-2014-0768" ], "details": "Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode2 argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcqx-hxf2-pghj/GHSA-fcqx-hxf2-pghj.json b/advisories/unreviewed/2022/05/GHSA-fcqx-hxf2-pghj/GHSA-fcqx-hxf2-pghj.json index 4bb17d4f9c7..1104b90a7ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcqx-hxf2-pghj/GHSA-fcqx-hxf2-pghj.json +++ b/advisories/unreviewed/2022/05/GHSA-fcqx-hxf2-pghj/GHSA-fcqx-hxf2-pghj.json @@ -7,12 +7,8 @@ "CVE-2014-7850" ], "details": "Cross-site scripting (XSS) vulnerability in the Web UI in FreeIPA 4.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to breadcrumb navigation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fffr-w5cq-wghr/GHSA-fffr-w5cq-wghr.json b/advisories/unreviewed/2022/05/GHSA-fffr-w5cq-wghr/GHSA-fffr-w5cq-wghr.json index c0c372acab7..43ee245dc0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fffr-w5cq-wghr/GHSA-fffr-w5cq-wghr.json +++ b/advisories/unreviewed/2022/05/GHSA-fffr-w5cq-wghr/GHSA-fffr-w5cq-wghr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ffj7-8wcx-cprg/GHSA-ffj7-8wcx-cprg.json b/advisories/unreviewed/2022/05/GHSA-ffj7-8wcx-cprg/GHSA-ffj7-8wcx-cprg.json index 012a51b1414..2603e2a42ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffj7-8wcx-cprg/GHSA-ffj7-8wcx-cprg.json +++ b/advisories/unreviewed/2022/05/GHSA-ffj7-8wcx-cprg/GHSA-ffj7-8wcx-cprg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ffvf-hcvh-5ccx/GHSA-ffvf-hcvh-5ccx.json b/advisories/unreviewed/2022/05/GHSA-ffvf-hcvh-5ccx/GHSA-ffvf-hcvh-5ccx.json index 64a40613f74..5dd7cfbea7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffvf-hcvh-5ccx/GHSA-ffvf-hcvh-5ccx.json +++ b/advisories/unreviewed/2022/05/GHSA-ffvf-hcvh-5ccx/GHSA-ffvf-hcvh-5ccx.json @@ -7,12 +7,8 @@ "CVE-2015-1456" ], "details": "Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug/startup/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fgq5-hpq2-g266/GHSA-fgq5-hpq2-g266.json b/advisories/unreviewed/2022/05/GHSA-fgq5-hpq2-g266/GHSA-fgq5-hpq2-g266.json index 3704b0683be..9e58472bcb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgq5-hpq2-g266/GHSA-fgq5-hpq2-g266.json +++ b/advisories/unreviewed/2022/05/GHSA-fgq5-hpq2-g266/GHSA-fgq5-hpq2-g266.json @@ -7,12 +7,8 @@ "CVE-2015-1347" ], "details": "Cross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fgvh-xmpw-4vhf/GHSA-fgvh-xmpw-4vhf.json b/advisories/unreviewed/2022/05/GHSA-fgvh-xmpw-4vhf/GHSA-fgvh-xmpw-4vhf.json index 6349908b636..176aee694e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgvh-xmpw-4vhf/GHSA-fgvh-xmpw-4vhf.json +++ b/advisories/unreviewed/2022/05/GHSA-fgvh-xmpw-4vhf/GHSA-fgvh-xmpw-4vhf.json @@ -7,12 +7,8 @@ "CVE-2014-6229" ], "details": "The HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 incorrectly expects that a certain key string uses '\\0' for termination, which allows remote attackers to obtain sensitive information by leveraging read access beyond the end of the string, and makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging truncation of a string containing an internal '\\0' character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fgw3-qp45-8h2h/GHSA-fgw3-qp45-8h2h.json b/advisories/unreviewed/2022/05/GHSA-fgw3-qp45-8h2h/GHSA-fgw3-qp45-8h2h.json index 991dff15fbf..56d211b81a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgw3-qp45-8h2h/GHSA-fgw3-qp45-8h2h.json +++ b/advisories/unreviewed/2022/05/GHSA-fgw3-qp45-8h2h/GHSA-fgw3-qp45-8h2h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fj2v-9h59-2xx6/GHSA-fj2v-9h59-2xx6.json b/advisories/unreviewed/2022/05/GHSA-fj2v-9h59-2xx6/GHSA-fj2v-9h59-2xx6.json index a904ae367bf..04473ef3cb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj2v-9h59-2xx6/GHSA-fj2v-9h59-2xx6.json +++ b/advisories/unreviewed/2022/05/GHSA-fj2v-9h59-2xx6/GHSA-fj2v-9h59-2xx6.json @@ -7,12 +7,8 @@ "CVE-2011-5296" ], "details": "Cross-site scripting (XSS) vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fj3v-92jf-42p5/GHSA-fj3v-92jf-42p5.json b/advisories/unreviewed/2022/05/GHSA-fj3v-92jf-42p5/GHSA-fj3v-92jf-42p5.json index cac2dd1b6d7..7a923021777 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj3v-92jf-42p5/GHSA-fj3v-92jf-42p5.json +++ b/advisories/unreviewed/2022/05/GHSA-fj3v-92jf-42p5/GHSA-fj3v-92jf-42p5.json @@ -7,12 +7,8 @@ "CVE-2015-0933" ], "details": "Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to read arbitrary files via a \\include command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fjmh-w72c-m4f6/GHSA-fjmh-w72c-m4f6.json b/advisories/unreviewed/2022/05/GHSA-fjmh-w72c-m4f6/GHSA-fjmh-w72c-m4f6.json index b1875752bf6..3a0b1498ac4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjmh-w72c-m4f6/GHSA-fjmh-w72c-m4f6.json +++ b/advisories/unreviewed/2022/05/GHSA-fjmh-w72c-m4f6/GHSA-fjmh-w72c-m4f6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fjwp-rw7c-j7xg/GHSA-fjwp-rw7c-j7xg.json b/advisories/unreviewed/2022/05/GHSA-fjwp-rw7c-j7xg/GHSA-fjwp-rw7c-j7xg.json index 901335f21c2..541d1f1958c 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjwp-rw7c-j7xg/GHSA-fjwp-rw7c-j7xg.json +++ b/advisories/unreviewed/2022/05/GHSA-fjwp-rw7c-j7xg/GHSA-fjwp-rw7c-j7xg.json @@ -7,12 +7,8 @@ "CVE-2014-6386" ], "details": "Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R9, 12.3R2 before 12.3R2-S3, 12.3 before 12.3R3, 13.1 before 13.1R4, and 13.2 before 13.2R1 allows remote attackers to cause a denial of service (assertion failure and rpd restart) via a crafted BGP FlowSpec prefix.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fpwq-w33p-2825/GHSA-fpwq-w33p-2825.json b/advisories/unreviewed/2022/05/GHSA-fpwq-w33p-2825/GHSA-fpwq-w33p-2825.json index ec8c98f3834..cf8854d06a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpwq-w33p-2825/GHSA-fpwq-w33p-2825.json +++ b/advisories/unreviewed/2022/05/GHSA-fpwq-w33p-2825/GHSA-fpwq-w33p-2825.json @@ -7,12 +7,8 @@ "CVE-2015-0553" ], "details": "Cross-site scripting (XSS) vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 SP3 allows remote attackers to inject arbitrary web script or HTML via the page_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fqx8-qpr3-mfr7/GHSA-fqx8-qpr3-mfr7.json b/advisories/unreviewed/2022/05/GHSA-fqx8-qpr3-mfr7/GHSA-fqx8-qpr3-mfr7.json index 53c638e79e0..597715a504e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqx8-qpr3-mfr7/GHSA-fqx8-qpr3-mfr7.json +++ b/advisories/unreviewed/2022/05/GHSA-fqx8-qpr3-mfr7/GHSA-fqx8-qpr3-mfr7.json @@ -7,12 +7,8 @@ "CVE-2015-0979" ], "details": "Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fr2c-2w5r-46c6/GHSA-fr2c-2w5r-46c6.json b/advisories/unreviewed/2022/05/GHSA-fr2c-2w5r-46c6/GHSA-fr2c-2w5r-46c6.json index 1a32d22a015..3383a02e024 100644 --- a/advisories/unreviewed/2022/05/GHSA-fr2c-2w5r-46c6/GHSA-fr2c-2w5r-46c6.json +++ b/advisories/unreviewed/2022/05/GHSA-fr2c-2w5r-46c6/GHSA-fr2c-2w5r-46c6.json @@ -7,12 +7,8 @@ "CVE-2014-0603" ], "details": "The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary code via vectors related to the (1) GetGlobalSettings or (2) GetSiteProperties3 methods, which triggers a dereference of an arbitrary memory address. NOTE: this issue was MERGED with CVE-2014-0606 because it is the same type of vulnerability, affecting the same set of versions, and discovered by the same researcher.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fr82-fwmq-hvv3/GHSA-fr82-fwmq-hvv3.json b/advisories/unreviewed/2022/05/GHSA-fr82-fwmq-hvv3/GHSA-fr82-fwmq-hvv3.json index e9ecf42e21e..ca9602c6564 100644 --- a/advisories/unreviewed/2022/05/GHSA-fr82-fwmq-hvv3/GHSA-fr82-fwmq-hvv3.json +++ b/advisories/unreviewed/2022/05/GHSA-fr82-fwmq-hvv3/GHSA-fr82-fwmq-hvv3.json @@ -7,12 +7,8 @@ "CVE-2015-1374" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to hijack the authentication of administrators for requests that conduct (1) cross-site scripting (XSS), (2) SQL injection, or (3) unrestricted file upload attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-frc3-rhfw-jxf5/GHSA-frc3-rhfw-jxf5.json b/advisories/unreviewed/2022/05/GHSA-frc3-rhfw-jxf5/GHSA-frc3-rhfw-jxf5.json index c656a20c8d7..65dcb073923 100644 --- a/advisories/unreviewed/2022/05/GHSA-frc3-rhfw-jxf5/GHSA-frc3-rhfw-jxf5.json +++ b/advisories/unreviewed/2022/05/GHSA-frc3-rhfw-jxf5/GHSA-frc3-rhfw-jxf5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fw9w-xf98-wvqv/GHSA-fw9w-xf98-wvqv.json b/advisories/unreviewed/2022/05/GHSA-fw9w-xf98-wvqv/GHSA-fw9w-xf98-wvqv.json index 3c0188a3141..a3eb4486cb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw9w-xf98-wvqv/GHSA-fw9w-xf98-wvqv.json +++ b/advisories/unreviewed/2022/05/GHSA-fw9w-xf98-wvqv/GHSA-fw9w-xf98-wvqv.json @@ -7,12 +7,8 @@ "CVE-2013-2131" ], "details": "Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) via format string specifiers to the rrdtool.graph function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fx4w-584g-v7q4/GHSA-fx4w-584g-v7q4.json b/advisories/unreviewed/2022/05/GHSA-fx4w-584g-v7q4/GHSA-fx4w-584g-v7q4.json index dbc1b55683d..1d032172e6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-fx4w-584g-v7q4/GHSA-fx4w-584g-v7q4.json +++ b/advisories/unreviewed/2022/05/GHSA-fx4w-584g-v7q4/GHSA-fx4w-584g-v7q4.json @@ -7,12 +7,8 @@ "CVE-2015-0476" ], "details": "Unspecified vulnerability in the SQL Trace Analyzer component in Oracle Support Tools before 12.1.11 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fx92-3p34-jf3x/GHSA-fx92-3p34-jf3x.json b/advisories/unreviewed/2022/05/GHSA-fx92-3p34-jf3x/GHSA-fx92-3p34-jf3x.json index a0d7d2d9c63..56b2a63296f 100644 --- a/advisories/unreviewed/2022/05/GHSA-fx92-3p34-jf3x/GHSA-fx92-3p34-jf3x.json +++ b/advisories/unreviewed/2022/05/GHSA-fx92-3p34-jf3x/GHSA-fx92-3p34-jf3x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g29x-9pgw-4xv5/GHSA-g29x-9pgw-4xv5.json b/advisories/unreviewed/2022/05/GHSA-g29x-9pgw-4xv5/GHSA-g29x-9pgw-4xv5.json index 15d99e3bf2d..8e4339bab9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g29x-9pgw-4xv5/GHSA-g29x-9pgw-4xv5.json +++ b/advisories/unreviewed/2022/05/GHSA-g29x-9pgw-4xv5/GHSA-g29x-9pgw-4xv5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g3g9-h69m-qw7m/GHSA-g3g9-h69m-qw7m.json b/advisories/unreviewed/2022/05/GHSA-g3g9-h69m-qw7m/GHSA-g3g9-h69m-qw7m.json index 676be068df4..f552f3f16b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3g9-h69m-qw7m/GHSA-g3g9-h69m-qw7m.json +++ b/advisories/unreviewed/2022/05/GHSA-g3g9-h69m-qw7m/GHSA-g3g9-h69m-qw7m.json @@ -7,12 +7,8 @@ "CVE-2014-9354" ], "details": "NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g4w5-383h-h2mx/GHSA-g4w5-383h-h2mx.json b/advisories/unreviewed/2022/05/GHSA-g4w5-383h-h2mx/GHSA-g4w5-383h-h2mx.json index c2f160b682c..69a757d36e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4w5-383h-h2mx/GHSA-g4w5-383h-h2mx.json +++ b/advisories/unreviewed/2022/05/GHSA-g4w5-383h-h2mx/GHSA-g4w5-383h-h2mx.json @@ -7,12 +7,8 @@ "CVE-2011-5316" ], "details": "Cross-site request forgery (CSRF) vulnerability in admin/index.php in Cambio 0.5a nightly r37 allows remote attackers to hijack the authentication of administrators for requests that modify credentials via a user save action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g58q-h4q2-m9q3/GHSA-g58q-h4q2-m9q3.json b/advisories/unreviewed/2022/05/GHSA-g58q-h4q2-m9q3/GHSA-g58q-h4q2-m9q3.json index 0e83c95b368..3549b4b8520 100644 --- a/advisories/unreviewed/2022/05/GHSA-g58q-h4q2-m9q3/GHSA-g58q-h4q2-m9q3.json +++ b/advisories/unreviewed/2022/05/GHSA-g58q-h4q2-m9q3/GHSA-g58q-h4q2-m9q3.json @@ -7,12 +7,8 @@ "CVE-2015-3999" ], "details": "Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g5q6-q8j3-6m3c/GHSA-g5q6-q8j3-6m3c.json b/advisories/unreviewed/2022/05/GHSA-g5q6-q8j3-6m3c/GHSA-g5q6-q8j3-6m3c.json index 5aa1a42c65a..016e80d544b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5q6-q8j3-6m3c/GHSA-g5q6-q8j3-6m3c.json +++ b/advisories/unreviewed/2022/05/GHSA-g5q6-q8j3-6m3c/GHSA-g5q6-q8j3-6m3c.json @@ -7,12 +7,8 @@ "CVE-2014-9596" ], "details": "Panasonic Arbitrator Back-End Server (BES) MK 2.0 VPU before 9.3.1 build 4.08.003.0, when USB Wi-Fi or Direct LAN is enabled, and MK 3.0 VPU before 9.3.1 build 5.06.000.0, when Embedded Wi-Fi or Direct LAN is enabled, does not use encryption, which allows remote attackers to obtain sensitive information by sniffing the network for client-server traffic, as demonstrated by Active Directory credential information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g65j-rfmv-9q7g/GHSA-g65j-rfmv-9q7g.json b/advisories/unreviewed/2022/05/GHSA-g65j-rfmv-9q7g/GHSA-g65j-rfmv-9q7g.json index 87661c02025..3dde149fb6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g65j-rfmv-9q7g/GHSA-g65j-rfmv-9q7g.json +++ b/advisories/unreviewed/2022/05/GHSA-g65j-rfmv-9q7g/GHSA-g65j-rfmv-9q7g.json @@ -7,12 +7,8 @@ "CVE-2014-6385" ], "details": "Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows remote attackers to cause a denial of service (kernel crash and restart) via a crafted fragmented OSPFv3 packet with an IPsec Authentication Header (AH).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g676-p673-23rg/GHSA-g676-p673-23rg.json b/advisories/unreviewed/2022/05/GHSA-g676-p673-23rg/GHSA-g676-p673-23rg.json index a20a44951dd..e72be396b82 100644 --- a/advisories/unreviewed/2022/05/GHSA-g676-p673-23rg/GHSA-g676-p673-23rg.json +++ b/advisories/unreviewed/2022/05/GHSA-g676-p673-23rg/GHSA-g676-p673-23rg.json @@ -7,12 +7,8 @@ "CVE-2015-0931" ], "details": "Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a crafted XSLT document, related to a \"resource injection\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g78r-95x5-hr62/GHSA-g78r-95x5-hr62.json b/advisories/unreviewed/2022/05/GHSA-g78r-95x5-hr62/GHSA-g78r-95x5-hr62.json index c1bde0ebe67..36de6784eac 100644 --- a/advisories/unreviewed/2022/05/GHSA-g78r-95x5-hr62/GHSA-g78r-95x5-hr62.json +++ b/advisories/unreviewed/2022/05/GHSA-g78r-95x5-hr62/GHSA-g78r-95x5-hr62.json @@ -7,12 +7,8 @@ "CVE-2015-1909" ], "details": "The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g873-wv7c-4jrg/GHSA-g873-wv7c-4jrg.json b/advisories/unreviewed/2022/05/GHSA-g873-wv7c-4jrg/GHSA-g873-wv7c-4jrg.json index a556e429186..e8831604c0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g873-wv7c-4jrg/GHSA-g873-wv7c-4jrg.json +++ b/advisories/unreviewed/2022/05/GHSA-g873-wv7c-4jrg/GHSA-g873-wv7c-4jrg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gc8p-3455-wxwc/GHSA-gc8p-3455-wxwc.json b/advisories/unreviewed/2022/05/GHSA-gc8p-3455-wxwc/GHSA-gc8p-3455-wxwc.json index 8594dc83e96..d3235ea714b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gc8p-3455-wxwc/GHSA-gc8p-3455-wxwc.json +++ b/advisories/unreviewed/2022/05/GHSA-gc8p-3455-wxwc/GHSA-gc8p-3455-wxwc.json @@ -7,12 +7,8 @@ "CVE-2015-0967" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML via (1) the search field in plugin/index.html or (2) the title field in the Create Featured Result form in admin/main.jsp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gf28-g4g6-24mg/GHSA-gf28-g4g6-24mg.json b/advisories/unreviewed/2022/05/GHSA-gf28-g4g6-24mg/GHSA-gf28-g4g6-24mg.json index ef4701efa50..a41d6fee62e 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf28-g4g6-24mg/GHSA-gf28-g4g6-24mg.json +++ b/advisories/unreviewed/2022/05/GHSA-gf28-g4g6-24mg/GHSA-gf28-g4g6-24mg.json @@ -7,12 +7,8 @@ "CVE-2014-100012" ], "details": "SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gf2q-5fv2-v3c5/GHSA-gf2q-5fv2-v3c5.json b/advisories/unreviewed/2022/05/GHSA-gf2q-5fv2-v3c5/GHSA-gf2q-5fv2-v3c5.json index 5eb6e14ecbb..d284abd0dbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf2q-5fv2-v3c5/GHSA-gf2q-5fv2-v3c5.json +++ b/advisories/unreviewed/2022/05/GHSA-gf2q-5fv2-v3c5/GHSA-gf2q-5fv2-v3c5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gf79-62cr-g4pm/GHSA-gf79-62cr-g4pm.json b/advisories/unreviewed/2022/05/GHSA-gf79-62cr-g4pm/GHSA-gf79-62cr-g4pm.json index 2a972143bbf..ebe453efcc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf79-62cr-g4pm/GHSA-gf79-62cr-g4pm.json +++ b/advisories/unreviewed/2022/05/GHSA-gf79-62cr-g4pm/GHSA-gf79-62cr-g4pm.json @@ -7,12 +7,8 @@ "CVE-2015-1587" ], "details": "Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename in tmp/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gghg-5rj2-xp8x/GHSA-gghg-5rj2-xp8x.json b/advisories/unreviewed/2022/05/GHSA-gghg-5rj2-xp8x/GHSA-gghg-5rj2-xp8x.json index f18124169d0..891da06f82b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gghg-5rj2-xp8x/GHSA-gghg-5rj2-xp8x.json +++ b/advisories/unreviewed/2022/05/GHSA-gghg-5rj2-xp8x/GHSA-gghg-5rj2-xp8x.json @@ -7,12 +7,8 @@ "CVE-2011-5311" ], "details": "Cross-site request forgery (CSRF) vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to hijack the authentication of administrators for requests that modify pages via the data[text] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggmg-xf9g-8cjx/GHSA-ggmg-xf9g-8cjx.json b/advisories/unreviewed/2022/05/GHSA-ggmg-xf9g-8cjx/GHSA-ggmg-xf9g-8cjx.json index 54b47a2753b..a4ba61d8548 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggmg-xf9g-8cjx/GHSA-ggmg-xf9g-8cjx.json +++ b/advisories/unreviewed/2022/05/GHSA-ggmg-xf9g-8cjx/GHSA-ggmg-xf9g-8cjx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ggrp-rq9v-f8mr/GHSA-ggrp-rq9v-f8mr.json b/advisories/unreviewed/2022/05/GHSA-ggrp-rq9v-f8mr/GHSA-ggrp-rq9v-f8mr.json index 44058520288..cc5bd064ce4 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggrp-rq9v-f8mr/GHSA-ggrp-rq9v-f8mr.json +++ b/advisories/unreviewed/2022/05/GHSA-ggrp-rq9v-f8mr/GHSA-ggrp-rq9v-f8mr.json @@ -7,12 +7,8 @@ "CVE-2010-5314" ], "details": "Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gjj7-8chj-25qp/GHSA-gjj7-8chj-25qp.json b/advisories/unreviewed/2022/05/GHSA-gjj7-8chj-25qp/GHSA-gjj7-8chj-25qp.json index 7dda389049c..f7d8ab14d91 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjj7-8chj-25qp/GHSA-gjj7-8chj-25qp.json +++ b/advisories/unreviewed/2022/05/GHSA-gjj7-8chj-25qp/GHSA-gjj7-8chj-25qp.json @@ -7,12 +7,8 @@ "CVE-2011-5294" ], "details": "The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjv8-8j8x-fjm8/GHSA-gjv8-8j8x-fjm8.json b/advisories/unreviewed/2022/05/GHSA-gjv8-8j8x-fjm8/GHSA-gjv8-8j8x-fjm8.json index 748b4d239a7..be457f1bca9 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjv8-8j8x-fjm8/GHSA-gjv8-8j8x-fjm8.json +++ b/advisories/unreviewed/2022/05/GHSA-gjv8-8j8x-fjm8/GHSA-gjv8-8j8x-fjm8.json @@ -7,12 +7,8 @@ "CVE-2015-1578" ], "details": "Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) pidvesa cookie to u5admin/pidvesa.php or (2) uri parameter to u5admin/meta2.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gm5j-v4fx-cqp5/GHSA-gm5j-v4fx-cqp5.json b/advisories/unreviewed/2022/05/GHSA-gm5j-v4fx-cqp5/GHSA-gm5j-v4fx-cqp5.json index e9259d25c47..8462225ece4 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm5j-v4fx-cqp5/GHSA-gm5j-v4fx-cqp5.json +++ b/advisories/unreviewed/2022/05/GHSA-gm5j-v4fx-cqp5/GHSA-gm5j-v4fx-cqp5.json @@ -7,12 +7,8 @@ "CVE-2014-4634" ], "details": "Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gp78-q3fj-299w/GHSA-gp78-q3fj-299w.json b/advisories/unreviewed/2022/05/GHSA-gp78-q3fj-299w/GHSA-gp78-q3fj-299w.json index 65f940a910a..7e5ed35b3b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-gp78-q3fj-299w/GHSA-gp78-q3fj-299w.json +++ b/advisories/unreviewed/2022/05/GHSA-gp78-q3fj-299w/GHSA-gp78-q3fj-299w.json @@ -7,12 +7,8 @@ "CVE-2015-0495" ], "details": "Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Workbench.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gq49-7wvq-p22q/GHSA-gq49-7wvq-p22q.json b/advisories/unreviewed/2022/05/GHSA-gq49-7wvq-p22q/GHSA-gq49-7wvq-p22q.json index 489389eaa69..46b86b2a7c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq49-7wvq-p22q/GHSA-gq49-7wvq-p22q.json +++ b/advisories/unreviewed/2022/05/GHSA-gq49-7wvq-p22q/GHSA-gq49-7wvq-p22q.json @@ -7,12 +7,8 @@ "CVE-2014-3633" ], "details": "The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gqfg-cx7w-hg3x/GHSA-gqfg-cx7w-hg3x.json b/advisories/unreviewed/2022/05/GHSA-gqfg-cx7w-hg3x/GHSA-gqfg-cx7w-hg3x.json index 5fd693c4aa2..76a59b0e88b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqfg-cx7w-hg3x/GHSA-gqfg-cx7w-hg3x.json +++ b/advisories/unreviewed/2022/05/GHSA-gqfg-cx7w-hg3x/GHSA-gqfg-cx7w-hg3x.json @@ -7,12 +7,8 @@ "CVE-2010-5322" ], "details": "Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gr4q-vpmv-cwrr/GHSA-gr4q-vpmv-cwrr.json b/advisories/unreviewed/2022/05/GHSA-gr4q-vpmv-cwrr/GHSA-gr4q-vpmv-cwrr.json index 88161d920d8..49a423a75bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr4q-vpmv-cwrr/GHSA-gr4q-vpmv-cwrr.json +++ b/advisories/unreviewed/2022/05/GHSA-gr4q-vpmv-cwrr/GHSA-gr4q-vpmv-cwrr.json @@ -7,12 +7,8 @@ "CVE-2014-8511" ], "details": "Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512. NOTE: this may be clarified later based on details provided by researchers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gv6p-9fc2-x9m9/GHSA-gv6p-9fc2-x9m9.json b/advisories/unreviewed/2022/05/GHSA-gv6p-9fc2-x9m9/GHSA-gv6p-9fc2-x9m9.json index 6df3867a419..c99faa41b8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv6p-9fc2-x9m9/GHSA-gv6p-9fc2-x9m9.json +++ b/advisories/unreviewed/2022/05/GHSA-gv6p-9fc2-x9m9/GHSA-gv6p-9fc2-x9m9.json @@ -7,12 +7,8 @@ "CVE-2014-6139" ], "details": "The Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote authenticated users to bypass intended access restrictions and perform task-instance and process-instance searches by specifying a false value for the filterByCurrentUser parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gv6w-82vm-j9r9/GHSA-gv6w-82vm-j9r9.json b/advisories/unreviewed/2022/05/GHSA-gv6w-82vm-j9r9/GHSA-gv6w-82vm-j9r9.json index 869586ff971..a93872f9846 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv6w-82vm-j9r9/GHSA-gv6w-82vm-j9r9.json +++ b/advisories/unreviewed/2022/05/GHSA-gv6w-82vm-j9r9/GHSA-gv6w-82vm-j9r9.json @@ -7,12 +7,8 @@ "CVE-2014-6192" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gvcf-h5v7-8hxx/GHSA-gvcf-h5v7-8hxx.json b/advisories/unreviewed/2022/05/GHSA-gvcf-h5v7-8hxx/GHSA-gvcf-h5v7-8hxx.json index c22e21eeccf..626174083ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvcf-h5v7-8hxx/GHSA-gvcf-h5v7-8hxx.json +++ b/advisories/unreviewed/2022/05/GHSA-gvcf-h5v7-8hxx/GHSA-gvcf-h5v7-8hxx.json @@ -7,12 +7,8 @@ "CVE-2014-9391" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the gSlideShow plugin 0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) rss, (2) display_time or (3) transistion_time parameter in the gslideshow.php page to wp-admin/options-general.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gvcm-q483-j52p/GHSA-gvcm-q483-j52p.json b/advisories/unreviewed/2022/05/GHSA-gvcm-q483-j52p/GHSA-gvcm-q483-j52p.json index 9065680bef2..a33547d35eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvcm-q483-j52p/GHSA-gvcm-q483-j52p.json +++ b/advisories/unreviewed/2022/05/GHSA-gvcm-q483-j52p/GHSA-gvcm-q483-j52p.json @@ -7,12 +7,8 @@ "CVE-2015-1619" ], "details": "Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gw3p-m9q3-448x/GHSA-gw3p-m9q3-448x.json b/advisories/unreviewed/2022/05/GHSA-gw3p-m9q3-448x/GHSA-gw3p-m9q3-448x.json index 4486f39aec0..c1e42e05695 100644 --- a/advisories/unreviewed/2022/05/GHSA-gw3p-m9q3-448x/GHSA-gw3p-m9q3-448x.json +++ b/advisories/unreviewed/2022/05/GHSA-gw3p-m9q3-448x/GHSA-gw3p-m9q3-448x.json @@ -7,12 +7,8 @@ "CVE-2015-1448" ], "details": "The integrated management service on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote attackers to bypass authentication and perform administrative actions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gwj9-6rc9-c3g4/GHSA-gwj9-6rc9-c3g4.json b/advisories/unreviewed/2022/05/GHSA-gwj9-6rc9-c3g4/GHSA-gwj9-6rc9-c3g4.json index 3209ce4f165..face929a99d 100644 --- a/advisories/unreviewed/2022/05/GHSA-gwj9-6rc9-c3g4/GHSA-gwj9-6rc9-c3g4.json +++ b/advisories/unreviewed/2022/05/GHSA-gwj9-6rc9-c3g4/GHSA-gwj9-6rc9-c3g4.json @@ -7,12 +7,8 @@ "CVE-2015-1565" ], "details": "Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h226-8q4q-5vv3/GHSA-h226-8q4q-5vv3.json b/advisories/unreviewed/2022/05/GHSA-h226-8q4q-5vv3/GHSA-h226-8q4q-5vv3.json index 89bdb8d7bbc..ed1d5b8d330 100644 --- a/advisories/unreviewed/2022/05/GHSA-h226-8q4q-5vv3/GHSA-h226-8q4q-5vv3.json +++ b/advisories/unreviewed/2022/05/GHSA-h226-8q4q-5vv3/GHSA-h226-8q4q-5vv3.json @@ -7,12 +7,8 @@ "CVE-2015-0911" ], "details": "Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h334-6xv9-jfg4/GHSA-h334-6xv9-jfg4.json b/advisories/unreviewed/2022/05/GHSA-h334-6xv9-jfg4/GHSA-h334-6xv9-jfg4.json index d3236b1b8b5..8e15b466a19 100644 --- a/advisories/unreviewed/2022/05/GHSA-h334-6xv9-jfg4/GHSA-h334-6xv9-jfg4.json +++ b/advisories/unreviewed/2022/05/GHSA-h334-6xv9-jfg4/GHSA-h334-6xv9-jfg4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h33w-46pj-6363/GHSA-h33w-46pj-6363.json b/advisories/unreviewed/2022/05/GHSA-h33w-46pj-6363/GHSA-h33w-46pj-6363.json index 368903bfe27..20c6b36a9df 100644 --- a/advisories/unreviewed/2022/05/GHSA-h33w-46pj-6363/GHSA-h33w-46pj-6363.json +++ b/advisories/unreviewed/2022/05/GHSA-h33w-46pj-6363/GHSA-h33w-46pj-6363.json @@ -7,12 +7,8 @@ "CVE-2014-9643" ], "details": "K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h36v-p6jv-ppq7/GHSA-h36v-p6jv-ppq7.json b/advisories/unreviewed/2022/05/GHSA-h36v-p6jv-ppq7/GHSA-h36v-p6jv-ppq7.json index f5bb4527750..2352f5670a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-h36v-p6jv-ppq7/GHSA-h36v-p6jv-ppq7.json +++ b/advisories/unreviewed/2022/05/GHSA-h36v-p6jv-ppq7/GHSA-h36v-p6jv-ppq7.json @@ -7,12 +7,8 @@ "CVE-2015-1441" ], "details": "SQL injection vulnerability in Piwigo before 2.5.6, 2.6.x before 2.6.5, and 2.7.x before 2.7.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3fq-jw59-654w/GHSA-h3fq-jw59-654w.json b/advisories/unreviewed/2022/05/GHSA-h3fq-jw59-654w/GHSA-h3fq-jw59-654w.json index d9fff19aa9e..e46132501a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3fq-jw59-654w/GHSA-h3fq-jw59-654w.json +++ b/advisories/unreviewed/2022/05/GHSA-h3fq-jw59-654w/GHSA-h3fq-jw59-654w.json @@ -7,12 +7,8 @@ "CVE-2015-0950" ], "details": "Cross-site scripting (XSS) vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script or HTML via the substring parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h4pf-q6rm-x45m/GHSA-h4pf-q6rm-x45m.json b/advisories/unreviewed/2022/05/GHSA-h4pf-q6rm-x45m/GHSA-h4pf-q6rm-x45m.json index edd227645d7..cd81c1e5af6 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4pf-q6rm-x45m/GHSA-h4pf-q6rm-x45m.json +++ b/advisories/unreviewed/2022/05/GHSA-h4pf-q6rm-x45m/GHSA-h4pf-q6rm-x45m.json @@ -7,12 +7,8 @@ "CVE-2015-0932" ], "details": "The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h5jq-hvp6-qw46/GHSA-h5jq-hvp6-qw46.json b/advisories/unreviewed/2022/05/GHSA-h5jq-hvp6-qw46/GHSA-h5jq-hvp6-qw46.json index 33d8c952f83..49fd8ae4c74 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5jq-hvp6-qw46/GHSA-h5jq-hvp6-qw46.json +++ b/advisories/unreviewed/2022/05/GHSA-h5jq-hvp6-qw46/GHSA-h5jq-hvp6-qw46.json @@ -7,12 +7,8 @@ "CVE-2015-0887" ], "details": "npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30, SEIL/X1 routers 3.50 through 4.70, SEIL/X2 routers 3.50 through 4.70, and SEIL/B1 routers 3.50 through 4.70 allows remote attackers to cause a denial of service (infinite loop and device hang) via a crafted SSTP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h5wv-9xjf-qgvc/GHSA-h5wv-9xjf-qgvc.json b/advisories/unreviewed/2022/05/GHSA-h5wv-9xjf-qgvc/GHSA-h5wv-9xjf-qgvc.json index e2638552ec5..638f43ed493 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5wv-9xjf-qgvc/GHSA-h5wv-9xjf-qgvc.json +++ b/advisories/unreviewed/2022/05/GHSA-h5wv-9xjf-qgvc/GHSA-h5wv-9xjf-qgvc.json @@ -7,12 +7,8 @@ "CVE-2015-1201" ], "details": "Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h69p-g798-v94v/GHSA-h69p-g798-v94v.json b/advisories/unreviewed/2022/05/GHSA-h69p-g798-v94v/GHSA-h69p-g798-v94v.json index 4a243fe6b9d..48bb36c6cd7 100644 --- a/advisories/unreviewed/2022/05/GHSA-h69p-g798-v94v/GHSA-h69p-g798-v94v.json +++ b/advisories/unreviewed/2022/05/GHSA-h69p-g798-v94v/GHSA-h69p-g798-v94v.json @@ -7,12 +7,8 @@ "CVE-2015-0923" ], "details": "The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named in the xslt parameter, related to an XML External Entity (XXE) issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h6fc-w6r4-3f5v/GHSA-h6fc-w6r4-3f5v.json b/advisories/unreviewed/2022/05/GHSA-h6fc-w6r4-3f5v/GHSA-h6fc-w6r4-3f5v.json index 9e8e0645ad2..8701d81043a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h6fc-w6r4-3f5v/GHSA-h6fc-w6r4-3f5v.json +++ b/advisories/unreviewed/2022/05/GHSA-h6fc-w6r4-3f5v/GHSA-h6fc-w6r4-3f5v.json @@ -7,12 +7,8 @@ "CVE-2014-0767" ], "details": "Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h748-q5cc-5mv7/GHSA-h748-q5cc-5mv7.json b/advisories/unreviewed/2022/05/GHSA-h748-q5cc-5mv7/GHSA-h748-q5cc-5mv7.json index b291332ec6c..153b596effc 100644 --- a/advisories/unreviewed/2022/05/GHSA-h748-q5cc-5mv7/GHSA-h748-q5cc-5mv7.json +++ b/advisories/unreviewed/2022/05/GHSA-h748-q5cc-5mv7/GHSA-h748-q5cc-5mv7.json @@ -7,12 +7,8 @@ "CVE-2013-5651" ], "details": "The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a crafted bitmap, as demonstrated by a large nodeset value to numatune.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h7wm-92m4-v98m/GHSA-h7wm-92m4-v98m.json b/advisories/unreviewed/2022/05/GHSA-h7wm-92m4-v98m/GHSA-h7wm-92m4-v98m.json index 20138575b7c..ed9e4e37eb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7wm-92m4-v98m/GHSA-h7wm-92m4-v98m.json +++ b/advisories/unreviewed/2022/05/GHSA-h7wm-92m4-v98m/GHSA-h7wm-92m4-v98m.json @@ -7,12 +7,8 @@ "CVE-2014-8385" ], "details": "Buffer overflow on Advantech EKI-1200 gateways with firmware before 1.63 allows remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h89c-ww4h-vjxj/GHSA-h89c-ww4h-vjxj.json b/advisories/unreviewed/2022/05/GHSA-h89c-ww4h-vjxj/GHSA-h89c-ww4h-vjxj.json index e5dd935fc5e..2ae00170cd0 100644 --- a/advisories/unreviewed/2022/05/GHSA-h89c-ww4h-vjxj/GHSA-h89c-ww4h-vjxj.json +++ b/advisories/unreviewed/2022/05/GHSA-h89c-ww4h-vjxj/GHSA-h89c-ww4h-vjxj.json @@ -7,12 +7,8 @@ "CVE-2011-5305" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow remote attackers to inject arbitrary web script or HTML via (1) the rcopy parameter to cgi-bin/admin/rubrikadmin.cgi, (2) the typ parameter to cgi-bin/admin/artikeladmin.cgi, or (3) the suchbegriff parameter to cgi-bin/admin/shophilfe_suche.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h8m7-34m3-jx7x/GHSA-h8m7-34m3-jx7x.json b/advisories/unreviewed/2022/05/GHSA-h8m7-34m3-jx7x/GHSA-h8m7-34m3-jx7x.json index 25bf0b290d3..b3de0df4029 100644 --- a/advisories/unreviewed/2022/05/GHSA-h8m7-34m3-jx7x/GHSA-h8m7-34m3-jx7x.json +++ b/advisories/unreviewed/2022/05/GHSA-h8m7-34m3-jx7x/GHSA-h8m7-34m3-jx7x.json @@ -7,12 +7,8 @@ "CVE-2011-5310" ], "details": "Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h94h-73hh-m5fr/GHSA-h94h-73hh-m5fr.json b/advisories/unreviewed/2022/05/GHSA-h94h-73hh-m5fr/GHSA-h94h-73hh-m5fr.json index 0fcf8a0f59b..d04d6b185db 100644 --- a/advisories/unreviewed/2022/05/GHSA-h94h-73hh-m5fr/GHSA-h94h-73hh-m5fr.json +++ b/advisories/unreviewed/2022/05/GHSA-h94h-73hh-m5fr/GHSA-h94h-73hh-m5fr.json @@ -7,12 +7,8 @@ "CVE-2015-1348" ], "details": "Heap-based buffer overflow in Aruba Instant (IAP) with firmware before 4.0.0.7 and 4.1.x before 4.1.1.2 allows remote attackers to cause a denial of service (crash or reset to factory default) via a malformed frame to the wireless interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hc36-j4jg-rxx8/GHSA-hc36-j4jg-rxx8.json b/advisories/unreviewed/2022/05/GHSA-hc36-j4jg-rxx8/GHSA-hc36-j4jg-rxx8.json index 4b6bd97e5d9..b2c74cf7615 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc36-j4jg-rxx8/GHSA-hc36-j4jg-rxx8.json +++ b/advisories/unreviewed/2022/05/GHSA-hc36-j4jg-rxx8/GHSA-hc36-j4jg-rxx8.json @@ -7,12 +7,8 @@ "CVE-2015-0137" ], "details": "IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hc5f-fprm-wh8c/GHSA-hc5f-fprm-wh8c.json b/advisories/unreviewed/2022/05/GHSA-hc5f-fprm-wh8c/GHSA-hc5f-fprm-wh8c.json index 26122dff580..53ba17002e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc5f-fprm-wh8c/GHSA-hc5f-fprm-wh8c.json +++ b/advisories/unreviewed/2022/05/GHSA-hc5f-fprm-wh8c/GHSA-hc5f-fprm-wh8c.json @@ -7,12 +7,8 @@ "CVE-2011-5298" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Argyle Social 2011-04-26 allow remote attackers to hijack the authentication of administrators for requests that (1) modify credentials via the role parameter to users/create/, (2) modify rules via the terms field in stream_filter_rule JSON data to settings-ajax/stream_filter_rules/create, or (3) modify efforts via the title field in effort JSON data to publish-ajax/efforts/create.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hchv-6c5r-g2q9/GHSA-hchv-6c5r-g2q9.json b/advisories/unreviewed/2022/05/GHSA-hchv-6c5r-g2q9/GHSA-hchv-6c5r-g2q9.json index b7237484ff5..0608cc5f022 100644 --- a/advisories/unreviewed/2022/05/GHSA-hchv-6c5r-g2q9/GHSA-hchv-6c5r-g2q9.json +++ b/advisories/unreviewed/2022/05/GHSA-hchv-6c5r-g2q9/GHSA-hchv-6c5r-g2q9.json @@ -7,12 +7,8 @@ "CVE-2014-6416" ], "details": "Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a long unencrypted auth ticket.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcm2-p528-xx7v/GHSA-hcm2-p528-xx7v.json b/advisories/unreviewed/2022/05/GHSA-hcm2-p528-xx7v/GHSA-hcm2-p528-xx7v.json index 25ca4a46a94..132a8b041e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcm2-p528-xx7v/GHSA-hcm2-p528-xx7v.json +++ b/advisories/unreviewed/2022/05/GHSA-hcm2-p528-xx7v/GHSA-hcm2-p528-xx7v.json @@ -7,12 +7,8 @@ "CVE-2015-0981" ], "details": "The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hfg9-fm93-gh43/GHSA-hfg9-fm93-gh43.json b/advisories/unreviewed/2022/05/GHSA-hfg9-fm93-gh43/GHSA-hfg9-fm93-gh43.json index 474907a5033..53137021bbf 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfg9-fm93-gh43/GHSA-hfg9-fm93-gh43.json +++ b/advisories/unreviewed/2022/05/GHSA-hfg9-fm93-gh43/GHSA-hfg9-fm93-gh43.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hfq5-452j-8v87/GHSA-hfq5-452j-8v87.json b/advisories/unreviewed/2022/05/GHSA-hfq5-452j-8v87/GHSA-hfq5-452j-8v87.json index da99b79f99a..fc9a5626f78 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfq5-452j-8v87/GHSA-hfq5-452j-8v87.json +++ b/advisories/unreviewed/2022/05/GHSA-hfq5-452j-8v87/GHSA-hfq5-452j-8v87.json @@ -7,12 +7,8 @@ "CVE-2015-1404" ], "details": "Cross-site scripting (XSS) vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hfvg-gvff-q9g5/GHSA-hfvg-gvff-q9g5.json b/advisories/unreviewed/2022/05/GHSA-hfvg-gvff-q9g5/GHSA-hfvg-gvff-q9g5.json index a1c5db8cf8c..be103f1ae41 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfvg-gvff-q9g5/GHSA-hfvg-gvff-q9g5.json +++ b/advisories/unreviewed/2022/05/GHSA-hfvg-gvff-q9g5/GHSA-hfvg-gvff-q9g5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hfxr-3rpj-gp54/GHSA-hfxr-3rpj-gp54.json b/advisories/unreviewed/2022/05/GHSA-hfxr-3rpj-gp54/GHSA-hfxr-3rpj-gp54.json index b3a180481c1..4d893751b69 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfxr-3rpj-gp54/GHSA-hfxr-3rpj-gp54.json +++ b/advisories/unreviewed/2022/05/GHSA-hfxr-3rpj-gp54/GHSA-hfxr-3rpj-gp54.json @@ -7,12 +7,8 @@ "CVE-2015-1388" ], "details": "The \"RAP console\" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point (AP) mode allows remote attackers to execute arbitrary commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hg34-rgjg-w968/GHSA-hg34-rgjg-w968.json b/advisories/unreviewed/2022/05/GHSA-hg34-rgjg-w968/GHSA-hg34-rgjg-w968.json index 02dd0b04c9c..626864592d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg34-rgjg-w968/GHSA-hg34-rgjg-w968.json +++ b/advisories/unreviewed/2022/05/GHSA-hg34-rgjg-w968/GHSA-hg34-rgjg-w968.json @@ -7,12 +7,8 @@ "CVE-2015-0969" ], "details": "SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgxg-8qx8-qpcr/GHSA-hgxg-8qx8-qpcr.json b/advisories/unreviewed/2022/05/GHSA-hgxg-8qx8-qpcr/GHSA-hgxg-8qx8-qpcr.json index e4e50eb0812..cc8f92c4492 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgxg-8qx8-qpcr/GHSA-hgxg-8qx8-qpcr.json +++ b/advisories/unreviewed/2022/05/GHSA-hgxg-8qx8-qpcr/GHSA-hgxg-8qx8-qpcr.json @@ -7,12 +7,8 @@ "CVE-2015-0877" ], "details": "Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \\0 character in its name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hh6m-5xrv-4vqg/GHSA-hh6m-5xrv-4vqg.json b/advisories/unreviewed/2022/05/GHSA-hh6m-5xrv-4vqg/GHSA-hh6m-5xrv-4vqg.json index d739b4a24cd..f6aa3f60565 100644 --- a/advisories/unreviewed/2022/05/GHSA-hh6m-5xrv-4vqg/GHSA-hh6m-5xrv-4vqg.json +++ b/advisories/unreviewed/2022/05/GHSA-hh6m-5xrv-4vqg/GHSA-hh6m-5xrv-4vqg.json @@ -7,12 +7,8 @@ "CVE-2011-1493" ], "details": "Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hhfv-v628-qxv3/GHSA-hhfv-v628-qxv3.json b/advisories/unreviewed/2022/05/GHSA-hhfv-v628-qxv3/GHSA-hhfv-v628-qxv3.json index b6ce2041469..c026e816f02 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhfv-v628-qxv3/GHSA-hhfv-v628-qxv3.json +++ b/advisories/unreviewed/2022/05/GHSA-hhfv-v628-qxv3/GHSA-hhfv-v628-qxv3.json @@ -7,12 +7,8 @@ "CVE-2014-7270" ], "details": "Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allows remote attackers to hijack the authentication of arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhr9-9cw2-qvrr/GHSA-hhr9-9cw2-qvrr.json b/advisories/unreviewed/2022/05/GHSA-hhr9-9cw2-qvrr/GHSA-hhr9-9cw2-qvrr.json index 6abe19771c5..1aa9242229a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhr9-9cw2-qvrr/GHSA-hhr9-9cw2-qvrr.json +++ b/advisories/unreviewed/2022/05/GHSA-hhr9-9cw2-qvrr/GHSA-hhr9-9cw2-qvrr.json @@ -7,12 +7,8 @@ "CVE-2014-100018" ], "details": "Cross-site scripting (XSS) vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in the unconfirmed page to wp-admin/network/users.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj5h-h95x-wm95/GHSA-hj5h-h95x-wm95.json b/advisories/unreviewed/2022/05/GHSA-hj5h-h95x-wm95/GHSA-hj5h-h95x-wm95.json index c77b9da323f..97f02c0ac38 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj5h-h95x-wm95/GHSA-hj5h-h95x-wm95.json +++ b/advisories/unreviewed/2022/05/GHSA-hj5h-h95x-wm95/GHSA-hj5h-h95x-wm95.json @@ -7,12 +7,8 @@ "CVE-2015-2215" ], "details": "Open redirect vulnerability in the Services single sign-on server helper (services_sso_server_helper) module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hjx3-w684-8528/GHSA-hjx3-w684-8528.json b/advisories/unreviewed/2022/05/GHSA-hjx3-w684-8528/GHSA-hjx3-w684-8528.json index 60f8375be4f..a90d681daa7 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjx3-w684-8528/GHSA-hjx3-w684-8528.json +++ b/advisories/unreviewed/2022/05/GHSA-hjx3-w684-8528/GHSA-hjx3-w684-8528.json @@ -7,12 +7,8 @@ "CVE-2014-8386" ], "details": "Multiple stack-based buffer overflows in Advantech AdamView 4.3 and earlier allow remote attackers to execute arbitrary code via a crafted (1) display properties or (2) conditional bitmap parameter in a GNI file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hm32-9qcf-v83q/GHSA-hm32-9qcf-v83q.json b/advisories/unreviewed/2022/05/GHSA-hm32-9qcf-v83q/GHSA-hm32-9qcf-v83q.json index c6fcf428052..9322c763f53 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm32-9qcf-v83q/GHSA-hm32-9qcf-v83q.json +++ b/advisories/unreviewed/2022/05/GHSA-hm32-9qcf-v83q/GHSA-hm32-9qcf-v83q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmcj-2mfv-vx8m/GHSA-hmcj-2mfv-vx8m.json b/advisories/unreviewed/2022/05/GHSA-hmcj-2mfv-vx8m/GHSA-hmcj-2mfv-vx8m.json index 941c0099ff8..eef9f34c65f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmcj-2mfv-vx8m/GHSA-hmcj-2mfv-vx8m.json +++ b/advisories/unreviewed/2022/05/GHSA-hmcj-2mfv-vx8m/GHSA-hmcj-2mfv-vx8m.json @@ -7,12 +7,8 @@ "CVE-2015-0607" ], "details": "The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a connection attempt with a blank password, aka Bug IDs CSCuo09400 and CSCun16016.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpm6-pjvf-rhgh/GHSA-hpm6-pjvf-rhgh.json b/advisories/unreviewed/2022/05/GHSA-hpm6-pjvf-rhgh/GHSA-hpm6-pjvf-rhgh.json index 0bb62f4b998..92cb765afc8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpm6-pjvf-rhgh/GHSA-hpm6-pjvf-rhgh.json +++ b/advisories/unreviewed/2022/05/GHSA-hpm6-pjvf-rhgh/GHSA-hpm6-pjvf-rhgh.json @@ -7,12 +7,8 @@ "CVE-2014-100021" ], "details": "Cross-site scripting (XSS) vulnerability in symfony/web/index.php/pim/viewEmployeeList in OrangeHRM before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the empsearch[employee_name][empId] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hppx-c3gw-89jj/GHSA-hppx-c3gw-89jj.json b/advisories/unreviewed/2022/05/GHSA-hppx-c3gw-89jj/GHSA-hppx-c3gw-89jj.json index 4e2cd8abca2..829bfed48a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-hppx-c3gw-89jj/GHSA-hppx-c3gw-89jj.json +++ b/advisories/unreviewed/2022/05/GHSA-hppx-c3gw-89jj/GHSA-hppx-c3gw-89jj.json @@ -7,12 +7,8 @@ "CVE-2015-2208" ], "details": "The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpqm-77mg-c74g/GHSA-hpqm-77mg-c74g.json b/advisories/unreviewed/2022/05/GHSA-hpqm-77mg-c74g/GHSA-hpqm-77mg-c74g.json index a5f527c1f92..35126ca3348 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpqm-77mg-c74g/GHSA-hpqm-77mg-c74g.json +++ b/advisories/unreviewed/2022/05/GHSA-hpqm-77mg-c74g/GHSA-hpqm-77mg-c74g.json @@ -7,12 +7,8 @@ "CVE-2014-9461" ], "details": "Directory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the member_download action to wp-admin/admin-ajax.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpx2-w5ch-4fmv/GHSA-hpx2-w5ch-4fmv.json b/advisories/unreviewed/2022/05/GHSA-hpx2-w5ch-4fmv/GHSA-hpx2-w5ch-4fmv.json index ffbab63574a..b24f83e5fcc 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpx2-w5ch-4fmv/GHSA-hpx2-w5ch-4fmv.json +++ b/advisories/unreviewed/2022/05/GHSA-hpx2-w5ch-4fmv/GHSA-hpx2-w5ch-4fmv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hq7q-2f46-gqp3/GHSA-hq7q-2f46-gqp3.json b/advisories/unreviewed/2022/05/GHSA-hq7q-2f46-gqp3/GHSA-hq7q-2f46-gqp3.json index 33a85a54ade..74a49e8659a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hq7q-2f46-gqp3/GHSA-hq7q-2f46-gqp3.json +++ b/advisories/unreviewed/2022/05/GHSA-hq7q-2f46-gqp3/GHSA-hq7q-2f46-gqp3.json @@ -7,12 +7,8 @@ "CVE-2015-1314" ], "details": "The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, which might allow physically proximate users to obtain banking account numbers and balances.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvm5-9cf7-99q5/GHSA-hvm5-9cf7-99q5.json b/advisories/unreviewed/2022/05/GHSA-hvm5-9cf7-99q5/GHSA-hvm5-9cf7-99q5.json index 8cf03111abb..a64a868bc86 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvm5-9cf7-99q5/GHSA-hvm5-9cf7-99q5.json +++ b/advisories/unreviewed/2022/05/GHSA-hvm5-9cf7-99q5/GHSA-hvm5-9cf7-99q5.json @@ -7,12 +7,8 @@ "CVE-2011-2406" ], "details": "Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvqg-xgp6-6m4q/GHSA-hvqg-xgp6-6m4q.json b/advisories/unreviewed/2022/05/GHSA-hvqg-xgp6-6m4q/GHSA-hvqg-xgp6-6m4q.json index 0cf3b158a80..387410d6a2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvqg-xgp6-6m4q/GHSA-hvqg-xgp6-6m4q.json +++ b/advisories/unreviewed/2022/05/GHSA-hvqg-xgp6-6m4q/GHSA-hvqg-xgp6-6m4q.json @@ -7,12 +7,8 @@ "CVE-2015-1405" ], "details": "SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxcj-rpr5-fj9h/GHSA-hxcj-rpr5-fj9h.json b/advisories/unreviewed/2022/05/GHSA-hxcj-rpr5-fj9h/GHSA-hxcj-rpr5-fj9h.json index a47c9faac5a..aa80c5fecf8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxcj-rpr5-fj9h/GHSA-hxcj-rpr5-fj9h.json +++ b/advisories/unreviewed/2022/05/GHSA-hxcj-rpr5-fj9h/GHSA-hxcj-rpr5-fj9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxw7-47qh-jrfm/GHSA-hxw7-47qh-jrfm.json b/advisories/unreviewed/2022/05/GHSA-hxw7-47qh-jrfm/GHSA-hxw7-47qh-jrfm.json index 3154ff6da91..2de5a154daa 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxw7-47qh-jrfm/GHSA-hxw7-47qh-jrfm.json +++ b/advisories/unreviewed/2022/05/GHSA-hxw7-47qh-jrfm/GHSA-hxw7-47qh-jrfm.json @@ -7,12 +7,8 @@ "CVE-2015-1617" ], "details": "Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxxr-j64h-hx75/GHSA-hxxr-j64h-hx75.json b/advisories/unreviewed/2022/05/GHSA-hxxr-j64h-hx75/GHSA-hxxr-j64h-hx75.json index 215e8c58cda..19bf28e347f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxxr-j64h-hx75/GHSA-hxxr-j64h-hx75.json +++ b/advisories/unreviewed/2022/05/GHSA-hxxr-j64h-hx75/GHSA-hxxr-j64h-hx75.json @@ -7,12 +7,8 @@ "CVE-2014-0005" ], "details": "PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the application sever configuration and state by deploying a crafted application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j27x-7c3p-jqhq/GHSA-j27x-7c3p-jqhq.json b/advisories/unreviewed/2022/05/GHSA-j27x-7c3p-jqhq/GHSA-j27x-7c3p-jqhq.json index f5904ccb17a..97b51f3ff1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-j27x-7c3p-jqhq/GHSA-j27x-7c3p-jqhq.json +++ b/advisories/unreviewed/2022/05/GHSA-j27x-7c3p-jqhq/GHSA-j27x-7c3p-jqhq.json @@ -7,12 +7,8 @@ "CVE-2014-5427" ], "details": "Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to read password hashes via a POST request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3g2-c2cf-7jfm/GHSA-j3g2-c2cf-7jfm.json b/advisories/unreviewed/2022/05/GHSA-j3g2-c2cf-7jfm/GHSA-j3g2-c2cf-7jfm.json index 17909dc3726..6977e5a863c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3g2-c2cf-7jfm/GHSA-j3g2-c2cf-7jfm.json +++ b/advisories/unreviewed/2022/05/GHSA-j3g2-c2cf-7jfm/GHSA-j3g2-c2cf-7jfm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j3jv-5gvr-8grv/GHSA-j3jv-5gvr-8grv.json b/advisories/unreviewed/2022/05/GHSA-j3jv-5gvr-8grv/GHSA-j3jv-5gvr-8grv.json index 8e38c1622b3..706b23f9ba8 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3jv-5gvr-8grv/GHSA-j3jv-5gvr-8grv.json +++ b/advisories/unreviewed/2022/05/GHSA-j3jv-5gvr-8grv/GHSA-j3jv-5gvr-8grv.json @@ -7,12 +7,8 @@ "CVE-2015-0951" ], "details": "X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2) remove request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j3q2-j52v-w8rp/GHSA-j3q2-j52v-w8rp.json b/advisories/unreviewed/2022/05/GHSA-j3q2-j52v-w8rp/GHSA-j3q2-j52v-w8rp.json index 5293ab9d4a1..052a72e7983 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3q2-j52v-w8rp/GHSA-j3q2-j52v-w8rp.json +++ b/advisories/unreviewed/2022/05/GHSA-j3q2-j52v-w8rp/GHSA-j3q2-j52v-w8rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j44q-j7m5-pf6h/GHSA-j44q-j7m5-pf6h.json b/advisories/unreviewed/2022/05/GHSA-j44q-j7m5-pf6h/GHSA-j44q-j7m5-pf6h.json index 3d4e288dc2f..249715855b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-j44q-j7m5-pf6h/GHSA-j44q-j7m5-pf6h.json +++ b/advisories/unreviewed/2022/05/GHSA-j44q-j7m5-pf6h/GHSA-j44q-j7m5-pf6h.json @@ -7,12 +7,8 @@ "CVE-2011-5302" ], "details": "Cross-site request forgery (CSRF) vulnerability in adm/admin_edit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j49p-v92f-mgvj/GHSA-j49p-v92f-mgvj.json b/advisories/unreviewed/2022/05/GHSA-j49p-v92f-mgvj/GHSA-j49p-v92f-mgvj.json index 39127f08f3c..ad612c8e9f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-j49p-v92f-mgvj/GHSA-j49p-v92f-mgvj.json +++ b/advisories/unreviewed/2022/05/GHSA-j49p-v92f-mgvj/GHSA-j49p-v92f-mgvj.json @@ -7,12 +7,8 @@ "CVE-2015-1442" ], "details": "SQL injection vulnerability in views/zero_transact_user.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the user_id parameter in a Modify Account action. NOTE: The article_id parameter to zero_view_article.php vector is already covered by CVE-2014-4034.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j55m-hp7r-r977/GHSA-j55m-hp7r-r977.json b/advisories/unreviewed/2022/05/GHSA-j55m-hp7r-r977/GHSA-j55m-hp7r-r977.json index 83acf9b9396..2f826f05a4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j55m-hp7r-r977/GHSA-j55m-hp7r-r977.json +++ b/advisories/unreviewed/2022/05/GHSA-j55m-hp7r-r977/GHSA-j55m-hp7r-r977.json @@ -7,12 +7,8 @@ "CVE-2015-0631" ], "details": "Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j5pv-6f4x-r7c8/GHSA-j5pv-6f4x-r7c8.json b/advisories/unreviewed/2022/05/GHSA-j5pv-6f4x-r7c8/GHSA-j5pv-6f4x-r7c8.json index 48668db5a6e..a25c6b49ca1 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5pv-6f4x-r7c8/GHSA-j5pv-6f4x-r7c8.json +++ b/advisories/unreviewed/2022/05/GHSA-j5pv-6f4x-r7c8/GHSA-j5pv-6f4x-r7c8.json @@ -7,12 +7,8 @@ "CVE-2014-9203" ], "details": "Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j5q8-29xm-2qr8/GHSA-j5q8-29xm-2qr8.json b/advisories/unreviewed/2022/05/GHSA-j5q8-29xm-2qr8/GHSA-j5q8-29xm-2qr8.json index dceba3b9e1b..045be699e39 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5q8-29xm-2qr8/GHSA-j5q8-29xm-2qr8.json +++ b/advisories/unreviewed/2022/05/GHSA-j5q8-29xm-2qr8/GHSA-j5q8-29xm-2qr8.json @@ -7,12 +7,8 @@ "CVE-2014-5032" ], "details": "GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j67x-fwgj-h3xp/GHSA-j67x-fwgj-h3xp.json b/advisories/unreviewed/2022/05/GHSA-j67x-fwgj-h3xp/GHSA-j67x-fwgj-h3xp.json index ef24978d69b..b911360b6ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-j67x-fwgj-h3xp/GHSA-j67x-fwgj-h3xp.json +++ b/advisories/unreviewed/2022/05/GHSA-j67x-fwgj-h3xp/GHSA-j67x-fwgj-h3xp.json @@ -7,12 +7,8 @@ "CVE-2012-2930" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user via an adduser action to admin/index.php or (2) conduct static PHP code injection attacks in .htusers.php via the user parameter to admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j6fv-98h7-fw37/GHSA-j6fv-98h7-fw37.json b/advisories/unreviewed/2022/05/GHSA-j6fv-98h7-fw37/GHSA-j6fv-98h7-fw37.json index 846a1cae450..a74f5319948 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6fv-98h7-fw37/GHSA-j6fv-98h7-fw37.json +++ b/advisories/unreviewed/2022/05/GHSA-j6fv-98h7-fw37/GHSA-j6fv-98h7-fw37.json @@ -7,12 +7,8 @@ "CVE-2014-9395" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the Simplelife plugin 1.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) simplehoverback, (2) simplehovertext, (3) flickrback, or (4) simple_flimit parameter in the simplelife.php page to wp-admin/options-general.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j782-5qxf-84xj/GHSA-j782-5qxf-84xj.json b/advisories/unreviewed/2022/05/GHSA-j782-5qxf-84xj/GHSA-j782-5qxf-84xj.json index 5bdc50a8ca3..5953940d160 100644 --- a/advisories/unreviewed/2022/05/GHSA-j782-5qxf-84xj/GHSA-j782-5qxf-84xj.json +++ b/advisories/unreviewed/2022/05/GHSA-j782-5qxf-84xj/GHSA-j782-5qxf-84xj.json @@ -7,12 +7,8 @@ "CVE-2015-1450" ], "details": "SQL injection vulnerability in Restaurant Biller allows remote attackers to execute arbitrary SQL commands via the cid parameter in a category action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j7fv-23wv-8jh6/GHSA-j7fv-23wv-8jh6.json b/advisories/unreviewed/2022/05/GHSA-j7fv-23wv-8jh6/GHSA-j7fv-23wv-8jh6.json index e625688b69a..f2be7177068 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7fv-23wv-8jh6/GHSA-j7fv-23wv-8jh6.json +++ b/advisories/unreviewed/2022/05/GHSA-j7fv-23wv-8jh6/GHSA-j7fv-23wv-8jh6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j929-j9q6-r5wm/GHSA-j929-j9q6-r5wm.json b/advisories/unreviewed/2022/05/GHSA-j929-j9q6-r5wm/GHSA-j929-j9q6-r5wm.json index e15abac6d94..cffafd4af60 100644 --- a/advisories/unreviewed/2022/05/GHSA-j929-j9q6-r5wm/GHSA-j929-j9q6-r5wm.json +++ b/advisories/unreviewed/2022/05/GHSA-j929-j9q6-r5wm/GHSA-j929-j9q6-r5wm.json @@ -7,12 +7,8 @@ "CVE-2015-1028" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remote authenticated users to inject arbitrary web script or HTML via the (1) domainname parameter to dnsProxy.cmd (DNS Proxy Configuration Panel); the (2) brName parameter to lancfg2get.cgi (Lan Configuration Panel); the (3) wlAuthMode, (4) wl_wsc_reg, or (5) wl_wsc_mode parameter to wlsecrefresh.wl (Wireless Security Panel); or the (6) wlWpaPsk parameter to wlsecurity.wl (Wireless Password Viewer).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf68-5jj9-ffph/GHSA-jf68-5jj9-ffph.json b/advisories/unreviewed/2022/05/GHSA-jf68-5jj9-ffph/GHSA-jf68-5jj9-ffph.json index 6abed111ed6..40af002377c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf68-5jj9-ffph/GHSA-jf68-5jj9-ffph.json +++ b/advisories/unreviewed/2022/05/GHSA-jf68-5jj9-ffph/GHSA-jf68-5jj9-ffph.json @@ -7,12 +7,8 @@ "CVE-2015-2243" ], "details": "Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfjv-qmg2-v4v8/GHSA-jfjv-qmg2-v4v8.json b/advisories/unreviewed/2022/05/GHSA-jfjv-qmg2-v4v8/GHSA-jfjv-qmg2-v4v8.json index 2d386af4d23..96be2f28329 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfjv-qmg2-v4v8/GHSA-jfjv-qmg2-v4v8.json +++ b/advisories/unreviewed/2022/05/GHSA-jfjv-qmg2-v4v8/GHSA-jfjv-qmg2-v4v8.json @@ -7,12 +7,8 @@ "CVE-2015-1452" ], "details": "The Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0 Patch 7 build 4457 allows remote attackers to cause a denial of service (locked CAPWAP Access Controller) via a large number of ClientHello DTLS messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jgr8-8xxq-g4mv/GHSA-jgr8-8xxq-g4mv.json b/advisories/unreviewed/2022/05/GHSA-jgr8-8xxq-g4mv/GHSA-jgr8-8xxq-g4mv.json index 0b54d92fdd9..9b4171cff8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgr8-8xxq-g4mv/GHSA-jgr8-8xxq-g4mv.json +++ b/advisories/unreviewed/2022/05/GHSA-jgr8-8xxq-g4mv/GHSA-jgr8-8xxq-g4mv.json @@ -7,12 +7,8 @@ "CVE-2014-6190" ], "details": "The log viewer in IBM Workload Deployer 3.1 before 3.1.0.7 allows remote attackers to obtain sensitive information via a direct request for the URL of a log document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jh2p-77g5-p9f8/GHSA-jh2p-77g5-p9f8.json b/advisories/unreviewed/2022/05/GHSA-jh2p-77g5-p9f8/GHSA-jh2p-77g5-p9f8.json index 18fddbb60f1..0e4d4e75ef8 100644 --- a/advisories/unreviewed/2022/05/GHSA-jh2p-77g5-p9f8/GHSA-jh2p-77g5-p9f8.json +++ b/advisories/unreviewed/2022/05/GHSA-jh2p-77g5-p9f8/GHSA-jh2p-77g5-p9f8.json @@ -7,12 +7,8 @@ "CVE-2014-9190" ], "details": "Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jhqr-x27r-cvw4/GHSA-jhqr-x27r-cvw4.json b/advisories/unreviewed/2022/05/GHSA-jhqr-x27r-cvw4/GHSA-jhqr-x27r-cvw4.json index 35f2ab1896d..c34cb91ab66 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhqr-x27r-cvw4/GHSA-jhqr-x27r-cvw4.json +++ b/advisories/unreviewed/2022/05/GHSA-jhqr-x27r-cvw4/GHSA-jhqr-x27r-cvw4.json @@ -7,12 +7,8 @@ "CVE-2014-1908" ], "details": "The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jm7x-w2c2-x6qr/GHSA-jm7x-w2c2-x6qr.json b/advisories/unreviewed/2022/05/GHSA-jm7x-w2c2-x6qr/GHSA-jm7x-w2c2-x6qr.json index 2c6551b9068..10528793dc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-jm7x-w2c2-x6qr/GHSA-jm7x-w2c2-x6qr.json +++ b/advisories/unreviewed/2022/05/GHSA-jm7x-w2c2-x6qr/GHSA-jm7x-w2c2-x6qr.json @@ -7,12 +7,8 @@ "CVE-2015-0649" ], "details": "Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun63514.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jq3p-55hr-jqv2/GHSA-jq3p-55hr-jqv2.json b/advisories/unreviewed/2022/05/GHSA-jq3p-55hr-jqv2/GHSA-jq3p-55hr-jqv2.json index 73f829a5bbd..96af880c398 100644 --- a/advisories/unreviewed/2022/05/GHSA-jq3p-55hr-jqv2/GHSA-jq3p-55hr-jqv2.json +++ b/advisories/unreviewed/2022/05/GHSA-jq3p-55hr-jqv2/GHSA-jq3p-55hr-jqv2.json @@ -7,12 +7,8 @@ "CVE-2014-9646" ], "details": "Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/google_chrome_distribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% directory, as demonstrated by program.exe, a different vulnerability than CVE-2015-1205.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jr4h-g5gc-xc53/GHSA-jr4h-g5gc-xc53.json b/advisories/unreviewed/2022/05/GHSA-jr4h-g5gc-xc53/GHSA-jr4h-g5gc-xc53.json index 05d39ad4047..79edc5498fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-jr4h-g5gc-xc53/GHSA-jr4h-g5gc-xc53.json +++ b/advisories/unreviewed/2022/05/GHSA-jr4h-g5gc-xc53/GHSA-jr4h-g5gc-xc53.json @@ -7,12 +7,8 @@ "CVE-2011-5295" ], "details": "Buffer overflow in the Download method in a certain ActiveX control in MDIEEx.dll in Gogago YouTube Video Converter 1.1.6 allows remote attackers to execute arbitrary code via a long argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jrr4-rgc5-9p54/GHSA-jrr4-rgc5-9p54.json b/advisories/unreviewed/2022/05/GHSA-jrr4-rgc5-9p54/GHSA-jrr4-rgc5-9p54.json index e31ce5ad36d..4ae15c45256 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrr4-rgc5-9p54/GHSA-jrr4-rgc5-9p54.json +++ b/advisories/unreviewed/2022/05/GHSA-jrr4-rgc5-9p54/GHSA-jrr4-rgc5-9p54.json @@ -7,12 +7,8 @@ "CVE-2015-0440" ], "details": "Unspecified vulnerability in the Oracle Knowledge component in Oracle Right Now Service Cloud 8.2.3.10.1 and 8.4.7.2 allows remote attackers to affect integrity via unknown vectors related to Information Manager Console.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jx85-w9pw-mqhr/GHSA-jx85-w9pw-mqhr.json b/advisories/unreviewed/2022/05/GHSA-jx85-w9pw-mqhr/GHSA-jx85-w9pw-mqhr.json index f8bbd559414..819f36b8764 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx85-w9pw-mqhr/GHSA-jx85-w9pw-mqhr.json +++ b/advisories/unreviewed/2022/05/GHSA-jx85-w9pw-mqhr/GHSA-jx85-w9pw-mqhr.json @@ -7,12 +7,8 @@ "CVE-2014-6383" ], "details": "The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jxfm-c4r3-w3f8/GHSA-jxfm-c4r3-w3f8.json b/advisories/unreviewed/2022/05/GHSA-jxfm-c4r3-w3f8/GHSA-jxfm-c4r3-w3f8.json index dbab1ac45f9..6694f51c925 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxfm-c4r3-w3f8/GHSA-jxfm-c4r3-w3f8.json +++ b/advisories/unreviewed/2022/05/GHSA-jxfm-c4r3-w3f8/GHSA-jxfm-c4r3-w3f8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jxpj-653c-58hp/GHSA-jxpj-653c-58hp.json b/advisories/unreviewed/2022/05/GHSA-jxpj-653c-58hp/GHSA-jxpj-653c-58hp.json index 5c9badc8754..07d55fc7802 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxpj-653c-58hp/GHSA-jxpj-653c-58hp.json +++ b/advisories/unreviewed/2022/05/GHSA-jxpj-653c-58hp/GHSA-jxpj-653c-58hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m2g9-77gm-x5j6/GHSA-m2g9-77gm-x5j6.json b/advisories/unreviewed/2022/05/GHSA-m2g9-77gm-x5j6/GHSA-m2g9-77gm-x5j6.json index 88dbfa2c705..da112e385be 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2g9-77gm-x5j6/GHSA-m2g9-77gm-x5j6.json +++ b/advisories/unreviewed/2022/05/GHSA-m2g9-77gm-x5j6/GHSA-m2g9-77gm-x5j6.json @@ -7,12 +7,8 @@ "CVE-2014-9367" ], "details": "Incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm in TWiki 6.0.0 and 6.0.1 allows remote attackers to conduct cross-site scripting (XSS) attacks via a \"'\" (single quote) in the scope parameter to do/view/TWiki/WebSearch.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m4f6-9xf8-2whr/GHSA-m4f6-9xf8-2whr.json b/advisories/unreviewed/2022/05/GHSA-m4f6-9xf8-2whr/GHSA-m4f6-9xf8-2whr.json index ca47d95b1a7..bd7acd1fc74 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4f6-9xf8-2whr/GHSA-m4f6-9xf8-2whr.json +++ b/advisories/unreviewed/2022/05/GHSA-m4f6-9xf8-2whr/GHSA-m4f6-9xf8-2whr.json @@ -7,12 +7,8 @@ "CVE-2012-5629" ], "details": "The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote attackers to bypass authentication via an empty password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m4v4-gxg5-x8hj/GHSA-m4v4-gxg5-x8hj.json b/advisories/unreviewed/2022/05/GHSA-m4v4-gxg5-x8hj/GHSA-m4v4-gxg5-x8hj.json index 1bcfad32972..5e50cd16d71 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4v4-gxg5-x8hj/GHSA-m4v4-gxg5-x8hj.json +++ b/advisories/unreviewed/2022/05/GHSA-m4v4-gxg5-x8hj/GHSA-m4v4-gxg5-x8hj.json @@ -7,12 +7,8 @@ "CVE-2015-1403" ], "details": "SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m52j-356x-vrwm/GHSA-m52j-356x-vrwm.json b/advisories/unreviewed/2022/05/GHSA-m52j-356x-vrwm/GHSA-m52j-356x-vrwm.json index 8b3b3532f15..988e511c98e 100644 --- a/advisories/unreviewed/2022/05/GHSA-m52j-356x-vrwm/GHSA-m52j-356x-vrwm.json +++ b/advisories/unreviewed/2022/05/GHSA-m52j-356x-vrwm/GHSA-m52j-356x-vrwm.json @@ -7,12 +7,8 @@ "CVE-2015-1515" ], "details": "The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222000, 0x00222004, 0x00222008, 0x0022200c, or 0x00222010 IOCTL call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m56g-8mxc-8694/GHSA-m56g-8mxc-8694.json b/advisories/unreviewed/2022/05/GHSA-m56g-8mxc-8694/GHSA-m56g-8mxc-8694.json index 47a9a31df0b..2ce154edc4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-m56g-8mxc-8694/GHSA-m56g-8mxc-8694.json +++ b/advisories/unreviewed/2022/05/GHSA-m56g-8mxc-8694/GHSA-m56g-8mxc-8694.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m6f4-f47c-5g37/GHSA-m6f4-f47c-5g37.json b/advisories/unreviewed/2022/05/GHSA-m6f4-f47c-5g37/GHSA-m6f4-f47c-5g37.json index 1b155322091..138e3303ddd 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6f4-f47c-5g37/GHSA-m6f4-f47c-5g37.json +++ b/advisories/unreviewed/2022/05/GHSA-m6f4-f47c-5g37/GHSA-m6f4-f47c-5g37.json @@ -7,12 +7,8 @@ "CVE-2015-0926" ], "details": "Labtech before 100.237 on Linux uses world-writable permissions for root-executed scripts, which allows local users to gain privileges by modifying a script file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m733-5rx4-wppv/GHSA-m733-5rx4-wppv.json b/advisories/unreviewed/2022/05/GHSA-m733-5rx4-wppv/GHSA-m733-5rx4-wppv.json index 12699e88cca..4964d626eb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-m733-5rx4-wppv/GHSA-m733-5rx4-wppv.json +++ b/advisories/unreviewed/2022/05/GHSA-m733-5rx4-wppv/GHSA-m733-5rx4-wppv.json @@ -7,12 +7,8 @@ "CVE-2015-0869" ], "details": "I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m7w7-wqfv-qrp6/GHSA-m7w7-wqfv-qrp6.json b/advisories/unreviewed/2022/05/GHSA-m7w7-wqfv-qrp6/GHSA-m7w7-wqfv-qrp6.json index 773120585b2..806984f4eb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7w7-wqfv-qrp6/GHSA-m7w7-wqfv-qrp6.json +++ b/advisories/unreviewed/2022/05/GHSA-m7w7-wqfv-qrp6/GHSA-m7w7-wqfv-qrp6.json @@ -7,12 +7,8 @@ "CVE-2015-1910" ], "details": "Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m839-wv3j-ch5r/GHSA-m839-wv3j-ch5r.json b/advisories/unreviewed/2022/05/GHSA-m839-wv3j-ch5r/GHSA-m839-wv3j-ch5r.json index 55e6ca13a05..70ac2e7da35 100644 --- a/advisories/unreviewed/2022/05/GHSA-m839-wv3j-ch5r/GHSA-m839-wv3j-ch5r.json +++ b/advisories/unreviewed/2022/05/GHSA-m839-wv3j-ch5r/GHSA-m839-wv3j-ch5r.json @@ -7,12 +7,8 @@ "CVE-2011-5315" ], "details": "Cross-site request forgery (CSRF) vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authentication of administrators for requests that modify credentials via a user save action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m8wj-h2m3-g6vx/GHSA-m8wj-h2m3-g6vx.json b/advisories/unreviewed/2022/05/GHSA-m8wj-h2m3-g6vx/GHSA-m8wj-h2m3-g6vx.json index 0c31256625b..76cb3fcbb65 100644 --- a/advisories/unreviewed/2022/05/GHSA-m8wj-h2m3-g6vx/GHSA-m8wj-h2m3-g6vx.json +++ b/advisories/unreviewed/2022/05/GHSA-m8wj-h2m3-g6vx/GHSA-m8wj-h2m3-g6vx.json @@ -7,12 +7,8 @@ "CVE-2015-0871" ], "details": "Cross-site scripting (XSS) vulnerability in Mrs. Shiromuku Perl CGI shiromuku(u1)GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m92m-2mgp-g24q/GHSA-m92m-2mgp-g24q.json b/advisories/unreviewed/2022/05/GHSA-m92m-2mgp-g24q/GHSA-m92m-2mgp-g24q.json index 3f7792b935a..4314210e816 100644 --- a/advisories/unreviewed/2022/05/GHSA-m92m-2mgp-g24q/GHSA-m92m-2mgp-g24q.json +++ b/advisories/unreviewed/2022/05/GHSA-m92m-2mgp-g24q/GHSA-m92m-2mgp-g24q.json @@ -7,12 +7,8 @@ "CVE-2014-9477" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Listings extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m95x-wpv9-pr9r/GHSA-m95x-wpv9-pr9r.json b/advisories/unreviewed/2022/05/GHSA-m95x-wpv9-pr9r/GHSA-m95x-wpv9-pr9r.json index f8614d321d7..eb3025c11ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-m95x-wpv9-pr9r/GHSA-m95x-wpv9-pr9r.json +++ b/advisories/unreviewed/2022/05/GHSA-m95x-wpv9-pr9r/GHSA-m95x-wpv9-pr9r.json @@ -7,12 +7,8 @@ "CVE-2014-6092" ], "details": "IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.6 requires failed-login handling for web-service accounts to have the same lockout policy as for standard user accounts, which makes it easier for remote attackers to cause a denial of service (web-service outage) by making many login attempts with a valid caseworker account name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m963-mf5c-ghpm/GHSA-m963-mf5c-ghpm.json b/advisories/unreviewed/2022/05/GHSA-m963-mf5c-ghpm/GHSA-m963-mf5c-ghpm.json index f1f82671b4c..57716aad7e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-m963-mf5c-ghpm/GHSA-m963-mf5c-ghpm.json +++ b/advisories/unreviewed/2022/05/GHSA-m963-mf5c-ghpm/GHSA-m963-mf5c-ghpm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9mc-3jw3-q235/GHSA-m9mc-3jw3-q235.json b/advisories/unreviewed/2022/05/GHSA-m9mc-3jw3-q235/GHSA-m9mc-3jw3-q235.json index 9bc2734c652..2504a8386c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9mc-3jw3-q235/GHSA-m9mc-3jw3-q235.json +++ b/advisories/unreviewed/2022/05/GHSA-m9mc-3jw3-q235/GHSA-m9mc-3jw3-q235.json @@ -7,12 +7,8 @@ "CVE-2012-1664" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in a process action to admin/login.php; (2) pageTitle, (3) current_product_id, or (4) cPath parameter to admin/new_attributes_include.php; (5) sb_id, (6) sb_key, (7) gc_id, (8) gc_key, or (9) path parameter to admin/htaccess.php; (10) title parameter to admin/information_form.php; (11) search parameter to admin/xsell.php; (12) gross or (13) max parameter to admin/stats_products_purchased.php; (14) status parameter to admin/stats_monthly_sales.php; (15) sorted parameter to admin/stats_customers.php; (16) information_id parameter to /admin/information_manager.php; or (17) zID parameter to /admin/geo_zones.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcx9-5vc5-3pgf/GHSA-mcx9-5vc5-3pgf.json b/advisories/unreviewed/2022/05/GHSA-mcx9-5vc5-3pgf/GHSA-mcx9-5vc5-3pgf.json index 9d41fb23167..281b079e9a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcx9-5vc5-3pgf/GHSA-mcx9-5vc5-3pgf.json +++ b/advisories/unreviewed/2022/05/GHSA-mcx9-5vc5-3pgf/GHSA-mcx9-5vc5-3pgf.json @@ -7,12 +7,8 @@ "CVE-2015-1501" ], "details": "The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via a UNC path to a crafted binary.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mf42-wf93-6v66/GHSA-mf42-wf93-6v66.json b/advisories/unreviewed/2022/05/GHSA-mf42-wf93-6v66/GHSA-mf42-wf93-6v66.json index 7fa5cad3db8..2c79e127841 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf42-wf93-6v66/GHSA-mf42-wf93-6v66.json +++ b/advisories/unreviewed/2022/05/GHSA-mf42-wf93-6v66/GHSA-mf42-wf93-6v66.json @@ -7,12 +7,8 @@ "CVE-2014-9647" ], "details": "Use-after-free vulnerability in PDFium, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/src/fpdfview.cpp and fpdfsdk/src/fsdk_mgr.cpp, a different vulnerability than CVE-2015-1205.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mfxw-8c28-qhqc/GHSA-mfxw-8c28-qhqc.json b/advisories/unreviewed/2022/05/GHSA-mfxw-8c28-qhqc/GHSA-mfxw-8c28-qhqc.json index d366a7c71ab..02ac6bfb3e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfxw-8c28-qhqc/GHSA-mfxw-8c28-qhqc.json +++ b/advisories/unreviewed/2022/05/GHSA-mfxw-8c28-qhqc/GHSA-mfxw-8c28-qhqc.json @@ -7,12 +7,8 @@ "CVE-2014-8626" ], "details": "Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mgf3-9wqj-vrvh/GHSA-mgf3-9wqj-vrvh.json b/advisories/unreviewed/2022/05/GHSA-mgf3-9wqj-vrvh/GHSA-mgf3-9wqj-vrvh.json index b6eabfe246a..c92d3022531 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgf3-9wqj-vrvh/GHSA-mgf3-9wqj-vrvh.json +++ b/advisories/unreviewed/2022/05/GHSA-mgf3-9wqj-vrvh/GHSA-mgf3-9wqj-vrvh.json @@ -7,12 +7,8 @@ "CVE-2015-0978" ], "details": "Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap CVE-2015-2264.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mh8w-744h-48g6/GHSA-mh8w-744h-48g6.json b/advisories/unreviewed/2022/05/GHSA-mh8w-744h-48g6/GHSA-mh8w-744h-48g6.json index 48ccd8c0a37..428b1f3bd01 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh8w-744h-48g6/GHSA-mh8w-744h-48g6.json +++ b/advisories/unreviewed/2022/05/GHSA-mh8w-744h-48g6/GHSA-mh8w-744h-48g6.json @@ -7,12 +7,8 @@ "CVE-2015-1451" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457 allow remote authenticated users to inject arbitrary web script or HTML via the (1) WTP Name or (2) WTP Active Software Version field in a CAPWAP Join request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mj38-cgfp-f858/GHSA-mj38-cgfp-f858.json b/advisories/unreviewed/2022/05/GHSA-mj38-cgfp-f858/GHSA-mj38-cgfp-f858.json index b8a2abe967c..c1ab3d79994 100644 --- a/advisories/unreviewed/2022/05/GHSA-mj38-cgfp-f858/GHSA-mj38-cgfp-f858.json +++ b/advisories/unreviewed/2022/05/GHSA-mj38-cgfp-f858/GHSA-mj38-cgfp-f858.json @@ -7,12 +7,8 @@ "CVE-2014-9048" ], "details": "The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mj5j-j2qm-c8g4/GHSA-mj5j-j2qm-c8g4.json b/advisories/unreviewed/2022/05/GHSA-mj5j-j2qm-c8g4/GHSA-mj5j-j2qm-c8g4.json index b045acc6f74..58cea1e009b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mj5j-j2qm-c8g4/GHSA-mj5j-j2qm-c8g4.json +++ b/advisories/unreviewed/2022/05/GHSA-mj5j-j2qm-c8g4/GHSA-mj5j-j2qm-c8g4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjp5-r22c-mmgr/GHSA-mjp5-r22c-mmgr.json b/advisories/unreviewed/2022/05/GHSA-mjp5-r22c-mmgr/GHSA-mjp5-r22c-mmgr.json index 265931eff1f..91602fbefad 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjp5-r22c-mmgr/GHSA-mjp5-r22c-mmgr.json +++ b/advisories/unreviewed/2022/05/GHSA-mjp5-r22c-mmgr/GHSA-mjp5-r22c-mmgr.json @@ -7,12 +7,8 @@ "CVE-2014-9145" ], "details": "Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an edit action to dapur/index.php; (2) cat, (3) user, or (4) level parameter to dapur/apps/app_article/controller/article_list.php; or (5) email parameter in an email action or (6) username parameter in a user action to dapur/apps/app_user/controller/check_user.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjp9-qr46-5hgm/GHSA-mjp9-qr46-5hgm.json b/advisories/unreviewed/2022/05/GHSA-mjp9-qr46-5hgm/GHSA-mjp9-qr46-5hgm.json index bc80f3400ef..5981586e789 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjp9-qr46-5hgm/GHSA-mjp9-qr46-5hgm.json +++ b/advisories/unreviewed/2022/05/GHSA-mjp9-qr46-5hgm/GHSA-mjp9-qr46-5hgm.json @@ -7,12 +7,8 @@ "CVE-2014-8272" ], "details": "The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mp64-9x72-6p5j/GHSA-mp64-9x72-6p5j.json b/advisories/unreviewed/2022/05/GHSA-mp64-9x72-6p5j/GHSA-mp64-9x72-6p5j.json index 242d325d872..4dcd0c4d63e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp64-9x72-6p5j/GHSA-mp64-9x72-6p5j.json +++ b/advisories/unreviewed/2022/05/GHSA-mp64-9x72-6p5j/GHSA-mp64-9x72-6p5j.json @@ -7,12 +7,8 @@ "CVE-2012-5849" ], "details": "Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in an add_friend action to ajax.php; id parameter in a (2) share_object, (3) add_to_fav, (4) rating, or (5) flag_object action to ajax.php; cid parameter in an (6) add_new_item, (7) remove_collection_item, (8) get_item, or (9) load_more_items action to ajax.php; (10) ci_id parameter in a get_item action to ajax.php; user parameter to (11) user_contacts.php or (12) view_channel.php; (13) pid parameter to view_page.php; (14) tid parameter to view_topic.php; or (15) v parameter to watch_video.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mp8w-xrcw-8fgg/GHSA-mp8w-xrcw-8fgg.json b/advisories/unreviewed/2022/05/GHSA-mp8w-xrcw-8fgg/GHSA-mp8w-xrcw-8fgg.json index 10241ce569a..d25a1f03f7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp8w-xrcw-8fgg/GHSA-mp8w-xrcw-8fgg.json +++ b/advisories/unreviewed/2022/05/GHSA-mp8w-xrcw-8fgg/GHSA-mp8w-xrcw-8fgg.json @@ -7,12 +7,8 @@ "CVE-2014-2081" ], "details": "Multiple SQL injection vulnerabilities in the login in web_reports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua before 2013.2.4 and 2014.x before 2014.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqfj-3xqx-7892/GHSA-mqfj-3xqx-7892.json b/advisories/unreviewed/2022/05/GHSA-mqfj-3xqx-7892/GHSA-mqfj-3xqx-7892.json index d52a81238c3..21f70983029 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqfj-3xqx-7892/GHSA-mqfj-3xqx-7892.json +++ b/advisories/unreviewed/2022/05/GHSA-mqfj-3xqx-7892/GHSA-mqfj-3xqx-7892.json @@ -7,12 +7,8 @@ "CVE-2012-3243" ], "details": "Cross-site scripting (XSS) vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqhv-7chc-4f8p/GHSA-mqhv-7chc-4f8p.json b/advisories/unreviewed/2022/05/GHSA-mqhv-7chc-4f8p/GHSA-mqhv-7chc-4f8p.json index f8f06df8db8..4a2b1c2d258 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqhv-7chc-4f8p/GHSA-mqhv-7chc-4f8p.json +++ b/advisories/unreviewed/2022/05/GHSA-mqhv-7chc-4f8p/GHSA-mqhv-7chc-4f8p.json @@ -7,12 +7,8 @@ "CVE-2015-1562" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter to /admin/profile_data.php, or (3) filter parameter to error_log.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mrj7-xxw9-838h/GHSA-mrj7-xxw9-838h.json b/advisories/unreviewed/2022/05/GHSA-mrj7-xxw9-838h/GHSA-mrj7-xxw9-838h.json index bb46f4cfa32..14395d221b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrj7-xxw9-838h/GHSA-mrj7-xxw9-838h.json +++ b/advisories/unreviewed/2022/05/GHSA-mrj7-xxw9-838h/GHSA-mrj7-xxw9-838h.json @@ -7,12 +7,8 @@ "CVE-2015-0554" ], "details": "The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mrjg-qmgr-v7v2/GHSA-mrjg-qmgr-v7v2.json b/advisories/unreviewed/2022/05/GHSA-mrjg-qmgr-v7v2/GHSA-mrjg-qmgr-v7v2.json index 79dc726c19c..e1ddee98127 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrjg-qmgr-v7v2/GHSA-mrjg-qmgr-v7v2.json +++ b/advisories/unreviewed/2022/05/GHSA-mrjg-qmgr-v7v2/GHSA-mrjg-qmgr-v7v2.json @@ -7,12 +7,8 @@ "CVE-2015-0750" ], "details": "The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mrvf-vwcf-3ghc/GHSA-mrvf-vwcf-3ghc.json b/advisories/unreviewed/2022/05/GHSA-mrvf-vwcf-3ghc/GHSA-mrvf-vwcf-3ghc.json index 87c98767f0f..35acc4a1143 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrvf-vwcf-3ghc/GHSA-mrvf-vwcf-3ghc.json +++ b/advisories/unreviewed/2022/05/GHSA-mrvf-vwcf-3ghc/GHSA-mrvf-vwcf-3ghc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mvfw-mv76-2rpc/GHSA-mvfw-mv76-2rpc.json b/advisories/unreviewed/2022/05/GHSA-mvfw-mv76-2rpc/GHSA-mvfw-mv76-2rpc.json index dfa76a83448..23153ad88d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvfw-mv76-2rpc/GHSA-mvfw-mv76-2rpc.json +++ b/advisories/unreviewed/2022/05/GHSA-mvfw-mv76-2rpc/GHSA-mvfw-mv76-2rpc.json @@ -7,12 +7,8 @@ "CVE-2014-8266" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mvjm-8853-rpx4/GHSA-mvjm-8853-rpx4.json b/advisories/unreviewed/2022/05/GHSA-mvjm-8853-rpx4/GHSA-mvjm-8853-rpx4.json index f3cce803d30..20a9a4605e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvjm-8853-rpx4/GHSA-mvjm-8853-rpx4.json +++ b/advisories/unreviewed/2022/05/GHSA-mvjm-8853-rpx4/GHSA-mvjm-8853-rpx4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mvxf-hqpf-5jjj/GHSA-mvxf-hqpf-5jjj.json b/advisories/unreviewed/2022/05/GHSA-mvxf-hqpf-5jjj/GHSA-mvxf-hqpf-5jjj.json index 0ad99a6b269..91009c93b0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvxf-hqpf-5jjj/GHSA-mvxf-hqpf-5jjj.json +++ b/advisories/unreviewed/2022/05/GHSA-mvxf-hqpf-5jjj/GHSA-mvxf-hqpf-5jjj.json @@ -7,12 +7,8 @@ "CVE-2014-6131" ], "details": "IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational DOORS Next Generation 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5; and other products, allows remote authenticated users to read the dashboards of arbitrary users via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mw79-95c5-8ph4/GHSA-mw79-95c5-8ph4.json b/advisories/unreviewed/2022/05/GHSA-mw79-95c5-8ph4/GHSA-mw79-95c5-8ph4.json index 2e0487ef7b5..b81ca326746 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw79-95c5-8ph4/GHSA-mw79-95c5-8ph4.json +++ b/advisories/unreviewed/2022/05/GHSA-mw79-95c5-8ph4/GHSA-mw79-95c5-8ph4.json @@ -7,12 +7,8 @@ "CVE-2015-1030" ], "details": "Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests that are rejected because the socket limit is reached.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mw8f-vfjw-jq84/GHSA-mw8f-vfjw-jq84.json b/advisories/unreviewed/2022/05/GHSA-mw8f-vfjw-jq84/GHSA-mw8f-vfjw-jq84.json index 94cfdc4e48f..43070d3e05e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw8f-vfjw-jq84/GHSA-mw8f-vfjw-jq84.json +++ b/advisories/unreviewed/2022/05/GHSA-mw8f-vfjw-jq84/GHSA-mw8f-vfjw-jq84.json @@ -7,12 +7,8 @@ "CVE-2015-0902" ], "details": "The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwxx-w555-5h5m/GHSA-mwxx-w555-5h5m.json b/advisories/unreviewed/2022/05/GHSA-mwxx-w555-5h5m/GHSA-mwxx-w555-5h5m.json index ce337858527..3b82e35919d 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwxx-w555-5h5m/GHSA-mwxx-w555-5h5m.json +++ b/advisories/unreviewed/2022/05/GHSA-mwxx-w555-5h5m/GHSA-mwxx-w555-5h5m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mx29-5cr3-ph3c/GHSA-mx29-5cr3-ph3c.json b/advisories/unreviewed/2022/05/GHSA-mx29-5cr3-ph3c/GHSA-mx29-5cr3-ph3c.json index 093f9381785..821c6f7c98f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mx29-5cr3-ph3c/GHSA-mx29-5cr3-ph3c.json +++ b/advisories/unreviewed/2022/05/GHSA-mx29-5cr3-ph3c/GHSA-mx29-5cr3-ph3c.json @@ -7,12 +7,8 @@ "CVE-2014-2174" ], "details": "Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local network and allows physically proximate attackers to obtain root privileges via unspecified vectors, aka Bug ID CSCub67651.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxmh-88qh-9f26/GHSA-mxmh-88qh-9f26.json b/advisories/unreviewed/2022/05/GHSA-mxmh-88qh-9f26/GHSA-mxmh-88qh-9f26.json index af35cff4d56..3f27bf02d89 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxmh-88qh-9f26/GHSA-mxmh-88qh-9f26.json +++ b/advisories/unreviewed/2022/05/GHSA-mxmh-88qh-9f26/GHSA-mxmh-88qh-9f26.json @@ -7,12 +7,8 @@ "CVE-2015-1616" ], "details": "SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxx2-5jc8-hhpc/GHSA-mxx2-5jc8-hhpc.json b/advisories/unreviewed/2022/05/GHSA-mxx2-5jc8-hhpc/GHSA-mxx2-5jc8-hhpc.json index 63e07d24e66..77ef422c328 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxx2-5jc8-hhpc/GHSA-mxx2-5jc8-hhpc.json +++ b/advisories/unreviewed/2022/05/GHSA-mxx2-5jc8-hhpc/GHSA-mxx2-5jc8-hhpc.json @@ -7,12 +7,8 @@ "CVE-2014-100009" ], "details": "The Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remote attackers to obtain the installation path via a request to (1) functions.php, (2) myCalendar.php, (3) refreshDate.php, (4) show_image.php, (5) widget.php, (6) phpthumb/GdThumb.inc.php, or (7) phpthumb/thumb_plugins/gd_reflection.inc.php in includes/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p245-xq49-84qm/GHSA-p245-xq49-84qm.json b/advisories/unreviewed/2022/05/GHSA-p245-xq49-84qm/GHSA-p245-xq49-84qm.json index f0fd0aac31b..e7da5e27d35 100644 --- a/advisories/unreviewed/2022/05/GHSA-p245-xq49-84qm/GHSA-p245-xq49-84qm.json +++ b/advisories/unreviewed/2022/05/GHSA-p245-xq49-84qm/GHSA-p245-xq49-84qm.json @@ -7,12 +7,8 @@ "CVE-2014-9194" ], "details": "Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service (disruption) via crafted radio transmissions that spoof GPS satellite broadcasts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p2x5-wwvc-277f/GHSA-p2x5-wwvc-277f.json b/advisories/unreviewed/2022/05/GHSA-p2x5-wwvc-277f/GHSA-p2x5-wwvc-277f.json index 0eaf1614ab5..5f937424d6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2x5-wwvc-277f/GHSA-p2x5-wwvc-277f.json +++ b/advisories/unreviewed/2022/05/GHSA-p2x5-wwvc-277f/GHSA-p2x5-wwvc-277f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p36w-x63g-49rx/GHSA-p36w-x63g-49rx.json b/advisories/unreviewed/2022/05/GHSA-p36w-x63g-49rx/GHSA-p36w-x63g-49rx.json index 6e86e2c753e..7cf5fba8521 100644 --- a/advisories/unreviewed/2022/05/GHSA-p36w-x63g-49rx/GHSA-p36w-x63g-49rx.json +++ b/advisories/unreviewed/2022/05/GHSA-p36w-x63g-49rx/GHSA-p36w-x63g-49rx.json @@ -7,12 +7,8 @@ "CVE-2014-7782" ], "details": "The Macedonia Hacienda Hotel (aka appinventor.ai_orolimpio999.HotelMacedonia) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p3gq-g4xg-589p/GHSA-p3gq-g4xg-589p.json b/advisories/unreviewed/2022/05/GHSA-p3gq-g4xg-589p/GHSA-p3gq-g4xg-589p.json index 452585137bc..9426f91058a 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3gq-g4xg-589p/GHSA-p3gq-g4xg-589p.json +++ b/advisories/unreviewed/2022/05/GHSA-p3gq-g4xg-589p/GHSA-p3gq-g4xg-589p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p3hq-7jx9-56wh/GHSA-p3hq-7jx9-56wh.json b/advisories/unreviewed/2022/05/GHSA-p3hq-7jx9-56wh/GHSA-p3hq-7jx9-56wh.json index 039320b22c1..5137c31c2c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3hq-7jx9-56wh/GHSA-p3hq-7jx9-56wh.json +++ b/advisories/unreviewed/2022/05/GHSA-p3hq-7jx9-56wh/GHSA-p3hq-7jx9-56wh.json @@ -7,12 +7,8 @@ "CVE-2015-1400" ], "details": "SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p3rg-qhc4-m4jw/GHSA-p3rg-qhc4-m4jw.json b/advisories/unreviewed/2022/05/GHSA-p3rg-qhc4-m4jw/GHSA-p3rg-qhc4-m4jw.json index ee485e0ecc7..a4c01cd7b62 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3rg-qhc4-m4jw/GHSA-p3rg-qhc4-m4jw.json +++ b/advisories/unreviewed/2022/05/GHSA-p3rg-qhc4-m4jw/GHSA-p3rg-qhc4-m4jw.json @@ -7,12 +7,8 @@ "CVE-2015-0626" ], "details": "The SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p49r-xm5f-3r8x/GHSA-p49r-xm5f-3r8x.json b/advisories/unreviewed/2022/05/GHSA-p49r-xm5f-3r8x/GHSA-p49r-xm5f-3r8x.json index 78a13c98d39..0390eaa26b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-p49r-xm5f-3r8x/GHSA-p49r-xm5f-3r8x.json +++ b/advisories/unreviewed/2022/05/GHSA-p49r-xm5f-3r8x/GHSA-p49r-xm5f-3r8x.json @@ -7,12 +7,8 @@ "CVE-2015-1031" ], "details": "Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or (2) \"two additional unconfirmed use-after-free complaints made by Coverity scan.\" NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p4fg-fm9v-whgp/GHSA-p4fg-fm9v-whgp.json b/advisories/unreviewed/2022/05/GHSA-p4fg-fm9v-whgp/GHSA-p4fg-fm9v-whgp.json index 10b1d111ff7..f75428fa512 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4fg-fm9v-whgp/GHSA-p4fg-fm9v-whgp.json +++ b/advisories/unreviewed/2022/05/GHSA-p4fg-fm9v-whgp/GHSA-p4fg-fm9v-whgp.json @@ -7,12 +7,8 @@ "CVE-2015-0910" ], "details": "Cross-site scripting (XSS) vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to inject arbitrary web script or HTML via a crafted filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p4p2-9243-q64x/GHSA-p4p2-9243-q64x.json b/advisories/unreviewed/2022/05/GHSA-p4p2-9243-q64x/GHSA-p4p2-9243-q64x.json index 48cbb8307bb..e10a985b780 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4p2-9243-q64x/GHSA-p4p2-9243-q64x.json +++ b/advisories/unreviewed/2022/05/GHSA-p4p2-9243-q64x/GHSA-p4p2-9243-q64x.json @@ -7,12 +7,8 @@ "CVE-2014-1901" ], "details": "Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote authenticated users to cause a denial of service (reboot) via a malformed (1) path parameter to en/store_main.asp, (2) item parameter to en/account/accedit.asp, or (3) emailid parameter to en/smtpclient.asp. NOTE: this issue can be exploited without authentication by leveraging CVE-2014-1900.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p4pr-3vww-7g7v/GHSA-p4pr-3vww-7g7v.json b/advisories/unreviewed/2022/05/GHSA-p4pr-3vww-7g7v/GHSA-p4pr-3vww-7g7v.json index 51bf8a59544..7f46b1f7325 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4pr-3vww-7g7v/GHSA-p4pr-3vww-7g7v.json +++ b/advisories/unreviewed/2022/05/GHSA-p4pr-3vww-7g7v/GHSA-p4pr-3vww-7g7v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p4x2-pf3j-jpwp/GHSA-p4x2-pf3j-jpwp.json b/advisories/unreviewed/2022/05/GHSA-p4x2-pf3j-jpwp/GHSA-p4x2-pf3j-jpwp.json index 510ad235738..865867f29e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4x2-pf3j-jpwp/GHSA-p4x2-pf3j-jpwp.json +++ b/advisories/unreviewed/2022/05/GHSA-p4x2-pf3j-jpwp/GHSA-p4x2-pf3j-jpwp.json @@ -7,12 +7,8 @@ "CVE-2015-1169" ], "details": "Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a wildcard and a valid password to bypass LDAP authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p5xg-9chh-rh94/GHSA-p5xg-9chh-rh94.json b/advisories/unreviewed/2022/05/GHSA-p5xg-9chh-rh94/GHSA-p5xg-9chh-rh94.json index 09ab0e70202..08ea35679ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5xg-9chh-rh94/GHSA-p5xg-9chh-rh94.json +++ b/advisories/unreviewed/2022/05/GHSA-p5xg-9chh-rh94/GHSA-p5xg-9chh-rh94.json @@ -7,12 +7,8 @@ "CVE-2014-3682" ], "details": "XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p6h9-x3xm-8v52/GHSA-p6h9-x3xm-8v52.json b/advisories/unreviewed/2022/05/GHSA-p6h9-x3xm-8v52/GHSA-p6h9-x3xm-8v52.json index a4e8ef022a7..65e154c3873 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6h9-x3xm-8v52/GHSA-p6h9-x3xm-8v52.json +++ b/advisories/unreviewed/2022/05/GHSA-p6h9-x3xm-8v52/GHSA-p6h9-x3xm-8v52.json @@ -7,12 +7,8 @@ "CVE-2014-9369" ], "details": "Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service (device restart) via crafted packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p9cg-9qh9-4f4v/GHSA-p9cg-9qh9-4f4v.json b/advisories/unreviewed/2022/05/GHSA-p9cg-9qh9-4f4v/GHSA-p9cg-9qh9-4f4v.json index 2fb2781b4ac..621dc0163a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9cg-9qh9-4f4v/GHSA-p9cg-9qh9-4f4v.json +++ b/advisories/unreviewed/2022/05/GHSA-p9cg-9qh9-4f4v/GHSA-p9cg-9qh9-4f4v.json @@ -7,12 +7,8 @@ "CVE-2015-0706" ], "details": "Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pc45-5f4x-xp95/GHSA-pc45-5f4x-xp95.json b/advisories/unreviewed/2022/05/GHSA-pc45-5f4x-xp95/GHSA-pc45-5f4x-xp95.json index 726aea8998b..e5b25cf72c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc45-5f4x-xp95/GHSA-pc45-5f4x-xp95.json +++ b/advisories/unreviewed/2022/05/GHSA-pc45-5f4x-xp95/GHSA-pc45-5f4x-xp95.json @@ -7,12 +7,8 @@ "CVE-2015-1356" ], "details": "Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pc58-v5qw-h9qf/GHSA-pc58-v5qw-h9qf.json b/advisories/unreviewed/2022/05/GHSA-pc58-v5qw-h9qf/GHSA-pc58-v5qw-h9qf.json index 3a308be5707..30797e121f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc58-v5qw-h9qf/GHSA-pc58-v5qw-h9qf.json +++ b/advisories/unreviewed/2022/05/GHSA-pc58-v5qw-h9qf/GHSA-pc58-v5qw-h9qf.json @@ -7,12 +7,8 @@ "CVE-2015-1598" ], "details": "The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically proximate attackers to obtain sensitive information by examining the device filesystem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pc5m-rr8v-2phw/GHSA-pc5m-rr8v-2phw.json b/advisories/unreviewed/2022/05/GHSA-pc5m-rr8v-2phw/GHSA-pc5m-rr8v-2phw.json index 4d3ddd04571..86c62f21ef4 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc5m-rr8v-2phw/GHSA-pc5m-rr8v-2phw.json +++ b/advisories/unreviewed/2022/05/GHSA-pc5m-rr8v-2phw/GHSA-pc5m-rr8v-2phw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pcqr-p6gc-4ch6/GHSA-pcqr-p6gc-4ch6.json b/advisories/unreviewed/2022/05/GHSA-pcqr-p6gc-4ch6/GHSA-pcqr-p6gc-4ch6.json index c3b14037db1..9ead9bc50fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcqr-p6gc-4ch6/GHSA-pcqr-p6gc-4ch6.json +++ b/advisories/unreviewed/2022/05/GHSA-pcqr-p6gc-4ch6/GHSA-pcqr-p6gc-4ch6.json @@ -7,12 +7,8 @@ "CVE-2015-0870" ], "details": "Cross-site scripting (XSS) vulnerability in hb.cgi in Nishishi Factory Fumy News Clipper 2.x before 2.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pcr5-wp9c-2qrf/GHSA-pcr5-wp9c-2qrf.json b/advisories/unreviewed/2022/05/GHSA-pcr5-wp9c-2qrf/GHSA-pcr5-wp9c-2qrf.json index d2917938511..3d3b00e63d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcr5-wp9c-2qrf/GHSA-pcr5-wp9c-2qrf.json +++ b/advisories/unreviewed/2022/05/GHSA-pcr5-wp9c-2qrf/GHSA-pcr5-wp9c-2qrf.json @@ -7,12 +7,8 @@ "CVE-2014-6129" ], "details": "IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational DOORS Next Generation 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5; and other products, allows remote authenticated users to delete the dashboards of arbitrary users via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pfgr-6ggj-wvc9/GHSA-pfgr-6ggj-wvc9.json b/advisories/unreviewed/2022/05/GHSA-pfgr-6ggj-wvc9/GHSA-pfgr-6ggj-wvc9.json index 95a81d6d2b1..8a01aaa090b 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfgr-6ggj-wvc9/GHSA-pfgr-6ggj-wvc9.json +++ b/advisories/unreviewed/2022/05/GHSA-pfgr-6ggj-wvc9/GHSA-pfgr-6ggj-wvc9.json @@ -7,12 +7,8 @@ "CVE-2015-1580" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the Redirection Page plugin 1.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) source or (3) redir parameter in an add action in the redirection-page to wp-admin/options-general.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pg34-hwv9-r5fx/GHSA-pg34-hwv9-r5fx.json b/advisories/unreviewed/2022/05/GHSA-pg34-hwv9-r5fx/GHSA-pg34-hwv9-r5fx.json index 87c26151dc8..ef2cf5ec63e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pg34-hwv9-r5fx/GHSA-pg34-hwv9-r5fx.json +++ b/advisories/unreviewed/2022/05/GHSA-pg34-hwv9-r5fx/GHSA-pg34-hwv9-r5fx.json @@ -7,12 +7,8 @@ "CVE-2015-1357" ], "details": "Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allow context-dependent attackers to discover password hashes by reading (1) files or (2) security logs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phmf-jhrc-97cf/GHSA-phmf-jhrc-97cf.json b/advisories/unreviewed/2022/05/GHSA-phmf-jhrc-97cf/GHSA-phmf-jhrc-97cf.json index 25cfceb63cf..d770020bcd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-phmf-jhrc-97cf/GHSA-phmf-jhrc-97cf.json +++ b/advisories/unreviewed/2022/05/GHSA-phmf-jhrc-97cf/GHSA-phmf-jhrc-97cf.json @@ -7,12 +7,8 @@ "CVE-2014-9633" ], "details": "The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-phq3-qfcq-4365/GHSA-phq3-qfcq-4365.json b/advisories/unreviewed/2022/05/GHSA-phq3-qfcq-4365/GHSA-phq3-qfcq-4365.json index cf35dc804c1..f87571622cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-phq3-qfcq-4365/GHSA-phq3-qfcq-4365.json +++ b/advisories/unreviewed/2022/05/GHSA-phq3-qfcq-4365/GHSA-phq3-qfcq-4365.json @@ -7,12 +7,8 @@ "CVE-2015-0648" ], "details": "Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun49658.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pj7q-8cp7-7q3g/GHSA-pj7q-8cp7-7q3g.json b/advisories/unreviewed/2022/05/GHSA-pj7q-8cp7-7q3g/GHSA-pj7q-8cp7-7q3g.json index c340eff42cb..7eee5d3839e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj7q-8cp7-7q3g/GHSA-pj7q-8cp7-7q3g.json +++ b/advisories/unreviewed/2022/05/GHSA-pj7q-8cp7-7q3g/GHSA-pj7q-8cp7-7q3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pq7g-7jp9-q379/GHSA-pq7g-7jp9-q379.json b/advisories/unreviewed/2022/05/GHSA-pq7g-7jp9-q379/GHSA-pq7g-7jp9-q379.json index 1efaafcb50c..5a72b401f7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-pq7g-7jp9-q379/GHSA-pq7g-7jp9-q379.json +++ b/advisories/unreviewed/2022/05/GHSA-pq7g-7jp9-q379/GHSA-pq7g-7jp9-q379.json @@ -7,12 +7,8 @@ "CVE-2015-0180" ], "details": "The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqrg-pvgv-93gq/GHSA-pqrg-pvgv-93gq.json b/advisories/unreviewed/2022/05/GHSA-pqrg-pvgv-93gq/GHSA-pqrg-pvgv-93gq.json index a55d4e4e50b..481afb4b7af 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqrg-pvgv-93gq/GHSA-pqrg-pvgv-93gq.json +++ b/advisories/unreviewed/2022/05/GHSA-pqrg-pvgv-93gq/GHSA-pqrg-pvgv-93gq.json @@ -7,12 +7,8 @@ "CVE-2015-1575" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web script or HTML via the (1) c, (2) i, (3) l, or (4) p parameter to index.php; the (5) a or (6) b parameter to u5admin/cookie.php; the name parameter to (7) copy.php or (8) delete.php in u5admin/; the (9) f or (10) typ parameter to u5admin/deletefile.php; the (11) n parameter to u5admin/done.php; the (12) c parameter to u5admin/editor.php; the (13) uri parameter to u5admin/meta2.php; the (14) n parameter to u5admin/notdone.php; the (15) newname parameter to u5admin/rename2.php; the (16) l parameter to u5admin/sendfile.php; the (17) s parameter to u5admin/characters.php; the (18) page parameter to u5admin/savepage.php; or the (19) name parameter to u5admin/new2.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prvf-r23w-rp8v/GHSA-prvf-r23w-rp8v.json b/advisories/unreviewed/2022/05/GHSA-prvf-r23w-rp8v/GHSA-prvf-r23w-rp8v.json index 0071c8ce942..3462c6001fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-prvf-r23w-rp8v/GHSA-prvf-r23w-rp8v.json +++ b/advisories/unreviewed/2022/05/GHSA-prvf-r23w-rp8v/GHSA-prvf-r23w-rp8v.json @@ -7,12 +7,8 @@ "CVE-2014-7896" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication Manager 6.x and 7.x before 7.6.1-06, and HP XP7 Global Link Manager Software (aka HGLM) 6.x through 8.x before 8.1.2-00, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pvqw-jfhr-j3hc/GHSA-pvqw-jfhr-j3hc.json b/advisories/unreviewed/2022/05/GHSA-pvqw-jfhr-j3hc/GHSA-pvqw-jfhr-j3hc.json index 03e58be81db..7efe050ad49 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvqw-jfhr-j3hc/GHSA-pvqw-jfhr-j3hc.json +++ b/advisories/unreviewed/2022/05/GHSA-pvqw-jfhr-j3hc/GHSA-pvqw-jfhr-j3hc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pwr9-gg2h-cmgh/GHSA-pwr9-gg2h-cmgh.json b/advisories/unreviewed/2022/05/GHSA-pwr9-gg2h-cmgh/GHSA-pwr9-gg2h-cmgh.json index 5d45d2539be..4676c46b318 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwr9-gg2h-cmgh/GHSA-pwr9-gg2h-cmgh.json +++ b/advisories/unreviewed/2022/05/GHSA-pwr9-gg2h-cmgh/GHSA-pwr9-gg2h-cmgh.json @@ -7,12 +7,8 @@ "CVE-2015-0879" ], "details": "CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pwxm-8h28-3xx5/GHSA-pwxm-8h28-3xx5.json b/advisories/unreviewed/2022/05/GHSA-pwxm-8h28-3xx5/GHSA-pwxm-8h28-3xx5.json index 883a5a554bd..d4ca2e26305 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwxm-8h28-3xx5/GHSA-pwxm-8h28-3xx5.json +++ b/advisories/unreviewed/2022/05/GHSA-pwxm-8h28-3xx5/GHSA-pwxm-8h28-3xx5.json @@ -7,12 +7,8 @@ "CVE-2014-9739" ], "details": "Cross-site scripting (XSS) vulnerability in the Node Field module 7.x-2.x before 7.x-2.45 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors involving internal fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q432-6q9x-32pf/GHSA-q432-6q9x-32pf.json b/advisories/unreviewed/2022/05/GHSA-q432-6q9x-32pf/GHSA-q432-6q9x-32pf.json index 9e021aa7037..bf7928cd6fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-q432-6q9x-32pf/GHSA-q432-6q9x-32pf.json +++ b/advisories/unreviewed/2022/05/GHSA-q432-6q9x-32pf/GHSA-q432-6q9x-32pf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q43v-9qf8-q484/GHSA-q43v-9qf8-q484.json b/advisories/unreviewed/2022/05/GHSA-q43v-9qf8-q484/GHSA-q43v-9qf8-q484.json index 6def9bf19ee..b78878f6f6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-q43v-9qf8-q484/GHSA-q43v-9qf8-q484.json +++ b/advisories/unreviewed/2022/05/GHSA-q43v-9qf8-q484/GHSA-q43v-9qf8-q484.json @@ -7,12 +7,8 @@ "CVE-2015-2347" ], "details": "Cross-site scripting (XSS) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote attackers to inject arbitrary web script or HTML via the command XML element in the req parameter to flexdata.action in (1) common/, (2) monitor/, or (3) psnpm/ or the (4) module XML element in the req parameter to flexdata.action in monitor/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4cq-r65m-xhwh/GHSA-q4cq-r65m-xhwh.json b/advisories/unreviewed/2022/05/GHSA-q4cq-r65m-xhwh/GHSA-q4cq-r65m-xhwh.json index d1dbbb92b82..36a10152832 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4cq-r65m-xhwh/GHSA-q4cq-r65m-xhwh.json +++ b/advisories/unreviewed/2022/05/GHSA-q4cq-r65m-xhwh/GHSA-q4cq-r65m-xhwh.json @@ -7,12 +7,8 @@ "CVE-2015-2063" ], "details": "Integer overflow in unace 1.2b allows remote attackers to cause a denial of service (crash) via a small file header in an ace archive, which triggers a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q5vx-8qmp-4qj4/GHSA-q5vx-8qmp-4qj4.json b/advisories/unreviewed/2022/05/GHSA-q5vx-8qmp-4qj4/GHSA-q5vx-8qmp-4qj4.json index 778782390d7..419e29efdba 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5vx-8qmp-4qj4/GHSA-q5vx-8qmp-4qj4.json +++ b/advisories/unreviewed/2022/05/GHSA-q5vx-8qmp-4qj4/GHSA-q5vx-8qmp-4qj4.json @@ -7,12 +7,8 @@ "CVE-2015-0622" ], "details": "The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device outage) via crafted packets that are improperly handled during rendering of the Signature Events Summary page, aka Bug ID CSCus46861.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q684-cq3q-r3gp/GHSA-q684-cq3q-r3gp.json b/advisories/unreviewed/2022/05/GHSA-q684-cq3q-r3gp/GHSA-q684-cq3q-r3gp.json index 2f08cd991c5..88c80bf3bac 100644 --- a/advisories/unreviewed/2022/05/GHSA-q684-cq3q-r3gp/GHSA-q684-cq3q-r3gp.json +++ b/advisories/unreviewed/2022/05/GHSA-q684-cq3q-r3gp/GHSA-q684-cq3q-r3gp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8hg-956x-hjqc/GHSA-q8hg-956x-hjqc.json b/advisories/unreviewed/2022/05/GHSA-q8hg-956x-hjqc/GHSA-q8hg-956x-hjqc.json index 91958a58f8b..f61d3b8aa4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8hg-956x-hjqc/GHSA-q8hg-956x-hjqc.json +++ b/advisories/unreviewed/2022/05/GHSA-q8hg-956x-hjqc/GHSA-q8hg-956x-hjqc.json @@ -7,12 +7,8 @@ "CVE-2014-10025" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the (1) Enable Wireless, (2) MBSSID, (3) BSSID, (4) Hide Access Point, (5) SSID, (6) Country, (7) Channel, (8) Wireless mode, or (9) Max Associated Clients setting via a crafted request to index.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8j5-qf39-jfvv/GHSA-q8j5-qf39-jfvv.json b/advisories/unreviewed/2022/05/GHSA-q8j5-qf39-jfvv/GHSA-q8j5-qf39-jfvv.json index d7dbf69a96c..6fcf7ac58bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8j5-qf39-jfvv/GHSA-q8j5-qf39-jfvv.json +++ b/advisories/unreviewed/2022/05/GHSA-q8j5-qf39-jfvv/GHSA-q8j5-qf39-jfvv.json @@ -7,12 +7,8 @@ "CVE-2015-2087" ], "details": "Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q8jw-gpmq-9hhm/GHSA-q8jw-gpmq-9hhm.json b/advisories/unreviewed/2022/05/GHSA-q8jw-gpmq-9hhm/GHSA-q8jw-gpmq-9hhm.json index cc1ed5de4e1..807b0475035 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8jw-gpmq-9hhm/GHSA-q8jw-gpmq-9hhm.json +++ b/advisories/unreviewed/2022/05/GHSA-q8jw-gpmq-9hhm/GHSA-q8jw-gpmq-9hhm.json @@ -7,12 +7,8 @@ "CVE-2015-2078" ], "details": "The SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3.69.1, Qustodio for Windows, Atom Security, Inc. StaffCop 5.8, and other products, does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, a different vulnerability than CVE-2015-2077.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q9jc-x24x-r9x9/GHSA-q9jc-x24x-r9x9.json b/advisories/unreviewed/2022/05/GHSA-q9jc-x24x-r9x9/GHSA-q9jc-x24x-r9x9.json index 16ffd21cdd7..b7367d952d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9jc-x24x-r9x9/GHSA-q9jc-x24x-r9x9.json +++ b/advisories/unreviewed/2022/05/GHSA-q9jc-x24x-r9x9/GHSA-q9jc-x24x-r9x9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qc99-q2vr-37hj/GHSA-qc99-q2vr-37hj.json b/advisories/unreviewed/2022/05/GHSA-qc99-q2vr-37hj/GHSA-qc99-q2vr-37hj.json index b5fef8900b5..5d65ea4c9c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc99-q2vr-37hj/GHSA-qc99-q2vr-37hj.json +++ b/advisories/unreviewed/2022/05/GHSA-qc99-q2vr-37hj/GHSA-qc99-q2vr-37hj.json @@ -7,12 +7,8 @@ "CVE-2015-1613" ], "details": "RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qcm9-87fm-rgpf/GHSA-qcm9-87fm-rgpf.json b/advisories/unreviewed/2022/05/GHSA-qcm9-87fm-rgpf/GHSA-qcm9-87fm-rgpf.json index 8ad833f5722..8ea5c752042 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcm9-87fm-rgpf/GHSA-qcm9-87fm-rgpf.json +++ b/advisories/unreviewed/2022/05/GHSA-qcm9-87fm-rgpf/GHSA-qcm9-87fm-rgpf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qg85-mf6m-qq9x/GHSA-qg85-mf6m-qq9x.json b/advisories/unreviewed/2022/05/GHSA-qg85-mf6m-qq9x/GHSA-qg85-mf6m-qq9x.json index 406989dd7ea..10e57ce1d87 100644 --- a/advisories/unreviewed/2022/05/GHSA-qg85-mf6m-qq9x/GHSA-qg85-mf6m-qq9x.json +++ b/advisories/unreviewed/2022/05/GHSA-qg85-mf6m-qq9x/GHSA-qg85-mf6m-qq9x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgfj-3m2f-3phv/GHSA-qgfj-3m2f-3phv.json b/advisories/unreviewed/2022/05/GHSA-qgfj-3m2f-3phv/GHSA-qgfj-3m2f-3phv.json index e61ef7f4927..813a6aa19d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgfj-3m2f-3phv/GHSA-qgfj-3m2f-3phv.json +++ b/advisories/unreviewed/2022/05/GHSA-qgfj-3m2f-3phv/GHSA-qgfj-3m2f-3phv.json @@ -7,12 +7,8 @@ "CVE-2015-1193" ], "details": "Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qh2h-gj3j-26h3/GHSA-qh2h-gj3j-26h3.json b/advisories/unreviewed/2022/05/GHSA-qh2h-gj3j-26h3/GHSA-qh2h-gj3j-26h3.json index 4a0f0056bb5..11cbdeed59d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qh2h-gj3j-26h3/GHSA-qh2h-gj3j-26h3.json +++ b/advisories/unreviewed/2022/05/GHSA-qh2h-gj3j-26h3/GHSA-qh2h-gj3j-26h3.json @@ -7,12 +7,8 @@ "CVE-2014-10035" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to inject arbitrary web script or HTML via the (1) sEcho parameter to comments_paginate.php or (2) stores_paginate.php or the (3) affiliate_url, (4) description, (5) domain, (6) seo[description], (7) seo[heading], (8) seo[title], (9) seo[keywords], (10) setting[logo], (11) setting[perpage], or (12) setting[sitename] to admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjhp-7w3m-hgv6/GHSA-qjhp-7w3m-hgv6.json b/advisories/unreviewed/2022/05/GHSA-qjhp-7w3m-hgv6/GHSA-qjhp-7w3m-hgv6.json index 64e2bd12ee6..819e198fa9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjhp-7w3m-hgv6/GHSA-qjhp-7w3m-hgv6.json +++ b/advisories/unreviewed/2022/05/GHSA-qjhp-7w3m-hgv6/GHSA-qjhp-7w3m-hgv6.json @@ -7,12 +7,8 @@ "CVE-2014-8009" ], "details": "The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive information by reading log files, aka Bug ID CSCur99239.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjvr-pj54-3c2m/GHSA-qjvr-pj54-3c2m.json b/advisories/unreviewed/2022/05/GHSA-qjvr-pj54-3c2m/GHSA-qjvr-pj54-3c2m.json index 58576102abc..c0a398ce096 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjvr-pj54-3c2m/GHSA-qjvr-pj54-3c2m.json +++ b/advisories/unreviewed/2022/05/GHSA-qjvr-pj54-3c2m/GHSA-qjvr-pj54-3c2m.json @@ -7,12 +7,8 @@ "CVE-2015-3030" ], "details": "The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjxp-7jpf-6qwj/GHSA-qjxp-7jpf-6qwj.json b/advisories/unreviewed/2022/05/GHSA-qjxp-7jpf-6qwj/GHSA-qjxp-7jpf-6qwj.json index b18bcae6463..2043ec1981b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjxp-7jpf-6qwj/GHSA-qjxp-7jpf-6qwj.json +++ b/advisories/unreviewed/2022/05/GHSA-qjxp-7jpf-6qwj/GHSA-qjxp-7jpf-6qwj.json @@ -7,12 +7,8 @@ "CVE-2015-1899" ], "details": "IBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qm5c-9m22-x97p/GHSA-qm5c-9m22-x97p.json b/advisories/unreviewed/2022/05/GHSA-qm5c-9m22-x97p/GHSA-qm5c-9m22-x97p.json index afd4a626dc4..0f9932b501c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm5c-9m22-x97p/GHSA-qm5c-9m22-x97p.json +++ b/advisories/unreviewed/2022/05/GHSA-qm5c-9m22-x97p/GHSA-qm5c-9m22-x97p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qppj-988v-fcrc/GHSA-qppj-988v-fcrc.json b/advisories/unreviewed/2022/05/GHSA-qppj-988v-fcrc/GHSA-qppj-988v-fcrc.json index 3c4b02cb702..4975e2b1578 100644 --- a/advisories/unreviewed/2022/05/GHSA-qppj-988v-fcrc/GHSA-qppj-988v-fcrc.json +++ b/advisories/unreviewed/2022/05/GHSA-qppj-988v-fcrc/GHSA-qppj-988v-fcrc.json @@ -7,12 +7,8 @@ "CVE-2015-1603" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Adminsystems CMS before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to index.php or (2) id parameter in a users_users action to asys/site/system.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qpqr-vff3-mpj9/GHSA-qpqr-vff3-mpj9.json b/advisories/unreviewed/2022/05/GHSA-qpqr-vff3-mpj9/GHSA-qpqr-vff3-mpj9.json index 088a25ee6b1..46e9438da75 100644 --- a/advisories/unreviewed/2022/05/GHSA-qpqr-vff3-mpj9/GHSA-qpqr-vff3-mpj9.json +++ b/advisories/unreviewed/2022/05/GHSA-qpqr-vff3-mpj9/GHSA-qpqr-vff3-mpj9.json @@ -7,12 +7,8 @@ "CVE-2013-2899" ], "details": "drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PICOLCD is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq25-3qfm-wpjj/GHSA-qq25-3qfm-wpjj.json b/advisories/unreviewed/2022/05/GHSA-qq25-3qfm-wpjj/GHSA-qq25-3qfm-wpjj.json index 76e78a4c2ee..fba7413ab2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq25-3qfm-wpjj/GHSA-qq25-3qfm-wpjj.json +++ b/advisories/unreviewed/2022/05/GHSA-qq25-3qfm-wpjj/GHSA-qq25-3qfm-wpjj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qr26-w5vf-jf8x/GHSA-qr26-w5vf-jf8x.json b/advisories/unreviewed/2022/05/GHSA-qr26-w5vf-jf8x/GHSA-qr26-w5vf-jf8x.json index 22bef3f82ad..08843b6b67b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qr26-w5vf-jf8x/GHSA-qr26-w5vf-jf8x.json +++ b/advisories/unreviewed/2022/05/GHSA-qr26-w5vf-jf8x/GHSA-qr26-w5vf-jf8x.json @@ -7,12 +7,8 @@ "CVE-2010-5315" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qvhp-3pf9-68jq/GHSA-qvhp-3pf9-68jq.json b/advisories/unreviewed/2022/05/GHSA-qvhp-3pf9-68jq/GHSA-qvhp-3pf9-68jq.json index 3b3df21f1ef..d140c946b2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvhp-3pf9-68jq/GHSA-qvhp-3pf9-68jq.json +++ b/advisories/unreviewed/2022/05/GHSA-qvhp-3pf9-68jq/GHSA-qvhp-3pf9-68jq.json @@ -7,12 +7,8 @@ "CVE-2015-0106" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qvm2-xc63-59fm/GHSA-qvm2-xc63-59fm.json b/advisories/unreviewed/2022/05/GHSA-qvm2-xc63-59fm/GHSA-qvm2-xc63-59fm.json index e6c6c0a7dfc..307a5962d46 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvm2-xc63-59fm/GHSA-qvm2-xc63-59fm.json +++ b/advisories/unreviewed/2022/05/GHSA-qvm2-xc63-59fm/GHSA-qvm2-xc63-59fm.json @@ -7,12 +7,8 @@ "CVE-2014-8587" ], "details": "SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvwp-g584-6r6w/GHSA-qvwp-g584-6r6w.json b/advisories/unreviewed/2022/05/GHSA-qvwp-g584-6r6w/GHSA-qvwp-g584-6r6w.json index 4a36ad7f95c..beeca32120f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvwp-g584-6r6w/GHSA-qvwp-g584-6r6w.json +++ b/advisories/unreviewed/2022/05/GHSA-qvwp-g584-6r6w/GHSA-qvwp-g584-6r6w.json @@ -7,12 +7,8 @@ "CVE-2015-0171" ], "details": "Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qw38-7373-h32r/GHSA-qw38-7373-h32r.json b/advisories/unreviewed/2022/05/GHSA-qw38-7373-h32r/GHSA-qw38-7373-h32r.json index e1e65369fbd..23d99cd3d11 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw38-7373-h32r/GHSA-qw38-7373-h32r.json +++ b/advisories/unreviewed/2022/05/GHSA-qw38-7373-h32r/GHSA-qw38-7373-h32r.json @@ -7,12 +7,8 @@ "CVE-2015-1564" ], "details": "Cross-site scripting (XSS) vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qx79-7594-fqf9/GHSA-qx79-7594-fqf9.json b/advisories/unreviewed/2022/05/GHSA-qx79-7594-fqf9/GHSA-qx79-7594-fqf9.json index d054b7092e4..311e15204e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx79-7594-fqf9/GHSA-qx79-7594-fqf9.json +++ b/advisories/unreviewed/2022/05/GHSA-qx79-7594-fqf9/GHSA-qx79-7594-fqf9.json @@ -7,12 +7,8 @@ "CVE-2013-2604" ], "details": "RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL in an individual game's directory, as demonstrated by DDRAW.DLL in the Zuma Deluxe directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qxp8-qj2v-85pr/GHSA-qxp8-qj2v-85pr.json b/advisories/unreviewed/2022/05/GHSA-qxp8-qj2v-85pr/GHSA-qxp8-qj2v-85pr.json index fa6e5324145..395130a3f3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxp8-qj2v-85pr/GHSA-qxp8-qj2v-85pr.json +++ b/advisories/unreviewed/2022/05/GHSA-qxp8-qj2v-85pr/GHSA-qxp8-qj2v-85pr.json @@ -7,12 +7,8 @@ "CVE-2014-10002" ], "details": "Unspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain sensitive information via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r28r-hqjw-7rf7/GHSA-r28r-hqjw-7rf7.json b/advisories/unreviewed/2022/05/GHSA-r28r-hqjw-7rf7/GHSA-r28r-hqjw-7rf7.json index 01c80669a5a..e51ec7f457c 100644 --- a/advisories/unreviewed/2022/05/GHSA-r28r-hqjw-7rf7/GHSA-r28r-hqjw-7rf7.json +++ b/advisories/unreviewed/2022/05/GHSA-r28r-hqjw-7rf7/GHSA-r28r-hqjw-7rf7.json @@ -7,12 +7,8 @@ "CVE-2014-9392" ], "details": "Cross-site request forgery (CSRF) vulnerability in the PictoBrowser (pictobrowser-gallery) plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the pictoBrowserFlickrUser parameter in the options-page.php page to wp-admin/options-general.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2f5-rm2p-v542/GHSA-r2f5-rm2p-v542.json b/advisories/unreviewed/2022/05/GHSA-r2f5-rm2p-v542/GHSA-r2f5-rm2p-v542.json index 930b1e56d78..14898c678e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2f5-rm2p-v542/GHSA-r2f5-rm2p-v542.json +++ b/advisories/unreviewed/2022/05/GHSA-r2f5-rm2p-v542/GHSA-r2f5-rm2p-v542.json @@ -7,12 +7,8 @@ "CVE-2014-100033" ], "details": "Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2wh-x73f-g4qw/GHSA-r2wh-x73f-g4qw.json b/advisories/unreviewed/2022/05/GHSA-r2wh-x73f-g4qw/GHSA-r2wh-x73f-g4qw.json index 62843db2fc1..86c94892761 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2wh-x73f-g4qw/GHSA-r2wh-x73f-g4qw.json +++ b/advisories/unreviewed/2022/05/GHSA-r2wh-x73f-g4qw/GHSA-r2wh-x73f-g4qw.json @@ -7,12 +7,8 @@ "CVE-2013-4476" ], "details": "Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permissions for a private key, which allows local users to obtain sensitive information by reading the key file, as demonstrated by access to the local filesystem on an AD domain controller.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r3hv-gpww-v5pr/GHSA-r3hv-gpww-v5pr.json b/advisories/unreviewed/2022/05/GHSA-r3hv-gpww-v5pr/GHSA-r3hv-gpww-v5pr.json index fb971ae341a..fda3b509bc7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3hv-gpww-v5pr/GHSA-r3hv-gpww-v5pr.json +++ b/advisories/unreviewed/2022/05/GHSA-r3hv-gpww-v5pr/GHSA-r3hv-gpww-v5pr.json @@ -7,12 +7,8 @@ "CVE-2014-9510" ], "details": "Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrators for requests that change router settings via a configuration file import.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3p8-wr6h-chg4/GHSA-r3p8-wr6h-chg4.json b/advisories/unreviewed/2022/05/GHSA-r3p8-wr6h-chg4/GHSA-r3p8-wr6h-chg4.json index 5174163cef3..ac746617568 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3p8-wr6h-chg4/GHSA-r3p8-wr6h-chg4.json +++ b/advisories/unreviewed/2022/05/GHSA-r3p8-wr6h-chg4/GHSA-r3p8-wr6h-chg4.json @@ -7,12 +7,8 @@ "CVE-2015-0873" ], "details": "Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlTreeBBS 2.30 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3wf-6w7v-wp38/GHSA-r3wf-6w7v-wp38.json b/advisories/unreviewed/2022/05/GHSA-r3wf-6w7v-wp38/GHSA-r3wf-6w7v-wp38.json index acf37efd4f2..f23f8ac7cdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3wf-6w7v-wp38/GHSA-r3wf-6w7v-wp38.json +++ b/advisories/unreviewed/2022/05/GHSA-r3wf-6w7v-wp38/GHSA-r3wf-6w7v-wp38.json @@ -7,12 +7,8 @@ "CVE-2014-8383" ], "details": "The InFocus IN3128HD projector with firmware 0.26 allows remote attackers to bypass authentication via a direct request to main.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r55p-5gm9-gq67/GHSA-r55p-5gm9-gq67.json b/advisories/unreviewed/2022/05/GHSA-r55p-5gm9-gq67/GHSA-r55p-5gm9-gq67.json index 7e25c937170..aee1ce9827f 100644 --- a/advisories/unreviewed/2022/05/GHSA-r55p-5gm9-gq67/GHSA-r55p-5gm9-gq67.json +++ b/advisories/unreviewed/2022/05/GHSA-r55p-5gm9-gq67/GHSA-r55p-5gm9-gq67.json @@ -7,12 +7,8 @@ "CVE-2014-8003" ], "details": "Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell access via a crafted map-nfs command, aka Bug ID CSCup05998.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r5f8-8p6m-4j9v/GHSA-r5f8-8p6m-4j9v.json b/advisories/unreviewed/2022/05/GHSA-r5f8-8p6m-4j9v/GHSA-r5f8-8p6m-4j9v.json index 8fd75788e8d..f33ec34c9d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5f8-8p6m-4j9v/GHSA-r5f8-8p6m-4j9v.json +++ b/advisories/unreviewed/2022/05/GHSA-r5f8-8p6m-4j9v/GHSA-r5f8-8p6m-4j9v.json @@ -7,12 +7,8 @@ "CVE-2015-2770" ], "details": "Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r625-wrj7-5w3q/GHSA-r625-wrj7-5w3q.json b/advisories/unreviewed/2022/05/GHSA-r625-wrj7-5w3q/GHSA-r625-wrj7-5w3q.json index b03f994c103..651d2caca8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r625-wrj7-5w3q/GHSA-r625-wrj7-5w3q.json +++ b/advisories/unreviewed/2022/05/GHSA-r625-wrj7-5w3q/GHSA-r625-wrj7-5w3q.json @@ -7,12 +7,8 @@ "CVE-2014-9738" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Tournament module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an (1) account username, a (2) node title, or a (3) team entity title.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r7vf-2ph6-v4g3/GHSA-r7vf-2ph6-v4g3.json b/advisories/unreviewed/2022/05/GHSA-r7vf-2ph6-v4g3/GHSA-r7vf-2ph6-v4g3.json index 4f8c13caaf6..110594d0aec 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7vf-2ph6-v4g3/GHSA-r7vf-2ph6-v4g3.json +++ b/advisories/unreviewed/2022/05/GHSA-r7vf-2ph6-v4g3/GHSA-r7vf-2ph6-v4g3.json @@ -7,12 +7,8 @@ "CVE-2015-1449" ], "details": "Buffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r94j-grrx-5v8c/GHSA-r94j-grrx-5v8c.json b/advisories/unreviewed/2022/05/GHSA-r94j-grrx-5v8c/GHSA-r94j-grrx-5v8c.json index 14cdd38937c..4c29461377d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r94j-grrx-5v8c/GHSA-r94j-grrx-5v8c.json +++ b/advisories/unreviewed/2022/05/GHSA-r94j-grrx-5v8c/GHSA-r94j-grrx-5v8c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rg6f-fc98-j2gg/GHSA-rg6f-fc98-j2gg.json b/advisories/unreviewed/2022/05/GHSA-rg6f-fc98-j2gg/GHSA-rg6f-fc98-j2gg.json index 76c8f072c91..1c75414ec82 100644 --- a/advisories/unreviewed/2022/05/GHSA-rg6f-fc98-j2gg/GHSA-rg6f-fc98-j2gg.json +++ b/advisories/unreviewed/2022/05/GHSA-rg6f-fc98-j2gg/GHSA-rg6f-fc98-j2gg.json @@ -7,12 +7,8 @@ "CVE-2015-2196" ], "details": "SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a spiderbigcalendar_month action to wp-admin/admin-ajax.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgmw-wjj6-7w2g/GHSA-rgmw-wjj6-7w2g.json b/advisories/unreviewed/2022/05/GHSA-rgmw-wjj6-7w2g/GHSA-rgmw-wjj6-7w2g.json index a98ca61f119..5a6e1547404 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgmw-wjj6-7w2g/GHSA-rgmw-wjj6-7w2g.json +++ b/advisories/unreviewed/2022/05/GHSA-rgmw-wjj6-7w2g/GHSA-rgmw-wjj6-7w2g.json @@ -7,12 +7,8 @@ "CVE-2014-10026" ], "details": "index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhgq-mf3j-hc7r/GHSA-rhgq-mf3j-hc7r.json b/advisories/unreviewed/2022/05/GHSA-rhgq-mf3j-hc7r/GHSA-rhgq-mf3j-hc7r.json index ea0334e638d..e8ff244b075 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhgq-mf3j-hc7r/GHSA-rhgq-mf3j-hc7r.json +++ b/advisories/unreviewed/2022/05/GHSA-rhgq-mf3j-hc7r/GHSA-rhgq-mf3j-hc7r.json @@ -7,12 +7,8 @@ "CVE-2014-2355" ], "details": "The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rj3c-33c5-42hm/GHSA-rj3c-33c5-42hm.json b/advisories/unreviewed/2022/05/GHSA-rj3c-33c5-42hm/GHSA-rj3c-33c5-42hm.json index 803727fc75e..4ce32251bd5 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj3c-33c5-42hm/GHSA-rj3c-33c5-42hm.json +++ b/advisories/unreviewed/2022/05/GHSA-rj3c-33c5-42hm/GHSA-rj3c-33c5-42hm.json @@ -7,12 +7,8 @@ "CVE-2014-9043" ], "details": "The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rj4r-c32h-gm33/GHSA-rj4r-c32h-gm33.json b/advisories/unreviewed/2022/05/GHSA-rj4r-c32h-gm33/GHSA-rj4r-c32h-gm33.json index 51b7033945e..49bfcddd262 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj4r-c32h-gm33/GHSA-rj4r-c32h-gm33.json +++ b/advisories/unreviewed/2022/05/GHSA-rj4r-c32h-gm33/GHSA-rj4r-c32h-gm33.json @@ -7,12 +7,8 @@ "CVE-2014-0765" ], "details": "Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long GotoCmd argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rj8f-rj27-8wxg/GHSA-rj8f-rj27-8wxg.json b/advisories/unreviewed/2022/05/GHSA-rj8f-rj27-8wxg/GHSA-rj8f-rj27-8wxg.json index 57779493119..c46e4e1b22d 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj8f-rj27-8wxg/GHSA-rj8f-rj27-8wxg.json +++ b/advisories/unreviewed/2022/05/GHSA-rj8f-rj27-8wxg/GHSA-rj8f-rj27-8wxg.json @@ -7,12 +7,8 @@ "CVE-2014-0766" ], "details": "Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName2 argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmjx-fq7m-272x/GHSA-rmjx-fq7m-272x.json b/advisories/unreviewed/2022/05/GHSA-rmjx-fq7m-272x/GHSA-rmjx-fq7m-272x.json index ec55238babb..2dfea376147 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmjx-fq7m-272x/GHSA-rmjx-fq7m-272x.json +++ b/advisories/unreviewed/2022/05/GHSA-rmjx-fq7m-272x/GHSA-rmjx-fq7m-272x.json @@ -7,12 +7,8 @@ "CVE-2014-10024" ], "details": "Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rpf2-79cx-2575/GHSA-rpf2-79cx-2575.json b/advisories/unreviewed/2022/05/GHSA-rpf2-79cx-2575/GHSA-rpf2-79cx-2575.json index cb96543985f..2978da08472 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpf2-79cx-2575/GHSA-rpf2-79cx-2575.json +++ b/advisories/unreviewed/2022/05/GHSA-rpf2-79cx-2575/GHSA-rpf2-79cx-2575.json @@ -7,12 +7,8 @@ "CVE-2015-1577" ], "details": "Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a (1) .. (dot dot) or (2) full pathname in the f parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rpxf-cx2q-mvmh/GHSA-rpxf-cx2q-mvmh.json b/advisories/unreviewed/2022/05/GHSA-rpxf-cx2q-mvmh/GHSA-rpxf-cx2q-mvmh.json index f0b55291fc6..d95bdf40110 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpxf-cx2q-mvmh/GHSA-rpxf-cx2q-mvmh.json +++ b/advisories/unreviewed/2022/05/GHSA-rpxf-cx2q-mvmh/GHSA-rpxf-cx2q-mvmh.json @@ -7,12 +7,8 @@ "CVE-2011-5288" ], "details": "Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the (1) cmdExport, (2) cmdImport, (3) cmdOpen, or (4) cmdSave method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rq2q-54mj-gpp7/GHSA-rq2q-54mj-gpp7.json b/advisories/unreviewed/2022/05/GHSA-rq2q-54mj-gpp7/GHSA-rq2q-54mj-gpp7.json index 99d2a4277d6..7aa5ae3f34b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rq2q-54mj-gpp7/GHSA-rq2q-54mj-gpp7.json +++ b/advisories/unreviewed/2022/05/GHSA-rq2q-54mj-gpp7/GHSA-rq2q-54mj-gpp7.json @@ -7,12 +7,8 @@ "CVE-2015-3911" ], "details": "Huawei E587 Mobile WiFi with firmware before 11.203.30.00.00 allows remote attackers to bypass authentication, change configurations, send messages, and cause a denial of service (device restart) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rqg5-f3m3-r3xh/GHSA-rqg5-f3m3-r3xh.json b/advisories/unreviewed/2022/05/GHSA-rqg5-f3m3-r3xh/GHSA-rqg5-f3m3-r3xh.json index 116b3b5b3dc..c156ec67036 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqg5-f3m3-r3xh/GHSA-rqg5-f3m3-r3xh.json +++ b/advisories/unreviewed/2022/05/GHSA-rqg5-f3m3-r3xh/GHSA-rqg5-f3m3-r3xh.json @@ -7,12 +7,8 @@ "CVE-2014-8153" ], "details": "The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update processing) by creating eight routers and assigning an ipv6 non-provider subnet to each.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrcg-p2f6-8mv2/GHSA-rrcg-p2f6-8mv2.json b/advisories/unreviewed/2022/05/GHSA-rrcg-p2f6-8mv2/GHSA-rrcg-p2f6-8mv2.json index 167c8789977..088bfee6aae 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrcg-p2f6-8mv2/GHSA-rrcg-p2f6-8mv2.json +++ b/advisories/unreviewed/2022/05/GHSA-rrcg-p2f6-8mv2/GHSA-rrcg-p2f6-8mv2.json @@ -7,12 +7,8 @@ "CVE-2014-5386" ], "details": "The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed the random number generator, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging the use of a single initialization vector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rv52-jqj3-929g/GHSA-rv52-jqj3-929g.json b/advisories/unreviewed/2022/05/GHSA-rv52-jqj3-929g/GHSA-rv52-jqj3-929g.json index f84f1623c98..4097ca317fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-rv52-jqj3-929g/GHSA-rv52-jqj3-929g.json +++ b/advisories/unreviewed/2022/05/GHSA-rv52-jqj3-929g/GHSA-rv52-jqj3-929g.json @@ -7,12 +7,8 @@ "CVE-2014-9258" ], "details": "SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condition parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rw6c-8hf4-mx2j/GHSA-rw6c-8hf4-mx2j.json b/advisories/unreviewed/2022/05/GHSA-rw6c-8hf4-mx2j/GHSA-rw6c-8hf4-mx2j.json index d6b54052e24..281ddcd0f51 100644 --- a/advisories/unreviewed/2022/05/GHSA-rw6c-8hf4-mx2j/GHSA-rw6c-8hf4-mx2j.json +++ b/advisories/unreviewed/2022/05/GHSA-rw6c-8hf4-mx2j/GHSA-rw6c-8hf4-mx2j.json @@ -7,12 +7,8 @@ "CVE-2014-9688" ], "details": "Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rxr6-79xr-5cvg/GHSA-rxr6-79xr-5cvg.json b/advisories/unreviewed/2022/05/GHSA-rxr6-79xr-5cvg/GHSA-rxr6-79xr-5cvg.json index 97d7134825b..23c25611dbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxr6-79xr-5cvg/GHSA-rxr6-79xr-5cvg.json +++ b/advisories/unreviewed/2022/05/GHSA-rxr6-79xr-5cvg/GHSA-rxr6-79xr-5cvg.json @@ -7,12 +7,8 @@ "CVE-2014-7294" ], "details": "Open redirect vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services (PDS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v249-5w98-3v22/GHSA-v249-5w98-3v22.json b/advisories/unreviewed/2022/05/GHSA-v249-5w98-3v22/GHSA-v249-5w98-3v22.json index c905e625637..c84adc1dfeb 100644 --- a/advisories/unreviewed/2022/05/GHSA-v249-5w98-3v22/GHSA-v249-5w98-3v22.json +++ b/advisories/unreviewed/2022/05/GHSA-v249-5w98-3v22/GHSA-v249-5w98-3v22.json @@ -7,12 +7,8 @@ "CVE-2011-5314" ], "details": "templates/default/index.php in Redaxscript 0.3.2 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v4j8-rhv4-55m7/GHSA-v4j8-rhv4-55m7.json b/advisories/unreviewed/2022/05/GHSA-v4j8-rhv4-55m7/GHSA-v4j8-rhv4-55m7.json index e25f4a19f5a..561d0cd839d 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4j8-rhv4-55m7/GHSA-v4j8-rhv4-55m7.json +++ b/advisories/unreviewed/2022/05/GHSA-v4j8-rhv4-55m7/GHSA-v4j8-rhv4-55m7.json @@ -7,12 +7,8 @@ "CVE-2011-4575" ], "details": "Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v57w-52fc-hj8c/GHSA-v57w-52fc-hj8c.json b/advisories/unreviewed/2022/05/GHSA-v57w-52fc-hj8c/GHSA-v57w-52fc-hj8c.json index 474343d17c1..18747555b54 100644 --- a/advisories/unreviewed/2022/05/GHSA-v57w-52fc-hj8c/GHSA-v57w-52fc-hj8c.json +++ b/advisories/unreviewed/2022/05/GHSA-v57w-52fc-hj8c/GHSA-v57w-52fc-hj8c.json @@ -7,12 +7,8 @@ "CVE-2014-9050" ], "details": "Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da Crypter PE file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v59h-h3v9-hmm2/GHSA-v59h-h3v9-hmm2.json b/advisories/unreviewed/2022/05/GHSA-v59h-h3v9-hmm2/GHSA-v59h-h3v9-hmm2.json index b3eca2031e8..7da15829b5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v59h-h3v9-hmm2/GHSA-v59h-h3v9-hmm2.json +++ b/advisories/unreviewed/2022/05/GHSA-v59h-h3v9-hmm2/GHSA-v59h-h3v9-hmm2.json @@ -7,12 +7,8 @@ "CVE-2014-9199" ], "details": "The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5x6-5pg5-rmgw/GHSA-v5x6-5pg5-rmgw.json b/advisories/unreviewed/2022/05/GHSA-v5x6-5pg5-rmgw/GHSA-v5x6-5pg5-rmgw.json index e6c4f3ecbcc..8817c2efaf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5x6-5pg5-rmgw/GHSA-v5x6-5pg5-rmgw.json +++ b/advisories/unreviewed/2022/05/GHSA-v5x6-5pg5-rmgw/GHSA-v5x6-5pg5-rmgw.json @@ -7,12 +7,8 @@ "CVE-2014-4514" ], "details": "Cross-site scripting (XSS) vulnerability in includes/api_tenpay/inc.tenpay_notify.php in the Alipay plugin 3.6.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to the getDebugInfo function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v653-gc8c-x36j/GHSA-v653-gc8c-x36j.json b/advisories/unreviewed/2022/05/GHSA-v653-gc8c-x36j/GHSA-v653-gc8c-x36j.json index a93d682373a..a1f95549ff9 100644 --- a/advisories/unreviewed/2022/05/GHSA-v653-gc8c-x36j/GHSA-v653-gc8c-x36j.json +++ b/advisories/unreviewed/2022/05/GHSA-v653-gc8c-x36j/GHSA-v653-gc8c-x36j.json @@ -7,12 +7,8 @@ "CVE-2015-3610" ], "details": "The Siemens HomeControl for Room Automation application before 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information or modify data via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v737-2xj2-2fcm/GHSA-v737-2xj2-2fcm.json b/advisories/unreviewed/2022/05/GHSA-v737-2xj2-2fcm/GHSA-v737-2xj2-2fcm.json index 02f23639090..dd878fdb69f 100644 --- a/advisories/unreviewed/2022/05/GHSA-v737-2xj2-2fcm/GHSA-v737-2xj2-2fcm.json +++ b/advisories/unreviewed/2022/05/GHSA-v737-2xj2-2fcm/GHSA-v737-2xj2-2fcm.json @@ -7,12 +7,8 @@ "CVE-2015-1621" ], "details": "Cross-site scripting (XSS) vulnerability in the Webform prepopulate block module before 7.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v78p-r437-xcq2/GHSA-v78p-r437-xcq2.json b/advisories/unreviewed/2022/05/GHSA-v78p-r437-xcq2/GHSA-v78p-r437-xcq2.json index 4eda59bd467..ed0a31bdbc7 100644 --- a/advisories/unreviewed/2022/05/GHSA-v78p-r437-xcq2/GHSA-v78p-r437-xcq2.json +++ b/advisories/unreviewed/2022/05/GHSA-v78p-r437-xcq2/GHSA-v78p-r437-xcq2.json @@ -7,12 +7,8 @@ "CVE-2014-6090" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorCommands servlets in IBM Curam Social Program Management (SPM) 5.2 SP6 before EP6, 6.0 SP2 before EP26, 6.0.3 before 6.0.3.0 iFix8, 6.0.4 before 6.0.4.5 iFix10, and 6.0.5 before 6.0.5.6 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v834-f83h-rx97/GHSA-v834-f83h-rx97.json b/advisories/unreviewed/2022/05/GHSA-v834-f83h-rx97/GHSA-v834-f83h-rx97.json index 49f49409e45..940040ae7aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-v834-f83h-rx97/GHSA-v834-f83h-rx97.json +++ b/advisories/unreviewed/2022/05/GHSA-v834-f83h-rx97/GHSA-v834-f83h-rx97.json @@ -7,12 +7,8 @@ "CVE-2014-9641" ], "details": "The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v86f-vq74-w87h/GHSA-v86f-vq74-w87h.json b/advisories/unreviewed/2022/05/GHSA-v86f-vq74-w87h/GHSA-v86f-vq74-w87h.json index 2434a445296..fce88a877a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-v86f-vq74-w87h/GHSA-v86f-vq74-w87h.json +++ b/advisories/unreviewed/2022/05/GHSA-v86f-vq74-w87h/GHSA-v86f-vq74-w87h.json @@ -7,12 +7,8 @@ "CVE-2010-5316" ], "details": "Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a top_height cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v8g2-qhw8-h443/GHSA-v8g2-qhw8-h443.json b/advisories/unreviewed/2022/05/GHSA-v8g2-qhw8-h443/GHSA-v8g2-qhw8-h443.json index 5a63d67a04c..6d1370f54a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8g2-qhw8-h443/GHSA-v8g2-qhw8-h443.json +++ b/advisories/unreviewed/2022/05/GHSA-v8g2-qhw8-h443/GHSA-v8g2-qhw8-h443.json @@ -7,12 +7,8 @@ "CVE-2014-8613" ], "details": "The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted RE_CONFIG chunk.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v8ph-h8j7-4m95/GHSA-v8ph-h8j7-4m95.json b/advisories/unreviewed/2022/05/GHSA-v8ph-h8j7-4m95/GHSA-v8ph-h8j7-4m95.json index c92db38ad7c..114d16e5354 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8ph-h8j7-4m95/GHSA-v8ph-h8j7-4m95.json +++ b/advisories/unreviewed/2022/05/GHSA-v8ph-h8j7-4m95/GHSA-v8ph-h8j7-4m95.json @@ -7,12 +7,8 @@ "CVE-2015-0891" ], "details": "Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Simple Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v8vf-wxjx-hh38/GHSA-v8vf-wxjx-hh38.json b/advisories/unreviewed/2022/05/GHSA-v8vf-wxjx-hh38/GHSA-v8vf-wxjx-hh38.json index 8a147758289..abfe8227a10 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8vf-wxjx-hh38/GHSA-v8vf-wxjx-hh38.json +++ b/advisories/unreviewed/2022/05/GHSA-v8vf-wxjx-hh38/GHSA-v8vf-wxjx-hh38.json @@ -7,12 +7,8 @@ "CVE-2015-1495" ], "details": "Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in (1) IOPOSScanner.ocx or (2) IOPOSScale.ocx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vc9g-5348-gqwv/GHSA-vc9g-5348-gqwv.json b/advisories/unreviewed/2022/05/GHSA-vc9g-5348-gqwv/GHSA-vc9g-5348-gqwv.json index 5fccb38a074..2f0957a123f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc9g-5348-gqwv/GHSA-vc9g-5348-gqwv.json +++ b/advisories/unreviewed/2022/05/GHSA-vc9g-5348-gqwv/GHSA-vc9g-5348-gqwv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vf6w-44qh-j94c/GHSA-vf6w-44qh-j94c.json b/advisories/unreviewed/2022/05/GHSA-vf6w-44qh-j94c/GHSA-vf6w-44qh-j94c.json index 39336901acd..4460ecca091 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf6w-44qh-j94c/GHSA-vf6w-44qh-j94c.json +++ b/advisories/unreviewed/2022/05/GHSA-vf6w-44qh-j94c/GHSA-vf6w-44qh-j94c.json @@ -7,12 +7,8 @@ "CVE-2010-5320" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify settings via a configuration action to admin.php, (2) modify articles via an articles action to admin.php, or (3) modify credentials via a users action to admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfm3-6jhx-qh3w/GHSA-vfm3-6jhx-qh3w.json b/advisories/unreviewed/2022/05/GHSA-vfm3-6jhx-qh3w/GHSA-vfm3-6jhx-qh3w.json index f9446d7e4bf..0052b955afa 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfm3-6jhx-qh3w/GHSA-vfm3-6jhx-qh3w.json +++ b/advisories/unreviewed/2022/05/GHSA-vfm3-6jhx-qh3w/GHSA-vfm3-6jhx-qh3w.json @@ -7,12 +7,8 @@ "CVE-2014-5314" ], "details": "Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfr6-xwr2-qjgf/GHSA-vfr6-xwr2-qjgf.json b/advisories/unreviewed/2022/05/GHSA-vfr6-xwr2-qjgf/GHSA-vfr6-xwr2-qjgf.json index 7dbad197492..8912bb595f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfr6-xwr2-qjgf/GHSA-vfr6-xwr2-qjgf.json +++ b/advisories/unreviewed/2022/05/GHSA-vfr6-xwr2-qjgf/GHSA-vfr6-xwr2-qjgf.json @@ -7,12 +7,8 @@ "CVE-2014-9044" ], "details": "Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain sensitive information via a brute force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vg9q-x62m-cp2m/GHSA-vg9q-x62m-cp2m.json b/advisories/unreviewed/2022/05/GHSA-vg9q-x62m-cp2m/GHSA-vg9q-x62m-cp2m.json index 074bc53106f..0493e58e894 100644 --- a/advisories/unreviewed/2022/05/GHSA-vg9q-x62m-cp2m/GHSA-vg9q-x62m-cp2m.json +++ b/advisories/unreviewed/2022/05/GHSA-vg9q-x62m-cp2m/GHSA-vg9q-x62m-cp2m.json @@ -7,12 +7,8 @@ "CVE-2015-1597" ], "details": "The Siemens SPCanywhere application for Android does not use encryption during the loading of code, which allows man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhv2-2m84-pcm7/GHSA-vhv2-2m84-pcm7.json b/advisories/unreviewed/2022/05/GHSA-vhv2-2m84-pcm7/GHSA-vhv2-2m84-pcm7.json index 5781fbad48e..6f1e2eaa728 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhv2-2m84-pcm7/GHSA-vhv2-2m84-pcm7.json +++ b/advisories/unreviewed/2022/05/GHSA-vhv2-2m84-pcm7/GHSA-vhv2-2m84-pcm7.json @@ -7,12 +7,8 @@ "CVE-2014-9047" ], "details": "Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vjq9-wjjq-88w7/GHSA-vjq9-wjjq-88w7.json b/advisories/unreviewed/2022/05/GHSA-vjq9-wjjq-88w7/GHSA-vjq9-wjjq-88w7.json index d4a36464f26..1fb15817832 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjq9-wjjq-88w7/GHSA-vjq9-wjjq-88w7.json +++ b/advisories/unreviewed/2022/05/GHSA-vjq9-wjjq-88w7/GHSA-vjq9-wjjq-88w7.json @@ -7,12 +7,8 @@ "CVE-2014-9478" ], "details": "Cross-site scripting (XSS) vulnerability in the preview in the ExpandTemplates extension for MediaWiki, when $wgRawHTML is set to true, allows remote attackers to inject arbitrary web script or HTML via the wpInput parameter to the Special:ExpandTemplates page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjvf-vqg8-hm9w/GHSA-vjvf-vqg8-hm9w.json b/advisories/unreviewed/2022/05/GHSA-vjvf-vqg8-hm9w/GHSA-vjvf-vqg8-hm9w.json index 5fcd7fd102f..89d5fb73281 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjvf-vqg8-hm9w/GHSA-vjvf-vqg8-hm9w.json +++ b/advisories/unreviewed/2022/05/GHSA-vjvf-vqg8-hm9w/GHSA-vjvf-vqg8-hm9w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjx9-qrpm-m3rw/GHSA-vjx9-qrpm-m3rw.json b/advisories/unreviewed/2022/05/GHSA-vjx9-qrpm-m3rw/GHSA-vjx9-qrpm-m3rw.json index a9e7a98e3f9..3ca8ecaa638 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjx9-qrpm-m3rw/GHSA-vjx9-qrpm-m3rw.json +++ b/advisories/unreviewed/2022/05/GHSA-vjx9-qrpm-m3rw/GHSA-vjx9-qrpm-m3rw.json @@ -7,12 +7,8 @@ "CVE-2015-0993" ], "details": "Inductive Automation Ignition 7.7.2 does not terminate a session upon a logout action, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vmwc-2f73-x9p6/GHSA-vmwc-2f73-x9p6.json b/advisories/unreviewed/2022/05/GHSA-vmwc-2f73-x9p6/GHSA-vmwc-2f73-x9p6.json index 1f782cbfbee..497c0894d58 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmwc-2f73-x9p6/GHSA-vmwc-2f73-x9p6.json +++ b/advisories/unreviewed/2022/05/GHSA-vmwc-2f73-x9p6/GHSA-vmwc-2f73-x9p6.json @@ -7,12 +7,8 @@ "CVE-2014-9205" ], "details": "Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vp4m-5q7m-677j/GHSA-vp4m-5q7m-677j.json b/advisories/unreviewed/2022/05/GHSA-vp4m-5q7m-677j/GHSA-vp4m-5q7m-677j.json index 0d8c3c06767..1013c4c7c1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-vp4m-5q7m-677j/GHSA-vp4m-5q7m-677j.json +++ b/advisories/unreviewed/2022/05/GHSA-vp4m-5q7m-677j/GHSA-vp4m-5q7m-677j.json @@ -7,12 +7,8 @@ "CVE-2011-5285" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in BugFree 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the ActionType parameter to Bug.php, the ReportMode parameter to (2) Report.php or (3) ReportLeft.php, or the PATH_INFO to (4) AdminProjectList.php, (5) AdminGroupList.php, or (6) AdminUserLogList.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vpw8-6fwj-h438/GHSA-vpw8-6fwj-h438.json b/advisories/unreviewed/2022/05/GHSA-vpw8-6fwj-h438/GHSA-vpw8-6fwj-h438.json index 59b3b4e5599..fbea4360ce3 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpw8-6fwj-h438/GHSA-vpw8-6fwj-h438.json +++ b/advisories/unreviewed/2022/05/GHSA-vpw8-6fwj-h438/GHSA-vpw8-6fwj-h438.json @@ -7,12 +7,8 @@ "CVE-2015-1154" ], "details": "WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1153.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqfw-7c89-9x84/GHSA-vqfw-7c89-9x84.json b/advisories/unreviewed/2022/05/GHSA-vqfw-7c89-9x84/GHSA-vqfw-7c89-9x84.json index b430f7443bb..4cc72eb1ec5 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqfw-7c89-9x84/GHSA-vqfw-7c89-9x84.json +++ b/advisories/unreviewed/2022/05/GHSA-vqfw-7c89-9x84/GHSA-vqfw-7c89-9x84.json @@ -7,12 +7,8 @@ "CVE-2014-9375" ], "details": "Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. (dot dot) in a file path in a ZIP archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqgw-8v6c-c2wr/GHSA-vqgw-8v6c-c2wr.json b/advisories/unreviewed/2022/05/GHSA-vqgw-8v6c-c2wr/GHSA-vqgw-8v6c-c2wr.json index f9831b703d7..bb46c7caec6 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqgw-8v6c-c2wr/GHSA-vqgw-8v6c-c2wr.json +++ b/advisories/unreviewed/2022/05/GHSA-vqgw-8v6c-c2wr/GHSA-vqgw-8v6c-c2wr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -51,9 +49,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vv9p-wrp4-j924/GHSA-vv9p-wrp4-j924.json b/advisories/unreviewed/2022/05/GHSA-vv9p-wrp4-j924/GHSA-vv9p-wrp4-j924.json index 189139422a4..f1bbd04a9d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-vv9p-wrp4-j924/GHSA-vv9p-wrp4-j924.json +++ b/advisories/unreviewed/2022/05/GHSA-vv9p-wrp4-j924/GHSA-vv9p-wrp4-j924.json @@ -7,12 +7,8 @@ "CVE-2014-10028" ], "details": "Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi when res_config_id is set to 41.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vwf9-jmrq-f5rf/GHSA-vwf9-jmrq-f5rf.json b/advisories/unreviewed/2022/05/GHSA-vwf9-jmrq-f5rf/GHSA-vwf9-jmrq-f5rf.json index ea54d430738..76f6c0218bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwf9-jmrq-f5rf/GHSA-vwf9-jmrq-f5rf.json +++ b/advisories/unreviewed/2022/05/GHSA-vwf9-jmrq-f5rf/GHSA-vwf9-jmrq-f5rf.json @@ -7,12 +7,8 @@ "CVE-2014-9642" ], "details": "bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vwr7-mg6p-rh7v/GHSA-vwr7-mg6p-rh7v.json b/advisories/unreviewed/2022/05/GHSA-vwr7-mg6p-rh7v/GHSA-vwr7-mg6p-rh7v.json index 034c25040be..42ad85d05e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwr7-mg6p-rh7v/GHSA-vwr7-mg6p-rh7v.json +++ b/advisories/unreviewed/2022/05/GHSA-vwr7-mg6p-rh7v/GHSA-vwr7-mg6p-rh7v.json @@ -7,12 +7,8 @@ "CVE-2015-0892" ], "details": "Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vx83-j5wr-7qrc/GHSA-vx83-j5wr-7qrc.json b/advisories/unreviewed/2022/05/GHSA-vx83-j5wr-7qrc/GHSA-vx83-j5wr-7qrc.json index b3c2ee738f2..883ac386e31 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx83-j5wr-7qrc/GHSA-vx83-j5wr-7qrc.json +++ b/advisories/unreviewed/2022/05/GHSA-vx83-j5wr-7qrc/GHSA-vx83-j5wr-7qrc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vxf4-qh89-w2r6/GHSA-vxf4-qh89-w2r6.json b/advisories/unreviewed/2022/05/GHSA-vxf4-qh89-w2r6/GHSA-vxf4-qh89-w2r6.json index 9bdca809fca..7835e52425b 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxf4-qh89-w2r6/GHSA-vxf4-qh89-w2r6.json +++ b/advisories/unreviewed/2022/05/GHSA-vxf4-qh89-w2r6/GHSA-vxf4-qh89-w2r6.json @@ -7,12 +7,8 @@ "CVE-2014-5406" ], "details": "The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify settings or medication data via packets on the (a) TELNET, (b) HTTP, (c) HTTPS, or (d) UPNP port. NOTE: this issue might overlap CVE-2015-3459.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vxg5-rr4j-7hgw/GHSA-vxg5-rr4j-7hgw.json b/advisories/unreviewed/2022/05/GHSA-vxg5-rr4j-7hgw/GHSA-vxg5-rr4j-7hgw.json index 67a2a37ffb6..c3eef48bbfe 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxg5-rr4j-7hgw/GHSA-vxg5-rr4j-7hgw.json +++ b/advisories/unreviewed/2022/05/GHSA-vxg5-rr4j-7hgw/GHSA-vxg5-rr4j-7hgw.json @@ -7,12 +7,8 @@ "CVE-2014-2224" ], "details": "Plogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain codes, which makes it easier for remote attackers to bypass the CAPTCHA protection mechanism via a series of form submissions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w2jf-83j8-x6v6/GHSA-w2jf-83j8-x6v6.json b/advisories/unreviewed/2022/05/GHSA-w2jf-83j8-x6v6/GHSA-w2jf-83j8-x6v6.json index 1158f1e382b..6b4d27fa413 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2jf-83j8-x6v6/GHSA-w2jf-83j8-x6v6.json +++ b/advisories/unreviewed/2022/05/GHSA-w2jf-83j8-x6v6/GHSA-w2jf-83j8-x6v6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3mh-mch9-v4xr/GHSA-w3mh-mch9-v4xr.json b/advisories/unreviewed/2022/05/GHSA-w3mh-mch9-v4xr/GHSA-w3mh-mch9-v4xr.json index 4efc8387f73..ef4751bda3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3mh-mch9-v4xr/GHSA-w3mh-mch9-v4xr.json +++ b/advisories/unreviewed/2022/05/GHSA-w3mh-mch9-v4xr/GHSA-w3mh-mch9-v4xr.json @@ -7,12 +7,8 @@ "CVE-2011-5299" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in poMMo Aardvark PR16.1 allow remote attackers to inject arbitrary web script or HTML via (1) the referer parameter to index.php, (2) the site_name parameter to admin/setup/config/general.php, (3) the group_name parameter to admin/subscribers/subscribers_groups.php, or (4) the field_name parameter to admin/setup/setup_fields.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4m9-3rvp-7fhj/GHSA-w4m9-3rvp-7fhj.json b/advisories/unreviewed/2022/05/GHSA-w4m9-3rvp-7fhj/GHSA-w4m9-3rvp-7fhj.json index 0277c2e86e5..de8367cd1f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4m9-3rvp-7fhj/GHSA-w4m9-3rvp-7fhj.json +++ b/advisories/unreviewed/2022/05/GHSA-w4m9-3rvp-7fhj/GHSA-w4m9-3rvp-7fhj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4p7-r5vj-mhx5/GHSA-w4p7-r5vj-mhx5.json b/advisories/unreviewed/2022/05/GHSA-w4p7-r5vj-mhx5/GHSA-w4p7-r5vj-mhx5.json index 6b6bb1d9368..c7c17c625c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4p7-r5vj-mhx5/GHSA-w4p7-r5vj-mhx5.json +++ b/advisories/unreviewed/2022/05/GHSA-w4p7-r5vj-mhx5/GHSA-w4p7-r5vj-mhx5.json @@ -7,12 +7,8 @@ "CVE-2015-0934" ], "details": "Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4vm-8m9w-5qwm/GHSA-w4vm-8m9w-5qwm.json b/advisories/unreviewed/2022/05/GHSA-w4vm-8m9w-5qwm/GHSA-w4vm-8m9w-5qwm.json index 5ac1d4058a1..6fc9bed1322 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4vm-8m9w-5qwm/GHSA-w4vm-8m9w-5qwm.json +++ b/advisories/unreviewed/2022/05/GHSA-w4vm-8m9w-5qwm/GHSA-w4vm-8m9w-5qwm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5g6-g2hq-m7mr/GHSA-w5g6-g2hq-m7mr.json b/advisories/unreviewed/2022/05/GHSA-w5g6-g2hq-m7mr/GHSA-w5g6-g2hq-m7mr.json index b61b44b0514..6866470051e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5g6-g2hq-m7mr/GHSA-w5g6-g2hq-m7mr.json +++ b/advisories/unreviewed/2022/05/GHSA-w5g6-g2hq-m7mr/GHSA-w5g6-g2hq-m7mr.json @@ -7,12 +7,8 @@ "CVE-2015-2242" ], "details": "Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the (1) termid or (2) nyelv_id parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5pw-3rhf-c986/GHSA-w5pw-3rhf-c986.json b/advisories/unreviewed/2022/05/GHSA-w5pw-3rhf-c986/GHSA-w5pw-3rhf-c986.json index 7f876a53e2e..5c56d81ac92 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5pw-3rhf-c986/GHSA-w5pw-3rhf-c986.json +++ b/advisories/unreviewed/2022/05/GHSA-w5pw-3rhf-c986/GHSA-w5pw-3rhf-c986.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w6r4-rh47-mc85/GHSA-w6r4-rh47-mc85.json b/advisories/unreviewed/2022/05/GHSA-w6r4-rh47-mc85/GHSA-w6r4-rh47-mc85.json index 84c1b974a6b..62e3b54dd5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6r4-rh47-mc85/GHSA-w6r4-rh47-mc85.json +++ b/advisories/unreviewed/2022/05/GHSA-w6r4-rh47-mc85/GHSA-w6r4-rh47-mc85.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w7hr-2cw5-qqgq/GHSA-w7hr-2cw5-qqgq.json b/advisories/unreviewed/2022/05/GHSA-w7hr-2cw5-qqgq/GHSA-w7hr-2cw5-qqgq.json index 6d04db16d8a..ce018932a86 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7hr-2cw5-qqgq/GHSA-w7hr-2cw5-qqgq.json +++ b/advisories/unreviewed/2022/05/GHSA-w7hr-2cw5-qqgq/GHSA-w7hr-2cw5-qqgq.json @@ -7,12 +7,8 @@ "CVE-2014-5409" ], "details": "The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers (ISNs), which makes it easier for remote attackers to spoof packets by predicting these values.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w87c-h73m-6vrq/GHSA-w87c-h73m-6vrq.json b/advisories/unreviewed/2022/05/GHSA-w87c-h73m-6vrq/GHSA-w87c-h73m-6vrq.json index 37f504f28e0..f416061eb26 100644 --- a/advisories/unreviewed/2022/05/GHSA-w87c-h73m-6vrq/GHSA-w87c-h73m-6vrq.json +++ b/advisories/unreviewed/2022/05/GHSA-w87c-h73m-6vrq/GHSA-w87c-h73m-6vrq.json @@ -7,12 +7,8 @@ "CVE-2015-1355" ], "details": "Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w8cp-6x5g-mf2j/GHSA-w8cp-6x5g-mf2j.json b/advisories/unreviewed/2022/05/GHSA-w8cp-6x5g-mf2j/GHSA-w8cp-6x5g-mf2j.json index 6c5bc8807f7..ee25a1b41ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8cp-6x5g-mf2j/GHSA-w8cp-6x5g-mf2j.json +++ b/advisories/unreviewed/2022/05/GHSA-w8cp-6x5g-mf2j/GHSA-w8cp-6x5g-mf2j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w93f-wmr5-rjc6/GHSA-w93f-wmr5-rjc6.json b/advisories/unreviewed/2022/05/GHSA-w93f-wmr5-rjc6/GHSA-w93f-wmr5-rjc6.json index 8738519dee8..581cca9c815 100644 --- a/advisories/unreviewed/2022/05/GHSA-w93f-wmr5-rjc6/GHSA-w93f-wmr5-rjc6.json +++ b/advisories/unreviewed/2022/05/GHSA-w93f-wmr5-rjc6/GHSA-w93f-wmr5-rjc6.json @@ -7,12 +7,8 @@ "CVE-2015-0896" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w93h-8xj5-rq44/GHSA-w93h-8xj5-rq44.json b/advisories/unreviewed/2022/05/GHSA-w93h-8xj5-rq44/GHSA-w93h-8xj5-rq44.json index 6aae4e95cb9..52d8100c477 100644 --- a/advisories/unreviewed/2022/05/GHSA-w93h-8xj5-rq44/GHSA-w93h-8xj5-rq44.json +++ b/advisories/unreviewed/2022/05/GHSA-w93h-8xj5-rq44/GHSA-w93h-8xj5-rq44.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w9jw-49fq-4prh/GHSA-w9jw-49fq-4prh.json b/advisories/unreviewed/2022/05/GHSA-w9jw-49fq-4prh/GHSA-w9jw-49fq-4prh.json index ce892aaa0f7..2e3b368515a 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9jw-49fq-4prh/GHSA-w9jw-49fq-4prh.json +++ b/advisories/unreviewed/2022/05/GHSA-w9jw-49fq-4prh/GHSA-w9jw-49fq-4prh.json @@ -7,12 +7,8 @@ "CVE-2015-0898" ], "details": "futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to execute arbitrary Perl code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc5q-x3c4-9jww/GHSA-wc5q-x3c4-9jww.json b/advisories/unreviewed/2022/05/GHSA-wc5q-x3c4-9jww/GHSA-wc5q-x3c4-9jww.json index bd64933c12a..fa5818aacfe 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc5q-x3c4-9jww/GHSA-wc5q-x3c4-9jww.json +++ b/advisories/unreviewed/2022/05/GHSA-wc5q-x3c4-9jww/GHSA-wc5q-x3c4-9jww.json @@ -7,12 +7,8 @@ "CVE-2014-9311" ], "details": "Cross-site scripting (XSS) vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the location[id] parameter in a shareaholic_add_location action to wp-admin/admin-ajax.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc8v-8q22-5546/GHSA-wc8v-8q22-5546.json b/advisories/unreviewed/2022/05/GHSA-wc8v-8q22-5546/GHSA-wc8v-8q22-5546.json index d3ddc12fb60..3729fb99513 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc8v-8q22-5546/GHSA-wc8v-8q22-5546.json +++ b/advisories/unreviewed/2022/05/GHSA-wc8v-8q22-5546/GHSA-wc8v-8q22-5546.json @@ -7,12 +7,8 @@ "CVE-2015-0149" ], "details": "The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wcgf-wpvr-w7fm/GHSA-wcgf-wpvr-w7fm.json b/advisories/unreviewed/2022/05/GHSA-wcgf-wpvr-w7fm/GHSA-wcgf-wpvr-w7fm.json index 3792f5adf9b..dd30b3e6def 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcgf-wpvr-w7fm/GHSA-wcgf-wpvr-w7fm.json +++ b/advisories/unreviewed/2022/05/GHSA-wcgf-wpvr-w7fm/GHSA-wcgf-wpvr-w7fm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wg27-r6r2-wvxg/GHSA-wg27-r6r2-wvxg.json b/advisories/unreviewed/2022/05/GHSA-wg27-r6r2-wvxg/GHSA-wg27-r6r2-wvxg.json index b60e6611133..c3ea6ea1436 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg27-r6r2-wvxg/GHSA-wg27-r6r2-wvxg.json +++ b/advisories/unreviewed/2022/05/GHSA-wg27-r6r2-wvxg/GHSA-wg27-r6r2-wvxg.json @@ -7,12 +7,8 @@ "CVE-2014-100003" ], "details": "SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ym_download_id parameter to the default URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wgwc-hh27-2pcg/GHSA-wgwc-hh27-2pcg.json b/advisories/unreviewed/2022/05/GHSA-wgwc-hh27-2pcg/GHSA-wgwc-hh27-2pcg.json index e8dc4c5084b..6d19392826e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgwc-hh27-2pcg/GHSA-wgwc-hh27-2pcg.json +++ b/advisories/unreviewed/2022/05/GHSA-wgwc-hh27-2pcg/GHSA-wgwc-hh27-2pcg.json @@ -7,12 +7,8 @@ "CVE-2015-0895" ], "details": "Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 (aka Not Found) HTTP status codes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-whff-vm4v-mwp9/GHSA-whff-vm4v-mwp9.json b/advisories/unreviewed/2022/05/GHSA-whff-vm4v-mwp9/GHSA-whff-vm4v-mwp9.json index 4c5cde8e0b6..53dd77b50c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-whff-vm4v-mwp9/GHSA-whff-vm4v-mwp9.json +++ b/advisories/unreviewed/2022/05/GHSA-whff-vm4v-mwp9/GHSA-whff-vm4v-mwp9.json @@ -7,12 +7,8 @@ "CVE-2015-1052" ], "details": "Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web script or HTML via the result parameter to upload_files/pk/include.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wjgq-vwg2-v722/GHSA-wjgq-vwg2-v722.json b/advisories/unreviewed/2022/05/GHSA-wjgq-vwg2-v722/GHSA-wjgq-vwg2-v722.json index 8155660be57..a57ad36badc 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjgq-vwg2-v722/GHSA-wjgq-vwg2-v722.json +++ b/advisories/unreviewed/2022/05/GHSA-wjgq-vwg2-v722/GHSA-wjgq-vwg2-v722.json @@ -7,12 +7,8 @@ "CVE-2014-7922" ], "details": "The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a corresponding _opt_ parameter in the Bundle extras argument, which allows attackers to bypass an intended consent dialog and retrieve tokens for arbitrary OAuth scopes including the SID and LSID scopes, and consequently obtain access to a Google account, via a crafted application, as demonstrated by setting the has_permission=1 parameter value upon finding _opt_has_permission in that argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wjh2-79x3-xjv2/GHSA-wjh2-79x3-xjv2.json b/advisories/unreviewed/2022/05/GHSA-wjh2-79x3-xjv2/GHSA-wjh2-79x3-xjv2.json index 59e5bb7f408..c12d3785225 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjh2-79x3-xjv2/GHSA-wjh2-79x3-xjv2.json +++ b/advisories/unreviewed/2022/05/GHSA-wjh2-79x3-xjv2/GHSA-wjh2-79x3-xjv2.json @@ -7,12 +7,8 @@ "CVE-2014-10005" ], "details": "Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wp8h-3f2r-jqrj/GHSA-wp8h-3f2r-jqrj.json b/advisories/unreviewed/2022/05/GHSA-wp8h-3f2r-jqrj/GHSA-wp8h-3f2r-jqrj.json index 8bd0d930afd..debe6f09828 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp8h-3f2r-jqrj/GHSA-wp8h-3f2r-jqrj.json +++ b/advisories/unreviewed/2022/05/GHSA-wp8h-3f2r-jqrj/GHSA-wp8h-3f2r-jqrj.json @@ -7,12 +7,8 @@ "CVE-2015-0881" ], "details": "CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wqxr-4f7p-r7mg/GHSA-wqxr-4f7p-r7mg.json b/advisories/unreviewed/2022/05/GHSA-wqxr-4f7p-r7mg/GHSA-wqxr-4f7p-r7mg.json index e75afd9dd51..d4cfee29ecc 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqxr-4f7p-r7mg/GHSA-wqxr-4f7p-r7mg.json +++ b/advisories/unreviewed/2022/05/GHSA-wqxr-4f7p-r7mg/GHSA-wqxr-4f7p-r7mg.json @@ -7,12 +7,8 @@ "CVE-2014-6382" ], "details": "The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as a broadband edge (BBE) router, allows remote attackers to cause a denial of service (jpppd crash and restart) by sending a crafted PAP Authenticate-Request after the PPPoE Discovery and LCP phase are complete.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wr4x-7qhj-2g7g/GHSA-wr4x-7qhj-2g7g.json b/advisories/unreviewed/2022/05/GHSA-wr4x-7qhj-2g7g/GHSA-wr4x-7qhj-2g7g.json index 31ac100d65f..e1bce143607 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr4x-7qhj-2g7g/GHSA-wr4x-7qhj-2g7g.json +++ b/advisories/unreviewed/2022/05/GHSA-wr4x-7qhj-2g7g/GHSA-wr4x-7qhj-2g7g.json @@ -7,12 +7,8 @@ "CVE-2012-2808" ], "details": "The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wvch-68qf-pf6h/GHSA-wvch-68qf-pf6h.json b/advisories/unreviewed/2022/05/GHSA-wvch-68qf-pf6h/GHSA-wvch-68qf-pf6h.json index 90c9eb2c0c4..5db492c7321 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvch-68qf-pf6h/GHSA-wvch-68qf-pf6h.json +++ b/advisories/unreviewed/2022/05/GHSA-wvch-68qf-pf6h/GHSA-wvch-68qf-pf6h.json @@ -7,12 +7,8 @@ "CVE-2015-1478" ], "details": "Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the view parameter to /classifieds.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wvj7-73j3-j4p2/GHSA-wvj7-73j3-j4p2.json b/advisories/unreviewed/2022/05/GHSA-wvj7-73j3-j4p2/GHSA-wvj7-73j3-j4p2.json index 9398906da37..7949f34fe01 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvj7-73j3-j4p2/GHSA-wvj7-73j3-j4p2.json +++ b/advisories/unreviewed/2022/05/GHSA-wvj7-73j3-j4p2/GHSA-wvj7-73j3-j4p2.json @@ -7,12 +7,8 @@ "CVE-2015-2182" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script or HTML via the (1) schltr parameter in a brands action or (2) brand parameter in a viewbrands action to index.php. NOTE: The search parameter vector is already covered by CVE-2010-5322.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ww52-g4g7-mhj7/GHSA-ww52-g4g7-mhj7.json b/advisories/unreviewed/2022/05/GHSA-ww52-g4g7-mhj7/GHSA-ww52-g4g7-mhj7.json index bf4eeaf84d7..255c9a52708 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww52-g4g7-mhj7/GHSA-ww52-g4g7-mhj7.json +++ b/advisories/unreviewed/2022/05/GHSA-ww52-g4g7-mhj7/GHSA-ww52-g4g7-mhj7.json @@ -7,12 +7,8 @@ "CVE-2014-7814" ], "details": "SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wwgr-p7g6-6h59/GHSA-wwgr-p7g6-6h59.json b/advisories/unreviewed/2022/05/GHSA-wwgr-p7g6-6h59/GHSA-wwgr-p7g6-6h59.json index 7f67f45b842..6f4c79e1390 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwgr-p7g6-6h59/GHSA-wwgr-p7g6-6h59.json +++ b/advisories/unreviewed/2022/05/GHSA-wwgr-p7g6-6h59/GHSA-wwgr-p7g6-6h59.json @@ -7,12 +7,8 @@ "CVE-2014-6304" ], "details": "The Form Controls CSS file in PNMsoft Sequence Kinetics before 7.7 allows remote attackers to obtain sensitive source-code information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wwvc-wgrm-j6g3/GHSA-wwvc-wgrm-j6g3.json b/advisories/unreviewed/2022/05/GHSA-wwvc-wgrm-j6g3/GHSA-wwvc-wgrm-j6g3.json index b8b313a225f..049caef98cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwvc-wgrm-j6g3/GHSA-wwvc-wgrm-j6g3.json +++ b/advisories/unreviewed/2022/05/GHSA-wwvc-wgrm-j6g3/GHSA-wwvc-wgrm-j6g3.json @@ -7,12 +7,8 @@ "CVE-2014-9353" ], "details": "NetApp OnCommand Balance before 4.2P2 contains a \"default privileged account,\" which allows remote attackers to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wxc3-73gh-3hjw/GHSA-wxc3-73gh-3hjw.json b/advisories/unreviewed/2022/05/GHSA-wxc3-73gh-3hjw/GHSA-wxc3-73gh-3hjw.json index 30e24edd3dd..7da35f9bf8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wxc3-73gh-3hjw/GHSA-wxc3-73gh-3hjw.json +++ b/advisories/unreviewed/2022/05/GHSA-wxc3-73gh-3hjw/GHSA-wxc3-73gh-3hjw.json @@ -7,12 +7,8 @@ "CVE-2013-4709" ], "details": "Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware before 2.82, SEIL/X1 with firmware before 4.32, SEIL/X2 with firmware before 4.32, SEIL/B1 with firmware before 4.32, SEIL/Turbo with firmware before 2.16, and SEIL/neu 2FE Plus with firmware before 2.16 allows remote attackers to execute arbitrary code via a crafted L2TP message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x2cf-694f-4qp5/GHSA-x2cf-694f-4qp5.json b/advisories/unreviewed/2022/05/GHSA-x2cf-694f-4qp5/GHSA-x2cf-694f-4qp5.json index aef699db736..d2283bc4cb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2cf-694f-4qp5/GHSA-x2cf-694f-4qp5.json +++ b/advisories/unreviewed/2022/05/GHSA-x2cf-694f-4qp5/GHSA-x2cf-694f-4qp5.json @@ -7,12 +7,8 @@ "CVE-2015-0968" ], "details": "Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content type, a different vulnerability than CVE-2013-3590.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x2xx-g2x3-pc9m/GHSA-x2xx-g2x3-pc9m.json b/advisories/unreviewed/2022/05/GHSA-x2xx-g2x3-pc9m/GHSA-x2xx-g2x3-pc9m.json index 43bf4ffd021..0b7697c74f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2xx-g2x3-pc9m/GHSA-x2xx-g2x3-pc9m.json +++ b/advisories/unreviewed/2022/05/GHSA-x2xx-g2x3-pc9m/GHSA-x2xx-g2x3-pc9m.json @@ -7,12 +7,8 @@ "CVE-2014-5419" ], "details": "GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it easier for remote attackers to obtain the cleartext content of network traffic by reading this key from a firmware image and then sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x359-8w6v-68cf/GHSA-x359-8w6v-68cf.json b/advisories/unreviewed/2022/05/GHSA-x359-8w6v-68cf/GHSA-x359-8w6v-68cf.json index 3f7717cbe0a..ffacfa354d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-x359-8w6v-68cf/GHSA-x359-8w6v-68cf.json +++ b/advisories/unreviewed/2022/05/GHSA-x359-8w6v-68cf/GHSA-x359-8w6v-68cf.json @@ -7,12 +7,8 @@ "CVE-2015-3029" ], "details": "The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x3mv-j3pj-w9wp/GHSA-x3mv-j3pj-w9wp.json b/advisories/unreviewed/2022/05/GHSA-x3mv-j3pj-w9wp/GHSA-x3mv-j3pj-w9wp.json index bcb246e9e05..965467a317e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3mv-j3pj-w9wp/GHSA-x3mv-j3pj-w9wp.json +++ b/advisories/unreviewed/2022/05/GHSA-x3mv-j3pj-w9wp/GHSA-x3mv-j3pj-w9wp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x48q-xr66-wp2x/GHSA-x48q-xr66-wp2x.json b/advisories/unreviewed/2022/05/GHSA-x48q-xr66-wp2x/GHSA-x48q-xr66-wp2x.json index e450dcd5fa7..228e7e7be79 100644 --- a/advisories/unreviewed/2022/05/GHSA-x48q-xr66-wp2x/GHSA-x48q-xr66-wp2x.json +++ b/advisories/unreviewed/2022/05/GHSA-x48q-xr66-wp2x/GHSA-x48q-xr66-wp2x.json @@ -7,12 +7,8 @@ "CVE-2015-1194" ], "details": "pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x59q-qxmc-6v7m/GHSA-x59q-qxmc-6v7m.json b/advisories/unreviewed/2022/05/GHSA-x59q-qxmc-6v7m/GHSA-x59q-qxmc-6v7m.json index 6a4bf23c2ea..703efcd4605 100644 --- a/advisories/unreviewed/2022/05/GHSA-x59q-qxmc-6v7m/GHSA-x59q-qxmc-6v7m.json +++ b/advisories/unreviewed/2022/05/GHSA-x59q-qxmc-6v7m/GHSA-x59q-qxmc-6v7m.json @@ -7,12 +7,8 @@ "CVE-2010-5317" ], "details": "Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the file_name parameter in an attachment action, (2) the post parameter in a show_comment action, (3) the sys-name parameter in an rssfeed action, or (4) the sys-name parameter in a view action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6px-569j-4j5q/GHSA-x6px-569j-4j5q.json b/advisories/unreviewed/2022/05/GHSA-x6px-569j-4j5q/GHSA-x6px-569j-4j5q.json index 4126950e0c5..90993df7e48 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6px-569j-4j5q/GHSA-x6px-569j-4j5q.json +++ b/advisories/unreviewed/2022/05/GHSA-x6px-569j-4j5q/GHSA-x6px-569j-4j5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x77r-29q3-gcgf/GHSA-x77r-29q3-gcgf.json b/advisories/unreviewed/2022/05/GHSA-x77r-29q3-gcgf/GHSA-x77r-29q3-gcgf.json index 654d9edfe67..5eda3d5df78 100644 --- a/advisories/unreviewed/2022/05/GHSA-x77r-29q3-gcgf/GHSA-x77r-29q3-gcgf.json +++ b/advisories/unreviewed/2022/05/GHSA-x77r-29q3-gcgf/GHSA-x77r-29q3-gcgf.json @@ -7,12 +7,8 @@ "CVE-2015-0876" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x7jx-fmhm-jrq8/GHSA-x7jx-fmhm-jrq8.json b/advisories/unreviewed/2022/05/GHSA-x7jx-fmhm-jrq8/GHSA-x7jx-fmhm-jrq8.json index ddb422447b9..45470e69cce 100644 --- a/advisories/unreviewed/2022/05/GHSA-x7jx-fmhm-jrq8/GHSA-x7jx-fmhm-jrq8.json +++ b/advisories/unreviewed/2022/05/GHSA-x7jx-fmhm-jrq8/GHSA-x7jx-fmhm-jrq8.json @@ -7,12 +7,8 @@ "CVE-2015-0628" ], "details": "The proxy engine on Cisco Web Security Appliance (WSA) devices allows remote attackers to bypass intended proxying restrictions via a malformed HTTP method, aka Bug ID CSCus79174.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x8hg-pq4r-xgpv/GHSA-x8hg-pq4r-xgpv.json b/advisories/unreviewed/2022/05/GHSA-x8hg-pq4r-xgpv/GHSA-x8hg-pq4r-xgpv.json index 4161f7a913c..1ede01f18b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8hg-pq4r-xgpv/GHSA-x8hg-pq4r-xgpv.json +++ b/advisories/unreviewed/2022/05/GHSA-x8hg-pq4r-xgpv/GHSA-x8hg-pq4r-xgpv.json @@ -7,12 +7,8 @@ "CVE-2015-0890" ], "details": "The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x94q-fwhq-76mw/GHSA-x94q-fwhq-76mw.json b/advisories/unreviewed/2022/05/GHSA-x94q-fwhq-76mw/GHSA-x94q-fwhq-76mw.json index ed14c58faa3..49f093bc12a 100644 --- a/advisories/unreviewed/2022/05/GHSA-x94q-fwhq-76mw/GHSA-x94q-fwhq-76mw.json +++ b/advisories/unreviewed/2022/05/GHSA-x94q-fwhq-76mw/GHSA-x94q-fwhq-76mw.json @@ -7,12 +7,8 @@ "CVE-2015-3342" ], "details": "Open redirect vulnerability in the Ubercart Currency Conversion module before 6.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination query parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x969-q758-qff7/GHSA-x969-q758-qff7.json b/advisories/unreviewed/2022/05/GHSA-x969-q758-qff7/GHSA-x969-q758-qff7.json index 1a6ae9485d0..008bc980aad 100644 --- a/advisories/unreviewed/2022/05/GHSA-x969-q758-qff7/GHSA-x969-q758-qff7.json +++ b/advisories/unreviewed/2022/05/GHSA-x969-q758-qff7/GHSA-x969-q758-qff7.json @@ -7,12 +7,8 @@ "CVE-2015-0178" ], "details": "The Java overlay feature in IBM Bluemix Liberty before 1.13-20150209-1122 for Java does not properly support WAR applications, which allows remote attackers to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xc9j-x2cv-2xw3/GHSA-xc9j-x2cv-2xw3.json b/advisories/unreviewed/2022/05/GHSA-xc9j-x2cv-2xw3/GHSA-xc9j-x2cv-2xw3.json index 485cd18bc20..795789b1320 100644 --- a/advisories/unreviewed/2022/05/GHSA-xc9j-x2cv-2xw3/GHSA-xc9j-x2cv-2xw3.json +++ b/advisories/unreviewed/2022/05/GHSA-xc9j-x2cv-2xw3/GHSA-xc9j-x2cv-2xw3.json @@ -7,12 +7,8 @@ "CVE-2015-2285" ], "details": "The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and gain privileges via a crafted file in /run/user/*/upstart/sessions/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xcg5-h7cg-49qj/GHSA-xcg5-h7cg-49qj.json b/advisories/unreviewed/2022/05/GHSA-xcg5-h7cg-49qj/GHSA-xcg5-h7cg-49qj.json index c190f147cac..f44f10813a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xcg5-h7cg-49qj/GHSA-xcg5-h7cg-49qj.json +++ b/advisories/unreviewed/2022/05/GHSA-xcg5-h7cg-49qj/GHSA-xcg5-h7cg-49qj.json @@ -7,12 +7,8 @@ "CVE-2013-2603" ], "details": "The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted arguments to the (1) AddTag, (2) Ping, (3) QueuePause, (4) QueueRemove, (5) QueueTop, (6) RemoveTag, (7) TagRemoved, or (8) message method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xf39-56h9-4835/GHSA-xf39-56h9-4835.json b/advisories/unreviewed/2022/05/GHSA-xf39-56h9-4835/GHSA-xf39-56h9-4835.json index f43896a17db..71e2be6edd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xf39-56h9-4835/GHSA-xf39-56h9-4835.json +++ b/advisories/unreviewed/2022/05/GHSA-xf39-56h9-4835/GHSA-xf39-56h9-4835.json @@ -7,12 +7,8 @@ "CVE-2014-9283" ], "details": "The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xf63-wjjg-4c9f/GHSA-xf63-wjjg-4c9f.json b/advisories/unreviewed/2022/05/GHSA-xf63-wjjg-4c9f/GHSA-xf63-wjjg-4c9f.json index 04e272ec353..6b572af2f22 100644 --- a/advisories/unreviewed/2022/05/GHSA-xf63-wjjg-4c9f/GHSA-xf63-wjjg-4c9f.json +++ b/advisories/unreviewed/2022/05/GHSA-xf63-wjjg-4c9f/GHSA-xf63-wjjg-4c9f.json @@ -7,12 +7,8 @@ "CVE-2010-5318" ], "details": "The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xf8w-qcq9-6w6f/GHSA-xf8w-qcq9-6w6f.json b/advisories/unreviewed/2022/05/GHSA-xf8w-qcq9-6w6f/GHSA-xf8w-qcq9-6w6f.json index 4c3ce29c14b..1404f9988a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-xf8w-qcq9-6w6f/GHSA-xf8w-qcq9-6w6f.json +++ b/advisories/unreviewed/2022/05/GHSA-xf8w-qcq9-6w6f/GHSA-xf8w-qcq9-6w6f.json @@ -7,12 +7,8 @@ "CVE-2014-0136" ], "details": "The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xfr3-2vw7-gq74/GHSA-xfr3-2vw7-gq74.json b/advisories/unreviewed/2022/05/GHSA-xfr3-2vw7-gq74/GHSA-xfr3-2vw7-gq74.json index 3133fc38218..e6bd2eed175 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfr3-2vw7-gq74/GHSA-xfr3-2vw7-gq74.json +++ b/advisories/unreviewed/2022/05/GHSA-xfr3-2vw7-gq74/GHSA-xfr3-2vw7-gq74.json @@ -7,12 +7,8 @@ "CVE-2014-6303" ], "details": "The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xfwf-8q7p-hwxg/GHSA-xfwf-8q7p-hwxg.json b/advisories/unreviewed/2022/05/GHSA-xfwf-8q7p-hwxg/GHSA-xfwf-8q7p-hwxg.json index 2b1c974263c..7d46ca7f57d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfwf-8q7p-hwxg/GHSA-xfwf-8q7p-hwxg.json +++ b/advisories/unreviewed/2022/05/GHSA-xfwf-8q7p-hwxg/GHSA-xfwf-8q7p-hwxg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xg23-v3j3-p2h3/GHSA-xg23-v3j3-p2h3.json b/advisories/unreviewed/2022/05/GHSA-xg23-v3j3-p2h3/GHSA-xg23-v3j3-p2h3.json index 437df0090ad..bb6193ac5a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg23-v3j3-p2h3/GHSA-xg23-v3j3-p2h3.json +++ b/advisories/unreviewed/2022/05/GHSA-xg23-v3j3-p2h3/GHSA-xg23-v3j3-p2h3.json @@ -7,12 +7,8 @@ "CVE-2014-7246" ], "details": "The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when deployed on a multi-server network, allows remote authenticated users to cause a denial of service (infinite loop) via a crafted cookie in a request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xg7x-2fjw-7652/GHSA-xg7x-2fjw-7652.json b/advisories/unreviewed/2022/05/GHSA-xg7x-2fjw-7652/GHSA-xg7x-2fjw-7652.json index 4628732b2ce..df57e1681fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg7x-2fjw-7652/GHSA-xg7x-2fjw-7652.json +++ b/advisories/unreviewed/2022/05/GHSA-xg7x-2fjw-7652/GHSA-xg7x-2fjw-7652.json @@ -7,12 +7,8 @@ "CVE-2014-5776" ], "details": "The PlayMemories Online (aka jp.co.sony.tablet.PersonalSpace) application 4.2.0.05070 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xg94-pwpg-xffq/GHSA-xg94-pwpg-xffq.json b/advisories/unreviewed/2022/05/GHSA-xg94-pwpg-xffq/GHSA-xg94-pwpg-xffq.json index 5753196535b..081d7f3c946 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg94-pwpg-xffq/GHSA-xg94-pwpg-xffq.json +++ b/advisories/unreviewed/2022/05/GHSA-xg94-pwpg-xffq/GHSA-xg94-pwpg-xffq.json @@ -7,12 +7,8 @@ "CVE-2015-1373" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter in a search request, (2) username in a login request, which is not properly handled when logging the event, or (3) page title in an insert action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xgv2-wjx4-5xp5/GHSA-xgv2-wjx4-5xp5.json b/advisories/unreviewed/2022/05/GHSA-xgv2-wjx4-5xp5/GHSA-xgv2-wjx4-5xp5.json index aa40326ba22..efc5ecda085 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgv2-wjx4-5xp5/GHSA-xgv2-wjx4-5xp5.json +++ b/advisories/unreviewed/2022/05/GHSA-xgv2-wjx4-5xp5/GHSA-xgv2-wjx4-5xp5.json @@ -7,12 +7,8 @@ "CVE-2015-0888" ], "details": "KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xj4c-cq8p-ghhc/GHSA-xj4c-cq8p-ghhc.json b/advisories/unreviewed/2022/05/GHSA-xj4c-cq8p-ghhc/GHSA-xj4c-cq8p-ghhc.json index 7a2a8ca4aba..dd6a24f237a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj4c-cq8p-ghhc/GHSA-xj4c-cq8p-ghhc.json +++ b/advisories/unreviewed/2022/05/GHSA-xj4c-cq8p-ghhc/GHSA-xj4c-cq8p-ghhc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmhj-wf85-ph48/GHSA-xmhj-wf85-ph48.json b/advisories/unreviewed/2022/05/GHSA-xmhj-wf85-ph48/GHSA-xmhj-wf85-ph48.json index 85f84d261d7..6e200b90476 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmhj-wf85-ph48/GHSA-xmhj-wf85-ph48.json +++ b/advisories/unreviewed/2022/05/GHSA-xmhj-wf85-ph48/GHSA-xmhj-wf85-ph48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xprq-x9hf-4xcp/GHSA-xprq-x9hf-4xcp.json b/advisories/unreviewed/2022/05/GHSA-xprq-x9hf-4xcp/GHSA-xprq-x9hf-4xcp.json index c38f0532397..3180b005968 100644 --- a/advisories/unreviewed/2022/05/GHSA-xprq-x9hf-4xcp/GHSA-xprq-x9hf-4xcp.json +++ b/advisories/unreviewed/2022/05/GHSA-xprq-x9hf-4xcp/GHSA-xprq-x9hf-4xcp.json @@ -7,12 +7,8 @@ "CVE-2014-6611" ], "details": "The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigger the download of a crafted app by modifying the client-server data stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xqwx-r7c6-p379/GHSA-xqwx-r7c6-p379.json b/advisories/unreviewed/2022/05/GHSA-xqwx-r7c6-p379/GHSA-xqwx-r7c6-p379.json index ebd666bd090..a989048d0bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqwx-r7c6-p379/GHSA-xqwx-r7c6-p379.json +++ b/advisories/unreviewed/2022/05/GHSA-xqwx-r7c6-p379/GHSA-xqwx-r7c6-p379.json @@ -7,12 +7,8 @@ "CVE-2015-0916" ], "details": "SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the local_graph_id parameter, a different vulnerability than CVE-2007-6035.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xrc4-pj8p-r2hh/GHSA-xrc4-pj8p-r2hh.json b/advisories/unreviewed/2022/05/GHSA-xrc4-pj8p-r2hh/GHSA-xrc4-pj8p-r2hh.json index acfdd28ac1a..6d36d40cdd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrc4-pj8p-r2hh/GHSA-xrc4-pj8p-r2hh.json +++ b/advisories/unreviewed/2022/05/GHSA-xrc4-pj8p-r2hh/GHSA-xrc4-pj8p-r2hh.json @@ -7,12 +7,8 @@ "CVE-2015-1602" ], "details": "Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) web-server passwords by leveraging the ability to read these files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xvjx-89jh-j37p/GHSA-xvjx-89jh-j37p.json b/advisories/unreviewed/2022/05/GHSA-xvjx-89jh-j37p/GHSA-xvjx-89jh-j37p.json index 759101b3221..81b04bc8508 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvjx-89jh-j37p/GHSA-xvjx-89jh-j37p.json +++ b/advisories/unreviewed/2022/05/GHSA-xvjx-89jh-j37p/GHSA-xvjx-89jh-j37p.json @@ -7,12 +7,8 @@ "CVE-2015-3007" ], "details": "The Juniper SRX Series services gateways with Junos OS 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 do not properly implement the \"set system ports console insecure\" feature, which allows physically proximate attackers to gain administrative privileges by leveraging access to the console port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xwx9-xrv6-2fwc/GHSA-xwx9-xrv6-2fwc.json b/advisories/unreviewed/2022/05/GHSA-xwx9-xrv6-2fwc/GHSA-xwx9-xrv6-2fwc.json index 1ef4cc8196d..901882a72e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwx9-xrv6-2fwc/GHSA-xwx9-xrv6-2fwc.json +++ b/advisories/unreviewed/2022/05/GHSA-xwx9-xrv6-2fwc/GHSA-xwx9-xrv6-2fwc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx3m-f593-wg64/GHSA-xx3m-f593-wg64.json b/advisories/unreviewed/2022/05/GHSA-xx3m-f593-wg64/GHSA-xx3m-f593-wg64.json index 4f67842bab6..436a78d622e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx3m-f593-wg64/GHSA-xx3m-f593-wg64.json +++ b/advisories/unreviewed/2022/05/GHSA-xx3m-f593-wg64/GHSA-xx3m-f593-wg64.json @@ -7,12 +7,8 @@ "CVE-2015-1469" ], "details": "time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote authenticated users to gain privileges by leveraging a cookie received in an HTTP response, a different vulnerability than CVE-2015-0929 and CVE-2015-0930.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/07/GHSA-cw6q-xw7j-7mh5/GHSA-cw6q-xw7j-7mh5.json b/advisories/unreviewed/2023/07/GHSA-cw6q-xw7j-7mh5/GHSA-cw6q-xw7j-7mh5.json index beb2d7c19fe..cecfbcae535 100644 --- a/advisories/unreviewed/2023/07/GHSA-cw6q-xw7j-7mh5/GHSA-cw6q-xw7j-7mh5.json +++ b/advisories/unreviewed/2023/07/GHSA-cw6q-xw7j-7mh5/GHSA-cw6q-xw7j-7mh5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-fvrq-c8cv-j77x/GHSA-fvrq-c8cv-j77x.json b/advisories/unreviewed/2023/07/GHSA-fvrq-c8cv-j77x/GHSA-fvrq-c8cv-j77x.json index eac6d909cf4..dd6a16ad25c 100644 --- a/advisories/unreviewed/2023/07/GHSA-fvrq-c8cv-j77x/GHSA-fvrq-c8cv-j77x.json +++ b/advisories/unreviewed/2023/07/GHSA-fvrq-c8cv-j77x/GHSA-fvrq-c8cv-j77x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-h663-pvcv-f942/GHSA-h663-pvcv-f942.json b/advisories/unreviewed/2023/07/GHSA-h663-pvcv-f942/GHSA-h663-pvcv-f942.json index 0733c10db0b..999672727ac 100644 --- a/advisories/unreviewed/2023/07/GHSA-h663-pvcv-f942/GHSA-h663-pvcv-f942.json +++ b/advisories/unreviewed/2023/07/GHSA-h663-pvcv-f942/GHSA-h663-pvcv-f942.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-r4fx-9v33-wcf4/GHSA-r4fx-9v33-wcf4.json b/advisories/unreviewed/2023/07/GHSA-r4fx-9v33-wcf4/GHSA-r4fx-9v33-wcf4.json index 6bd69b150ce..7ade0b0af98 100644 --- a/advisories/unreviewed/2023/07/GHSA-r4fx-9v33-wcf4/GHSA-r4fx-9v33-wcf4.json +++ b/advisories/unreviewed/2023/07/GHSA-r4fx-9v33-wcf4/GHSA-r4fx-9v33-wcf4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-6hrq-pjj8-qgcg/GHSA-6hrq-pjj8-qgcg.json b/advisories/unreviewed/2023/08/GHSA-6hrq-pjj8-qgcg/GHSA-6hrq-pjj8-qgcg.json index 48d89c682ff..03aa8acbcf4 100644 --- a/advisories/unreviewed/2023/08/GHSA-6hrq-pjj8-qgcg/GHSA-6hrq-pjj8-qgcg.json +++ b/advisories/unreviewed/2023/08/GHSA-6hrq-pjj8-qgcg/GHSA-6hrq-pjj8-qgcg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-6qr9-vw5g-627h/GHSA-6qr9-vw5g-627h.json b/advisories/unreviewed/2023/08/GHSA-6qr9-vw5g-627h/GHSA-6qr9-vw5g-627h.json index 5affff5e93b..6e27f4082f7 100644 --- a/advisories/unreviewed/2023/08/GHSA-6qr9-vw5g-627h/GHSA-6qr9-vw5g-627h.json +++ b/advisories/unreviewed/2023/08/GHSA-6qr9-vw5g-627h/GHSA-6qr9-vw5g-627h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-8vq8-vjqp-8v4r/GHSA-8vq8-vjqp-8v4r.json b/advisories/unreviewed/2023/08/GHSA-8vq8-vjqp-8v4r/GHSA-8vq8-vjqp-8v4r.json index 193d7762108..30c2a314884 100644 --- a/advisories/unreviewed/2023/08/GHSA-8vq8-vjqp-8v4r/GHSA-8vq8-vjqp-8v4r.json +++ b/advisories/unreviewed/2023/08/GHSA-8vq8-vjqp-8v4r/GHSA-8vq8-vjqp-8v4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-9vhw-pjq3-v88g/GHSA-9vhw-pjq3-v88g.json b/advisories/unreviewed/2023/08/GHSA-9vhw-pjq3-v88g/GHSA-9vhw-pjq3-v88g.json index a83754e122c..049ee7a2cd4 100644 --- a/advisories/unreviewed/2023/08/GHSA-9vhw-pjq3-v88g/GHSA-9vhw-pjq3-v88g.json +++ b/advisories/unreviewed/2023/08/GHSA-9vhw-pjq3-v88g/GHSA-9vhw-pjq3-v88g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-h82f-38xj-477x/GHSA-h82f-38xj-477x.json b/advisories/unreviewed/2023/08/GHSA-h82f-38xj-477x/GHSA-h82f-38xj-477x.json index b572242f231..87e41136e82 100644 --- a/advisories/unreviewed/2023/08/GHSA-h82f-38xj-477x/GHSA-h82f-38xj-477x.json +++ b/advisories/unreviewed/2023/08/GHSA-h82f-38xj-477x/GHSA-h82f-38xj-477x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-w8q9-55rm-6r8q/GHSA-w8q9-55rm-6r8q.json b/advisories/unreviewed/2023/08/GHSA-w8q9-55rm-6r8q/GHSA-w8q9-55rm-6r8q.json index 14f93276ef3..82324465376 100644 --- a/advisories/unreviewed/2023/08/GHSA-w8q9-55rm-6r8q/GHSA-w8q9-55rm-6r8q.json +++ b/advisories/unreviewed/2023/08/GHSA-w8q9-55rm-6r8q/GHSA-w8q9-55rm-6r8q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-2vmv-m3hj-2wh8/GHSA-2vmv-m3hj-2wh8.json b/advisories/unreviewed/2023/10/GHSA-2vmv-m3hj-2wh8/GHSA-2vmv-m3hj-2wh8.json index dc5168ded5c..cd347d51adc 100644 --- a/advisories/unreviewed/2023/10/GHSA-2vmv-m3hj-2wh8/GHSA-2vmv-m3hj-2wh8.json +++ b/advisories/unreviewed/2023/10/GHSA-2vmv-m3hj-2wh8/GHSA-2vmv-m3hj-2wh8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-xq42-24vv-4rxr/GHSA-xq42-24vv-4rxr.json b/advisories/unreviewed/2023/10/GHSA-xq42-24vv-4rxr/GHSA-xq42-24vv-4rxr.json index 7075ea87161..67cd296979f 100644 --- a/advisories/unreviewed/2023/10/GHSA-xq42-24vv-4rxr/GHSA-xq42-24vv-4rxr.json +++ b/advisories/unreviewed/2023/10/GHSA-xq42-24vv-4rxr/GHSA-xq42-24vv-4rxr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-24mv-46g6-jv5x/GHSA-24mv-46g6-jv5x.json b/advisories/unreviewed/2023/11/GHSA-24mv-46g6-jv5x/GHSA-24mv-46g6-jv5x.json index 8fcde4508ea..7005008a6e3 100644 --- a/advisories/unreviewed/2023/11/GHSA-24mv-46g6-jv5x/GHSA-24mv-46g6-jv5x.json +++ b/advisories/unreviewed/2023/11/GHSA-24mv-46g6-jv5x/GHSA-24mv-46g6-jv5x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-2jcr-h469-2xr5/GHSA-2jcr-h469-2xr5.json b/advisories/unreviewed/2023/11/GHSA-2jcr-h469-2xr5/GHSA-2jcr-h469-2xr5.json index bf414c431fe..0beb9b93dde 100644 --- a/advisories/unreviewed/2023/11/GHSA-2jcr-h469-2xr5/GHSA-2jcr-h469-2xr5.json +++ b/advisories/unreviewed/2023/11/GHSA-2jcr-h469-2xr5/GHSA-2jcr-h469-2xr5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-2xp3-fm2g-j32w/GHSA-2xp3-fm2g-j32w.json b/advisories/unreviewed/2023/11/GHSA-2xp3-fm2g-j32w/GHSA-2xp3-fm2g-j32w.json index abb135f4865..b3f2939d8db 100644 --- a/advisories/unreviewed/2023/11/GHSA-2xp3-fm2g-j32w/GHSA-2xp3-fm2g-j32w.json +++ b/advisories/unreviewed/2023/11/GHSA-2xp3-fm2g-j32w/GHSA-2xp3-fm2g-j32w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-34r6-9vgg-pmh3/GHSA-34r6-9vgg-pmh3.json b/advisories/unreviewed/2023/11/GHSA-34r6-9vgg-pmh3/GHSA-34r6-9vgg-pmh3.json index 71949295cd4..c187040aca5 100644 --- a/advisories/unreviewed/2023/11/GHSA-34r6-9vgg-pmh3/GHSA-34r6-9vgg-pmh3.json +++ b/advisories/unreviewed/2023/11/GHSA-34r6-9vgg-pmh3/GHSA-34r6-9vgg-pmh3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-3744-988x-mqxh/GHSA-3744-988x-mqxh.json b/advisories/unreviewed/2023/11/GHSA-3744-988x-mqxh/GHSA-3744-988x-mqxh.json index dc1e9d360a7..6a16f9abaeb 100644 --- a/advisories/unreviewed/2023/11/GHSA-3744-988x-mqxh/GHSA-3744-988x-mqxh.json +++ b/advisories/unreviewed/2023/11/GHSA-3744-988x-mqxh/GHSA-3744-988x-mqxh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-37hj-qxxx-w7gw/GHSA-37hj-qxxx-w7gw.json b/advisories/unreviewed/2023/11/GHSA-37hj-qxxx-w7gw/GHSA-37hj-qxxx-w7gw.json index 9e98dc8b03d..19dcc03234e 100644 --- a/advisories/unreviewed/2023/11/GHSA-37hj-qxxx-w7gw/GHSA-37hj-qxxx-w7gw.json +++ b/advisories/unreviewed/2023/11/GHSA-37hj-qxxx-w7gw/GHSA-37hj-qxxx-w7gw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-37p9-3q24-hgrc/GHSA-37p9-3q24-hgrc.json b/advisories/unreviewed/2023/11/GHSA-37p9-3q24-hgrc/GHSA-37p9-3q24-hgrc.json index 6219650c3c5..166b17dd8f0 100644 --- a/advisories/unreviewed/2023/11/GHSA-37p9-3q24-hgrc/GHSA-37p9-3q24-hgrc.json +++ b/advisories/unreviewed/2023/11/GHSA-37p9-3q24-hgrc/GHSA-37p9-3q24-hgrc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-3f7x-wmqw-jp3f/GHSA-3f7x-wmqw-jp3f.json b/advisories/unreviewed/2023/11/GHSA-3f7x-wmqw-jp3f/GHSA-3f7x-wmqw-jp3f.json index da366eea306..6e1b5ad6fe0 100644 --- a/advisories/unreviewed/2023/11/GHSA-3f7x-wmqw-jp3f/GHSA-3f7x-wmqw-jp3f.json +++ b/advisories/unreviewed/2023/11/GHSA-3f7x-wmqw-jp3f/GHSA-3f7x-wmqw-jp3f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-3f8h-p72p-46xm/GHSA-3f8h-p72p-46xm.json b/advisories/unreviewed/2023/11/GHSA-3f8h-p72p-46xm/GHSA-3f8h-p72p-46xm.json index 0b086536d59..39e42be86cc 100644 --- a/advisories/unreviewed/2023/11/GHSA-3f8h-p72p-46xm/GHSA-3f8h-p72p-46xm.json +++ b/advisories/unreviewed/2023/11/GHSA-3f8h-p72p-46xm/GHSA-3f8h-p72p-46xm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-43wm-36v8-wrcq/GHSA-43wm-36v8-wrcq.json b/advisories/unreviewed/2023/11/GHSA-43wm-36v8-wrcq/GHSA-43wm-36v8-wrcq.json index 8f2ec87ec36..04b52768b8d 100644 --- a/advisories/unreviewed/2023/11/GHSA-43wm-36v8-wrcq/GHSA-43wm-36v8-wrcq.json +++ b/advisories/unreviewed/2023/11/GHSA-43wm-36v8-wrcq/GHSA-43wm-36v8-wrcq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-47fh-x67f-4gjx/GHSA-47fh-x67f-4gjx.json b/advisories/unreviewed/2023/11/GHSA-47fh-x67f-4gjx/GHSA-47fh-x67f-4gjx.json index 50cedbd7c56..94a920ca3f0 100644 --- a/advisories/unreviewed/2023/11/GHSA-47fh-x67f-4gjx/GHSA-47fh-x67f-4gjx.json +++ b/advisories/unreviewed/2023/11/GHSA-47fh-x67f-4gjx/GHSA-47fh-x67f-4gjx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-4fcv-689w-5fjw/GHSA-4fcv-689w-5fjw.json b/advisories/unreviewed/2023/11/GHSA-4fcv-689w-5fjw/GHSA-4fcv-689w-5fjw.json index 5a9719142d9..ab0c720b030 100644 --- a/advisories/unreviewed/2023/11/GHSA-4fcv-689w-5fjw/GHSA-4fcv-689w-5fjw.json +++ b/advisories/unreviewed/2023/11/GHSA-4fcv-689w-5fjw/GHSA-4fcv-689w-5fjw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-4h6g-r452-q8hr/GHSA-4h6g-r452-q8hr.json b/advisories/unreviewed/2023/11/GHSA-4h6g-r452-q8hr/GHSA-4h6g-r452-q8hr.json index 88de9543aae..1d8e6cd7cae 100644 --- a/advisories/unreviewed/2023/11/GHSA-4h6g-r452-q8hr/GHSA-4h6g-r452-q8hr.json +++ b/advisories/unreviewed/2023/11/GHSA-4h6g-r452-q8hr/GHSA-4h6g-r452-q8hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-4j52-999q-vxgg/GHSA-4j52-999q-vxgg.json b/advisories/unreviewed/2023/11/GHSA-4j52-999q-vxgg/GHSA-4j52-999q-vxgg.json index e4f0bdc67c1..52474b310f0 100644 --- a/advisories/unreviewed/2023/11/GHSA-4j52-999q-vxgg/GHSA-4j52-999q-vxgg.json +++ b/advisories/unreviewed/2023/11/GHSA-4j52-999q-vxgg/GHSA-4j52-999q-vxgg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-4jff-227j-6g3v/GHSA-4jff-227j-6g3v.json b/advisories/unreviewed/2023/11/GHSA-4jff-227j-6g3v/GHSA-4jff-227j-6g3v.json index 31484fc025c..98f79c0d45e 100644 --- a/advisories/unreviewed/2023/11/GHSA-4jff-227j-6g3v/GHSA-4jff-227j-6g3v.json +++ b/advisories/unreviewed/2023/11/GHSA-4jff-227j-6g3v/GHSA-4jff-227j-6g3v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-4mgj-2pcm-grp4/GHSA-4mgj-2pcm-grp4.json b/advisories/unreviewed/2023/11/GHSA-4mgj-2pcm-grp4/GHSA-4mgj-2pcm-grp4.json index 1b3cc0b3e27..58a723c2145 100644 --- a/advisories/unreviewed/2023/11/GHSA-4mgj-2pcm-grp4/GHSA-4mgj-2pcm-grp4.json +++ b/advisories/unreviewed/2023/11/GHSA-4mgj-2pcm-grp4/GHSA-4mgj-2pcm-grp4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-4rfh-v443-hvgh/GHSA-4rfh-v443-hvgh.json b/advisories/unreviewed/2023/11/GHSA-4rfh-v443-hvgh/GHSA-4rfh-v443-hvgh.json index 2364c9b17e6..5f70f84308a 100644 --- a/advisories/unreviewed/2023/11/GHSA-4rfh-v443-hvgh/GHSA-4rfh-v443-hvgh.json +++ b/advisories/unreviewed/2023/11/GHSA-4rfh-v443-hvgh/GHSA-4rfh-v443-hvgh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-535j-5wpp-p7jm/GHSA-535j-5wpp-p7jm.json b/advisories/unreviewed/2023/11/GHSA-535j-5wpp-p7jm/GHSA-535j-5wpp-p7jm.json index e7a42834196..225aa752230 100644 --- a/advisories/unreviewed/2023/11/GHSA-535j-5wpp-p7jm/GHSA-535j-5wpp-p7jm.json +++ b/advisories/unreviewed/2023/11/GHSA-535j-5wpp-p7jm/GHSA-535j-5wpp-p7jm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-558c-wr25-5fxf/GHSA-558c-wr25-5fxf.json b/advisories/unreviewed/2023/11/GHSA-558c-wr25-5fxf/GHSA-558c-wr25-5fxf.json index a27cf09919a..761665444a3 100644 --- a/advisories/unreviewed/2023/11/GHSA-558c-wr25-5fxf/GHSA-558c-wr25-5fxf.json +++ b/advisories/unreviewed/2023/11/GHSA-558c-wr25-5fxf/GHSA-558c-wr25-5fxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-55jv-g63w-9jph/GHSA-55jv-g63w-9jph.json b/advisories/unreviewed/2023/11/GHSA-55jv-g63w-9jph/GHSA-55jv-g63w-9jph.json index 14768d94b75..df8dc28799e 100644 --- a/advisories/unreviewed/2023/11/GHSA-55jv-g63w-9jph/GHSA-55jv-g63w-9jph.json +++ b/advisories/unreviewed/2023/11/GHSA-55jv-g63w-9jph/GHSA-55jv-g63w-9jph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-58rr-37rr-r6h5/GHSA-58rr-37rr-r6h5.json b/advisories/unreviewed/2023/11/GHSA-58rr-37rr-r6h5/GHSA-58rr-37rr-r6h5.json index 70b0129dcc2..3f08d88278d 100644 --- a/advisories/unreviewed/2023/11/GHSA-58rr-37rr-r6h5/GHSA-58rr-37rr-r6h5.json +++ b/advisories/unreviewed/2023/11/GHSA-58rr-37rr-r6h5/GHSA-58rr-37rr-r6h5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-59gh-4pp9-3287/GHSA-59gh-4pp9-3287.json b/advisories/unreviewed/2023/11/GHSA-59gh-4pp9-3287/GHSA-59gh-4pp9-3287.json index 63332149774..5a272339374 100644 --- a/advisories/unreviewed/2023/11/GHSA-59gh-4pp9-3287/GHSA-59gh-4pp9-3287.json +++ b/advisories/unreviewed/2023/11/GHSA-59gh-4pp9-3287/GHSA-59gh-4pp9-3287.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-59xx-mhv6-j398/GHSA-59xx-mhv6-j398.json b/advisories/unreviewed/2023/11/GHSA-59xx-mhv6-j398/GHSA-59xx-mhv6-j398.json index f349988d83a..44d581da1a5 100644 --- a/advisories/unreviewed/2023/11/GHSA-59xx-mhv6-j398/GHSA-59xx-mhv6-j398.json +++ b/advisories/unreviewed/2023/11/GHSA-59xx-mhv6-j398/GHSA-59xx-mhv6-j398.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-5j39-j89r-24vc/GHSA-5j39-j89r-24vc.json b/advisories/unreviewed/2023/11/GHSA-5j39-j89r-24vc/GHSA-5j39-j89r-24vc.json index f85f603c1a8..33b3244ab8a 100644 --- a/advisories/unreviewed/2023/11/GHSA-5j39-j89r-24vc/GHSA-5j39-j89r-24vc.json +++ b/advisories/unreviewed/2023/11/GHSA-5j39-j89r-24vc/GHSA-5j39-j89r-24vc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-5r5w-vh62-8499/GHSA-5r5w-vh62-8499.json b/advisories/unreviewed/2023/11/GHSA-5r5w-vh62-8499/GHSA-5r5w-vh62-8499.json index 6ba88b369c6..804a70cd023 100644 --- a/advisories/unreviewed/2023/11/GHSA-5r5w-vh62-8499/GHSA-5r5w-vh62-8499.json +++ b/advisories/unreviewed/2023/11/GHSA-5r5w-vh62-8499/GHSA-5r5w-vh62-8499.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-5v7j-rmqq-795g/GHSA-5v7j-rmqq-795g.json b/advisories/unreviewed/2023/11/GHSA-5v7j-rmqq-795g/GHSA-5v7j-rmqq-795g.json index f32f2123aa2..7e096a8d439 100644 --- a/advisories/unreviewed/2023/11/GHSA-5v7j-rmqq-795g/GHSA-5v7j-rmqq-795g.json +++ b/advisories/unreviewed/2023/11/GHSA-5v7j-rmqq-795g/GHSA-5v7j-rmqq-795g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-5xw6-9h38-rh99/GHSA-5xw6-9h38-rh99.json b/advisories/unreviewed/2023/11/GHSA-5xw6-9h38-rh99/GHSA-5xw6-9h38-rh99.json index db45bec4392..ac57d38b851 100644 --- a/advisories/unreviewed/2023/11/GHSA-5xw6-9h38-rh99/GHSA-5xw6-9h38-rh99.json +++ b/advisories/unreviewed/2023/11/GHSA-5xw6-9h38-rh99/GHSA-5xw6-9h38-rh99.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-7346-p858-4r4c/GHSA-7346-p858-4r4c.json b/advisories/unreviewed/2023/11/GHSA-7346-p858-4r4c/GHSA-7346-p858-4r4c.json index df12c248cca..8aae878eeb0 100644 --- a/advisories/unreviewed/2023/11/GHSA-7346-p858-4r4c/GHSA-7346-p858-4r4c.json +++ b/advisories/unreviewed/2023/11/GHSA-7346-p858-4r4c/GHSA-7346-p858-4r4c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-736c-qmfv-4r4h/GHSA-736c-qmfv-4r4h.json b/advisories/unreviewed/2023/11/GHSA-736c-qmfv-4r4h/GHSA-736c-qmfv-4r4h.json index 1bd7547955a..65c4bfd3e64 100644 --- a/advisories/unreviewed/2023/11/GHSA-736c-qmfv-4r4h/GHSA-736c-qmfv-4r4h.json +++ b/advisories/unreviewed/2023/11/GHSA-736c-qmfv-4r4h/GHSA-736c-qmfv-4r4h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-74c2-wj39-p5wc/GHSA-74c2-wj39-p5wc.json b/advisories/unreviewed/2023/11/GHSA-74c2-wj39-p5wc/GHSA-74c2-wj39-p5wc.json index 7cc2329c8de..9a793d93973 100644 --- a/advisories/unreviewed/2023/11/GHSA-74c2-wj39-p5wc/GHSA-74c2-wj39-p5wc.json +++ b/advisories/unreviewed/2023/11/GHSA-74c2-wj39-p5wc/GHSA-74c2-wj39-p5wc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-7j76-jvrv-hgjw/GHSA-7j76-jvrv-hgjw.json b/advisories/unreviewed/2023/11/GHSA-7j76-jvrv-hgjw/GHSA-7j76-jvrv-hgjw.json index 04a9e65d875..f985534809d 100644 --- a/advisories/unreviewed/2023/11/GHSA-7j76-jvrv-hgjw/GHSA-7j76-jvrv-hgjw.json +++ b/advisories/unreviewed/2023/11/GHSA-7j76-jvrv-hgjw/GHSA-7j76-jvrv-hgjw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-89jm-mj5r-5rp8/GHSA-89jm-mj5r-5rp8.json b/advisories/unreviewed/2023/11/GHSA-89jm-mj5r-5rp8/GHSA-89jm-mj5r-5rp8.json index 36d8fb0573c..b3f4cbdb3ac 100644 --- a/advisories/unreviewed/2023/11/GHSA-89jm-mj5r-5rp8/GHSA-89jm-mj5r-5rp8.json +++ b/advisories/unreviewed/2023/11/GHSA-89jm-mj5r-5rp8/GHSA-89jm-mj5r-5rp8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-8m44-cmv2-wgmg/GHSA-8m44-cmv2-wgmg.json b/advisories/unreviewed/2023/11/GHSA-8m44-cmv2-wgmg/GHSA-8m44-cmv2-wgmg.json index f554c469027..4954567b403 100644 --- a/advisories/unreviewed/2023/11/GHSA-8m44-cmv2-wgmg/GHSA-8m44-cmv2-wgmg.json +++ b/advisories/unreviewed/2023/11/GHSA-8m44-cmv2-wgmg/GHSA-8m44-cmv2-wgmg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-8pj8-c4m2-fgh7/GHSA-8pj8-c4m2-fgh7.json b/advisories/unreviewed/2023/11/GHSA-8pj8-c4m2-fgh7/GHSA-8pj8-c4m2-fgh7.json index 6361a49f5f2..29a61199db0 100644 --- a/advisories/unreviewed/2023/11/GHSA-8pj8-c4m2-fgh7/GHSA-8pj8-c4m2-fgh7.json +++ b/advisories/unreviewed/2023/11/GHSA-8pj8-c4m2-fgh7/GHSA-8pj8-c4m2-fgh7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-8q63-5vh4-m285/GHSA-8q63-5vh4-m285.json b/advisories/unreviewed/2023/11/GHSA-8q63-5vh4-m285/GHSA-8q63-5vh4-m285.json index e6518226532..62249b33c41 100644 --- a/advisories/unreviewed/2023/11/GHSA-8q63-5vh4-m285/GHSA-8q63-5vh4-m285.json +++ b/advisories/unreviewed/2023/11/GHSA-8q63-5vh4-m285/GHSA-8q63-5vh4-m285.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-94fx-j29j-8g9p/GHSA-94fx-j29j-8g9p.json b/advisories/unreviewed/2023/11/GHSA-94fx-j29j-8g9p/GHSA-94fx-j29j-8g9p.json index 13c1ae236cb..20ab958e245 100644 --- a/advisories/unreviewed/2023/11/GHSA-94fx-j29j-8g9p/GHSA-94fx-j29j-8g9p.json +++ b/advisories/unreviewed/2023/11/GHSA-94fx-j29j-8g9p/GHSA-94fx-j29j-8g9p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-94hw-2w9j-mjr9/GHSA-94hw-2w9j-mjr9.json b/advisories/unreviewed/2023/11/GHSA-94hw-2w9j-mjr9/GHSA-94hw-2w9j-mjr9.json index e001fd1b2c2..19b9c00cf18 100644 --- a/advisories/unreviewed/2023/11/GHSA-94hw-2w9j-mjr9/GHSA-94hw-2w9j-mjr9.json +++ b/advisories/unreviewed/2023/11/GHSA-94hw-2w9j-mjr9/GHSA-94hw-2w9j-mjr9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-97p9-qpmx-cg8j/GHSA-97p9-qpmx-cg8j.json b/advisories/unreviewed/2023/11/GHSA-97p9-qpmx-cg8j/GHSA-97p9-qpmx-cg8j.json index cd59a8a1851..7d581f2c80f 100644 --- a/advisories/unreviewed/2023/11/GHSA-97p9-qpmx-cg8j/GHSA-97p9-qpmx-cg8j.json +++ b/advisories/unreviewed/2023/11/GHSA-97p9-qpmx-cg8j/GHSA-97p9-qpmx-cg8j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-98gw-chhm-xcc3/GHSA-98gw-chhm-xcc3.json b/advisories/unreviewed/2023/11/GHSA-98gw-chhm-xcc3/GHSA-98gw-chhm-xcc3.json index 89b0e88a887..901740dcf2c 100644 --- a/advisories/unreviewed/2023/11/GHSA-98gw-chhm-xcc3/GHSA-98gw-chhm-xcc3.json +++ b/advisories/unreviewed/2023/11/GHSA-98gw-chhm-xcc3/GHSA-98gw-chhm-xcc3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-9f56-vmhf-r5vv/GHSA-9f56-vmhf-r5vv.json b/advisories/unreviewed/2023/11/GHSA-9f56-vmhf-r5vv/GHSA-9f56-vmhf-r5vv.json index 8e2733e2038..a7e8deecfc6 100644 --- a/advisories/unreviewed/2023/11/GHSA-9f56-vmhf-r5vv/GHSA-9f56-vmhf-r5vv.json +++ b/advisories/unreviewed/2023/11/GHSA-9f56-vmhf-r5vv/GHSA-9f56-vmhf-r5vv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-9ghc-6jgp-h734/GHSA-9ghc-6jgp-h734.json b/advisories/unreviewed/2023/11/GHSA-9ghc-6jgp-h734/GHSA-9ghc-6jgp-h734.json index 985df66ff8e..35114c5c454 100644 --- a/advisories/unreviewed/2023/11/GHSA-9ghc-6jgp-h734/GHSA-9ghc-6jgp-h734.json +++ b/advisories/unreviewed/2023/11/GHSA-9ghc-6jgp-h734/GHSA-9ghc-6jgp-h734.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-9xrg-mh99-h5f7/GHSA-9xrg-mh99-h5f7.json b/advisories/unreviewed/2023/11/GHSA-9xrg-mh99-h5f7/GHSA-9xrg-mh99-h5f7.json index c89e8c18960..5f8b943d002 100644 --- a/advisories/unreviewed/2023/11/GHSA-9xrg-mh99-h5f7/GHSA-9xrg-mh99-h5f7.json +++ b/advisories/unreviewed/2023/11/GHSA-9xrg-mh99-h5f7/GHSA-9xrg-mh99-h5f7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-cc87-35fp-2jp7/GHSA-cc87-35fp-2jp7.json b/advisories/unreviewed/2023/11/GHSA-cc87-35fp-2jp7/GHSA-cc87-35fp-2jp7.json index 4e2b743d5ec..2ec1e3a63e1 100644 --- a/advisories/unreviewed/2023/11/GHSA-cc87-35fp-2jp7/GHSA-cc87-35fp-2jp7.json +++ b/advisories/unreviewed/2023/11/GHSA-cc87-35fp-2jp7/GHSA-cc87-35fp-2jp7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-cfhf-5qvq-2jgj/GHSA-cfhf-5qvq-2jgj.json b/advisories/unreviewed/2023/11/GHSA-cfhf-5qvq-2jgj/GHSA-cfhf-5qvq-2jgj.json index 120e82b5dbe..1fa9b4e923c 100644 --- a/advisories/unreviewed/2023/11/GHSA-cfhf-5qvq-2jgj/GHSA-cfhf-5qvq-2jgj.json +++ b/advisories/unreviewed/2023/11/GHSA-cfhf-5qvq-2jgj/GHSA-cfhf-5qvq-2jgj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-cj6m-445x-9hgm/GHSA-cj6m-445x-9hgm.json b/advisories/unreviewed/2023/11/GHSA-cj6m-445x-9hgm/GHSA-cj6m-445x-9hgm.json index 33144e3583d..a14270ef632 100644 --- a/advisories/unreviewed/2023/11/GHSA-cj6m-445x-9hgm/GHSA-cj6m-445x-9hgm.json +++ b/advisories/unreviewed/2023/11/GHSA-cj6m-445x-9hgm/GHSA-cj6m-445x-9hgm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-cj8x-q3v5-mmvx/GHSA-cj8x-q3v5-mmvx.json b/advisories/unreviewed/2023/11/GHSA-cj8x-q3v5-mmvx/GHSA-cj8x-q3v5-mmvx.json index 84ddceb90cc..05724adfcc5 100644 --- a/advisories/unreviewed/2023/11/GHSA-cj8x-q3v5-mmvx/GHSA-cj8x-q3v5-mmvx.json +++ b/advisories/unreviewed/2023/11/GHSA-cj8x-q3v5-mmvx/GHSA-cj8x-q3v5-mmvx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-cr99-wv2g-phxw/GHSA-cr99-wv2g-phxw.json b/advisories/unreviewed/2023/11/GHSA-cr99-wv2g-phxw/GHSA-cr99-wv2g-phxw.json index 1156db93d0a..7865a40c434 100644 --- a/advisories/unreviewed/2023/11/GHSA-cr99-wv2g-phxw/GHSA-cr99-wv2g-phxw.json +++ b/advisories/unreviewed/2023/11/GHSA-cr99-wv2g-phxw/GHSA-cr99-wv2g-phxw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-f28g-35vw-w6r8/GHSA-f28g-35vw-w6r8.json b/advisories/unreviewed/2023/11/GHSA-f28g-35vw-w6r8/GHSA-f28g-35vw-w6r8.json index 13e3503d04e..e8ac5b989a5 100644 --- a/advisories/unreviewed/2023/11/GHSA-f28g-35vw-w6r8/GHSA-f28g-35vw-w6r8.json +++ b/advisories/unreviewed/2023/11/GHSA-f28g-35vw-w6r8/GHSA-f28g-35vw-w6r8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-f346-p877-7wqq/GHSA-f346-p877-7wqq.json b/advisories/unreviewed/2023/11/GHSA-f346-p877-7wqq/GHSA-f346-p877-7wqq.json index 5776d9fc62c..710327108a1 100644 --- a/advisories/unreviewed/2023/11/GHSA-f346-p877-7wqq/GHSA-f346-p877-7wqq.json +++ b/advisories/unreviewed/2023/11/GHSA-f346-p877-7wqq/GHSA-f346-p877-7wqq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-fc85-qvq2-2963/GHSA-fc85-qvq2-2963.json b/advisories/unreviewed/2023/11/GHSA-fc85-qvq2-2963/GHSA-fc85-qvq2-2963.json index 66d22e5eb4e..997d9b7d408 100644 --- a/advisories/unreviewed/2023/11/GHSA-fc85-qvq2-2963/GHSA-fc85-qvq2-2963.json +++ b/advisories/unreviewed/2023/11/GHSA-fc85-qvq2-2963/GHSA-fc85-qvq2-2963.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-ff49-v6jj-fh2j/GHSA-ff49-v6jj-fh2j.json b/advisories/unreviewed/2023/11/GHSA-ff49-v6jj-fh2j/GHSA-ff49-v6jj-fh2j.json index bd7f985ea4c..65d099bec82 100644 --- a/advisories/unreviewed/2023/11/GHSA-ff49-v6jj-fh2j/GHSA-ff49-v6jj-fh2j.json +++ b/advisories/unreviewed/2023/11/GHSA-ff49-v6jj-fh2j/GHSA-ff49-v6jj-fh2j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-fwgv-8gvm-4fwm/GHSA-fwgv-8gvm-4fwm.json b/advisories/unreviewed/2023/11/GHSA-fwgv-8gvm-4fwm/GHSA-fwgv-8gvm-4fwm.json index 204a0e80261..73eb1296835 100644 --- a/advisories/unreviewed/2023/11/GHSA-fwgv-8gvm-4fwm/GHSA-fwgv-8gvm-4fwm.json +++ b/advisories/unreviewed/2023/11/GHSA-fwgv-8gvm-4fwm/GHSA-fwgv-8gvm-4fwm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-fww3-wwgr-mqpw/GHSA-fww3-wwgr-mqpw.json b/advisories/unreviewed/2023/11/GHSA-fww3-wwgr-mqpw/GHSA-fww3-wwgr-mqpw.json index fc2d0f12ad8..00cfcbfeae2 100644 --- a/advisories/unreviewed/2023/11/GHSA-fww3-wwgr-mqpw/GHSA-fww3-wwgr-mqpw.json +++ b/advisories/unreviewed/2023/11/GHSA-fww3-wwgr-mqpw/GHSA-fww3-wwgr-mqpw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-g3qw-w3wp-f3m2/GHSA-g3qw-w3wp-f3m2.json b/advisories/unreviewed/2023/11/GHSA-g3qw-w3wp-f3m2/GHSA-g3qw-w3wp-f3m2.json index 89550fc6005..e5dcc78d16e 100644 --- a/advisories/unreviewed/2023/11/GHSA-g3qw-w3wp-f3m2/GHSA-g3qw-w3wp-f3m2.json +++ b/advisories/unreviewed/2023/11/GHSA-g3qw-w3wp-f3m2/GHSA-g3qw-w3wp-f3m2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-g4cc-jjqp-vp8c/GHSA-g4cc-jjqp-vp8c.json b/advisories/unreviewed/2023/11/GHSA-g4cc-jjqp-vp8c/GHSA-g4cc-jjqp-vp8c.json index 63358a14213..f9f94f692a7 100644 --- a/advisories/unreviewed/2023/11/GHSA-g4cc-jjqp-vp8c/GHSA-g4cc-jjqp-vp8c.json +++ b/advisories/unreviewed/2023/11/GHSA-g4cc-jjqp-vp8c/GHSA-g4cc-jjqp-vp8c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-g5pm-hfwf-xcjw/GHSA-g5pm-hfwf-xcjw.json b/advisories/unreviewed/2023/11/GHSA-g5pm-hfwf-xcjw/GHSA-g5pm-hfwf-xcjw.json index bed3e678d93..e955f645ba3 100644 --- a/advisories/unreviewed/2023/11/GHSA-g5pm-hfwf-xcjw/GHSA-g5pm-hfwf-xcjw.json +++ b/advisories/unreviewed/2023/11/GHSA-g5pm-hfwf-xcjw/GHSA-g5pm-hfwf-xcjw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-g5vc-c8pg-8wc9/GHSA-g5vc-c8pg-8wc9.json b/advisories/unreviewed/2023/11/GHSA-g5vc-c8pg-8wc9/GHSA-g5vc-c8pg-8wc9.json index cb0fffd60da..16a2461c414 100644 --- a/advisories/unreviewed/2023/11/GHSA-g5vc-c8pg-8wc9/GHSA-g5vc-c8pg-8wc9.json +++ b/advisories/unreviewed/2023/11/GHSA-g5vc-c8pg-8wc9/GHSA-g5vc-c8pg-8wc9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-ggrf-mj99-j57m/GHSA-ggrf-mj99-j57m.json b/advisories/unreviewed/2023/11/GHSA-ggrf-mj99-j57m/GHSA-ggrf-mj99-j57m.json index 6e6fcfcb689..ce04ad6fe6d 100644 --- a/advisories/unreviewed/2023/11/GHSA-ggrf-mj99-j57m/GHSA-ggrf-mj99-j57m.json +++ b/advisories/unreviewed/2023/11/GHSA-ggrf-mj99-j57m/GHSA-ggrf-mj99-j57m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-gh94-rfj3-873r/GHSA-gh94-rfj3-873r.json b/advisories/unreviewed/2023/11/GHSA-gh94-rfj3-873r/GHSA-gh94-rfj3-873r.json index 852f6afec7e..18e9e355e3f 100644 --- a/advisories/unreviewed/2023/11/GHSA-gh94-rfj3-873r/GHSA-gh94-rfj3-873r.json +++ b/advisories/unreviewed/2023/11/GHSA-gh94-rfj3-873r/GHSA-gh94-rfj3-873r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-ghwh-356h-wcgq/GHSA-ghwh-356h-wcgq.json b/advisories/unreviewed/2023/11/GHSA-ghwh-356h-wcgq/GHSA-ghwh-356h-wcgq.json index f00950e55dd..5aa3731a87f 100644 --- a/advisories/unreviewed/2023/11/GHSA-ghwh-356h-wcgq/GHSA-ghwh-356h-wcgq.json +++ b/advisories/unreviewed/2023/11/GHSA-ghwh-356h-wcgq/GHSA-ghwh-356h-wcgq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-h8jx-25pr-hgm3/GHSA-h8jx-25pr-hgm3.json b/advisories/unreviewed/2023/11/GHSA-h8jx-25pr-hgm3/GHSA-h8jx-25pr-hgm3.json index 0b87f8253c5..20b38705d83 100644 --- a/advisories/unreviewed/2023/11/GHSA-h8jx-25pr-hgm3/GHSA-h8jx-25pr-hgm3.json +++ b/advisories/unreviewed/2023/11/GHSA-h8jx-25pr-hgm3/GHSA-h8jx-25pr-hgm3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-h9c7-2v34-m785/GHSA-h9c7-2v34-m785.json b/advisories/unreviewed/2023/11/GHSA-h9c7-2v34-m785/GHSA-h9c7-2v34-m785.json index 4c5f1c40062..7189b471591 100644 --- a/advisories/unreviewed/2023/11/GHSA-h9c7-2v34-m785/GHSA-h9c7-2v34-m785.json +++ b/advisories/unreviewed/2023/11/GHSA-h9c7-2v34-m785/GHSA-h9c7-2v34-m785.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-hg7c-7628-52r9/GHSA-hg7c-7628-52r9.json b/advisories/unreviewed/2023/11/GHSA-hg7c-7628-52r9/GHSA-hg7c-7628-52r9.json index 198f1c1f7d1..e638f85678a 100644 --- a/advisories/unreviewed/2023/11/GHSA-hg7c-7628-52r9/GHSA-hg7c-7628-52r9.json +++ b/advisories/unreviewed/2023/11/GHSA-hg7c-7628-52r9/GHSA-hg7c-7628-52r9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-hwj3-4jmr-cwwc/GHSA-hwj3-4jmr-cwwc.json b/advisories/unreviewed/2023/11/GHSA-hwj3-4jmr-cwwc/GHSA-hwj3-4jmr-cwwc.json index d7937b60f86..6ae95f57c03 100644 --- a/advisories/unreviewed/2023/11/GHSA-hwj3-4jmr-cwwc/GHSA-hwj3-4jmr-cwwc.json +++ b/advisories/unreviewed/2023/11/GHSA-hwj3-4jmr-cwwc/GHSA-hwj3-4jmr-cwwc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-hwp3-3266-mxg2/GHSA-hwp3-3266-mxg2.json b/advisories/unreviewed/2023/11/GHSA-hwp3-3266-mxg2/GHSA-hwp3-3266-mxg2.json index 601851a3fe4..753851cc210 100644 --- a/advisories/unreviewed/2023/11/GHSA-hwp3-3266-mxg2/GHSA-hwp3-3266-mxg2.json +++ b/advisories/unreviewed/2023/11/GHSA-hwp3-3266-mxg2/GHSA-hwp3-3266-mxg2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-jhc6-x647-xmhf/GHSA-jhc6-x647-xmhf.json b/advisories/unreviewed/2023/11/GHSA-jhc6-x647-xmhf/GHSA-jhc6-x647-xmhf.json index a37e3c7c74e..2b9a3888a09 100644 --- a/advisories/unreviewed/2023/11/GHSA-jhc6-x647-xmhf/GHSA-jhc6-x647-xmhf.json +++ b/advisories/unreviewed/2023/11/GHSA-jhc6-x647-xmhf/GHSA-jhc6-x647-xmhf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-jrxf-243v-pprg/GHSA-jrxf-243v-pprg.json b/advisories/unreviewed/2023/11/GHSA-jrxf-243v-pprg/GHSA-jrxf-243v-pprg.json index e9acd579ec4..b46e881ca07 100644 --- a/advisories/unreviewed/2023/11/GHSA-jrxf-243v-pprg/GHSA-jrxf-243v-pprg.json +++ b/advisories/unreviewed/2023/11/GHSA-jrxf-243v-pprg/GHSA-jrxf-243v-pprg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-jxwh-w46f-545j/GHSA-jxwh-w46f-545j.json b/advisories/unreviewed/2023/11/GHSA-jxwh-w46f-545j/GHSA-jxwh-w46f-545j.json index 78b19d424e6..b01c1aab10c 100644 --- a/advisories/unreviewed/2023/11/GHSA-jxwh-w46f-545j/GHSA-jxwh-w46f-545j.json +++ b/advisories/unreviewed/2023/11/GHSA-jxwh-w46f-545j/GHSA-jxwh-w46f-545j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-m3hg-fjqc-ww3w/GHSA-m3hg-fjqc-ww3w.json b/advisories/unreviewed/2023/11/GHSA-m3hg-fjqc-ww3w/GHSA-m3hg-fjqc-ww3w.json index 02070b9bcab..49a035ac52f 100644 --- a/advisories/unreviewed/2023/11/GHSA-m3hg-fjqc-ww3w/GHSA-m3hg-fjqc-ww3w.json +++ b/advisories/unreviewed/2023/11/GHSA-m3hg-fjqc-ww3w/GHSA-m3hg-fjqc-ww3w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-m7v7-jj45-j87q/GHSA-m7v7-jj45-j87q.json b/advisories/unreviewed/2023/11/GHSA-m7v7-jj45-j87q/GHSA-m7v7-jj45-j87q.json index a33073db3ad..66b8fff45ab 100644 --- a/advisories/unreviewed/2023/11/GHSA-m7v7-jj45-j87q/GHSA-m7v7-jj45-j87q.json +++ b/advisories/unreviewed/2023/11/GHSA-m7v7-jj45-j87q/GHSA-m7v7-jj45-j87q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-mfxr-7r69-92fv/GHSA-mfxr-7r69-92fv.json b/advisories/unreviewed/2023/11/GHSA-mfxr-7r69-92fv/GHSA-mfxr-7r69-92fv.json index 3de552726fe..b5db50a9865 100644 --- a/advisories/unreviewed/2023/11/GHSA-mfxr-7r69-92fv/GHSA-mfxr-7r69-92fv.json +++ b/advisories/unreviewed/2023/11/GHSA-mfxr-7r69-92fv/GHSA-mfxr-7r69-92fv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-mw75-g77c-6rh4/GHSA-mw75-g77c-6rh4.json b/advisories/unreviewed/2023/11/GHSA-mw75-g77c-6rh4/GHSA-mw75-g77c-6rh4.json index 9d07ae31631..1b2f6f200e8 100644 --- a/advisories/unreviewed/2023/11/GHSA-mw75-g77c-6rh4/GHSA-mw75-g77c-6rh4.json +++ b/advisories/unreviewed/2023/11/GHSA-mw75-g77c-6rh4/GHSA-mw75-g77c-6rh4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-p4xg-8hf3-jqxq/GHSA-p4xg-8hf3-jqxq.json b/advisories/unreviewed/2023/11/GHSA-p4xg-8hf3-jqxq/GHSA-p4xg-8hf3-jqxq.json index 87a8c6f67a7..ba1ad12ece3 100644 --- a/advisories/unreviewed/2023/11/GHSA-p4xg-8hf3-jqxq/GHSA-p4xg-8hf3-jqxq.json +++ b/advisories/unreviewed/2023/11/GHSA-p4xg-8hf3-jqxq/GHSA-p4xg-8hf3-jqxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-p7f5-95m3-2fw7/GHSA-p7f5-95m3-2fw7.json b/advisories/unreviewed/2023/11/GHSA-p7f5-95m3-2fw7/GHSA-p7f5-95m3-2fw7.json index 2b46cb87b7d..245eb4c0dd2 100644 --- a/advisories/unreviewed/2023/11/GHSA-p7f5-95m3-2fw7/GHSA-p7f5-95m3-2fw7.json +++ b/advisories/unreviewed/2023/11/GHSA-p7f5-95m3-2fw7/GHSA-p7f5-95m3-2fw7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-q2w4-425r-5cxw/GHSA-q2w4-425r-5cxw.json b/advisories/unreviewed/2023/11/GHSA-q2w4-425r-5cxw/GHSA-q2w4-425r-5cxw.json index bc16cffb9e0..ac5cd6073ae 100644 --- a/advisories/unreviewed/2023/11/GHSA-q2w4-425r-5cxw/GHSA-q2w4-425r-5cxw.json +++ b/advisories/unreviewed/2023/11/GHSA-q2w4-425r-5cxw/GHSA-q2w4-425r-5cxw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-q8x9-r7fc-qfjv/GHSA-q8x9-r7fc-qfjv.json b/advisories/unreviewed/2023/11/GHSA-q8x9-r7fc-qfjv/GHSA-q8x9-r7fc-qfjv.json index 179e8788e44..60f8dd6f50d 100644 --- a/advisories/unreviewed/2023/11/GHSA-q8x9-r7fc-qfjv/GHSA-q8x9-r7fc-qfjv.json +++ b/advisories/unreviewed/2023/11/GHSA-q8x9-r7fc-qfjv/GHSA-q8x9-r7fc-qfjv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-qg8p-h2m3-xm72/GHSA-qg8p-h2m3-xm72.json b/advisories/unreviewed/2023/11/GHSA-qg8p-h2m3-xm72/GHSA-qg8p-h2m3-xm72.json index e679a768879..9a25dcc63ad 100644 --- a/advisories/unreviewed/2023/11/GHSA-qg8p-h2m3-xm72/GHSA-qg8p-h2m3-xm72.json +++ b/advisories/unreviewed/2023/11/GHSA-qg8p-h2m3-xm72/GHSA-qg8p-h2m3-xm72.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-qgrp-vp5r-mc7p/GHSA-qgrp-vp5r-mc7p.json b/advisories/unreviewed/2023/11/GHSA-qgrp-vp5r-mc7p/GHSA-qgrp-vp5r-mc7p.json index c7718e2aac7..7391e7cf743 100644 --- a/advisories/unreviewed/2023/11/GHSA-qgrp-vp5r-mc7p/GHSA-qgrp-vp5r-mc7p.json +++ b/advisories/unreviewed/2023/11/GHSA-qgrp-vp5r-mc7p/GHSA-qgrp-vp5r-mc7p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-qhmg-pv98-3cg7/GHSA-qhmg-pv98-3cg7.json b/advisories/unreviewed/2023/11/GHSA-qhmg-pv98-3cg7/GHSA-qhmg-pv98-3cg7.json index 409671081ae..86337031425 100644 --- a/advisories/unreviewed/2023/11/GHSA-qhmg-pv98-3cg7/GHSA-qhmg-pv98-3cg7.json +++ b/advisories/unreviewed/2023/11/GHSA-qhmg-pv98-3cg7/GHSA-qhmg-pv98-3cg7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-qv8f-pvcv-2mmv/GHSA-qv8f-pvcv-2mmv.json b/advisories/unreviewed/2023/11/GHSA-qv8f-pvcv-2mmv/GHSA-qv8f-pvcv-2mmv.json index fe7fd2b311b..685a862250e 100644 --- a/advisories/unreviewed/2023/11/GHSA-qv8f-pvcv-2mmv/GHSA-qv8f-pvcv-2mmv.json +++ b/advisories/unreviewed/2023/11/GHSA-qv8f-pvcv-2mmv/GHSA-qv8f-pvcv-2mmv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-qvcf-7rv4-rh36/GHSA-qvcf-7rv4-rh36.json b/advisories/unreviewed/2023/11/GHSA-qvcf-7rv4-rh36/GHSA-qvcf-7rv4-rh36.json index de637a4ee24..c26a40dd044 100644 --- a/advisories/unreviewed/2023/11/GHSA-qvcf-7rv4-rh36/GHSA-qvcf-7rv4-rh36.json +++ b/advisories/unreviewed/2023/11/GHSA-qvcf-7rv4-rh36/GHSA-qvcf-7rv4-rh36.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-r8cx-47rc-5x49/GHSA-r8cx-47rc-5x49.json b/advisories/unreviewed/2023/11/GHSA-r8cx-47rc-5x49/GHSA-r8cx-47rc-5x49.json index d18535dcd4a..e663b900b0c 100644 --- a/advisories/unreviewed/2023/11/GHSA-r8cx-47rc-5x49/GHSA-r8cx-47rc-5x49.json +++ b/advisories/unreviewed/2023/11/GHSA-r8cx-47rc-5x49/GHSA-r8cx-47rc-5x49.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-rf5h-5hgc-wfg9/GHSA-rf5h-5hgc-wfg9.json b/advisories/unreviewed/2023/11/GHSA-rf5h-5hgc-wfg9/GHSA-rf5h-5hgc-wfg9.json index 6e75faf874d..7dc5b2cf3c3 100644 --- a/advisories/unreviewed/2023/11/GHSA-rf5h-5hgc-wfg9/GHSA-rf5h-5hgc-wfg9.json +++ b/advisories/unreviewed/2023/11/GHSA-rf5h-5hgc-wfg9/GHSA-rf5h-5hgc-wfg9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-rp4j-f7fp-cgf2/GHSA-rp4j-f7fp-cgf2.json b/advisories/unreviewed/2023/11/GHSA-rp4j-f7fp-cgf2/GHSA-rp4j-f7fp-cgf2.json index 698d691ec4a..ad1e10caccd 100644 --- a/advisories/unreviewed/2023/11/GHSA-rp4j-f7fp-cgf2/GHSA-rp4j-f7fp-cgf2.json +++ b/advisories/unreviewed/2023/11/GHSA-rp4j-f7fp-cgf2/GHSA-rp4j-f7fp-cgf2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-v8gq-42cq-wfhv/GHSA-v8gq-42cq-wfhv.json b/advisories/unreviewed/2023/11/GHSA-v8gq-42cq-wfhv/GHSA-v8gq-42cq-wfhv.json index 77be4c4ea58..06d460bd365 100644 --- a/advisories/unreviewed/2023/11/GHSA-v8gq-42cq-wfhv/GHSA-v8gq-42cq-wfhv.json +++ b/advisories/unreviewed/2023/11/GHSA-v8gq-42cq-wfhv/GHSA-v8gq-42cq-wfhv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-vphq-5544-c678/GHSA-vphq-5544-c678.json b/advisories/unreviewed/2023/11/GHSA-vphq-5544-c678/GHSA-vphq-5544-c678.json index 190803226e9..b8a40e39737 100644 --- a/advisories/unreviewed/2023/11/GHSA-vphq-5544-c678/GHSA-vphq-5544-c678.json +++ b/advisories/unreviewed/2023/11/GHSA-vphq-5544-c678/GHSA-vphq-5544-c678.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-vxm5-rjv9-56wm/GHSA-vxm5-rjv9-56wm.json b/advisories/unreviewed/2023/11/GHSA-vxm5-rjv9-56wm/GHSA-vxm5-rjv9-56wm.json index 6010b40e1ea..bcc5be2dfc8 100644 --- a/advisories/unreviewed/2023/11/GHSA-vxm5-rjv9-56wm/GHSA-vxm5-rjv9-56wm.json +++ b/advisories/unreviewed/2023/11/GHSA-vxm5-rjv9-56wm/GHSA-vxm5-rjv9-56wm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-w8wr-v3q8-68hg/GHSA-w8wr-v3q8-68hg.json b/advisories/unreviewed/2023/11/GHSA-w8wr-v3q8-68hg/GHSA-w8wr-v3q8-68hg.json index f78f8d4eb08..a048b41950d 100644 --- a/advisories/unreviewed/2023/11/GHSA-w8wr-v3q8-68hg/GHSA-w8wr-v3q8-68hg.json +++ b/advisories/unreviewed/2023/11/GHSA-w8wr-v3q8-68hg/GHSA-w8wr-v3q8-68hg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-wcc8-wmx2-r8gp/GHSA-wcc8-wmx2-r8gp.json b/advisories/unreviewed/2023/11/GHSA-wcc8-wmx2-r8gp/GHSA-wcc8-wmx2-r8gp.json index b8243fd5973..241df2408ad 100644 --- a/advisories/unreviewed/2023/11/GHSA-wcc8-wmx2-r8gp/GHSA-wcc8-wmx2-r8gp.json +++ b/advisories/unreviewed/2023/11/GHSA-wcc8-wmx2-r8gp/GHSA-wcc8-wmx2-r8gp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-wvq7-fmcr-mvgx/GHSA-wvq7-fmcr-mvgx.json b/advisories/unreviewed/2023/11/GHSA-wvq7-fmcr-mvgx/GHSA-wvq7-fmcr-mvgx.json index 7dea6b52020..f0498a00ced 100644 --- a/advisories/unreviewed/2023/11/GHSA-wvq7-fmcr-mvgx/GHSA-wvq7-fmcr-mvgx.json +++ b/advisories/unreviewed/2023/11/GHSA-wvq7-fmcr-mvgx/GHSA-wvq7-fmcr-mvgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-wxqm-9ppv-v25j/GHSA-wxqm-9ppv-v25j.json b/advisories/unreviewed/2023/11/GHSA-wxqm-9ppv-v25j/GHSA-wxqm-9ppv-v25j.json index 98275f02062..93d7659e087 100644 --- a/advisories/unreviewed/2023/11/GHSA-wxqm-9ppv-v25j/GHSA-wxqm-9ppv-v25j.json +++ b/advisories/unreviewed/2023/11/GHSA-wxqm-9ppv-v25j/GHSA-wxqm-9ppv-v25j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-x4mj-2ggj-g28r/GHSA-x4mj-2ggj-g28r.json b/advisories/unreviewed/2023/11/GHSA-x4mj-2ggj-g28r/GHSA-x4mj-2ggj-g28r.json index f6e95af258a..f4e531cf25b 100644 --- a/advisories/unreviewed/2023/11/GHSA-x4mj-2ggj-g28r/GHSA-x4mj-2ggj-g28r.json +++ b/advisories/unreviewed/2023/11/GHSA-x4mj-2ggj-g28r/GHSA-x4mj-2ggj-g28r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-x4wr-fpxp-h8c3/GHSA-x4wr-fpxp-h8c3.json b/advisories/unreviewed/2023/11/GHSA-x4wr-fpxp-h8c3/GHSA-x4wr-fpxp-h8c3.json index dfe688ea3d7..ab07c82fe1e 100644 --- a/advisories/unreviewed/2023/11/GHSA-x4wr-fpxp-h8c3/GHSA-x4wr-fpxp-h8c3.json +++ b/advisories/unreviewed/2023/11/GHSA-x4wr-fpxp-h8c3/GHSA-x4wr-fpxp-h8c3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-x5qc-9crp-x6hr/GHSA-x5qc-9crp-x6hr.json b/advisories/unreviewed/2023/11/GHSA-x5qc-9crp-x6hr/GHSA-x5qc-9crp-x6hr.json index 9cad2e041ae..5ad76f3a94b 100644 --- a/advisories/unreviewed/2023/11/GHSA-x5qc-9crp-x6hr/GHSA-x5qc-9crp-x6hr.json +++ b/advisories/unreviewed/2023/11/GHSA-x5qc-9crp-x6hr/GHSA-x5qc-9crp-x6hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-x85w-8f7w-627g/GHSA-x85w-8f7w-627g.json b/advisories/unreviewed/2023/11/GHSA-x85w-8f7w-627g/GHSA-x85w-8f7w-627g.json index 6aaae0bca88..428424bf15c 100644 --- a/advisories/unreviewed/2023/11/GHSA-x85w-8f7w-627g/GHSA-x85w-8f7w-627g.json +++ b/advisories/unreviewed/2023/11/GHSA-x85w-8f7w-627g/GHSA-x85w-8f7w-627g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-x935-fw35-6fjh/GHSA-x935-fw35-6fjh.json b/advisories/unreviewed/2023/11/GHSA-x935-fw35-6fjh/GHSA-x935-fw35-6fjh.json index 565ea0099df..10736d92208 100644 --- a/advisories/unreviewed/2023/11/GHSA-x935-fw35-6fjh/GHSA-x935-fw35-6fjh.json +++ b/advisories/unreviewed/2023/11/GHSA-x935-fw35-6fjh/GHSA-x935-fw35-6fjh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-x9xw-47w2-f9fq/GHSA-x9xw-47w2-f9fq.json b/advisories/unreviewed/2023/11/GHSA-x9xw-47w2-f9fq/GHSA-x9xw-47w2-f9fq.json index 7f1ac6174f0..a3863d544a2 100644 --- a/advisories/unreviewed/2023/11/GHSA-x9xw-47w2-f9fq/GHSA-x9xw-47w2-f9fq.json +++ b/advisories/unreviewed/2023/11/GHSA-x9xw-47w2-f9fq/GHSA-x9xw-47w2-f9fq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-xj2m-wgjq-qpmc/GHSA-xj2m-wgjq-qpmc.json b/advisories/unreviewed/2023/11/GHSA-xj2m-wgjq-qpmc/GHSA-xj2m-wgjq-qpmc.json index 73a73ce01e5..4335481f981 100644 --- a/advisories/unreviewed/2023/11/GHSA-xj2m-wgjq-qpmc/GHSA-xj2m-wgjq-qpmc.json +++ b/advisories/unreviewed/2023/11/GHSA-xj2m-wgjq-qpmc/GHSA-xj2m-wgjq-qpmc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-6ggv-mmg2-jf4r/GHSA-6ggv-mmg2-jf4r.json b/advisories/unreviewed/2023/12/GHSA-6ggv-mmg2-jf4r/GHSA-6ggv-mmg2-jf4r.json index a0e843f8029..01aae7e5242 100644 --- a/advisories/unreviewed/2023/12/GHSA-6ggv-mmg2-jf4r/GHSA-6ggv-mmg2-jf4r.json +++ b/advisories/unreviewed/2023/12/GHSA-6ggv-mmg2-jf4r/GHSA-6ggv-mmg2-jf4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-2m4g-hr2m-w586/GHSA-2m4g-hr2m-w586.json b/advisories/unreviewed/2024/01/GHSA-2m4g-hr2m-w586/GHSA-2m4g-hr2m-w586.json index 70fce1e64ef..317e34b9704 100644 --- a/advisories/unreviewed/2024/01/GHSA-2m4g-hr2m-w586/GHSA-2m4g-hr2m-w586.json +++ b/advisories/unreviewed/2024/01/GHSA-2m4g-hr2m-w586/GHSA-2m4g-hr2m-w586.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-36xj-gcr2-cgrf/GHSA-36xj-gcr2-cgrf.json b/advisories/unreviewed/2024/01/GHSA-36xj-gcr2-cgrf/GHSA-36xj-gcr2-cgrf.json index 666fee659d7..4db2a88db70 100644 --- a/advisories/unreviewed/2024/01/GHSA-36xj-gcr2-cgrf/GHSA-36xj-gcr2-cgrf.json +++ b/advisories/unreviewed/2024/01/GHSA-36xj-gcr2-cgrf/GHSA-36xj-gcr2-cgrf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-37m7-jq3g-46vx/GHSA-37m7-jq3g-46vx.json b/advisories/unreviewed/2024/01/GHSA-37m7-jq3g-46vx/GHSA-37m7-jq3g-46vx.json index b4a1766f811..842f46ec1a9 100644 --- a/advisories/unreviewed/2024/01/GHSA-37m7-jq3g-46vx/GHSA-37m7-jq3g-46vx.json +++ b/advisories/unreviewed/2024/01/GHSA-37m7-jq3g-46vx/GHSA-37m7-jq3g-46vx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-3vqg-c7gc-wqc7/GHSA-3vqg-c7gc-wqc7.json b/advisories/unreviewed/2024/01/GHSA-3vqg-c7gc-wqc7/GHSA-3vqg-c7gc-wqc7.json index 8a12a431d32..980238e694e 100644 --- a/advisories/unreviewed/2024/01/GHSA-3vqg-c7gc-wqc7/GHSA-3vqg-c7gc-wqc7.json +++ b/advisories/unreviewed/2024/01/GHSA-3vqg-c7gc-wqc7/GHSA-3vqg-c7gc-wqc7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-3wgw-h3pq-p82c/GHSA-3wgw-h3pq-p82c.json b/advisories/unreviewed/2024/01/GHSA-3wgw-h3pq-p82c/GHSA-3wgw-h3pq-p82c.json index 8e70639f7ed..35276131a58 100644 --- a/advisories/unreviewed/2024/01/GHSA-3wgw-h3pq-p82c/GHSA-3wgw-h3pq-p82c.json +++ b/advisories/unreviewed/2024/01/GHSA-3wgw-h3pq-p82c/GHSA-3wgw-h3pq-p82c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-4354-qq9g-jmhv/GHSA-4354-qq9g-jmhv.json b/advisories/unreviewed/2024/01/GHSA-4354-qq9g-jmhv/GHSA-4354-qq9g-jmhv.json index 11ed976ea1f..d82f1dd87b2 100644 --- a/advisories/unreviewed/2024/01/GHSA-4354-qq9g-jmhv/GHSA-4354-qq9g-jmhv.json +++ b/advisories/unreviewed/2024/01/GHSA-4354-qq9g-jmhv/GHSA-4354-qq9g-jmhv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-43mv-63pp-x6jr/GHSA-43mv-63pp-x6jr.json b/advisories/unreviewed/2024/01/GHSA-43mv-63pp-x6jr/GHSA-43mv-63pp-x6jr.json index 8d593044a1a..7e4bf178d06 100644 --- a/advisories/unreviewed/2024/01/GHSA-43mv-63pp-x6jr/GHSA-43mv-63pp-x6jr.json +++ b/advisories/unreviewed/2024/01/GHSA-43mv-63pp-x6jr/GHSA-43mv-63pp-x6jr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-4j3q-m6c3-7fq3/GHSA-4j3q-m6c3-7fq3.json b/advisories/unreviewed/2024/01/GHSA-4j3q-m6c3-7fq3/GHSA-4j3q-m6c3-7fq3.json index a7bd10b6d4a..074f511f07c 100644 --- a/advisories/unreviewed/2024/01/GHSA-4j3q-m6c3-7fq3/GHSA-4j3q-m6c3-7fq3.json +++ b/advisories/unreviewed/2024/01/GHSA-4j3q-m6c3-7fq3/GHSA-4j3q-m6c3-7fq3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-5h5w-7f25-q75w/GHSA-5h5w-7f25-q75w.json b/advisories/unreviewed/2024/01/GHSA-5h5w-7f25-q75w/GHSA-5h5w-7f25-q75w.json index 42a7f5bde78..ff925599fd5 100644 --- a/advisories/unreviewed/2024/01/GHSA-5h5w-7f25-q75w/GHSA-5h5w-7f25-q75w.json +++ b/advisories/unreviewed/2024/01/GHSA-5h5w-7f25-q75w/GHSA-5h5w-7f25-q75w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-5m86-gj68-x34m/GHSA-5m86-gj68-x34m.json b/advisories/unreviewed/2024/01/GHSA-5m86-gj68-x34m/GHSA-5m86-gj68-x34m.json index 153f4185305..8882a3ab937 100644 --- a/advisories/unreviewed/2024/01/GHSA-5m86-gj68-x34m/GHSA-5m86-gj68-x34m.json +++ b/advisories/unreviewed/2024/01/GHSA-5m86-gj68-x34m/GHSA-5m86-gj68-x34m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-5qx2-wfg4-53mm/GHSA-5qx2-wfg4-53mm.json b/advisories/unreviewed/2024/01/GHSA-5qx2-wfg4-53mm/GHSA-5qx2-wfg4-53mm.json index 5470200cead..ffbf5d03fbf 100644 --- a/advisories/unreviewed/2024/01/GHSA-5qx2-wfg4-53mm/GHSA-5qx2-wfg4-53mm.json +++ b/advisories/unreviewed/2024/01/GHSA-5qx2-wfg4-53mm/GHSA-5qx2-wfg4-53mm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-6p3c-gh88-xpp9/GHSA-6p3c-gh88-xpp9.json b/advisories/unreviewed/2024/01/GHSA-6p3c-gh88-xpp9/GHSA-6p3c-gh88-xpp9.json index 301fb73b5af..3d4fa5266bb 100644 --- a/advisories/unreviewed/2024/01/GHSA-6p3c-gh88-xpp9/GHSA-6p3c-gh88-xpp9.json +++ b/advisories/unreviewed/2024/01/GHSA-6p3c-gh88-xpp9/GHSA-6p3c-gh88-xpp9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-6p66-xcjh-mgwv/GHSA-6p66-xcjh-mgwv.json b/advisories/unreviewed/2024/01/GHSA-6p66-xcjh-mgwv/GHSA-6p66-xcjh-mgwv.json index 9e814e4f519..79f95f69c3c 100644 --- a/advisories/unreviewed/2024/01/GHSA-6p66-xcjh-mgwv/GHSA-6p66-xcjh-mgwv.json +++ b/advisories/unreviewed/2024/01/GHSA-6p66-xcjh-mgwv/GHSA-6p66-xcjh-mgwv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-6px9-w6mg-x39x/GHSA-6px9-w6mg-x39x.json b/advisories/unreviewed/2024/01/GHSA-6px9-w6mg-x39x/GHSA-6px9-w6mg-x39x.json index 26de5ecf799..c94b6924a5c 100644 --- a/advisories/unreviewed/2024/01/GHSA-6px9-w6mg-x39x/GHSA-6px9-w6mg-x39x.json +++ b/advisories/unreviewed/2024/01/GHSA-6px9-w6mg-x39x/GHSA-6px9-w6mg-x39x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-7fqx-r379-hx9f/GHSA-7fqx-r379-hx9f.json b/advisories/unreviewed/2024/01/GHSA-7fqx-r379-hx9f/GHSA-7fqx-r379-hx9f.json index 2729ebf277b..5a1b3632bea 100644 --- a/advisories/unreviewed/2024/01/GHSA-7fqx-r379-hx9f/GHSA-7fqx-r379-hx9f.json +++ b/advisories/unreviewed/2024/01/GHSA-7fqx-r379-hx9f/GHSA-7fqx-r379-hx9f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-7pxw-wr4x-29hm/GHSA-7pxw-wr4x-29hm.json b/advisories/unreviewed/2024/01/GHSA-7pxw-wr4x-29hm/GHSA-7pxw-wr4x-29hm.json index 4f4695f4068..d805f4aa319 100644 --- a/advisories/unreviewed/2024/01/GHSA-7pxw-wr4x-29hm/GHSA-7pxw-wr4x-29hm.json +++ b/advisories/unreviewed/2024/01/GHSA-7pxw-wr4x-29hm/GHSA-7pxw-wr4x-29hm.json @@ -7,12 +7,8 @@ "CVE-2024-23854" ], "details": "Rejected reason: This CVE ID was unused by the CNA.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-7qff-7fh9-7jrw/GHSA-7qff-7fh9-7jrw.json b/advisories/unreviewed/2024/01/GHSA-7qff-7fh9-7jrw/GHSA-7qff-7fh9-7jrw.json index 23462efffb5..048a26573bb 100644 --- a/advisories/unreviewed/2024/01/GHSA-7qff-7fh9-7jrw/GHSA-7qff-7fh9-7jrw.json +++ b/advisories/unreviewed/2024/01/GHSA-7qff-7fh9-7jrw/GHSA-7qff-7fh9-7jrw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-82h5-jxr3-6jxq/GHSA-82h5-jxr3-6jxq.json b/advisories/unreviewed/2024/01/GHSA-82h5-jxr3-6jxq/GHSA-82h5-jxr3-6jxq.json index 65e5835646b..271323545ba 100644 --- a/advisories/unreviewed/2024/01/GHSA-82h5-jxr3-6jxq/GHSA-82h5-jxr3-6jxq.json +++ b/advisories/unreviewed/2024/01/GHSA-82h5-jxr3-6jxq/GHSA-82h5-jxr3-6jxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-833g-hhhp-wggv/GHSA-833g-hhhp-wggv.json b/advisories/unreviewed/2024/01/GHSA-833g-hhhp-wggv/GHSA-833g-hhhp-wggv.json index 639703019b6..c091ffc3ff9 100644 --- a/advisories/unreviewed/2024/01/GHSA-833g-hhhp-wggv/GHSA-833g-hhhp-wggv.json +++ b/advisories/unreviewed/2024/01/GHSA-833g-hhhp-wggv/GHSA-833g-hhhp-wggv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-8549-4c5j-x7g2/GHSA-8549-4c5j-x7g2.json b/advisories/unreviewed/2024/01/GHSA-8549-4c5j-x7g2/GHSA-8549-4c5j-x7g2.json index 81f56f85717..b72eeabb9e8 100644 --- a/advisories/unreviewed/2024/01/GHSA-8549-4c5j-x7g2/GHSA-8549-4c5j-x7g2.json +++ b/advisories/unreviewed/2024/01/GHSA-8549-4c5j-x7g2/GHSA-8549-4c5j-x7g2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-85ff-hfw5-g96g/GHSA-85ff-hfw5-g96g.json b/advisories/unreviewed/2024/01/GHSA-85ff-hfw5-g96g/GHSA-85ff-hfw5-g96g.json index 3eb2eb3dcac..9e752e67864 100644 --- a/advisories/unreviewed/2024/01/GHSA-85ff-hfw5-g96g/GHSA-85ff-hfw5-g96g.json +++ b/advisories/unreviewed/2024/01/GHSA-85ff-hfw5-g96g/GHSA-85ff-hfw5-g96g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-8j28-ccxg-gg78/GHSA-8j28-ccxg-gg78.json b/advisories/unreviewed/2024/01/GHSA-8j28-ccxg-gg78/GHSA-8j28-ccxg-gg78.json index 83cb2a8f38e..3badfe35859 100644 --- a/advisories/unreviewed/2024/01/GHSA-8j28-ccxg-gg78/GHSA-8j28-ccxg-gg78.json +++ b/advisories/unreviewed/2024/01/GHSA-8j28-ccxg-gg78/GHSA-8j28-ccxg-gg78.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-8mgx-wgjw-q32g/GHSA-8mgx-wgjw-q32g.json b/advisories/unreviewed/2024/01/GHSA-8mgx-wgjw-q32g/GHSA-8mgx-wgjw-q32g.json index 006287b5efa..6edfb483c3c 100644 --- a/advisories/unreviewed/2024/01/GHSA-8mgx-wgjw-q32g/GHSA-8mgx-wgjw-q32g.json +++ b/advisories/unreviewed/2024/01/GHSA-8mgx-wgjw-q32g/GHSA-8mgx-wgjw-q32g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-8rfj-2m76-7x2p/GHSA-8rfj-2m76-7x2p.json b/advisories/unreviewed/2024/01/GHSA-8rfj-2m76-7x2p/GHSA-8rfj-2m76-7x2p.json index ad5d5e7658e..74f0147231d 100644 --- a/advisories/unreviewed/2024/01/GHSA-8rfj-2m76-7x2p/GHSA-8rfj-2m76-7x2p.json +++ b/advisories/unreviewed/2024/01/GHSA-8rfj-2m76-7x2p/GHSA-8rfj-2m76-7x2p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-8wmq-h9m8-m384/GHSA-8wmq-h9m8-m384.json b/advisories/unreviewed/2024/01/GHSA-8wmq-h9m8-m384/GHSA-8wmq-h9m8-m384.json index 398f25f9262..b37a8fbd381 100644 --- a/advisories/unreviewed/2024/01/GHSA-8wmq-h9m8-m384/GHSA-8wmq-h9m8-m384.json +++ b/advisories/unreviewed/2024/01/GHSA-8wmq-h9m8-m384/GHSA-8wmq-h9m8-m384.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-95ph-5wpx-w6gq/GHSA-95ph-5wpx-w6gq.json b/advisories/unreviewed/2024/01/GHSA-95ph-5wpx-w6gq/GHSA-95ph-5wpx-w6gq.json index 675613a02ae..5d843afc252 100644 --- a/advisories/unreviewed/2024/01/GHSA-95ph-5wpx-w6gq/GHSA-95ph-5wpx-w6gq.json +++ b/advisories/unreviewed/2024/01/GHSA-95ph-5wpx-w6gq/GHSA-95ph-5wpx-w6gq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-9m8r-h264-rvx5/GHSA-9m8r-h264-rvx5.json b/advisories/unreviewed/2024/01/GHSA-9m8r-h264-rvx5/GHSA-9m8r-h264-rvx5.json index 38b768e32b7..254c03910fc 100644 --- a/advisories/unreviewed/2024/01/GHSA-9m8r-h264-rvx5/GHSA-9m8r-h264-rvx5.json +++ b/advisories/unreviewed/2024/01/GHSA-9m8r-h264-rvx5/GHSA-9m8r-h264-rvx5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-9v4f-6r6q-2957/GHSA-9v4f-6r6q-2957.json b/advisories/unreviewed/2024/01/GHSA-9v4f-6r6q-2957/GHSA-9v4f-6r6q-2957.json index 8cb96fa2860..fc2dfe966f0 100644 --- a/advisories/unreviewed/2024/01/GHSA-9v4f-6r6q-2957/GHSA-9v4f-6r6q-2957.json +++ b/advisories/unreviewed/2024/01/GHSA-9v4f-6r6q-2957/GHSA-9v4f-6r6q-2957.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-9vfv-cp84-75xg/GHSA-9vfv-cp84-75xg.json b/advisories/unreviewed/2024/01/GHSA-9vfv-cp84-75xg/GHSA-9vfv-cp84-75xg.json index 02148395393..0e0a9345e6a 100644 --- a/advisories/unreviewed/2024/01/GHSA-9vfv-cp84-75xg/GHSA-9vfv-cp84-75xg.json +++ b/advisories/unreviewed/2024/01/GHSA-9vfv-cp84-75xg/GHSA-9vfv-cp84-75xg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-c74w-77jp-9c48/GHSA-c74w-77jp-9c48.json b/advisories/unreviewed/2024/01/GHSA-c74w-77jp-9c48/GHSA-c74w-77jp-9c48.json index ee0a629985b..cb7e6a74513 100644 --- a/advisories/unreviewed/2024/01/GHSA-c74w-77jp-9c48/GHSA-c74w-77jp-9c48.json +++ b/advisories/unreviewed/2024/01/GHSA-c74w-77jp-9c48/GHSA-c74w-77jp-9c48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-cj4r-mxq9-xgx5/GHSA-cj4r-mxq9-xgx5.json b/advisories/unreviewed/2024/01/GHSA-cj4r-mxq9-xgx5/GHSA-cj4r-mxq9-xgx5.json index d590c509e0c..c39e3b228d8 100644 --- a/advisories/unreviewed/2024/01/GHSA-cj4r-mxq9-xgx5/GHSA-cj4r-mxq9-xgx5.json +++ b/advisories/unreviewed/2024/01/GHSA-cj4r-mxq9-xgx5/GHSA-cj4r-mxq9-xgx5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-cjpg-8x68-w7r7/GHSA-cjpg-8x68-w7r7.json b/advisories/unreviewed/2024/01/GHSA-cjpg-8x68-w7r7/GHSA-cjpg-8x68-w7r7.json index d2d79c59f8e..47d35006df0 100644 --- a/advisories/unreviewed/2024/01/GHSA-cjpg-8x68-w7r7/GHSA-cjpg-8x68-w7r7.json +++ b/advisories/unreviewed/2024/01/GHSA-cjpg-8x68-w7r7/GHSA-cjpg-8x68-w7r7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-cqrq-pcmc-2376/GHSA-cqrq-pcmc-2376.json b/advisories/unreviewed/2024/01/GHSA-cqrq-pcmc-2376/GHSA-cqrq-pcmc-2376.json index 8110a954b9d..9928e2dd307 100644 --- a/advisories/unreviewed/2024/01/GHSA-cqrq-pcmc-2376/GHSA-cqrq-pcmc-2376.json +++ b/advisories/unreviewed/2024/01/GHSA-cqrq-pcmc-2376/GHSA-cqrq-pcmc-2376.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-f6fq-4q55-rg2f/GHSA-f6fq-4q55-rg2f.json b/advisories/unreviewed/2024/01/GHSA-f6fq-4q55-rg2f/GHSA-f6fq-4q55-rg2f.json index 52895db54a7..711205064be 100644 --- a/advisories/unreviewed/2024/01/GHSA-f6fq-4q55-rg2f/GHSA-f6fq-4q55-rg2f.json +++ b/advisories/unreviewed/2024/01/GHSA-f6fq-4q55-rg2f/GHSA-f6fq-4q55-rg2f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-fmgm-x3qp-r9pj/GHSA-fmgm-x3qp-r9pj.json b/advisories/unreviewed/2024/01/GHSA-fmgm-x3qp-r9pj/GHSA-fmgm-x3qp-r9pj.json index cb2c54dcb95..5d38d8b13bd 100644 --- a/advisories/unreviewed/2024/01/GHSA-fmgm-x3qp-r9pj/GHSA-fmgm-x3qp-r9pj.json +++ b/advisories/unreviewed/2024/01/GHSA-fmgm-x3qp-r9pj/GHSA-fmgm-x3qp-r9pj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-g39r-hh73-78xj/GHSA-g39r-hh73-78xj.json b/advisories/unreviewed/2024/01/GHSA-g39r-hh73-78xj/GHSA-g39r-hh73-78xj.json index c03b8404a63..6f5daa83ebc 100644 --- a/advisories/unreviewed/2024/01/GHSA-g39r-hh73-78xj/GHSA-g39r-hh73-78xj.json +++ b/advisories/unreviewed/2024/01/GHSA-g39r-hh73-78xj/GHSA-g39r-hh73-78xj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-ghh4-4cxh-fcwj/GHSA-ghh4-4cxh-fcwj.json b/advisories/unreviewed/2024/01/GHSA-ghh4-4cxh-fcwj/GHSA-ghh4-4cxh-fcwj.json index f0088f32796..0d172a6ab14 100644 --- a/advisories/unreviewed/2024/01/GHSA-ghh4-4cxh-fcwj/GHSA-ghh4-4cxh-fcwj.json +++ b/advisories/unreviewed/2024/01/GHSA-ghh4-4cxh-fcwj/GHSA-ghh4-4cxh-fcwj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-grw9-xhr2-wcp3/GHSA-grw9-xhr2-wcp3.json b/advisories/unreviewed/2024/01/GHSA-grw9-xhr2-wcp3/GHSA-grw9-xhr2-wcp3.json index eed25108380..0d86e4cfe8f 100644 --- a/advisories/unreviewed/2024/01/GHSA-grw9-xhr2-wcp3/GHSA-grw9-xhr2-wcp3.json +++ b/advisories/unreviewed/2024/01/GHSA-grw9-xhr2-wcp3/GHSA-grw9-xhr2-wcp3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-h483-rc58-6r6g/GHSA-h483-rc58-6r6g.json b/advisories/unreviewed/2024/01/GHSA-h483-rc58-6r6g/GHSA-h483-rc58-6r6g.json index 3f3367f0a12..7a5c52618ac 100644 --- a/advisories/unreviewed/2024/01/GHSA-h483-rc58-6r6g/GHSA-h483-rc58-6r6g.json +++ b/advisories/unreviewed/2024/01/GHSA-h483-rc58-6r6g/GHSA-h483-rc58-6r6g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-h7v4-v2xr-w9gx/GHSA-h7v4-v2xr-w9gx.json b/advisories/unreviewed/2024/01/GHSA-h7v4-v2xr-w9gx/GHSA-h7v4-v2xr-w9gx.json index 3125561733f..44279aaed59 100644 --- a/advisories/unreviewed/2024/01/GHSA-h7v4-v2xr-w9gx/GHSA-h7v4-v2xr-w9gx.json +++ b/advisories/unreviewed/2024/01/GHSA-h7v4-v2xr-w9gx/GHSA-h7v4-v2xr-w9gx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-h9pp-v4f3-fp7x/GHSA-h9pp-v4f3-fp7x.json b/advisories/unreviewed/2024/01/GHSA-h9pp-v4f3-fp7x/GHSA-h9pp-v4f3-fp7x.json index 33224ee3626..279265a2f27 100644 --- a/advisories/unreviewed/2024/01/GHSA-h9pp-v4f3-fp7x/GHSA-h9pp-v4f3-fp7x.json +++ b/advisories/unreviewed/2024/01/GHSA-h9pp-v4f3-fp7x/GHSA-h9pp-v4f3-fp7x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-hjjv-gwf3-fpj2/GHSA-hjjv-gwf3-fpj2.json b/advisories/unreviewed/2024/01/GHSA-hjjv-gwf3-fpj2/GHSA-hjjv-gwf3-fpj2.json index 3fa401af1f3..abcce26ace1 100644 --- a/advisories/unreviewed/2024/01/GHSA-hjjv-gwf3-fpj2/GHSA-hjjv-gwf3-fpj2.json +++ b/advisories/unreviewed/2024/01/GHSA-hjjv-gwf3-fpj2/GHSA-hjjv-gwf3-fpj2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-j4xh-qhcf-rpxf/GHSA-j4xh-qhcf-rpxf.json b/advisories/unreviewed/2024/01/GHSA-j4xh-qhcf-rpxf/GHSA-j4xh-qhcf-rpxf.json index 1eb7a39bdb9..461426450cc 100644 --- a/advisories/unreviewed/2024/01/GHSA-j4xh-qhcf-rpxf/GHSA-j4xh-qhcf-rpxf.json +++ b/advisories/unreviewed/2024/01/GHSA-j4xh-qhcf-rpxf/GHSA-j4xh-qhcf-rpxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-j9wq-qf2q-26rp/GHSA-j9wq-qf2q-26rp.json b/advisories/unreviewed/2024/01/GHSA-j9wq-qf2q-26rp/GHSA-j9wq-qf2q-26rp.json index 7f3b62284d5..a192e9b6c8e 100644 --- a/advisories/unreviewed/2024/01/GHSA-j9wq-qf2q-26rp/GHSA-j9wq-qf2q-26rp.json +++ b/advisories/unreviewed/2024/01/GHSA-j9wq-qf2q-26rp/GHSA-j9wq-qf2q-26rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-jj23-3fwf-pp6h/GHSA-jj23-3fwf-pp6h.json b/advisories/unreviewed/2024/01/GHSA-jj23-3fwf-pp6h/GHSA-jj23-3fwf-pp6h.json index 0c38451d163..974ea775302 100644 --- a/advisories/unreviewed/2024/01/GHSA-jj23-3fwf-pp6h/GHSA-jj23-3fwf-pp6h.json +++ b/advisories/unreviewed/2024/01/GHSA-jj23-3fwf-pp6h/GHSA-jj23-3fwf-pp6h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-m45w-qgh5-r75j/GHSA-m45w-qgh5-r75j.json b/advisories/unreviewed/2024/01/GHSA-m45w-qgh5-r75j/GHSA-m45w-qgh5-r75j.json index 7f65e876396..2fb5760e114 100644 --- a/advisories/unreviewed/2024/01/GHSA-m45w-qgh5-r75j/GHSA-m45w-qgh5-r75j.json +++ b/advisories/unreviewed/2024/01/GHSA-m45w-qgh5-r75j/GHSA-m45w-qgh5-r75j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-mc4q-3ch6-8cg4/GHSA-mc4q-3ch6-8cg4.json b/advisories/unreviewed/2024/01/GHSA-mc4q-3ch6-8cg4/GHSA-mc4q-3ch6-8cg4.json index e5ef8462a1a..427693a3d28 100644 --- a/advisories/unreviewed/2024/01/GHSA-mc4q-3ch6-8cg4/GHSA-mc4q-3ch6-8cg4.json +++ b/advisories/unreviewed/2024/01/GHSA-mc4q-3ch6-8cg4/GHSA-mc4q-3ch6-8cg4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-mg9f-ffx6-x997/GHSA-mg9f-ffx6-x997.json b/advisories/unreviewed/2024/01/GHSA-mg9f-ffx6-x997/GHSA-mg9f-ffx6-x997.json index 40e0cf34666..fadbec2fb83 100644 --- a/advisories/unreviewed/2024/01/GHSA-mg9f-ffx6-x997/GHSA-mg9f-ffx6-x997.json +++ b/advisories/unreviewed/2024/01/GHSA-mg9f-ffx6-x997/GHSA-mg9f-ffx6-x997.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-mj36-jpr7-6cfr/GHSA-mj36-jpr7-6cfr.json b/advisories/unreviewed/2024/01/GHSA-mj36-jpr7-6cfr/GHSA-mj36-jpr7-6cfr.json index 5002959ea95..1256df6d7c0 100644 --- a/advisories/unreviewed/2024/01/GHSA-mj36-jpr7-6cfr/GHSA-mj36-jpr7-6cfr.json +++ b/advisories/unreviewed/2024/01/GHSA-mj36-jpr7-6cfr/GHSA-mj36-jpr7-6cfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-mmp5-hrvp-29pp/GHSA-mmp5-hrvp-29pp.json b/advisories/unreviewed/2024/01/GHSA-mmp5-hrvp-29pp/GHSA-mmp5-hrvp-29pp.json index 30fcaf97992..3ad12daabc0 100644 --- a/advisories/unreviewed/2024/01/GHSA-mmp5-hrvp-29pp/GHSA-mmp5-hrvp-29pp.json +++ b/advisories/unreviewed/2024/01/GHSA-mmp5-hrvp-29pp/GHSA-mmp5-hrvp-29pp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-p4ff-mmmp-q474/GHSA-p4ff-mmmp-q474.json b/advisories/unreviewed/2024/01/GHSA-p4ff-mmmp-q474/GHSA-p4ff-mmmp-q474.json index 41b74d72ddd..1bab75dd418 100644 --- a/advisories/unreviewed/2024/01/GHSA-p4ff-mmmp-q474/GHSA-p4ff-mmmp-q474.json +++ b/advisories/unreviewed/2024/01/GHSA-p4ff-mmmp-q474/GHSA-p4ff-mmmp-q474.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-pm8g-4f93-7m8m/GHSA-pm8g-4f93-7m8m.json b/advisories/unreviewed/2024/01/GHSA-pm8g-4f93-7m8m/GHSA-pm8g-4f93-7m8m.json index df0fb54f395..ba97b85bb94 100644 --- a/advisories/unreviewed/2024/01/GHSA-pm8g-4f93-7m8m/GHSA-pm8g-4f93-7m8m.json +++ b/advisories/unreviewed/2024/01/GHSA-pm8g-4f93-7m8m/GHSA-pm8g-4f93-7m8m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-pmrv-h592-83x7/GHSA-pmrv-h592-83x7.json b/advisories/unreviewed/2024/01/GHSA-pmrv-h592-83x7/GHSA-pmrv-h592-83x7.json index 51531f8d1dd..876cc505b00 100644 --- a/advisories/unreviewed/2024/01/GHSA-pmrv-h592-83x7/GHSA-pmrv-h592-83x7.json +++ b/advisories/unreviewed/2024/01/GHSA-pmrv-h592-83x7/GHSA-pmrv-h592-83x7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-qp39-g94h-cxxf/GHSA-qp39-g94h-cxxf.json b/advisories/unreviewed/2024/01/GHSA-qp39-g94h-cxxf/GHSA-qp39-g94h-cxxf.json index 87fa64112b9..2255c91e3c7 100644 --- a/advisories/unreviewed/2024/01/GHSA-qp39-g94h-cxxf/GHSA-qp39-g94h-cxxf.json +++ b/advisories/unreviewed/2024/01/GHSA-qp39-g94h-cxxf/GHSA-qp39-g94h-cxxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-v462-3xw3-jqx3/GHSA-v462-3xw3-jqx3.json b/advisories/unreviewed/2024/01/GHSA-v462-3xw3-jqx3/GHSA-v462-3xw3-jqx3.json index 3e56e4aa51f..d29bf0bd765 100644 --- a/advisories/unreviewed/2024/01/GHSA-v462-3xw3-jqx3/GHSA-v462-3xw3-jqx3.json +++ b/advisories/unreviewed/2024/01/GHSA-v462-3xw3-jqx3/GHSA-v462-3xw3-jqx3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-vgcc-pfmc-gjmc/GHSA-vgcc-pfmc-gjmc.json b/advisories/unreviewed/2024/01/GHSA-vgcc-pfmc-gjmc/GHSA-vgcc-pfmc-gjmc.json index 8e19f60a54b..80cfed75a88 100644 --- a/advisories/unreviewed/2024/01/GHSA-vgcc-pfmc-gjmc/GHSA-vgcc-pfmc-gjmc.json +++ b/advisories/unreviewed/2024/01/GHSA-vgcc-pfmc-gjmc/GHSA-vgcc-pfmc-gjmc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-vp8q-xw5r-cq33/GHSA-vp8q-xw5r-cq33.json b/advisories/unreviewed/2024/01/GHSA-vp8q-xw5r-cq33/GHSA-vp8q-xw5r-cq33.json index 5ab49c847f4..e71e8ed9ddd 100644 --- a/advisories/unreviewed/2024/01/GHSA-vp8q-xw5r-cq33/GHSA-vp8q-xw5r-cq33.json +++ b/advisories/unreviewed/2024/01/GHSA-vp8q-xw5r-cq33/GHSA-vp8q-xw5r-cq33.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-vvp5-2ffm-gmvh/GHSA-vvp5-2ffm-gmvh.json b/advisories/unreviewed/2024/01/GHSA-vvp5-2ffm-gmvh/GHSA-vvp5-2ffm-gmvh.json index 089912ffc90..459c818144f 100644 --- a/advisories/unreviewed/2024/01/GHSA-vvp5-2ffm-gmvh/GHSA-vvp5-2ffm-gmvh.json +++ b/advisories/unreviewed/2024/01/GHSA-vvp5-2ffm-gmvh/GHSA-vvp5-2ffm-gmvh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-w28j-4ff9-m8cm/GHSA-w28j-4ff9-m8cm.json b/advisories/unreviewed/2024/01/GHSA-w28j-4ff9-m8cm/GHSA-w28j-4ff9-m8cm.json index 9ae8864c711..758d2f26fe9 100644 --- a/advisories/unreviewed/2024/01/GHSA-w28j-4ff9-m8cm/GHSA-w28j-4ff9-m8cm.json +++ b/advisories/unreviewed/2024/01/GHSA-w28j-4ff9-m8cm/GHSA-w28j-4ff9-m8cm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-wfgq-9f7c-xcw5/GHSA-wfgq-9f7c-xcw5.json b/advisories/unreviewed/2024/01/GHSA-wfgq-9f7c-xcw5/GHSA-wfgq-9f7c-xcw5.json index 9a85a6209ad..501bc3b9d48 100644 --- a/advisories/unreviewed/2024/01/GHSA-wfgq-9f7c-xcw5/GHSA-wfgq-9f7c-xcw5.json +++ b/advisories/unreviewed/2024/01/GHSA-wfgq-9f7c-xcw5/GHSA-wfgq-9f7c-xcw5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-wmc3-gvp9-38qp/GHSA-wmc3-gvp9-38qp.json b/advisories/unreviewed/2024/01/GHSA-wmc3-gvp9-38qp/GHSA-wmc3-gvp9-38qp.json index 26fbea4887e..27054d27735 100644 --- a/advisories/unreviewed/2024/01/GHSA-wmc3-gvp9-38qp/GHSA-wmc3-gvp9-38qp.json +++ b/advisories/unreviewed/2024/01/GHSA-wmc3-gvp9-38qp/GHSA-wmc3-gvp9-38qp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-wmg5-vm74-qqx4/GHSA-wmg5-vm74-qqx4.json b/advisories/unreviewed/2024/01/GHSA-wmg5-vm74-qqx4/GHSA-wmg5-vm74-qqx4.json index f8e8dc6297a..4dac74ad725 100644 --- a/advisories/unreviewed/2024/01/GHSA-wmg5-vm74-qqx4/GHSA-wmg5-vm74-qqx4.json +++ b/advisories/unreviewed/2024/01/GHSA-wmg5-vm74-qqx4/GHSA-wmg5-vm74-qqx4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-x83h-6qgp-hw2h/GHSA-x83h-6qgp-hw2h.json b/advisories/unreviewed/2024/01/GHSA-x83h-6qgp-hw2h/GHSA-x83h-6qgp-hw2h.json index 61d3d6f880a..00c4e8c5875 100644 --- a/advisories/unreviewed/2024/01/GHSA-x83h-6qgp-hw2h/GHSA-x83h-6qgp-hw2h.json +++ b/advisories/unreviewed/2024/01/GHSA-x83h-6qgp-hw2h/GHSA-x83h-6qgp-hw2h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-x93g-3xq3-cp8q/GHSA-x93g-3xq3-cp8q.json b/advisories/unreviewed/2024/01/GHSA-x93g-3xq3-cp8q/GHSA-x93g-3xq3-cp8q.json index 313abac949c..99a1eee7090 100644 --- a/advisories/unreviewed/2024/01/GHSA-x93g-3xq3-cp8q/GHSA-x93g-3xq3-cp8q.json +++ b/advisories/unreviewed/2024/01/GHSA-x93g-3xq3-cp8q/GHSA-x93g-3xq3-cp8q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-3f8r-x482-8qpg/GHSA-3f8r-x482-8qpg.json b/advisories/unreviewed/2024/02/GHSA-3f8r-x482-8qpg/GHSA-3f8r-x482-8qpg.json index fc5da713865..f1b8ab4b001 100644 --- a/advisories/unreviewed/2024/02/GHSA-3f8r-x482-8qpg/GHSA-3f8r-x482-8qpg.json +++ b/advisories/unreviewed/2024/02/GHSA-3f8r-x482-8qpg/GHSA-3f8r-x482-8qpg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-5gg4-gwf8-v9x6/GHSA-5gg4-gwf8-v9x6.json b/advisories/unreviewed/2024/02/GHSA-5gg4-gwf8-v9x6/GHSA-5gg4-gwf8-v9x6.json index d8fca7db26a..71feb021204 100644 --- a/advisories/unreviewed/2024/02/GHSA-5gg4-gwf8-v9x6/GHSA-5gg4-gwf8-v9x6.json +++ b/advisories/unreviewed/2024/02/GHSA-5gg4-gwf8-v9x6/GHSA-5gg4-gwf8-v9x6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-68p8-j476-8w35/GHSA-68p8-j476-8w35.json b/advisories/unreviewed/2024/02/GHSA-68p8-j476-8w35/GHSA-68p8-j476-8w35.json index b6f8bd4ad1a..3a500b18f66 100644 --- a/advisories/unreviewed/2024/02/GHSA-68p8-j476-8w35/GHSA-68p8-j476-8w35.json +++ b/advisories/unreviewed/2024/02/GHSA-68p8-j476-8w35/GHSA-68p8-j476-8w35.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-697h-9h25-w4fm/GHSA-697h-9h25-w4fm.json b/advisories/unreviewed/2024/02/GHSA-697h-9h25-w4fm/GHSA-697h-9h25-w4fm.json index 22155d12029..453b7eb476a 100644 --- a/advisories/unreviewed/2024/02/GHSA-697h-9h25-w4fm/GHSA-697h-9h25-w4fm.json +++ b/advisories/unreviewed/2024/02/GHSA-697h-9h25-w4fm/GHSA-697h-9h25-w4fm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-j75r-xrr2-rgp6/GHSA-j75r-xrr2-rgp6.json b/advisories/unreviewed/2024/02/GHSA-j75r-xrr2-rgp6/GHSA-j75r-xrr2-rgp6.json index 526bd552031..7fd86147ae0 100644 --- a/advisories/unreviewed/2024/02/GHSA-j75r-xrr2-rgp6/GHSA-j75r-xrr2-rgp6.json +++ b/advisories/unreviewed/2024/02/GHSA-j75r-xrr2-rgp6/GHSA-j75r-xrr2-rgp6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-m868-f948-vvjc/GHSA-m868-f948-vvjc.json b/advisories/unreviewed/2024/02/GHSA-m868-f948-vvjc/GHSA-m868-f948-vvjc.json index ede0e822250..4efcd0cbd6d 100644 --- a/advisories/unreviewed/2024/02/GHSA-m868-f948-vvjc/GHSA-m868-f948-vvjc.json +++ b/advisories/unreviewed/2024/02/GHSA-m868-f948-vvjc/GHSA-m868-f948-vvjc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-r2g2-g732-97cw/GHSA-r2g2-g732-97cw.json b/advisories/unreviewed/2024/02/GHSA-r2g2-g732-97cw/GHSA-r2g2-g732-97cw.json index c874ef12979..49c9d3b98c9 100644 --- a/advisories/unreviewed/2024/02/GHSA-r2g2-g732-97cw/GHSA-r2g2-g732-97cw.json +++ b/advisories/unreviewed/2024/02/GHSA-r2g2-g732-97cw/GHSA-r2g2-g732-97cw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-r57p-gw8h-38xj/GHSA-r57p-gw8h-38xj.json b/advisories/unreviewed/2024/02/GHSA-r57p-gw8h-38xj/GHSA-r57p-gw8h-38xj.json index aa9825ad568..fd07e9799a3 100644 --- a/advisories/unreviewed/2024/02/GHSA-r57p-gw8h-38xj/GHSA-r57p-gw8h-38xj.json +++ b/advisories/unreviewed/2024/02/GHSA-r57p-gw8h-38xj/GHSA-r57p-gw8h-38xj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-xf6f-94pc-55vc/GHSA-xf6f-94pc-55vc.json b/advisories/unreviewed/2024/02/GHSA-xf6f-94pc-55vc/GHSA-xf6f-94pc-55vc.json index 940daf90bb7..6dc798f77a9 100644 --- a/advisories/unreviewed/2024/02/GHSA-xf6f-94pc-55vc/GHSA-xf6f-94pc-55vc.json +++ b/advisories/unreviewed/2024/02/GHSA-xf6f-94pc-55vc/GHSA-xf6f-94pc-55vc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-2jq5-wq32-4rfq/GHSA-2jq5-wq32-4rfq.json b/advisories/unreviewed/2024/03/GHSA-2jq5-wq32-4rfq/GHSA-2jq5-wq32-4rfq.json index 234d8529ad9..51840d6ebdd 100644 --- a/advisories/unreviewed/2024/03/GHSA-2jq5-wq32-4rfq/GHSA-2jq5-wq32-4rfq.json +++ b/advisories/unreviewed/2024/03/GHSA-2jq5-wq32-4rfq/GHSA-2jq5-wq32-4rfq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-2wrv-p5q9-mwmw/GHSA-2wrv-p5q9-mwmw.json b/advisories/unreviewed/2024/03/GHSA-2wrv-p5q9-mwmw/GHSA-2wrv-p5q9-mwmw.json index 5e21a818ad9..f0d035a06a2 100644 --- a/advisories/unreviewed/2024/03/GHSA-2wrv-p5q9-mwmw/GHSA-2wrv-p5q9-mwmw.json +++ b/advisories/unreviewed/2024/03/GHSA-2wrv-p5q9-mwmw/GHSA-2wrv-p5q9-mwmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-35x3-v7hw-gc2g/GHSA-35x3-v7hw-gc2g.json b/advisories/unreviewed/2024/03/GHSA-35x3-v7hw-gc2g/GHSA-35x3-v7hw-gc2g.json index df3d424f13b..c45f5e14e7d 100644 --- a/advisories/unreviewed/2024/03/GHSA-35x3-v7hw-gc2g/GHSA-35x3-v7hw-gc2g.json +++ b/advisories/unreviewed/2024/03/GHSA-35x3-v7hw-gc2g/GHSA-35x3-v7hw-gc2g.json @@ -7,12 +7,8 @@ "CVE-2023-31854" ], "details": "std::bad_alloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be categorized as a usability problem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-374x-f6v3-7m9h/GHSA-374x-f6v3-7m9h.json b/advisories/unreviewed/2024/03/GHSA-374x-f6v3-7m9h/GHSA-374x-f6v3-7m9h.json index 4d7cc0d1b77..f2a7b9d5915 100644 --- a/advisories/unreviewed/2024/03/GHSA-374x-f6v3-7m9h/GHSA-374x-f6v3-7m9h.json +++ b/advisories/unreviewed/2024/03/GHSA-374x-f6v3-7m9h/GHSA-374x-f6v3-7m9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-3fj9-c88m-7g9f/GHSA-3fj9-c88m-7g9f.json b/advisories/unreviewed/2024/03/GHSA-3fj9-c88m-7g9f/GHSA-3fj9-c88m-7g9f.json index 60a60e8e788..9601c0689b3 100644 --- a/advisories/unreviewed/2024/03/GHSA-3fj9-c88m-7g9f/GHSA-3fj9-c88m-7g9f.json +++ b/advisories/unreviewed/2024/03/GHSA-3fj9-c88m-7g9f/GHSA-3fj9-c88m-7g9f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-4526-r3g2-c73j/GHSA-4526-r3g2-c73j.json b/advisories/unreviewed/2024/03/GHSA-4526-r3g2-c73j/GHSA-4526-r3g2-c73j.json index b837f3369d3..fb42a32b824 100644 --- a/advisories/unreviewed/2024/03/GHSA-4526-r3g2-c73j/GHSA-4526-r3g2-c73j.json +++ b/advisories/unreviewed/2024/03/GHSA-4526-r3g2-c73j/GHSA-4526-r3g2-c73j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-5436-7p32-x65c/GHSA-5436-7p32-x65c.json b/advisories/unreviewed/2024/03/GHSA-5436-7p32-x65c/GHSA-5436-7p32-x65c.json index 871362d3e54..6823fa131b0 100644 --- a/advisories/unreviewed/2024/03/GHSA-5436-7p32-x65c/GHSA-5436-7p32-x65c.json +++ b/advisories/unreviewed/2024/03/GHSA-5436-7p32-x65c/GHSA-5436-7p32-x65c.json @@ -7,12 +7,8 @@ "CVE-2024-26624" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: fix lockdep positive in sk_diag_dump_icons()\n\nsyzbot reported a lockdep splat [1].\n\nBlamed commit hinted about the possible lockdep\nviolation, and code used unix_state_lock_nested()\nin an attempt to silence lockdep.\n\nIt is not sufficient, because unix_state_lock_nested()\nis already used from unix_state_double_lock().\n\nWe need to use a separate subclass.\n\nThis patch adds a distinct enumeration to make things\nmore explicit.\n\nAlso use swap() in unix_state_double_lock() as a clean up.\n\nv2: add a missing inline keyword to unix_state_lock_nested()\n\n[1]\nWARNING: possible circular locking dependency detected\n6.8.0-rc1-syzkaller-00356-g8a696a29c690 #0 Not tainted\n\nsyz-executor.1/2542 is trying to acquire lock:\n ffff88808b5df9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: skb_queue_tail+0x36/0x120 net/core/skbuff.c:3863\n\nbut task is already holding lock:\n ffff88808b5dfe70 (&u->lock/1){+.+.}-{2:2}, at: unix_dgram_sendmsg+0xfc7/0x2200 net/unix/af_unix.c:2089\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-> #1 (&u->lock/1){+.+.}-{2:2}:\n lock_acquire+0x1e3/0x530 kernel/locking/lockdep.c:5754\n _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378\n sk_diag_dump_icons net/unix/diag.c:87 [inline]\n sk_diag_fill+0x6ea/0xfe0 net/unix/diag.c:157\n sk_diag_dump net/unix/diag.c:196 [inline]\n unix_diag_dump+0x3e9/0x630 net/unix/diag.c:220\n netlink_dump+0x5c1/0xcd0 net/netlink/af_netlink.c:2264\n __netlink_dump_start+0x5d7/0x780 net/netlink/af_netlink.c:2370\n netlink_dump_start include/linux/netlink.h:338 [inline]\n unix_diag_handler_dump+0x1c3/0x8f0 net/unix/diag.c:319\n sock_diag_rcv_msg+0xe3/0x400\n netlink_rcv_skb+0x1df/0x430 net/netlink/af_netlink.c:2543\n sock_diag_rcv+0x2a/0x40 net/core/sock_diag.c:280\n netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]\n netlink_unicast+0x7e6/0x980 net/netlink/af_netlink.c:1367\n netlink_sendmsg+0xa37/0xd70 net/netlink/af_netlink.c:1908\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n sock_write_iter+0x39a/0x520 net/socket.c:1160\n call_write_iter include/linux/fs.h:2085 [inline]\n new_sync_write fs/read_write.c:497 [inline]\n vfs_write+0xa74/0xca0 fs/read_write.c:590\n ksys_write+0x1a0/0x2c0 fs/read_write.c:643\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf5/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\n-> #0 (rlock-AF_UNIX){+.+.}-{2:2}:\n check_prev_add kernel/locking/lockdep.c:3134 [inline]\n check_prevs_add kernel/locking/lockdep.c:3253 [inline]\n validate_chain+0x1909/0x5ab0 kernel/locking/lockdep.c:3869\n __lock_acquire+0x1345/0x1fd0 kernel/locking/lockdep.c:5137\n lock_acquire+0x1e3/0x530 kernel/locking/lockdep.c:5754\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n skb_queue_tail+0x36/0x120 net/core/skbuff.c:3863\n unix_dgram_sendmsg+0x15d9/0x2200 net/unix/af_unix.c:2112\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x592/0x890 net/socket.c:2584\n ___sys_sendmsg net/socket.c:2638 [inline]\n __sys_sendmmsg+0x3b2/0x730 net/socket.c:2724\n __do_sys_sendmmsg net/socket.c:2753 [inline]\n __se_sys_sendmmsg net/socket.c:2750 [inline]\n __x64_sys_sendmmsg+0xa0/0xb0 net/socket.c:2750\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf5/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nother info that might help us debug this:\n\n Possible unsafe locking scenario:\n\n CPU0 \n---truncated---", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-57m4-vwwv-mmqr/GHSA-57m4-vwwv-mmqr.json b/advisories/unreviewed/2024/03/GHSA-57m4-vwwv-mmqr/GHSA-57m4-vwwv-mmqr.json index a68d09c3210..ed277264ba3 100644 --- a/advisories/unreviewed/2024/03/GHSA-57m4-vwwv-mmqr/GHSA-57m4-vwwv-mmqr.json +++ b/advisories/unreviewed/2024/03/GHSA-57m4-vwwv-mmqr/GHSA-57m4-vwwv-mmqr.json @@ -7,12 +7,8 @@ "CVE-2023-45920" ], "details": "Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-5jjr-h5r9-w8v2/GHSA-5jjr-h5r9-w8v2.json b/advisories/unreviewed/2024/03/GHSA-5jjr-h5r9-w8v2/GHSA-5jjr-h5r9-w8v2.json index 60fb58bd14d..f64a8fe468d 100644 --- a/advisories/unreviewed/2024/03/GHSA-5jjr-h5r9-w8v2/GHSA-5jjr-h5r9-w8v2.json +++ b/advisories/unreviewed/2024/03/GHSA-5jjr-h5r9-w8v2/GHSA-5jjr-h5r9-w8v2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-6237-xhjp-qj5r/GHSA-6237-xhjp-qj5r.json b/advisories/unreviewed/2024/03/GHSA-6237-xhjp-qj5r/GHSA-6237-xhjp-qj5r.json index f7aebac0848..533251d5014 100644 --- a/advisories/unreviewed/2024/03/GHSA-6237-xhjp-qj5r/GHSA-6237-xhjp-qj5r.json +++ b/advisories/unreviewed/2024/03/GHSA-6237-xhjp-qj5r/GHSA-6237-xhjp-qj5r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-62g5-mhwv-6rw4/GHSA-62g5-mhwv-6rw4.json b/advisories/unreviewed/2024/03/GHSA-62g5-mhwv-6rw4/GHSA-62g5-mhwv-6rw4.json index 404a94cd711..ab8c26a9292 100644 --- a/advisories/unreviewed/2024/03/GHSA-62g5-mhwv-6rw4/GHSA-62g5-mhwv-6rw4.json +++ b/advisories/unreviewed/2024/03/GHSA-62g5-mhwv-6rw4/GHSA-62g5-mhwv-6rw4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-6rg4-q3ph-9w9g/GHSA-6rg4-q3ph-9w9g.json b/advisories/unreviewed/2024/03/GHSA-6rg4-q3ph-9w9g/GHSA-6rg4-q3ph-9w9g.json index 4a88be57652..007a73d1bd7 100644 --- a/advisories/unreviewed/2024/03/GHSA-6rg4-q3ph-9w9g/GHSA-6rg4-q3ph-9w9g.json +++ b/advisories/unreviewed/2024/03/GHSA-6rg4-q3ph-9w9g/GHSA-6rg4-q3ph-9w9g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-84j2-j2q4-3wmj/GHSA-84j2-j2q4-3wmj.json b/advisories/unreviewed/2024/03/GHSA-84j2-j2q4-3wmj/GHSA-84j2-j2q4-3wmj.json index f9b3e08b739..091e2a03f69 100644 --- a/advisories/unreviewed/2024/03/GHSA-84j2-j2q4-3wmj/GHSA-84j2-j2q4-3wmj.json +++ b/advisories/unreviewed/2024/03/GHSA-84j2-j2q4-3wmj/GHSA-84j2-j2q4-3wmj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-86vw-c532-f7g7/GHSA-86vw-c532-f7g7.json b/advisories/unreviewed/2024/03/GHSA-86vw-c532-f7g7/GHSA-86vw-c532-f7g7.json index e3994efb8fb..248b01d13db 100644 --- a/advisories/unreviewed/2024/03/GHSA-86vw-c532-f7g7/GHSA-86vw-c532-f7g7.json +++ b/advisories/unreviewed/2024/03/GHSA-86vw-c532-f7g7/GHSA-86vw-c532-f7g7.json @@ -7,12 +7,8 @@ "CVE-2023-46052" ], "details": "Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-934w-8hrj-jf38/GHSA-934w-8hrj-jf38.json b/advisories/unreviewed/2024/03/GHSA-934w-8hrj-jf38/GHSA-934w-8hrj-jf38.json index e92fa5db2a6..dbd08ad13bf 100644 --- a/advisories/unreviewed/2024/03/GHSA-934w-8hrj-jf38/GHSA-934w-8hrj-jf38.json +++ b/advisories/unreviewed/2024/03/GHSA-934w-8hrj-jf38/GHSA-934w-8hrj-jf38.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-95cq-m3g2-g9qh/GHSA-95cq-m3g2-g9qh.json b/advisories/unreviewed/2024/03/GHSA-95cq-m3g2-g9qh/GHSA-95cq-m3g2-g9qh.json index d8763b5cff2..d1e3bea08e6 100644 --- a/advisories/unreviewed/2024/03/GHSA-95cq-m3g2-g9qh/GHSA-95cq-m3g2-g9qh.json +++ b/advisories/unreviewed/2024/03/GHSA-95cq-m3g2-g9qh/GHSA-95cq-m3g2-g9qh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-9wpf-67qh-4ww2/GHSA-9wpf-67qh-4ww2.json b/advisories/unreviewed/2024/03/GHSA-9wpf-67qh-4ww2/GHSA-9wpf-67qh-4ww2.json index af9441d6e55..7bf87e9a832 100644 --- a/advisories/unreviewed/2024/03/GHSA-9wpf-67qh-4ww2/GHSA-9wpf-67qh-4ww2.json +++ b/advisories/unreviewed/2024/03/GHSA-9wpf-67qh-4ww2/GHSA-9wpf-67qh-4ww2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-fgj3-94jj-q56m/GHSA-fgj3-94jj-q56m.json b/advisories/unreviewed/2024/03/GHSA-fgj3-94jj-q56m/GHSA-fgj3-94jj-q56m.json index bca920db630..ba23b8a3842 100644 --- a/advisories/unreviewed/2024/03/GHSA-fgj3-94jj-q56m/GHSA-fgj3-94jj-q56m.json +++ b/advisories/unreviewed/2024/03/GHSA-fgj3-94jj-q56m/GHSA-fgj3-94jj-q56m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-gjp2-mc5q-q2cp/GHSA-gjp2-mc5q-q2cp.json b/advisories/unreviewed/2024/03/GHSA-gjp2-mc5q-q2cp/GHSA-gjp2-mc5q-q2cp.json index d3aa256919f..3859774777b 100644 --- a/advisories/unreviewed/2024/03/GHSA-gjp2-mc5q-q2cp/GHSA-gjp2-mc5q-q2cp.json +++ b/advisories/unreviewed/2024/03/GHSA-gjp2-mc5q-q2cp/GHSA-gjp2-mc5q-q2cp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-h4qj-hvfm-82fp/GHSA-h4qj-hvfm-82fp.json b/advisories/unreviewed/2024/03/GHSA-h4qj-hvfm-82fp/GHSA-h4qj-hvfm-82fp.json index a9ac57d4b3c..6803b0bd58d 100644 --- a/advisories/unreviewed/2024/03/GHSA-h4qj-hvfm-82fp/GHSA-h4qj-hvfm-82fp.json +++ b/advisories/unreviewed/2024/03/GHSA-h4qj-hvfm-82fp/GHSA-h4qj-hvfm-82fp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-mfv7-6rh8-77p4/GHSA-mfv7-6rh8-77p4.json b/advisories/unreviewed/2024/03/GHSA-mfv7-6rh8-77p4/GHSA-mfv7-6rh8-77p4.json index a56c8c5998c..60eb6a808d4 100644 --- a/advisories/unreviewed/2024/03/GHSA-mfv7-6rh8-77p4/GHSA-mfv7-6rh8-77p4.json +++ b/advisories/unreviewed/2024/03/GHSA-mfv7-6rh8-77p4/GHSA-mfv7-6rh8-77p4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-p7mw-695f-jgfq/GHSA-p7mw-695f-jgfq.json b/advisories/unreviewed/2024/03/GHSA-p7mw-695f-jgfq/GHSA-p7mw-695f-jgfq.json index 072453a9a28..dc3eedb561f 100644 --- a/advisories/unreviewed/2024/03/GHSA-p7mw-695f-jgfq/GHSA-p7mw-695f-jgfq.json +++ b/advisories/unreviewed/2024/03/GHSA-p7mw-695f-jgfq/GHSA-p7mw-695f-jgfq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-qj7h-f63w-5hg2/GHSA-qj7h-f63w-5hg2.json b/advisories/unreviewed/2024/03/GHSA-qj7h-f63w-5hg2/GHSA-qj7h-f63w-5hg2.json index 760fc66ae17..8584ef2b7c9 100644 --- a/advisories/unreviewed/2024/03/GHSA-qj7h-f63w-5hg2/GHSA-qj7h-f63w-5hg2.json +++ b/advisories/unreviewed/2024/03/GHSA-qj7h-f63w-5hg2/GHSA-qj7h-f63w-5hg2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-qv49-qr7x-p449/GHSA-qv49-qr7x-p449.json b/advisories/unreviewed/2024/03/GHSA-qv49-qr7x-p449/GHSA-qv49-qr7x-p449.json index 261b5dd8c92..6603aeac620 100644 --- a/advisories/unreviewed/2024/03/GHSA-qv49-qr7x-p449/GHSA-qv49-qr7x-p449.json +++ b/advisories/unreviewed/2024/03/GHSA-qv49-qr7x-p449/GHSA-qv49-qr7x-p449.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-rwrc-gqch-prx4/GHSA-rwrc-gqch-prx4.json b/advisories/unreviewed/2024/03/GHSA-rwrc-gqch-prx4/GHSA-rwrc-gqch-prx4.json index ba464457b73..df0d7fbdda4 100644 --- a/advisories/unreviewed/2024/03/GHSA-rwrc-gqch-prx4/GHSA-rwrc-gqch-prx4.json +++ b/advisories/unreviewed/2024/03/GHSA-rwrc-gqch-prx4/GHSA-rwrc-gqch-prx4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-vgqv-q7r5-8p24/GHSA-vgqv-q7r5-8p24.json b/advisories/unreviewed/2024/03/GHSA-vgqv-q7r5-8p24/GHSA-vgqv-q7r5-8p24.json index 5d0da8bccf0..39fbe5b8e94 100644 --- a/advisories/unreviewed/2024/03/GHSA-vgqv-q7r5-8p24/GHSA-vgqv-q7r5-8p24.json +++ b/advisories/unreviewed/2024/03/GHSA-vgqv-q7r5-8p24/GHSA-vgqv-q7r5-8p24.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-vv8c-cw9j-3gpj/GHSA-vv8c-cw9j-3gpj.json b/advisories/unreviewed/2024/03/GHSA-vv8c-cw9j-3gpj/GHSA-vv8c-cw9j-3gpj.json index 1ea3e129696..e998767c1a5 100644 --- a/advisories/unreviewed/2024/03/GHSA-vv8c-cw9j-3gpj/GHSA-vv8c-cw9j-3gpj.json +++ b/advisories/unreviewed/2024/03/GHSA-vv8c-cw9j-3gpj/GHSA-vv8c-cw9j-3gpj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-x6cj-87h7-qqp7/GHSA-x6cj-87h7-qqp7.json b/advisories/unreviewed/2024/03/GHSA-x6cj-87h7-qqp7/GHSA-x6cj-87h7-qqp7.json index e7768f020b7..5bce95d31d2 100644 --- a/advisories/unreviewed/2024/03/GHSA-x6cj-87h7-qqp7/GHSA-x6cj-87h7-qqp7.json +++ b/advisories/unreviewed/2024/03/GHSA-x6cj-87h7-qqp7/GHSA-x6cj-87h7-qqp7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-xgvv-cg7q-v678/GHSA-xgvv-cg7q-v678.json b/advisories/unreviewed/2024/03/GHSA-xgvv-cg7q-v678/GHSA-xgvv-cg7q-v678.json index 3d456c64a14..c8eb6a00f07 100644 --- a/advisories/unreviewed/2024/03/GHSA-xgvv-cg7q-v678/GHSA-xgvv-cg7q-v678.json +++ b/advisories/unreviewed/2024/03/GHSA-xgvv-cg7q-v678/GHSA-xgvv-cg7q-v678.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-xrrq-7xx6-v99c/GHSA-xrrq-7xx6-v99c.json b/advisories/unreviewed/2024/03/GHSA-xrrq-7xx6-v99c/GHSA-xrrq-7xx6-v99c.json index a8f3b969ffd..ea54e01b276 100644 --- a/advisories/unreviewed/2024/03/GHSA-xrrq-7xx6-v99c/GHSA-xrrq-7xx6-v99c.json +++ b/advisories/unreviewed/2024/03/GHSA-xrrq-7xx6-v99c/GHSA-xrrq-7xx6-v99c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-xx5f-qgcw-mf6j/GHSA-xx5f-qgcw-mf6j.json b/advisories/unreviewed/2024/03/GHSA-xx5f-qgcw-mf6j/GHSA-xx5f-qgcw-mf6j.json index 6679cb3f4b3..a65e6d8ac2c 100644 --- a/advisories/unreviewed/2024/03/GHSA-xx5f-qgcw-mf6j/GHSA-xx5f-qgcw-mf6j.json +++ b/advisories/unreviewed/2024/03/GHSA-xx5f-qgcw-mf6j/GHSA-xx5f-qgcw-mf6j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-2gh9-f6jf-23hq/GHSA-2gh9-f6jf-23hq.json b/advisories/unreviewed/2024/05/GHSA-2gh9-f6jf-23hq/GHSA-2gh9-f6jf-23hq.json index 24aae4ac895..5d32ddfc757 100644 --- a/advisories/unreviewed/2024/05/GHSA-2gh9-f6jf-23hq/GHSA-2gh9-f6jf-23hq.json +++ b/advisories/unreviewed/2024/05/GHSA-2gh9-f6jf-23hq/GHSA-2gh9-f6jf-23hq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-38f4-wx3j-w2g9/GHSA-38f4-wx3j-w2g9.json b/advisories/unreviewed/2024/05/GHSA-38f4-wx3j-w2g9/GHSA-38f4-wx3j-w2g9.json index 238995676d0..f2e0729b889 100644 --- a/advisories/unreviewed/2024/05/GHSA-38f4-wx3j-w2g9/GHSA-38f4-wx3j-w2g9.json +++ b/advisories/unreviewed/2024/05/GHSA-38f4-wx3j-w2g9/GHSA-38f4-wx3j-w2g9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3gj9-6vcr-2ph9/GHSA-3gj9-6vcr-2ph9.json b/advisories/unreviewed/2024/05/GHSA-3gj9-6vcr-2ph9/GHSA-3gj9-6vcr-2ph9.json index 0d58437d7f1..320162b188b 100644 --- a/advisories/unreviewed/2024/05/GHSA-3gj9-6vcr-2ph9/GHSA-3gj9-6vcr-2ph9.json +++ b/advisories/unreviewed/2024/05/GHSA-3gj9-6vcr-2ph9/GHSA-3gj9-6vcr-2ph9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-44pf-j36r-3g58/GHSA-44pf-j36r-3g58.json b/advisories/unreviewed/2024/05/GHSA-44pf-j36r-3g58/GHSA-44pf-j36r-3g58.json index 2e223a51d24..b72d8f5ade1 100644 --- a/advisories/unreviewed/2024/05/GHSA-44pf-j36r-3g58/GHSA-44pf-j36r-3g58.json +++ b/advisories/unreviewed/2024/05/GHSA-44pf-j36r-3g58/GHSA-44pf-j36r-3g58.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-584j-c6jj-2crq/GHSA-584j-c6jj-2crq.json b/advisories/unreviewed/2024/05/GHSA-584j-c6jj-2crq/GHSA-584j-c6jj-2crq.json index ab0c1479411..0ddee376fbd 100644 --- a/advisories/unreviewed/2024/05/GHSA-584j-c6jj-2crq/GHSA-584j-c6jj-2crq.json +++ b/advisories/unreviewed/2024/05/GHSA-584j-c6jj-2crq/GHSA-584j-c6jj-2crq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-59v7-vqq8-7jqw/GHSA-59v7-vqq8-7jqw.json b/advisories/unreviewed/2024/05/GHSA-59v7-vqq8-7jqw/GHSA-59v7-vqq8-7jqw.json index af2a7228038..8fa55dc0caa 100644 --- a/advisories/unreviewed/2024/05/GHSA-59v7-vqq8-7jqw/GHSA-59v7-vqq8-7jqw.json +++ b/advisories/unreviewed/2024/05/GHSA-59v7-vqq8-7jqw/GHSA-59v7-vqq8-7jqw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-7h2h-fm7c-c26q/GHSA-7h2h-fm7c-c26q.json b/advisories/unreviewed/2024/05/GHSA-7h2h-fm7c-c26q/GHSA-7h2h-fm7c-c26q.json index 4e065420f61..e7e9d06b614 100644 --- a/advisories/unreviewed/2024/05/GHSA-7h2h-fm7c-c26q/GHSA-7h2h-fm7c-c26q.json +++ b/advisories/unreviewed/2024/05/GHSA-7h2h-fm7c-c26q/GHSA-7h2h-fm7c-c26q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-894r-53rj-2h7x/GHSA-894r-53rj-2h7x.json b/advisories/unreviewed/2024/05/GHSA-894r-53rj-2h7x/GHSA-894r-53rj-2h7x.json index c9c04d316ee..0f8bf634741 100644 --- a/advisories/unreviewed/2024/05/GHSA-894r-53rj-2h7x/GHSA-894r-53rj-2h7x.json +++ b/advisories/unreviewed/2024/05/GHSA-894r-53rj-2h7x/GHSA-894r-53rj-2h7x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-8pxx-6vcq-3jfw/GHSA-8pxx-6vcq-3jfw.json b/advisories/unreviewed/2024/05/GHSA-8pxx-6vcq-3jfw/GHSA-8pxx-6vcq-3jfw.json index cc64ddcf2c5..7b04346e5d6 100644 --- a/advisories/unreviewed/2024/05/GHSA-8pxx-6vcq-3jfw/GHSA-8pxx-6vcq-3jfw.json +++ b/advisories/unreviewed/2024/05/GHSA-8pxx-6vcq-3jfw/GHSA-8pxx-6vcq-3jfw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-95r5-mmf3-59p3/GHSA-95r5-mmf3-59p3.json b/advisories/unreviewed/2024/05/GHSA-95r5-mmf3-59p3/GHSA-95r5-mmf3-59p3.json index 9a41a3ff68c..1e130024e44 100644 --- a/advisories/unreviewed/2024/05/GHSA-95r5-mmf3-59p3/GHSA-95r5-mmf3-59p3.json +++ b/advisories/unreviewed/2024/05/GHSA-95r5-mmf3-59p3/GHSA-95r5-mmf3-59p3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-cpvm-9533-ww22/GHSA-cpvm-9533-ww22.json b/advisories/unreviewed/2024/05/GHSA-cpvm-9533-ww22/GHSA-cpvm-9533-ww22.json index 714e523f417..3c0e30c7b37 100644 --- a/advisories/unreviewed/2024/05/GHSA-cpvm-9533-ww22/GHSA-cpvm-9533-ww22.json +++ b/advisories/unreviewed/2024/05/GHSA-cpvm-9533-ww22/GHSA-cpvm-9533-ww22.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-crw4-x7c5-52f3/GHSA-crw4-x7c5-52f3.json b/advisories/unreviewed/2024/05/GHSA-crw4-x7c5-52f3/GHSA-crw4-x7c5-52f3.json index faed3a89b89..138e88c9f30 100644 --- a/advisories/unreviewed/2024/05/GHSA-crw4-x7c5-52f3/GHSA-crw4-x7c5-52f3.json +++ b/advisories/unreviewed/2024/05/GHSA-crw4-x7c5-52f3/GHSA-crw4-x7c5-52f3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-cwhx-q6wr-fwvc/GHSA-cwhx-q6wr-fwvc.json b/advisories/unreviewed/2024/05/GHSA-cwhx-q6wr-fwvc/GHSA-cwhx-q6wr-fwvc.json index 4e8462c1486..977dcddfb7c 100644 --- a/advisories/unreviewed/2024/05/GHSA-cwhx-q6wr-fwvc/GHSA-cwhx-q6wr-fwvc.json +++ b/advisories/unreviewed/2024/05/GHSA-cwhx-q6wr-fwvc/GHSA-cwhx-q6wr-fwvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-fchx-p7m2-cwmw/GHSA-fchx-p7m2-cwmw.json b/advisories/unreviewed/2024/05/GHSA-fchx-p7m2-cwmw/GHSA-fchx-p7m2-cwmw.json index 0791d6230fd..196cdc00d9e 100644 --- a/advisories/unreviewed/2024/05/GHSA-fchx-p7m2-cwmw/GHSA-fchx-p7m2-cwmw.json +++ b/advisories/unreviewed/2024/05/GHSA-fchx-p7m2-cwmw/GHSA-fchx-p7m2-cwmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-gvfr-8rjm-rc2r/GHSA-gvfr-8rjm-rc2r.json b/advisories/unreviewed/2024/05/GHSA-gvfr-8rjm-rc2r/GHSA-gvfr-8rjm-rc2r.json index dcda74152d5..60ff0335e3f 100644 --- a/advisories/unreviewed/2024/05/GHSA-gvfr-8rjm-rc2r/GHSA-gvfr-8rjm-rc2r.json +++ b/advisories/unreviewed/2024/05/GHSA-gvfr-8rjm-rc2r/GHSA-gvfr-8rjm-rc2r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-gw3v-84mc-4m3r/GHSA-gw3v-84mc-4m3r.json b/advisories/unreviewed/2024/05/GHSA-gw3v-84mc-4m3r/GHSA-gw3v-84mc-4m3r.json index d038256e3e6..d16960c3a15 100644 --- a/advisories/unreviewed/2024/05/GHSA-gw3v-84mc-4m3r/GHSA-gw3v-84mc-4m3r.json +++ b/advisories/unreviewed/2024/05/GHSA-gw3v-84mc-4m3r/GHSA-gw3v-84mc-4m3r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-gwjw-xc44-j6c9/GHSA-gwjw-xc44-j6c9.json b/advisories/unreviewed/2024/05/GHSA-gwjw-xc44-j6c9/GHSA-gwjw-xc44-j6c9.json index 06caca2175d..6465089160e 100644 --- a/advisories/unreviewed/2024/05/GHSA-gwjw-xc44-j6c9/GHSA-gwjw-xc44-j6c9.json +++ b/advisories/unreviewed/2024/05/GHSA-gwjw-xc44-j6c9/GHSA-gwjw-xc44-j6c9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-h86c-v8g6-46f2/GHSA-h86c-v8g6-46f2.json b/advisories/unreviewed/2024/05/GHSA-h86c-v8g6-46f2/GHSA-h86c-v8g6-46f2.json index 056435442fc..f50b849f326 100644 --- a/advisories/unreviewed/2024/05/GHSA-h86c-v8g6-46f2/GHSA-h86c-v8g6-46f2.json +++ b/advisories/unreviewed/2024/05/GHSA-h86c-v8g6-46f2/GHSA-h86c-v8g6-46f2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-h8rj-9vpc-9rgc/GHSA-h8rj-9vpc-9rgc.json b/advisories/unreviewed/2024/05/GHSA-h8rj-9vpc-9rgc/GHSA-h8rj-9vpc-9rgc.json index 46dc1a1ded1..ef348f424fc 100644 --- a/advisories/unreviewed/2024/05/GHSA-h8rj-9vpc-9rgc/GHSA-h8rj-9vpc-9rgc.json +++ b/advisories/unreviewed/2024/05/GHSA-h8rj-9vpc-9rgc/GHSA-h8rj-9vpc-9rgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-hr5f-w778-v936/GHSA-hr5f-w778-v936.json b/advisories/unreviewed/2024/05/GHSA-hr5f-w778-v936/GHSA-hr5f-w778-v936.json index 4d4fc95202a..ad00a52a605 100644 --- a/advisories/unreviewed/2024/05/GHSA-hr5f-w778-v936/GHSA-hr5f-w778-v936.json +++ b/advisories/unreviewed/2024/05/GHSA-hr5f-w778-v936/GHSA-hr5f-w778-v936.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-j784-846x-36rp/GHSA-j784-846x-36rp.json b/advisories/unreviewed/2024/05/GHSA-j784-846x-36rp/GHSA-j784-846x-36rp.json index 07f18d772b8..4c5e4680de8 100644 --- a/advisories/unreviewed/2024/05/GHSA-j784-846x-36rp/GHSA-j784-846x-36rp.json +++ b/advisories/unreviewed/2024/05/GHSA-j784-846x-36rp/GHSA-j784-846x-36rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-jrxr-g65q-q86j/GHSA-jrxr-g65q-q86j.json b/advisories/unreviewed/2024/05/GHSA-jrxr-g65q-q86j/GHSA-jrxr-g65q-q86j.json index 7a26ce0517d..edd7c5b4800 100644 --- a/advisories/unreviewed/2024/05/GHSA-jrxr-g65q-q86j/GHSA-jrxr-g65q-q86j.json +++ b/advisories/unreviewed/2024/05/GHSA-jrxr-g65q-q86j/GHSA-jrxr-g65q-q86j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-mgwg-4hc9-rq52/GHSA-mgwg-4hc9-rq52.json b/advisories/unreviewed/2024/05/GHSA-mgwg-4hc9-rq52/GHSA-mgwg-4hc9-rq52.json index 680a34728c9..f3cbfd1c946 100644 --- a/advisories/unreviewed/2024/05/GHSA-mgwg-4hc9-rq52/GHSA-mgwg-4hc9-rq52.json +++ b/advisories/unreviewed/2024/05/GHSA-mgwg-4hc9-rq52/GHSA-mgwg-4hc9-rq52.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-p54x-grmr-9gw6/GHSA-p54x-grmr-9gw6.json b/advisories/unreviewed/2024/05/GHSA-p54x-grmr-9gw6/GHSA-p54x-grmr-9gw6.json index f86170529fd..f1b59787a02 100644 --- a/advisories/unreviewed/2024/05/GHSA-p54x-grmr-9gw6/GHSA-p54x-grmr-9gw6.json +++ b/advisories/unreviewed/2024/05/GHSA-p54x-grmr-9gw6/GHSA-p54x-grmr-9gw6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-pc9r-c3qx-2pj3/GHSA-pc9r-c3qx-2pj3.json b/advisories/unreviewed/2024/05/GHSA-pc9r-c3qx-2pj3/GHSA-pc9r-c3qx-2pj3.json index 9ce9c0c6274..d293675eaf2 100644 --- a/advisories/unreviewed/2024/05/GHSA-pc9r-c3qx-2pj3/GHSA-pc9r-c3qx-2pj3.json +++ b/advisories/unreviewed/2024/05/GHSA-pc9r-c3qx-2pj3/GHSA-pc9r-c3qx-2pj3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-phvc-fww6-r633/GHSA-phvc-fww6-r633.json b/advisories/unreviewed/2024/05/GHSA-phvc-fww6-r633/GHSA-phvc-fww6-r633.json index 162ba1bbc09..380a212f2d3 100644 --- a/advisories/unreviewed/2024/05/GHSA-phvc-fww6-r633/GHSA-phvc-fww6-r633.json +++ b/advisories/unreviewed/2024/05/GHSA-phvc-fww6-r633/GHSA-phvc-fww6-r633.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-pvfc-97vc-2gh2/GHSA-pvfc-97vc-2gh2.json b/advisories/unreviewed/2024/05/GHSA-pvfc-97vc-2gh2/GHSA-pvfc-97vc-2gh2.json index 8b8ced2af1e..bc8f057dad2 100644 --- a/advisories/unreviewed/2024/05/GHSA-pvfc-97vc-2gh2/GHSA-pvfc-97vc-2gh2.json +++ b/advisories/unreviewed/2024/05/GHSA-pvfc-97vc-2gh2/GHSA-pvfc-97vc-2gh2.json @@ -7,12 +7,8 @@ "CVE-2024-3637" ], "details": "The Responsive Contact Form Builder & Lead Generation Plugin WordPress plugin through 1.8.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qf44-4qfp-xrwm/GHSA-qf44-4qfp-xrwm.json b/advisories/unreviewed/2024/05/GHSA-qf44-4qfp-xrwm/GHSA-qf44-4qfp-xrwm.json index 56807f75b78..ec7d142b7e2 100644 --- a/advisories/unreviewed/2024/05/GHSA-qf44-4qfp-xrwm/GHSA-qf44-4qfp-xrwm.json +++ b/advisories/unreviewed/2024/05/GHSA-qf44-4qfp-xrwm/GHSA-qf44-4qfp-xrwm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-qj33-w9rx-fhcw/GHSA-qj33-w9rx-fhcw.json b/advisories/unreviewed/2024/05/GHSA-qj33-w9rx-fhcw/GHSA-qj33-w9rx-fhcw.json index 0fa867bef62..96fb295b36b 100644 --- a/advisories/unreviewed/2024/05/GHSA-qj33-w9rx-fhcw/GHSA-qj33-w9rx-fhcw.json +++ b/advisories/unreviewed/2024/05/GHSA-qj33-w9rx-fhcw/GHSA-qj33-w9rx-fhcw.json @@ -7,12 +7,8 @@ "CVE-2024-1067" ], "details": "Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. On Armv8.0 cores, there are certain combinations of the Linux Kernel and Mali GPU kernel driver configurations that would allow the GPU operations to affect the userspace memory of other processes.\nThis issue affects Bifrost GPU Kernel Driver: from r41p0 through r47p0; Valhall GPU Kernel Driver: from r41p0 through r47p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r47p0.\n\n", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-r534-cvgf-76m3/GHSA-r534-cvgf-76m3.json b/advisories/unreviewed/2024/05/GHSA-r534-cvgf-76m3/GHSA-r534-cvgf-76m3.json index 3b972b80992..706db2b77db 100644 --- a/advisories/unreviewed/2024/05/GHSA-r534-cvgf-76m3/GHSA-r534-cvgf-76m3.json +++ b/advisories/unreviewed/2024/05/GHSA-r534-cvgf-76m3/GHSA-r534-cvgf-76m3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-r9p5-2vvg-r4m4/GHSA-r9p5-2vvg-r4m4.json b/advisories/unreviewed/2024/05/GHSA-r9p5-2vvg-r4m4/GHSA-r9p5-2vvg-r4m4.json index eb82bc7bcd4..da7d6fd88f9 100644 --- a/advisories/unreviewed/2024/05/GHSA-r9p5-2vvg-r4m4/GHSA-r9p5-2vvg-r4m4.json +++ b/advisories/unreviewed/2024/05/GHSA-r9p5-2vvg-r4m4/GHSA-r9p5-2vvg-r4m4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-rc62-rwrp-9vmj/GHSA-rc62-rwrp-9vmj.json b/advisories/unreviewed/2024/05/GHSA-rc62-rwrp-9vmj/GHSA-rc62-rwrp-9vmj.json index 92f6d6aaf3a..765258333e1 100644 --- a/advisories/unreviewed/2024/05/GHSA-rc62-rwrp-9vmj/GHSA-rc62-rwrp-9vmj.json +++ b/advisories/unreviewed/2024/05/GHSA-rc62-rwrp-9vmj/GHSA-rc62-rwrp-9vmj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-rvgv-chj7-f735/GHSA-rvgv-chj7-f735.json b/advisories/unreviewed/2024/05/GHSA-rvgv-chj7-f735/GHSA-rvgv-chj7-f735.json index 43e846c9564..7b5dc5a22e2 100644 --- a/advisories/unreviewed/2024/05/GHSA-rvgv-chj7-f735/GHSA-rvgv-chj7-f735.json +++ b/advisories/unreviewed/2024/05/GHSA-rvgv-chj7-f735/GHSA-rvgv-chj7-f735.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-v6q3-32m8-v275/GHSA-v6q3-32m8-v275.json b/advisories/unreviewed/2024/05/GHSA-v6q3-32m8-v275/GHSA-v6q3-32m8-v275.json index 4c7df050d88..33455850e72 100644 --- a/advisories/unreviewed/2024/05/GHSA-v6q3-32m8-v275/GHSA-v6q3-32m8-v275.json +++ b/advisories/unreviewed/2024/05/GHSA-v6q3-32m8-v275/GHSA-v6q3-32m8-v275.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-vhvm-hvvj-qf99/GHSA-vhvm-hvvj-qf99.json b/advisories/unreviewed/2024/05/GHSA-vhvm-hvvj-qf99/GHSA-vhvm-hvvj-qf99.json index d2617c73b88..0d324704e93 100644 --- a/advisories/unreviewed/2024/05/GHSA-vhvm-hvvj-qf99/GHSA-vhvm-hvvj-qf99.json +++ b/advisories/unreviewed/2024/05/GHSA-vhvm-hvvj-qf99/GHSA-vhvm-hvvj-qf99.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-w5g7-5x2f-5xw9/GHSA-w5g7-5x2f-5xw9.json b/advisories/unreviewed/2024/05/GHSA-w5g7-5x2f-5xw9/GHSA-w5g7-5x2f-5xw9.json index 8096fde2a89..2e2c5668057 100644 --- a/advisories/unreviewed/2024/05/GHSA-w5g7-5x2f-5xw9/GHSA-w5g7-5x2f-5xw9.json +++ b/advisories/unreviewed/2024/05/GHSA-w5g7-5x2f-5xw9/GHSA-w5g7-5x2f-5xw9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-w7c2-4jxv-7chp/GHSA-w7c2-4jxv-7chp.json b/advisories/unreviewed/2024/05/GHSA-w7c2-4jxv-7chp/GHSA-w7c2-4jxv-7chp.json index bd595006844..d87a91e46a9 100644 --- a/advisories/unreviewed/2024/05/GHSA-w7c2-4jxv-7chp/GHSA-w7c2-4jxv-7chp.json +++ b/advisories/unreviewed/2024/05/GHSA-w7c2-4jxv-7chp/GHSA-w7c2-4jxv-7chp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-x43w-5rg4-fwj4/GHSA-x43w-5rg4-fwj4.json b/advisories/unreviewed/2024/05/GHSA-x43w-5rg4-fwj4/GHSA-x43w-5rg4-fwj4.json index 82fe3182b79..00bb0935084 100644 --- a/advisories/unreviewed/2024/05/GHSA-x43w-5rg4-fwj4/GHSA-x43w-5rg4-fwj4.json +++ b/advisories/unreviewed/2024/05/GHSA-x43w-5rg4-fwj4/GHSA-x43w-5rg4-fwj4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-2gg8-w5vr-ghvj/GHSA-2gg8-w5vr-ghvj.json b/advisories/unreviewed/2024/08/GHSA-2gg8-w5vr-ghvj/GHSA-2gg8-w5vr-ghvj.json index 45b272dfb09..fea17920414 100644 --- a/advisories/unreviewed/2024/08/GHSA-2gg8-w5vr-ghvj/GHSA-2gg8-w5vr-ghvj.json +++ b/advisories/unreviewed/2024/08/GHSA-2gg8-w5vr-ghvj/GHSA-2gg8-w5vr-ghvj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-4638-h2rx-8qf2/GHSA-4638-h2rx-8qf2.json b/advisories/unreviewed/2024/08/GHSA-4638-h2rx-8qf2/GHSA-4638-h2rx-8qf2.json index 2b111aeda30..e4cf4877678 100644 --- a/advisories/unreviewed/2024/08/GHSA-4638-h2rx-8qf2/GHSA-4638-h2rx-8qf2.json +++ b/advisories/unreviewed/2024/08/GHSA-4638-h2rx-8qf2/GHSA-4638-h2rx-8qf2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5fhp-588g-xh47/GHSA-5fhp-588g-xh47.json b/advisories/unreviewed/2024/08/GHSA-5fhp-588g-xh47/GHSA-5fhp-588g-xh47.json index 99d1fbecbe5..6a149466481 100644 --- a/advisories/unreviewed/2024/08/GHSA-5fhp-588g-xh47/GHSA-5fhp-588g-xh47.json +++ b/advisories/unreviewed/2024/08/GHSA-5fhp-588g-xh47/GHSA-5fhp-588g-xh47.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-6c7m-rqmp-2r87/GHSA-6c7m-rqmp-2r87.json b/advisories/unreviewed/2024/08/GHSA-6c7m-rqmp-2r87/GHSA-6c7m-rqmp-2r87.json index 179a881e8c9..2238ebec01b 100644 --- a/advisories/unreviewed/2024/08/GHSA-6c7m-rqmp-2r87/GHSA-6c7m-rqmp-2r87.json +++ b/advisories/unreviewed/2024/08/GHSA-6c7m-rqmp-2r87/GHSA-6c7m-rqmp-2r87.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-736q-w2cq-gpwv/GHSA-736q-w2cq-gpwv.json b/advisories/unreviewed/2024/08/GHSA-736q-w2cq-gpwv/GHSA-736q-w2cq-gpwv.json index f6050ff2680..f8787c89217 100644 --- a/advisories/unreviewed/2024/08/GHSA-736q-w2cq-gpwv/GHSA-736q-w2cq-gpwv.json +++ b/advisories/unreviewed/2024/08/GHSA-736q-w2cq-gpwv/GHSA-736q-w2cq-gpwv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7q36-59qh-gqjv/GHSA-7q36-59qh-gqjv.json b/advisories/unreviewed/2024/08/GHSA-7q36-59qh-gqjv/GHSA-7q36-59qh-gqjv.json index bd8f1583d6d..59534153db3 100644 --- a/advisories/unreviewed/2024/08/GHSA-7q36-59qh-gqjv/GHSA-7q36-59qh-gqjv.json +++ b/advisories/unreviewed/2024/08/GHSA-7q36-59qh-gqjv/GHSA-7q36-59qh-gqjv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-9w4j-f548-f8jj/GHSA-9w4j-f548-f8jj.json b/advisories/unreviewed/2024/08/GHSA-9w4j-f548-f8jj/GHSA-9w4j-f548-f8jj.json index cbf08cde530..9838bbe63b4 100644 --- a/advisories/unreviewed/2024/08/GHSA-9w4j-f548-f8jj/GHSA-9w4j-f548-f8jj.json +++ b/advisories/unreviewed/2024/08/GHSA-9w4j-f548-f8jj/GHSA-9w4j-f548-f8jj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-crm2-q2cq-rqhj/GHSA-crm2-q2cq-rqhj.json b/advisories/unreviewed/2024/08/GHSA-crm2-q2cq-rqhj/GHSA-crm2-q2cq-rqhj.json index b02449cb414..3a8e7fee80e 100644 --- a/advisories/unreviewed/2024/08/GHSA-crm2-q2cq-rqhj/GHSA-crm2-q2cq-rqhj.json +++ b/advisories/unreviewed/2024/08/GHSA-crm2-q2cq-rqhj/GHSA-crm2-q2cq-rqhj.json @@ -7,12 +7,8 @@ "CVE-2024-7989" ], "details": "Rejected reason: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that the issue does not pose a security risk as it falls within the expected functionality and security controls of the application. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-f4h5-j74p-qq45/GHSA-f4h5-j74p-qq45.json b/advisories/unreviewed/2024/08/GHSA-f4h5-j74p-qq45/GHSA-f4h5-j74p-qq45.json index 004f2fe66f4..a07f20d8022 100644 --- a/advisories/unreviewed/2024/08/GHSA-f4h5-j74p-qq45/GHSA-f4h5-j74p-qq45.json +++ b/advisories/unreviewed/2024/08/GHSA-f4h5-j74p-qq45/GHSA-f4h5-j74p-qq45.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mcpp-jhwq-85qq/GHSA-mcpp-jhwq-85qq.json b/advisories/unreviewed/2024/08/GHSA-mcpp-jhwq-85qq/GHSA-mcpp-jhwq-85qq.json index 03d15b8c327..cbb8d209146 100644 --- a/advisories/unreviewed/2024/08/GHSA-mcpp-jhwq-85qq/GHSA-mcpp-jhwq-85qq.json +++ b/advisories/unreviewed/2024/08/GHSA-mcpp-jhwq-85qq/GHSA-mcpp-jhwq-85qq.json @@ -13,9 +13,7 @@ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mp47-48q3-3vmr/GHSA-mp47-48q3-3vmr.json b/advisories/unreviewed/2024/08/GHSA-mp47-48q3-3vmr/GHSA-mp47-48q3-3vmr.json index 0d8fc121c54..45c41cae19d 100644 --- a/advisories/unreviewed/2024/08/GHSA-mp47-48q3-3vmr/GHSA-mp47-48q3-3vmr.json +++ b/advisories/unreviewed/2024/08/GHSA-mp47-48q3-3vmr/GHSA-mp47-48q3-3vmr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qffh-9pr5-jcqg/GHSA-qffh-9pr5-jcqg.json b/advisories/unreviewed/2024/08/GHSA-qffh-9pr5-jcqg/GHSA-qffh-9pr5-jcqg.json index 52882c52588..1539fce62b8 100644 --- a/advisories/unreviewed/2024/08/GHSA-qffh-9pr5-jcqg/GHSA-qffh-9pr5-jcqg.json +++ b/advisories/unreviewed/2024/08/GHSA-qffh-9pr5-jcqg/GHSA-qffh-9pr5-jcqg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-rpx6-6266-hrf9/GHSA-rpx6-6266-hrf9.json b/advisories/unreviewed/2024/08/GHSA-rpx6-6266-hrf9/GHSA-rpx6-6266-hrf9.json index 82cfea96a9c..f311ca607cf 100644 --- a/advisories/unreviewed/2024/08/GHSA-rpx6-6266-hrf9/GHSA-rpx6-6266-hrf9.json +++ b/advisories/unreviewed/2024/08/GHSA-rpx6-6266-hrf9/GHSA-rpx6-6266-hrf9.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-v56f-cfvv-mvc9/GHSA-v56f-cfvv-mvc9.json b/advisories/unreviewed/2024/08/GHSA-v56f-cfvv-mvc9/GHSA-v56f-cfvv-mvc9.json index d9757ecd523..3f23460dd80 100644 --- a/advisories/unreviewed/2024/08/GHSA-v56f-cfvv-mvc9/GHSA-v56f-cfvv-mvc9.json +++ b/advisories/unreviewed/2024/08/GHSA-v56f-cfvv-mvc9/GHSA-v56f-cfvv-mvc9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wmgr-v54x-r8jg/GHSA-wmgr-v54x-r8jg.json b/advisories/unreviewed/2024/08/GHSA-wmgr-v54x-r8jg/GHSA-wmgr-v54x-r8jg.json index 01632d22194..12dd85a17e3 100644 --- a/advisories/unreviewed/2024/08/GHSA-wmgr-v54x-r8jg/GHSA-wmgr-v54x-r8jg.json +++ b/advisories/unreviewed/2024/08/GHSA-wmgr-v54x-r8jg/GHSA-wmgr-v54x-r8jg.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wx8r-wq52-37w7/GHSA-wx8r-wq52-37w7.json b/advisories/unreviewed/2024/08/GHSA-wx8r-wq52-37w7/GHSA-wx8r-wq52-37w7.json index 093d228af54..6116c534cb0 100644 --- a/advisories/unreviewed/2024/08/GHSA-wx8r-wq52-37w7/GHSA-wx8r-wq52-37w7.json +++ b/advisories/unreviewed/2024/08/GHSA-wx8r-wq52-37w7/GHSA-wx8r-wq52-37w7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-x6qp-hxvf-rr5v/GHSA-x6qp-hxvf-rr5v.json b/advisories/unreviewed/2024/08/GHSA-x6qp-hxvf-rr5v/GHSA-x6qp-hxvf-rr5v.json index 1888d768364..c1e93aad30e 100644 --- a/advisories/unreviewed/2024/08/GHSA-x6qp-hxvf-rr5v/GHSA-x6qp-hxvf-rr5v.json +++ b/advisories/unreviewed/2024/08/GHSA-x6qp-hxvf-rr5v/GHSA-x6qp-hxvf-rr5v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",