netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-12-07 05:08:32 +00:00
parent 17cedec38c
commit d14700a032
895 changed files with 1575 additions and 4725 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-c9jp-244j-vh78/GHSA-c9jp-244j-vh78.json
+1 -3
View File
@@ -8,9 +8,7 @@
],
"summary": "Moodle cross-site scripting (XSS) vulnerability",
"details": "Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.",
"severity": [
],
"severity": [],
"affected": [
{
"package": {
advisories/github-reviewed/2022/05/GHSA-f66h-6mj2-rwj2/GHSA-f66h-6mj2-rwj2.json
+1 -3
View File
@@ -8,9 +8,7 @@
],
"summary": "Moodle multiple cross-site scripting (XSS) vulnerabilities",
"details": "Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog.",
"severity": [
],
"severity": [],
"affected": [
{
"package": {
advisories/github-reviewed/2024/08/GHSA-6jrj-vc65-c983/GHSA-6jrj-vc65-c983.json
+1 -3
View File
@@ -3,9 +3,7 @@
"id": "GHSA-6jrj-vc65-c983",
"modified": "2024-08-26T15:17:40Z",
"published": "2024-08-26T15:17:40Z",
"aliases": [
],
"aliases": [],
"summary": "unzip-stream allows Arbitrary File Write via artifact extraction",
"details": "### Impact\n\nWhen using the `Extract()` method of unzip-stream, malicious zip files were able to write to paths they shouldn't be allowed to.\n\n### Patches\n\nFixed in 0.3.2\n\n### References\n\n- https://snyk.io/research/zip-slip-vulnerability\n- https://github.com/mhr3/unzip-stream/compare/v0.3.1...v0.3.2\n\n### Credits\n\nJustin Taft from Google",
"severity": [
advisories/github-reviewed/2024/08/GHSA-xmrp-424f-vfpx/GHSA-xmrp-424f-vfpx.json
+3 -9
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2021/11/GHSA-wxwj-m72v-qhcr/GHSA-wxwj-m72v-qhcr.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2021/12/GHSA-3p9w-pv5h-crrp/GHSA-3p9w-pv5h-crrp.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2021/12/GHSA-96g6-83p3-m784/GHSA-96g6-83p3-m784.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/01/GHSA-gfrv-96fc-6fhx/GHSA-gfrv-96fc-6fhx.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/01/GHSA-xjqw-8fp3-69c2/GHSA-xjqw-8fp3-69c2.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/04/GHSA-7g8j-9jf2-66wx/GHSA-7g8j-9jf2-66wx.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/04/GHSA-q36f-8454-r4h2/GHSA-q36f-8454-r4h2.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/04/GHSA-x77v-4m7v-7fgv/GHSA-x77v-4m7v-7fgv.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/05/GHSA-22jq-crhx-w9j5/GHSA-22jq-crhx-w9j5.json
+3 -9
View File
@@ -7,12 +7,8 @@
"CVE-2015-5961"
],
"details": "The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server.",
"severity": [
],
"affected": [
],
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -32,9 +28,7 @@
}
],
"database_specific": {
"cwe_ids": [
],
"cwe_ids": [],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/05/GHSA-22mx-9r92-42g8/GHSA-22mx-9r92-42g8.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/05/GHSA-22p9-vg4g-45mc/GHSA-22p9-vg4g-45mc.json
+3 -9
View File
@@ -7,12 +7,8 @@
"CVE-2015-0127"
],
"details": "IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks via a crafted web site.",
"severity": [
],
"affected": [
],
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -24,9 +20,7 @@
}
],
"database_specific": {
"cwe_ids": [
],
"cwe_ids": [],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/05/GHSA-2472-r3qx-5cf2/GHSA-2472-r3qx-5cf2.json
+2 -6
View File
@@ -7,12 +7,8 @@
"CVE-2015-5685"
],
"details": "The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to \"improper indexing.\"",
"severity": [
],
"affected": [
],
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/05/GHSA-24c2-gvwg-5p45/GHSA-24c2-gvwg-5p45.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/05/GHSA-264q-ch9j-7v9c/GHSA-264q-ch9j-7v9c.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/05/GHSA-26rc-pv36-f3pg/GHSA-26rc-pv36-f3pg.json
+2 -6
View File
@@ -7,12 +7,8 @@
"CVE-2015-5369"
],
"details": "Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished TLS handshake message, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted Finished message.",
"severity": [
],
"affected": [
],
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2022/05/GHSA-27cf-g4w9-cqwp/GHSA-27cf-g4w9-cqwp.json
+2 -6
View File
@@ -7,12 +7,8 @@
"CVE-2014-4515"
],
"details": "Cross-site scripting (XSS) vulnerability in mce_anyfont/dialog.php in the AnyFont plugin 2.2.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the text parameter.",
"severity": [
],
"affected": [
],
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",

Some files were not shown because too many files have changed in this diff Show More