diff --git a/advisories/github-reviewed/2023/06/GHSA-5h3x-9wvq-w4m2/GHSA-5h3x-9wvq-w4m2.json b/advisories/github-reviewed/2023/06/GHSA-5h3x-9wvq-w4m2/GHSA-5h3x-9wvq-w4m2.json index 8f2e2389f38..4c83553179d 100644 --- a/advisories/github-reviewed/2023/06/GHSA-5h3x-9wvq-w4m2/GHSA-5h3x-9wvq-w4m2.json +++ b/advisories/github-reviewed/2023/06/GHSA-5h3x-9wvq-w4m2/GHSA-5h3x-9wvq-w4m2.json @@ -63,6 +63,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34234" }, + { + "type": "WEB", + "url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/66f390fa516b550838e2c2f65132b5bc2afe1ced" + }, { "type": "WEB", "url": "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/d9474327a492f9f310f31bc53f38dbea56ed9a57" diff --git a/advisories/github-reviewed/2023/10/GHSA-xwcq-pm8m-c4vf/GHSA-xwcq-pm8m-c4vf.json b/advisories/github-reviewed/2023/10/GHSA-xwcq-pm8m-c4vf/GHSA-xwcq-pm8m-c4vf.json index c24283a47ae..b93ba9b153b 100644 --- a/advisories/github-reviewed/2023/10/GHSA-xwcq-pm8m-c4vf/GHSA-xwcq-pm8m-c4vf.json +++ b/advisories/github-reviewed/2023/10/GHSA-xwcq-pm8m-c4vf/GHSA-xwcq-pm8m-c4vf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xwcq-pm8m-c4vf", - "modified": "2023-11-06T21:56:11Z", + "modified": "2023-11-27T21:30:52Z", "published": "2023-10-25T21:15:52Z", "aliases": [ "CVE-2023-46233" @@ -51,6 +51,10 @@ { "type": "PACKAGE", "url": "https://github.com/brix/crypto-js" + }, + { + "type": "WEB", + "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html" } ], "database_specific": { diff --git a/advisories/unreviewed/2022/07/GHSA-wrmg-wv9p-r52j/GHSA-wrmg-wv9p-r52j.json b/advisories/unreviewed/2022/07/GHSA-wrmg-wv9p-r52j/GHSA-wrmg-wv9p-r52j.json index e7bb37701d1..65177f7b009 100644 --- a/advisories/unreviewed/2022/07/GHSA-wrmg-wv9p-r52j/GHSA-wrmg-wv9p-r52j.json +++ b/advisories/unreviewed/2022/07/GHSA-wrmg-wv9p-r52j/GHSA-wrmg-wv9p-r52j.json @@ -29,6 +29,10 @@ "type": "WEB", "url": "https://crbug.com/1304658" }, + { + "type": "WEB", + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1314" + }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/202208-25" diff --git a/advisories/unreviewed/2023/11/GHSA-34xr-h92c-2m86/GHSA-34xr-h92c-2m86.json b/advisories/unreviewed/2023/11/GHSA-34xr-h92c-2m86/GHSA-34xr-h92c-2m86.json index cad0ace5d21..25c8ee9e4b0 100644 --- a/advisories/unreviewed/2023/11/GHSA-34xr-h92c-2m86/GHSA-34xr-h92c-2m86.json +++ b/advisories/unreviewed/2023/11/GHSA-34xr-h92c-2m86/GHSA-34xr-h92c-2m86.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-34xr-h92c-2m86", - "modified": "2023-11-14T21:30:59Z", + "modified": "2023-11-27T21:30:53Z", "published": "2023-11-14T21:30:59Z", "aliases": [ "CVE-2021-46766" ], "details": "Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-459" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-14T19:15:10Z" diff --git a/advisories/unreviewed/2023/11/GHSA-3w3f-4842-3p4c/GHSA-3w3f-4842-3p4c.json b/advisories/unreviewed/2023/11/GHSA-3w3f-4842-3p4c/GHSA-3w3f-4842-3p4c.json index ba1f14e0857..af9fdebe0c0 100644 --- a/advisories/unreviewed/2023/11/GHSA-3w3f-4842-3p4c/GHSA-3w3f-4842-3p4c.json +++ b/advisories/unreviewed/2023/11/GHSA-3w3f-4842-3p4c/GHSA-3w3f-4842-3p4c.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-4c25-gwp9-9c2h/GHSA-4c25-gwp9-9c2h.json b/advisories/unreviewed/2023/11/GHSA-4c25-gwp9-9c2h/GHSA-4c25-gwp9-9c2h.json index eaefedd079c..a51d54cd76a 100644 --- a/advisories/unreviewed/2023/11/GHSA-4c25-gwp9-9c2h/GHSA-4c25-gwp9-9c2h.json +++ b/advisories/unreviewed/2023/11/GHSA-4c25-gwp9-9c2h/GHSA-4c25-gwp9-9c2h.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-4xjx-gm5q-6rqm/GHSA-4xjx-gm5q-6rqm.json b/advisories/unreviewed/2023/11/GHSA-4xjx-gm5q-6rqm/GHSA-4xjx-gm5q-6rqm.json index 0c70604cf0a..6c95fd710c0 100644 --- a/advisories/unreviewed/2023/11/GHSA-4xjx-gm5q-6rqm/GHSA-4xjx-gm5q-6rqm.json +++ b/advisories/unreviewed/2023/11/GHSA-4xjx-gm5q-6rqm/GHSA-4xjx-gm5q-6rqm.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-119" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-5pq2-w3x5-q9f2/GHSA-5pq2-w3x5-q9f2.json b/advisories/unreviewed/2023/11/GHSA-5pq2-w3x5-q9f2/GHSA-5pq2-w3x5-q9f2.json index 65d879bbea2..168b71770de 100644 --- a/advisories/unreviewed/2023/11/GHSA-5pq2-w3x5-q9f2/GHSA-5pq2-w3x5-q9f2.json +++ b/advisories/unreviewed/2023/11/GHSA-5pq2-w3x5-q9f2/GHSA-5pq2-w3x5-q9f2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-5pq2-w3x5-q9f2", - "modified": "2023-11-14T21:31:00Z", + "modified": "2023-11-27T21:30:54Z", "published": "2023-11-14T21:31:00Z", "aliases": [ "CVE-2023-20533" ], "details": "Insufficient DRAM address validation in System\nManagement Unit (SMU) may allow an attacker to read/write from/to an invalid\nDRAM address, potentially resulting in denial-of-service.\n\n\n\n\n\n\n\n\n\n\n\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-14T19:15:15Z" diff --git a/advisories/unreviewed/2023/11/GHSA-6gv5-48rm-6999/GHSA-6gv5-48rm-6999.json b/advisories/unreviewed/2023/11/GHSA-6gv5-48rm-6999/GHSA-6gv5-48rm-6999.json index 1cef17f6a89..4410e76c24d 100644 --- a/advisories/unreviewed/2023/11/GHSA-6gv5-48rm-6999/GHSA-6gv5-48rm-6999.json +++ b/advisories/unreviewed/2023/11/GHSA-6gv5-48rm-6999/GHSA-6gv5-48rm-6999.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-6gv5-48rm-6999", - "modified": "2023-11-14T21:31:00Z", + "modified": "2023-11-27T21:30:54Z", "published": "2023-11-14T21:31:00Z", "aliases": [ "CVE-2023-20526" ], "details": "Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-14T19:15:15Z" diff --git a/advisories/unreviewed/2023/11/GHSA-7qpf-xwxw-6v33/GHSA-7qpf-xwxw-6v33.json b/advisories/unreviewed/2023/11/GHSA-7qpf-xwxw-6v33/GHSA-7qpf-xwxw-6v33.json index e8613169332..cc169727d43 100644 --- a/advisories/unreviewed/2023/11/GHSA-7qpf-xwxw-6v33/GHSA-7qpf-xwxw-6v33.json +++ b/advisories/unreviewed/2023/11/GHSA-7qpf-xwxw-6v33/GHSA-7qpf-xwxw-6v33.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-352" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-7r55-mp9r-c8pj/GHSA-7r55-mp9r-c8pj.json b/advisories/unreviewed/2023/11/GHSA-7r55-mp9r-c8pj/GHSA-7r55-mp9r-c8pj.json index 91e9c290b63..4de9227be2f 100644 --- a/advisories/unreviewed/2023/11/GHSA-7r55-mp9r-c8pj/GHSA-7r55-mp9r-c8pj.json +++ b/advisories/unreviewed/2023/11/GHSA-7r55-mp9r-c8pj/GHSA-7r55-mp9r-c8pj.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-7r55-mp9r-c8pj", - "modified": "2023-11-14T21:31:00Z", + "modified": "2023-11-27T21:30:54Z", "published": "2023-11-14T21:31:00Z", "aliases": [ "CVE-2023-20521" ], "details": "TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.\n\n\n\n\n\n\n\n\n\n\n\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-367" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-14T19:15:15Z" diff --git a/advisories/unreviewed/2023/11/GHSA-8wpw-g939-rjw4/GHSA-8wpw-g939-rjw4.json b/advisories/unreviewed/2023/11/GHSA-8wpw-g939-rjw4/GHSA-8wpw-g939-rjw4.json index cefc883c5a8..0619f22e0f8 100644 --- a/advisories/unreviewed/2023/11/GHSA-8wpw-g939-rjw4/GHSA-8wpw-g939-rjw4.json +++ b/advisories/unreviewed/2023/11/GHSA-8wpw-g939-rjw4/GHSA-8wpw-g939-rjw4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8wpw-g939-rjw4", - "modified": "2023-11-14T21:30:59Z", + "modified": "2023-11-27T21:30:53Z", "published": "2023-11-14T21:30:59Z", "aliases": [ "CVE-2021-46774" ], "details": "Insufficient DRAM address validation in System\nManagement Unit (SMU) may allow an attacker to read/write from/to an invalid\nDRAM address, potentially resulting in denial-of-service.\n\n\n\n\n\n\n\n\n\n\n\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-14T19:15:10Z" diff --git a/advisories/unreviewed/2023/11/GHSA-9v2j-72w6-ghpw/GHSA-9v2j-72w6-ghpw.json b/advisories/unreviewed/2023/11/GHSA-9v2j-72w6-ghpw/GHSA-9v2j-72w6-ghpw.json new file mode 100644 index 00000000000..57abd7ed7cf --- /dev/null +++ b/advisories/unreviewed/2023/11/GHSA-9v2j-72w6-ghpw/GHSA-9v2j-72w6-ghpw.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9v2j-72w6-ghpw", + "modified": "2023-11-27T21:30:56Z", + "published": "2023-11-27T21:30:56Z", + "aliases": [ + "CVE-2023-49030" + ], + "details": "SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49030" + }, + { + "type": "WEB", + "url": "https://gist.github.com/Chiaki2333/f09b47a39e175932d8a2360e439194d5" + }, + { + "type": "WEB", + "url": "https://github.com/32ns/KLive" + }, + { + "type": "WEB", + "url": "https://github.com/Chiaki2333/vulnerability/blob/main/32ns-KLive-SQL-user.php.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2023-11-27T21:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/11/GHSA-cqgf-g3qq-hhxw/GHSA-cqgf-g3qq-hhxw.json b/advisories/unreviewed/2023/11/GHSA-cqgf-g3qq-hhxw/GHSA-cqgf-g3qq-hhxw.json index b0c3115ff2d..72517232e0b 100644 --- a/advisories/unreviewed/2023/11/GHSA-cqgf-g3qq-hhxw/GHSA-cqgf-g3qq-hhxw.json +++ b/advisories/unreviewed/2023/11/GHSA-cqgf-g3qq-hhxw/GHSA-cqgf-g3qq-hhxw.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-cqgf-g3qq-hhxw", - "modified": "2023-11-14T21:31:00Z", + "modified": "2023-11-27T21:30:55Z", "published": "2023-11-14T21:31:00Z", "aliases": [ "CVE-2023-20568" ], "details": "Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution.\n\n\n\n\n\n\n\n\n\n\n\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-347" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-14T19:15:15Z" diff --git a/advisories/unreviewed/2023/11/GHSA-fmq6-2658-x7vm/GHSA-fmq6-2658-x7vm.json b/advisories/unreviewed/2023/11/GHSA-fmq6-2658-x7vm/GHSA-fmq6-2658-x7vm.json index d9574081d8a..9134d84147f 100644 --- a/advisories/unreviewed/2023/11/GHSA-fmq6-2658-x7vm/GHSA-fmq6-2658-x7vm.json +++ b/advisories/unreviewed/2023/11/GHSA-fmq6-2658-x7vm/GHSA-fmq6-2658-x7vm.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-frwx-7gqv-hj3w/GHSA-frwx-7gqv-hj3w.json b/advisories/unreviewed/2023/11/GHSA-frwx-7gqv-hj3w/GHSA-frwx-7gqv-hj3w.json index 7c3737ae67a..2e437674765 100644 --- a/advisories/unreviewed/2023/11/GHSA-frwx-7gqv-hj3w/GHSA-frwx-7gqv-hj3w.json +++ b/advisories/unreviewed/2023/11/GHSA-frwx-7gqv-hj3w/GHSA-frwx-7gqv-hj3w.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-119" ], "severity": "LOW", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-gcxx-87qq-3r7v/GHSA-gcxx-87qq-3r7v.json b/advisories/unreviewed/2023/11/GHSA-gcxx-87qq-3r7v/GHSA-gcxx-87qq-3r7v.json index 80b19bc095f..75c6493017b 100644 --- a/advisories/unreviewed/2023/11/GHSA-gcxx-87qq-3r7v/GHSA-gcxx-87qq-3r7v.json +++ b/advisories/unreviewed/2023/11/GHSA-gcxx-87qq-3r7v/GHSA-gcxx-87qq-3r7v.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-352" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-hg4j-6gr9-jq8g/GHSA-hg4j-6gr9-jq8g.json b/advisories/unreviewed/2023/11/GHSA-hg4j-6gr9-jq8g/GHSA-hg4j-6gr9-jq8g.json index c91e78a42cb..249781c7543 100644 --- a/advisories/unreviewed/2023/11/GHSA-hg4j-6gr9-jq8g/GHSA-hg4j-6gr9-jq8g.json +++ b/advisories/unreviewed/2023/11/GHSA-hg4j-6gr9-jq8g/GHSA-hg4j-6gr9-jq8g.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-m2j7-px25-h5hj/GHSA-m2j7-px25-h5hj.json b/advisories/unreviewed/2023/11/GHSA-m2j7-px25-h5hj/GHSA-m2j7-px25-h5hj.json index 5c767b41c90..14d96529b3e 100644 --- a/advisories/unreviewed/2023/11/GHSA-m2j7-px25-h5hj/GHSA-m2j7-px25-h5hj.json +++ b/advisories/unreviewed/2023/11/GHSA-m2j7-px25-h5hj/GHSA-m2j7-px25-h5hj.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-p483-8797-gq74/GHSA-p483-8797-gq74.json b/advisories/unreviewed/2023/11/GHSA-p483-8797-gq74/GHSA-p483-8797-gq74.json index 926402833be..a80e801c840 100644 --- a/advisories/unreviewed/2023/11/GHSA-p483-8797-gq74/GHSA-p483-8797-gq74.json +++ b/advisories/unreviewed/2023/11/GHSA-p483-8797-gq74/GHSA-p483-8797-gq74.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p483-8797-gq74", - "modified": "2023-11-14T21:30:59Z", + "modified": "2023-11-27T21:30:53Z", "published": "2023-11-14T21:30:59Z", "aliases": [ "CVE-2021-46748" ], "details": "Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.\n\n\n\n\n\n\n\n\n\n\n\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-119" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-14T19:15:10Z" diff --git a/advisories/unreviewed/2023/11/GHSA-qr7r-qwxc-r4jm/GHSA-qr7r-qwxc-r4jm.json b/advisories/unreviewed/2023/11/GHSA-qr7r-qwxc-r4jm/GHSA-qr7r-qwxc-r4jm.json index 78547c49979..af10ec455bb 100644 --- a/advisories/unreviewed/2023/11/GHSA-qr7r-qwxc-r4jm/GHSA-qr7r-qwxc-r4jm.json +++ b/advisories/unreviewed/2023/11/GHSA-qr7r-qwxc-r4jm/GHSA-qr7r-qwxc-r4jm.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-v2hc-cp84-vjqv/GHSA-v2hc-cp84-vjqv.json b/advisories/unreviewed/2023/11/GHSA-v2hc-cp84-vjqv/GHSA-v2hc-cp84-vjqv.json index 956c29dc43a..530e070cc12 100644 --- a/advisories/unreviewed/2023/11/GHSA-v2hc-cp84-vjqv/GHSA-v2hc-cp84-vjqv.json +++ b/advisories/unreviewed/2023/11/GHSA-v2hc-cp84-vjqv/GHSA-v2hc-cp84-vjqv.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v2hc-cp84-vjqv", - "modified": "2023-11-14T21:31:00Z", + "modified": "2023-11-27T21:30:54Z", "published": "2023-11-14T21:31:00Z", "aliases": [ "CVE-2023-20566" ], "details": "Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.\n\n\n\n\n\n\n\n\n\n\n\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-14T19:15:15Z" diff --git a/advisories/unreviewed/2023/11/GHSA-v35f-2wfw-hvcc/GHSA-v35f-2wfw-hvcc.json b/advisories/unreviewed/2023/11/GHSA-v35f-2wfw-hvcc/GHSA-v35f-2wfw-hvcc.json new file mode 100644 index 00000000000..40b06d02d93 --- /dev/null +++ b/advisories/unreviewed/2023/11/GHSA-v35f-2wfw-hvcc/GHSA-v35f-2wfw-hvcc.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v35f-2wfw-hvcc", + "modified": "2023-11-27T21:30:56Z", + "published": "2023-11-27T21:30:56Z", + "aliases": [ + "CVE-2023-49044" + ], + "details": "Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_setting_wifi_set.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49044" + }, + { + "type": "WEB", + "url": "https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/form_fast_setting_wifi_set.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2023-11-27T21:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/11/GHSA-vghr-g64f-9ffh/GHSA-vghr-g64f-9ffh.json b/advisories/unreviewed/2023/11/GHSA-vghr-g64f-9ffh/GHSA-vghr-g64f-9ffh.json index c643e846b87..0c5372aea2a 100644 --- a/advisories/unreviewed/2023/11/GHSA-vghr-g64f-9ffh/GHSA-vghr-g64f-9ffh.json +++ b/advisories/unreviewed/2023/11/GHSA-vghr-g64f-9ffh/GHSA-vghr-g64f-9ffh.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vghr-g64f-9ffh", - "modified": "2023-11-20T15:30:20Z", + "modified": "2023-11-27T21:30:55Z", "published": "2023-11-20T15:30:20Z", "aliases": [ "CVE-2023-47772" diff --git a/advisories/unreviewed/2023/11/GHSA-wfpw-fx46-r3pf/GHSA-wfpw-fx46-r3pf.json b/advisories/unreviewed/2023/11/GHSA-wfpw-fx46-r3pf/GHSA-wfpw-fx46-r3pf.json index 1358c98c3c5..cabe569e4c1 100644 --- a/advisories/unreviewed/2023/11/GHSA-wfpw-fx46-r3pf/GHSA-wfpw-fx46-r3pf.json +++ b/advisories/unreviewed/2023/11/GHSA-wfpw-fx46-r3pf/GHSA-wfpw-fx46-r3pf.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/11/GHSA-x8xw-jc3c-cx53/GHSA-x8xw-jc3c-cx53.json b/advisories/unreviewed/2023/11/GHSA-x8xw-jc3c-cx53/GHSA-x8xw-jc3c-cx53.json index bae73a93c4c..b721d91d507 100644 --- a/advisories/unreviewed/2023/11/GHSA-x8xw-jc3c-cx53/GHSA-x8xw-jc3c-cx53.json +++ b/advisories/unreviewed/2023/11/GHSA-x8xw-jc3c-cx53/GHSA-x8xw-jc3c-cx53.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-x8xw-jc3c-cx53", - "modified": "2023-11-14T21:31:00Z", + "modified": "2023-11-27T21:30:54Z", "published": "2023-11-14T21:31:00Z", "aliases": [ "CVE-2023-20567" ], "details": "Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.\n\n\n\n\n\n\n\n\n\n\n\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-347" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-14T19:15:15Z" diff --git a/advisories/unreviewed/2023/11/GHSA-x98f-r46f-9w75/GHSA-x98f-r46f-9w75.json b/advisories/unreviewed/2023/11/GHSA-x98f-r46f-9w75/GHSA-x98f-r46f-9w75.json new file mode 100644 index 00000000000..92030d7d3c8 --- /dev/null +++ b/advisories/unreviewed/2023/11/GHSA-x98f-r46f-9w75/GHSA-x98f-r46f-9w75.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x98f-r46f-9w75", + "modified": "2023-11-27T21:30:56Z", + "published": "2023-11-27T21:30:56Z", + "aliases": [ + "CVE-2023-48034" + ], + "details": "An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48034" + }, + { + "type": "WEB", + "url": "https://github.com/aprkr/CVE-2023-48034" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2023-11-27T21:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/11/GHSA-xfgh-jcpr-8fw6/GHSA-xfgh-jcpr-8fw6.json b/advisories/unreviewed/2023/11/GHSA-xfgh-jcpr-8fw6/GHSA-xfgh-jcpr-8fw6.json index 9ece8509868..347ae3876ea 100644 --- a/advisories/unreviewed/2023/11/GHSA-xfgh-jcpr-8fw6/GHSA-xfgh-jcpr-8fw6.json +++ b/advisories/unreviewed/2023/11/GHSA-xfgh-jcpr-8fw6/GHSA-xfgh-jcpr-8fw6.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false,