netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-05 18:33:08 +00:00
parent 2ba8b38486
commit d2eb2cf6ef
43 changed files with 575 additions and 122 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/03/GHSA-3967-4r54-74c9/GHSA-3967-4r54-74c9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3967-4r54-74c9",
"modified": "2024-03-27T06:30:30Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-27T06:30:30Z",
"aliases": [
"CVE-2023-40284"
],
"details": "An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-27T04:15:09Z"
advisories/unreviewed/2024/03/GHSA-45f8-rqfm-rh3c/GHSA-45f8-rqfm-rh3c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45f8-rqfm-rh3c",
"modified": "2024-03-27T06:30:31Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-27T06:30:31Z",
"aliases": [
"CVE-2023-40288"
],
"details": "An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-27T04:15:10Z"
advisories/unreviewed/2024/03/GHSA-56rx-5jgh-c8q2/GHSA-56rx-5jgh-c8q2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-56rx-5jgh-c8q2",
"modified": "2024-03-26T21:30:47Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-26T21:30:46Z",
"aliases": [
"CVE-2024-28442"
],
"details": "Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company portal component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-26T20:15:09Z"
advisories/unreviewed/2024/03/GHSA-6pgr-6fjc-hf4m/GHSA-6pgr-6fjc-hf4m.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6pgr-6fjc-hf4m",
"modified": "2024-03-05T15:32:41Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-05T15:32:41Z",
"aliases": [
"CVE-2024-27627"
],
"details": "A reflected cross-site scripting (XSS) vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the bad_password.php page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-05T14:15:49Z"
advisories/unreviewed/2024/03/GHSA-72vh-mwjv-25fq/GHSA-72vh-mwjv-25fq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-72vh-mwjv-25fq",
"modified": "2024-03-11T21:31:26Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-27211"
],
"details": "In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:48Z"
advisories/unreviewed/2024/03/GHSA-7qpm-3qf3-fjgw/GHSA-7qpm-3qf3-fjgw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7qpm-3qf3-fjgw",
"modified": "2024-03-26T00:32:02Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-26T00:32:02Z",
"aliases": [
"CVE-2024-29301"
],
"details": "SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?admin_id=",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-26T00:15:08Z"
advisories/unreviewed/2024/03/GHSA-8x7g-6cjv-9w4w/GHSA-8x7g-6cjv-9w4w.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8x7g-6cjv-9w4w",
"modified": "2024-03-20T15:32:21Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-20T15:32:21Z",
"aliases": [
"CVE-2024-28394"
],
"details": "An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-73"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-19T20:15:07Z"
advisories/unreviewed/2024/03/GHSA-925f-cxg2-4483/GHSA-925f-cxg2-4483.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-925f-cxg2-4483",
"modified": "2024-03-26T00:32:01Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-26T00:32:01Z",
"aliases": [
"CVE-2024-21914"
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-994w-h7w5-73v7/GHSA-994w-h7w5-73v7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-994w-h7w5-73v7",
"modified": "2024-03-21T03:36:45Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-21T03:36:45Z",
"aliases": [
"CVE-2023-49981"
],
"details": "A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T02:49:38Z"
advisories/unreviewed/2024/03/GHSA-f4hc-7j8c-cj6p/GHSA-f4hc-7j8c-cj6p.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f4hc-7j8c-cj6p",
"modified": "2024-03-21T03:36:46Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-21T03:36:46Z",
"aliases": [
"CVE-2024-27626"
],
"details": "A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in Dotclear version 2.29. The flaw exists within the Search functionality of the Admin Panel.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T02:52:20Z"
advisories/unreviewed/2024/03/GHSA-g3rh-v79v-97pc/GHSA-g3rh-v79v-97pc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g3rh-v79v-97pc",
"modified": "2024-03-21T03:36:45Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-21T03:36:45Z",
"aliases": [
"CVE-2023-49982"
],
"details": "Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T02:49:38Z"
advisories/unreviewed/2024/03/GHSA-g52c-2cj5-jgxg/GHSA-g52c-2cj5-jgxg.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g52c-2cj5-jgxg",
"modified": "2024-03-21T06:33:04Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-21T06:33:04Z",
"aliases": [
"CVE-2024-29859"
],
"details": "In MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly check for a valid file upload.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T04:15:09Z"
advisories/unreviewed/2024/03/GHSA-gp58-x96h-756r/GHSA-gp58-x96h-756r.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gp58-x96h-756r",
"modified": "2024-03-12T06:30:46Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-12T06:30:45Z",
"aliases": [
"CVE-2024-25331"
],
"details": "DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Overflow.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-12T06:15:07Z"
advisories/unreviewed/2024/03/GHSA-hfjg-hg9j-49p2/GHSA-hfjg-hg9j-49p2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hfjg-hg9j-49p2",
"modified": "2024-03-07T03:30:40Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-07T03:30:40Z",
"aliases": [
"CVE-2023-49986"
],
"details": "A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-07T01:15:51Z"
advisories/unreviewed/2024/03/GHSA-m22p-rxw5-75fw/GHSA-m22p-rxw5-75fw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m22p-rxw5-75fw",
"modified": "2024-03-21T03:36:45Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-21T03:36:45Z",
"aliases": [
"CVE-2023-49984"
],
"details": "A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T02:49:38Z"
advisories/unreviewed/2024/03/GHSA-mr24-cf69-5chq/GHSA-mr24-cf69-5chq.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mr24-cf69-5chq",
"modified": "2024-03-26T12:31:28Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-26T12:31:28Z",
"aliases": [
"CVE-2024-29644"
],
"details": "Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted script to the user login box.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-26T12:15:50Z"
advisories/unreviewed/2024/03/GHSA-pcj3-p7wg-9c68/GHSA-pcj3-p7wg-9c68.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pcj3-p7wg-9c68",
"modified": "2024-03-20T15:32:30Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-20T15:32:30Z",
"aliases": [
"CVE-2024-22079"
],
"details": "An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Directory traversal can occur via the system logs download mechanism.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-24"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T05:15:45Z"
advisories/unreviewed/2024/03/GHSA-qmw9-5q6h-hjxj/GHSA-qmw9-5q6h-hjxj.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qmw9-5q6h-hjxj",
"modified": "2024-03-20T15:32:28Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-20T15:32:28Z",
"aliases": [
"CVE-2023-7246"
],
"details": "The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T05:15:45Z"
advisories/unreviewed/2024/03/GHSA-v7cq-82w7-gpxq/GHSA-v7cq-82w7-gpxq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v7cq-82w7-gpxq",
"modified": "2024-03-07T09:30:30Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-07T09:30:30Z",
"aliases": [
"CVE-2022-46091"
],
"details": "Cross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-07T09:15:37Z"
advisories/unreviewed/2024/03/GHSA-v884-7rcp-mpm4/GHSA-v884-7rcp-mpm4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v884-7rcp-mpm4",
"modified": "2024-03-21T03:36:45Z",
"modified": "2024-08-05T18:31:42Z",
"published": "2024-03-21T03:36:45Z",
"aliases": [
"CVE-2023-38825"
],
"details": "SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password reset mechanism in MyCapMobileApp/update.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T02:48:14Z"

Some files were not shown because too many files have changed in this diff Show More