Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-01-24 18:32:31 +00:00
parent 13cab20dfa
commit d3e00a2bea
158 changed files with 4557 additions and 41 deletions
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-mmm5-f82c-58j8",
-  "modified": "2022-05-24T19:01:29Z",
+  "modified": "2025-01-24T18:31:04Z",
  "published": "2022-05-24T19:01:29Z",
  "aliases": [
    "CVE-2021-32030"
  ],
  "details": "The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\\0' matches the device's default value of '\\0' in some situations.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -21,6 +26,10 @@
    {
      "type": "WEB",
      "url": "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.atredis.com/blog/2021/4/30/asus-authentication-bypass"
    }
  ],
  "database_specific": {
@@ -42,7 +42,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-74"
+      "CWE-74",
+      "CWE-94"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -34,7 +34,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-269"
+      "CWE-269",
+      "CWE-863"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-209"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7qhm-5mxq-x7vp",
-  "modified": "2024-04-04T04:02:39Z",
+  "modified": "2025-01-24T18:31:05Z",
  "published": "2023-05-11T18:30:17Z",
  "aliases": [
    "CVE-2023-24540"
@@ -34,11 +34,16 @@
    {
      "type": "WEB",
      "url": "https://pkg.go.dev/vuln/GO-2023-1752"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20241115-0008"
    }
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-74"
+      "CWE-74",
+      "CWE-77"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -42,7 +42,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-74"
+      "CWE-74",
+      "CWE-94"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-863"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-754"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-400"
+      "CWE-400",
+      "CWE-770"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-94"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-863"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -34,7 +34,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-200"
+      "CWE-200",
+      "CWE-203"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-326"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-125",
      "CWE-20"
    ],
    "severity": "MODERATE",
@@ -34,6 +34,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-79",
      "CWE-89"
    ],
    "severity": "MODERATE",
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-400"
+      "CWE-400",
+      "CWE-770"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -34,6 +34,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-552",
      "CWE-668"
    ],
    "severity": "MODERATE",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-8wrw-hcvf-r5f8",
-  "modified": "2024-04-04T05:42:36Z",
+  "modified": "2025-01-24T18:31:05Z",
  "published": "2023-07-06T21:14:56Z",
  "aliases": [
    "CVE-2023-2663"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-cpp3-849q-7wmj",
-  "modified": "2024-02-14T18:30:26Z",
+  "modified": "2025-01-24T18:31:07Z",
  "published": "2024-02-14T18:30:25Z",
  "aliases": [
    "CVE-2024-23607"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-fgh6-x5w4-82cg",
-  "modified": "2024-02-14T18:30:26Z",
+  "modified": "2025-01-24T18:31:07Z",
  "published": "2024-02-14T18:30:26Z",
  "aliases": [
    "CVE-2024-24966"
--- a/Show More
+++ b/Show More