netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-07-03 18:36:36 +00:00
parent d1140e1bab
commit d40ba6ac90
188 changed files with 999 additions and 580 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/04/GHSA-22q4-f5r6-3xqw/GHSA-22q4-f5r6-3xqw.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22q4-f5r6-3xqw",
"modified": "2024-06-10T18:30:55Z",
"modified": "2024-07-03T18:34:55Z",
"published": "2024-04-17T18:31:36Z",
"aliases": [
"CVE-2024-2961"
],
"details": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"
}
],
"affected": [
@@ -83,7 +86,7 @@
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-17T18:15:15Z"
advisories/unreviewed/2024/04/GHSA-22qj-8xm8-83m5/GHSA-22qj-8xm8-83m5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22qj-8xm8-83m5",
"modified": "2024-04-17T06:30:52Z",
"modified": "2024-07-03T18:34:39Z",
"published": "2024-04-17T06:30:52Z",
"aliases": [
"CVE-2024-1219"
],
"details": "The Easy Social Feed WordPress plugin before 6.5.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-17T05:15:48Z"
advisories/unreviewed/2024/04/GHSA-238w-4442-vh7q/GHSA-238w-4442-vh7q.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-23c8-gv7j-76hv/GHSA-23c8-gv7j-76hv.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-25qp-v6p8-wggj/GHSA-25qp-v6p8-wggj.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-25qp-v6p8-wggj",
"modified": "2024-04-02T09:30:42Z",
"modified": "2024-07-03T18:34:03Z",
"published": "2024-04-02T09:30:42Z",
"aliases": [
"CVE-2024-31005"
],
"details": "An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_MdhdAtom::AP4_MdhdAtom,mp4fragment",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-02T08:16:16Z"
advisories/unreviewed/2024/04/GHSA-26cp-j6f9-2w7c/GHSA-26cp-j6f9-2w7c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-26cp-j6f9-2w7c",
"modified": "2024-04-19T18:31:12Z",
"modified": "2024-07-03T18:36:04Z",
"published": "2024-04-19T18:31:12Z",
"aliases": [
"CVE-2024-32206"
],
"details": "A stored cross-site scripting (XSS) vulnerability in the component \\affiche\\admin\\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-19T16:15:10Z"
advisories/unreviewed/2024/04/GHSA-29fh-mw96-pcjc/GHSA-29fh-mw96-pcjc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-29fh-mw96-pcjc",
"modified": "2024-04-17T21:30:46Z",
"modified": "2024-07-03T18:35:04Z",
"published": "2024-04-17T21:30:46Z",
"aliases": [
"CVE-2024-30950"
],
"details": "A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SQL statements field under /adm/admsql.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-17T19:15:07Z"
advisories/unreviewed/2024/04/GHSA-2cww-rcpx-vmvj/GHSA-2cww-rcpx-vmvj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2cww-rcpx-vmvj",
"modified": "2024-04-18T18:30:41Z",
"modified": "2024-07-03T18:35:23Z",
"published": "2024-04-18T18:30:41Z",
"aliases": [
"CVE-2024-32325"
],
"details": "TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiFiExtenderConfig function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-18T17:15:48Z"
advisories/unreviewed/2024/04/GHSA-2f2w-fjg5-6g8c/GHSA-2f2w-fjg5-6g8c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2f2w-fjg5-6g8c",
"modified": "2024-04-19T00:30:54Z",
"modified": "2024-07-03T18:35:34Z",
"published": "2024-04-19T00:30:54Z",
"aliases": [
"CVE-2024-30929"
],
"details": "Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-18T22:15:10Z"
advisories/unreviewed/2024/04/GHSA-2fhp-49gm-838v/GHSA-2fhp-49gm-838v.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2fhp-49gm-838v",
"modified": "2024-04-17T21:30:50Z",
"modified": "2024-07-03T18:35:19Z",
"published": "2024-04-17T21:30:50Z",
"aliases": [
"CVE-2024-32746"
],
"details": "A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the MENU parameter under the Menu module.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-80"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-17T21:15:09Z"
advisories/unreviewed/2024/04/GHSA-2g4w-cqhh-m9w9/GHSA-2g4w-cqhh-m9w9.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-287"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-2g9g-66pp-8rq7/GHSA-2g9g-66pp-8rq7.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2g9g-66pp-8rq7",
"modified": "2024-04-11T06:30:35Z",
"modified": "2024-07-03T18:34:17Z",
"published": "2024-04-11T06:30:35Z",
"aliases": [
"CVE-2024-30915"
],
"details": "An issue was discovered in OpenDDS commit b1c534032bb62ad4ae32609778de6b8d6c823a66, allows a local attacker to cause a denial of service and obtain sensitive information via the max_samples parameter within the DataReaderQoS component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-11T06:15:06Z"
advisories/unreviewed/2024/04/GHSA-2hh4-qfh8-22w2/GHSA-2hh4-qfh8-22w2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2hh4-qfh8-22w2",
"modified": "2024-04-16T00:30:32Z",
"modified": "2024-07-03T18:34:25Z",
"published": "2024-04-16T00:30:32Z",
"aliases": [
"CVE-2024-27794"
],
"details": "Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the FileMaker WebDirect login endpoint. The vulnerability was resolved in FileMaker Server 20.3.2 by escaping the HTML contents of the login error message on the login page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-15T23:15:06Z"
advisories/unreviewed/2024/04/GHSA-2qhq-j5fg-qqg8/GHSA-2qhq-j5fg-qqg8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2qhq-j5fg-qqg8",
"modified": "2024-04-19T00:30:54Z",
"modified": "2024-07-03T18:35:33Z",
"published": "2024-04-19T00:30:54Z",
"aliases": [
"CVE-2024-30927"
],
"details": "Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-18T22:15:10Z"
advisories/unreviewed/2024/04/GHSA-36pg-p326-9j9j/GHSA-36pg-p326-9j9j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-36pg-p326-9j9j",
"modified": "2024-04-18T18:30:42Z",
"modified": "2024-07-03T18:35:27Z",
"published": "2024-04-18T18:30:42Z",
"aliases": [
"CVE-2024-32327"
],
"details": "TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Port Forwarding under the Firewall Page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-18T17:15:48Z"
advisories/unreviewed/2024/04/GHSA-37g3-3m5c-7mjc/GHSA-37g3-3m5c-7mjc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-37g3-3m5c-7mjc",
"modified": "2024-04-17T18:31:36Z",
"modified": "2024-07-03T18:34:58Z",
"published": "2024-04-17T18:31:36Z",
"aliases": [
"CVE-2024-30982"
],
"details": "SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the upid parameter in the /view-user-detail.php file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-17T18:15:16Z"
advisories/unreviewed/2024/04/GHSA-37h8-7f9x-vvj8/GHSA-37h8-7f9x-vvj8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-37h8-7f9x-vvj8",
"modified": "2024-04-01T03:30:41Z",
"modified": "2024-07-03T18:34:02Z",
"published": "2024-04-01T03:30:41Z",
"aliases": [
"CVE-2024-20053"
],
"details": "In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541764.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-01T03:15:08Z"
advisories/unreviewed/2024/04/GHSA-37vm-pmrf-r3cp/GHSA-37vm-pmrf-r3cp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-37vm-pmrf-r3cp",
"modified": "2024-04-17T15:30:42Z",
"modified": "2024-07-03T18:34:49Z",
"published": "2024-04-17T15:30:42Z",
"aliases": [
"CVE-2024-32283"
],
"details": "Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-17T14:15:08Z"
advisories/unreviewed/2024/04/GHSA-38mp-fjx9-rc96/GHSA-38mp-fjx9-rc96.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-38mp-fjx9-rc96",
"modified": "2024-04-17T18:31:35Z",
"modified": "2024-07-03T18:34:54Z",
"published": "2024-04-17T18:31:35Z",
"aliases": [
"CVE-2023-5405"
advisories/unreviewed/2024/04/GHSA-3c2h-px55-3fmw/GHSA-3c2h-px55-3fmw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3c2h-px55-3fmw",
"modified": "2024-04-01T18:30:56Z",
"modified": "2024-07-03T18:34:03Z",
"published": "2024-04-01T18:30:56Z",
"aliases": [
"CVE-2024-30862"
],
"details": "netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-01T16:15:43Z"

Some files were not shown because too many files have changed in this diff Show More