Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2024-10-07 21:34:03 +00:00
parent b3679cc450
commit d875a7e2c9
74 changed files with 836 additions and 168 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qcj3-h27m-mp9x",
-  "modified": "2024-04-29T11:08:44Z",
+  "modified": "2024-10-07T21:32:17Z",
  "published": "2022-05-13T01:07:34Z",
  "aliases": [
    "CVE-2018-16856"
@@ -12,6 +12,10 @@
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
    }
  ],
  "affected": [
@@ -28,14 +32,11 @@
              "introduced": "0"
            },
            {
-              "fixed": "3.1.0"
+              "fixed": "2.1.0"
            }
          ]
        }
-      ],
-      "database_specific": {
-        "last_known_affected_version_range": "< 2.1.0"
-      }
+      ]
    },
    {
      "package": {
@@ -77,6 +78,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/openstack/octavia/commits/3.1.0"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/octavia/PYSEC-2019-193.yaml"
    }
  ],
  "database_specific": {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-49wm-4fp6-h59c",
-  "modified": "2022-09-23T13:58:49Z",
+  "modified": "2024-10-07T21:33:25Z",
  "published": "2022-09-22T00:00:32Z",
  "aliases": [
    "CVE-2022-2872"
@@ -12,6 +12,10 @@
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"
    }
  ],
  "affected": [
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-9623-mqmm-5rcf",
-  "modified": "2024-10-01T12:30:29Z",
+  "modified": "2024-10-07T21:33:28Z",
  "published": "2024-08-21T15:30:54Z",
  "aliases": [
    "CVE-2024-7885"
@@ -60,6 +60,14 @@
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2024:7442"
    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2024:7735"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2024:7736"
+    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2024-7885"
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-74"
+      "CWE-74",
+      "CWE-94"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-cgq6-65fg-2fvf",
-  "modified": "2023-04-11T18:30:28Z",
+  "modified": "2024-10-07T21:33:27Z",
  "published": "2023-04-05T00:30:39Z",
  "aliases": [
    "CVE-2023-1818"
@@ -28,7 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-400"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-288"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-78"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -28,7 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-562"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-hpr7-fpw7-jcx2",
-  "modified": "2023-11-06T06:30:26Z",
+  "modified": "2024-10-07T21:33:27Z",
  "published": "2023-08-18T15:30:23Z",
  "aliases": [
    "CVE-2023-27576"
@@ -36,7 +36,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-639"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -28,7 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-400"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,7 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-400"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-400"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-94"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-w96c-3jm7-32vm",
-  "modified": "2023-12-20T18:30:31Z",
+  "modified": "2024-10-07T21:33:28Z",
  "published": "2023-12-16T03:30:21Z",
  "aliases": [
    "CVE-2021-42796"
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-78"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-gc2m-7496-w444",
-  "modified": "2024-02-13T18:38:23Z",
+  "modified": "2024-10-07T21:33:28Z",
  "published": "2024-02-13T18:38:23Z",
  "aliases": [
    "CVE-2023-45207"
  ],
  "details": "An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. An attacker can send a PDF document through mail that contains malicious JavaScript. While previewing this file in webmail in the Chrome browser, the stored XSS payload is executed. (This has been mitigated by sanitising the JavaScript code present in a PDF document.)",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
  ],
  "affected": [

@@ -33,9 +36,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-79"
    ],
-    "severity": null,
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-02-13T16:15:08Z"
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-521"
+      "CWE-521",
+      "CWE-922"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -32,6 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-345",
      "CWE-353"
    ],
    "severity": "MODERATE",
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
--- a/Show More
+++ b/Show More