netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-26 18:34:37 +00:00
parent 3c29bb8a26
commit d91a27b047
73 changed files with 1426 additions and 135 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/08/GHSA-cp56-rpr6-7673/GHSA-cp56-rpr6-7673.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cp56-rpr6-7673",
"modified": "2023-11-29T15:30:20Z",
"modified": "2024-08-26T18:33:31Z",
"published": "2023-08-14T03:30:32Z",
"aliases": [
"CVE-2023-40283"
advisories/unreviewed/2023/08/GHSA-pcv9-72q8-27vc/GHSA-pcv9-72q8-27vc.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pcv9-72q8-27vc",
"modified": "2023-11-21T18:30:25Z",
"modified": "2024-08-26T18:33:31Z",
"published": "2023-08-07T15:30:27Z",
"aliases": [
"CVE-2023-4147"
advisories/unreviewed/2024/02/GHSA-48j9-xh9v-wh6m/GHSA-48j9-xh9v-wh6m.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-48j9-xh9v-wh6m",
"modified": "2024-02-21T09:31:00Z",
"modified": "2024-08-26T18:33:31Z",
"published": "2024-02-21T09:31:00Z",
"aliases": [
"CVE-2023-42848"
],
"details": "The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. Processing a maliciously crafted image may lead to heap corruption.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T07:15:49Z"
advisories/unreviewed/2024/02/GHSA-5hxp-xf5x-xjxf/GHSA-5hxp-xf5x-xjxf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5hxp-xf5x-xjxf",
"modified": "2024-02-21T00:31:31Z",
"modified": "2024-08-26T18:33:31Z",
"published": "2024-02-21T00:31:31Z",
"aliases": [
"CVE-2023-47422"
],
"details": "An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-20T22:15:08Z"
advisories/unreviewed/2024/02/GHSA-6w8c-45mh-9rvm/GHSA-6w8c-45mh-9rvm.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6w8c-45mh-9rvm",
"modified": "2024-02-16T03:30:51Z",
"modified": "2024-08-26T18:33:31Z",
"published": "2024-02-16T03:30:51Z",
"aliases": [
"CVE-2024-0041"
],
"details": "In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local escalation of privilege that fails to remove the persistent dot with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T02:15:51Z"
advisories/unreviewed/2024/02/GHSA-g759-2x5w-f89c/GHSA-g759-2x5w-f89c.json
+2 -1
View File
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-203"
"CWE-203",
"CWE-94"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-pq76-qjgj-qv82/GHSA-pq76-qjgj-qv82.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pq76-qjgj-qv82",
"modified": "2024-02-21T12:32:03Z",
"modified": "2024-08-26T18:33:31Z",
"published": "2024-02-21T12:32:03Z",
"aliases": [
"CVE-2023-7235"
],
"details": "The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-276"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T11:15:07Z"
advisories/unreviewed/2024/03/GHSA-2cq3-gjjm-48mc/GHSA-2cq3-gjjm-48mc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2cq3-gjjm-48mc",
"modified": "2024-03-13T18:31:35Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-13T18:31:34Z",
"aliases": [
"CVE-2024-28678"
],
"details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-13T16:15:30Z"
advisories/unreviewed/2024/03/GHSA-3xh7-vf3h-529r/GHSA-3xh7-vf3h-529r.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3xh7-vf3h-529r",
"modified": "2024-03-11T21:31:26Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-27205"
],
"details": "In tbd of tbd, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:47Z"
advisories/unreviewed/2024/03/GHSA-438q-mx46-fpm4/GHSA-438q-mx46-fpm4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-438q-mx46-fpm4",
"modified": "2024-03-11T21:31:26Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-27220"
],
"details": "In lpm_req_handler of TBD, there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:48Z"
advisories/unreviewed/2024/03/GHSA-5r6q-rqqp-8fc4/GHSA-5r6q-rqqp-8fc4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5r6q-rqqp-8fc4",
"modified": "2024-03-14T00:31:05Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-12T21:31:00Z",
"aliases": [
"CVE-2024-23300"
],
"details": "A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-12T21:15:58Z"
advisories/unreviewed/2024/03/GHSA-6cqh-4xr5-c65x/GHSA-6cqh-4xr5-c65x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6cqh-4xr5-c65x",
"modified": "2024-03-25T15:30:40Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-25T15:30:40Z",
"aliases": [
"CVE-2024-28435"
],
"details": "The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-918"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T14:15:09Z"
advisories/unreviewed/2024/03/GHSA-7hgq-9c4p-6wjc/GHSA-7hgq-9c4p-6wjc.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7hgq-9c4p-6wjc",
"modified": "2024-03-13T21:31:02Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-08T03:31:25Z",
"aliases": [
"CVE-2024-23294"
],
"details": "This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-08T02:15:50Z"
advisories/unreviewed/2024/03/GHSA-92j5-pvp2-25px/GHSA-92j5-pvp2-25px.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-92j5-pvp2-25px",
"modified": "2024-03-14T00:31:05Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-08T03:31:24Z",
"aliases": [
"CVE-2024-23247"
],
"details": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. Processing a file may lead to unexpected app termination or arbitrary code execution.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-08T02:15:48Z"
advisories/unreviewed/2024/03/GHSA-98v3-6phw-46hc/GHSA-98v3-6phw-46hc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-98v3-6phw-46hc",
"modified": "2024-03-09T06:30:41Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-09T06:30:41Z",
"aliases": [
"CVE-2023-50015"
],
"details": "An issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote attackers to escalate privileges via incorrect access control using an end-user session-identity token.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-250"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-09T05:15:08Z"
advisories/unreviewed/2024/03/GHSA-9vq4-5j8m-hmv2/GHSA-9vq4-5j8m-hmv2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9vq4-5j8m-hmv2",
"modified": "2024-03-11T21:31:25Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-11T21:31:25Z",
"aliases": [
"CVE-2024-25985"
],
"details": "In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:47Z"
advisories/unreviewed/2024/03/GHSA-chrr-r69v-42vf/GHSA-chrr-r69v-42vf.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-chrr-r69v-42vf",
"modified": "2024-03-14T21:30:51Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-14T21:30:51Z",
"aliases": [
"CVE-2023-42938"
],
"details": "A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker may be able to elevate their privileges.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-14T19:15:49Z"
advisories/unreviewed/2024/03/GHSA-h62x-f726-fw3q/GHSA-h62x-f726-fw3q.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h62x-f726-fw3q",
"modified": "2024-03-15T18:30:38Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-15T18:30:38Z",
"aliases": [
"CVE-2023-7009"
],
"details": "Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passed to the lock. These malicious commands, less then 16 bytes in length, will be processed by the lock as if they were encrypted communications. This can be further exploited by an attacker to compromise the lock's integrity.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-15T17:15:07Z"
advisories/unreviewed/2024/03/GHSA-mrc8-vchm-35qc/GHSA-mrc8-vchm-35qc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mrc8-vchm-35qc",
"modified": "2024-03-15T18:30:37Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-15T18:30:37Z",
"aliases": [
"CVE-2023-7004"
],
"details": "The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected device, allowing for connection to a device that spoofs the MAC address of a lock, which compromises the legitimate locks integrity.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-940"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-15T17:15:07Z"
advisories/unreviewed/2024/03/GHSA-rfmj-78j3-h4xf/GHSA-rfmj-78j3-h4xf.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rfmj-78j3-h4xf",
"modified": "2024-03-05T21:30:25Z",
"modified": "2024-08-26T18:33:32Z",
"published": "2024-03-05T21:30:25Z",
"aliases": [
"CVE-2024-2055"
],
"details": "The \"Rich Filemanager\" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
"CWE-288"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-05T20:16:01Z"

Some files were not shown because too many files have changed in this diff Show More