netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-10-15 18:34:18 +00:00
parent 9f1b79d442
commit d98a0bafc4
45 changed files with 442 additions and 113 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/02/GHSA-h9cr-qjg3-wh75/GHSA-h9cr-qjg3-wh75.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h9cr-qjg3-wh75",
"modified": "2022-09-20T00:00:32Z",
"modified": "2024-10-15T18:30:48Z",
"published": "2022-02-10T00:01:11Z",
"aliases": [
"CVE-2022-23096"
advisories/unreviewed/2022/05/GHSA-3j45-2pqx-6qf3/GHSA-3j45-2pqx-6qf3.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3j45-2pqx-6qf3",
"modified": "2022-05-17T00:45:23Z",
"modified": "2024-10-15T18:30:48Z",
"published": "2022-05-17T00:45:23Z",
"aliases": [
"CVE-2008-5180"
],
"details": "Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-8pgm-3m7v-29vc/GHSA-8pgm-3m7v-29vc.json
+7 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8pgm-3m7v-29vc",
"modified": "2022-05-01T23:36:26Z",
"modified": "2024-10-15T18:30:48Z",
"published": "2022-05-01T23:36:26Z",
"aliases": [
"CVE-2008-1083"
],
"details": "Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka \"GDI Heap Overflow Vulnerability.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -101,7 +104,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-190"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/05/GHSA-cg3g-c98g-38cg/GHSA-cg3g-c98g-38cg.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cg3g-c98g-38cg",
"modified": "2024-01-13T00:30:24Z",
"modified": "2024-10-15T18:30:48Z",
"published": "2022-05-01T18:17:21Z",
"aliases": [
"CVE-2007-3798"
advisories/unreviewed/2022/05/GHSA-q664-wc5h-3vj4/GHSA-q664-wc5h-3vj4.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q664-wc5h-3vj4",
"modified": "2022-05-14T01:31:28Z",
"modified": "2024-10-15T18:30:48Z",
"published": "2022-05-14T01:31:28Z",
"aliases": [
"CVE-2008-4835"
],
"details": "SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified \"fields inside the SMB packets\" in an NT Trans2 request, related to \"insufficiently validating the buffer size,\" aka \"SMB Validation Remote Code Execution Vulnerability.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-w7r5-8qrv-2w63/GHSA-w7r5-8qrv-2w63.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w7r5-8qrv-2w63",
"modified": "2022-05-02T00:06:18Z",
"modified": "2024-10-15T18:30:48Z",
"published": "2022-05-02T00:06:18Z",
"aliases": [
"CVE-2008-4036"
],
"details": "Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a \"memory allocation mapping error,\" aka \"Virtual Address Descriptor Elevation of Privilege Vulnerability.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -61,7 +64,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/10/GHSA-3jr7-qfmv-8m22/GHSA-3jr7-qfmv-8m22.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3jr7-qfmv-8m22",
"modified": "2024-10-14T18:30:26Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-14T18:30:26Z",
"aliases": [
"CVE-2024-48798"
],
"details": "An issue in Hubble Connected (com.hubbleconnected.vervelife) 2.00.81 allows a remote attacker to obtain sensitive information via the firmware update process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-14T17:15:13Z"
advisories/unreviewed/2024/10/GHSA-3qfw-5g24-8pmq/GHSA-3qfw-5g24-8pmq.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3qfw-5g24-8pmq",
"modified": "2024-10-15T12:30:36Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-15T12:30:36Z",
"aliases": [
"CVE-2024-47945"
],
"details": "The devices are vulnerable to session hijacking due to insufficient \nentropy in its session ID generation algorithm. The session IDs are \npredictable, with only 32,768 possible values per user, which allows \nattackers to pre-generate valid session IDs, leading to unauthorized \naccess to user sessions. This is not only due to the use of an \n(insecure) rand() function call but also because of missing \ninitialization via srand(). As a result only the PIDs are effectively \nused as seed.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
"CWE-340"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T10:15:03Z"
advisories/unreviewed/2024/10/GHSA-4377-w6r6-fpff/GHSA-4377-w6r6-fpff.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4377-w6r6-fpff",
"modified": "2024-10-15T18:30:50Z",
"published": "2024-10-15T18:30:50Z",
"aliases": [
"CVE-2024-48622"
],
"details": "A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48622"
},
{
"type": "WEB",
"url": "https://github.com/domainmod/domainmod/issues/174"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T16:15:05Z"
}
}
advisories/unreviewed/2024/10/GHSA-55qg-f678-jcg9/GHSA-55qg-f678-jcg9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-55qg-f678-jcg9",
"modified": "2024-10-15T15:30:54Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-15T15:30:54Z",
"aliases": [
"CVE-2024-48278"
],
"details": "Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site Request Forgery (CSRF) via /edit-profile.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T13:15:11Z"
advisories/unreviewed/2024/10/GHSA-58qp-x69c-wv98/GHSA-58qp-x69c-wv98.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-58qp-x69c-wv98",
"modified": "2024-10-09T15:32:20Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-09T15:32:20Z",
"aliases": [
"CVE-2024-47661"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Avoid overflow from uint32_t to uint8_t\n\n[WHAT & HOW]\ndmub_rb_cmd's ramping_boundary has size of uint8_t and it is assigned\n0xFFFF. Fix it by changing it to uint8_t with value of 0xFF.\n\nThis fixes 2 INTEGER_OVERFLOW issues reported by Coverity.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-09T15:15:15Z"
advisories/unreviewed/2024/10/GHSA-5g3x-vvf6-gwg2/GHSA-5g3x-vvf6-gwg2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5g3x-vvf6-gwg2",
"modified": "2024-10-14T18:30:25Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-14T18:30:25Z",
"aliases": [
"CVE-2024-48150"
],
"details": "D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-14T16:15:03Z"
advisories/unreviewed/2024/10/GHSA-5j4c-8p2g-v4jx/GHSA-5j4c-8p2g-v4jx.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5j4c-8p2g-v4jx",
"modified": "2024-10-15T18:30:50Z",
"published": "2024-10-15T18:30:50Z",
"aliases": [
"CVE-2024-9506"
],
"details": "Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9506"
},
{
"type": "WEB",
"url": "https://www.herodevs.com/vulnerability-directory/cve-2024-9506"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1333"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T16:15:06Z"
}
}
advisories/unreviewed/2024/10/GHSA-6p2j-228c-wmvm/GHSA-6p2j-228c-wmvm.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6p2j-228c-wmvm",
"modified": "2024-10-14T21:30:26Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-14T21:30:26Z",
"aliases": [
"CVE-2023-48082"
],
"details": "Nagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-14T19:15:10Z"
advisories/unreviewed/2024/10/GHSA-6rfh-8xcw-f6f2/GHSA-6rfh-8xcw-f6f2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6rfh-8xcw-f6f2",
"modified": "2024-10-15T15:30:55Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-15T15:30:55Z",
"aliases": [
"CVE-2024-48282"
],
"details": "A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the femail parameter in a POST HTTP request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T13:15:11Z"
advisories/unreviewed/2024/10/GHSA-72c9-vcqr-cxj8/GHSA-72c9-vcqr-cxj8.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-72c9-vcqr-cxj8",
"modified": "2024-10-14T18:30:26Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-14T18:30:26Z",
"aliases": [
"CVE-2024-48797"
],
"details": "An issue in PCS Engineering Preston Cinema (com.prestoncinema.app) 0.2.0 allows a remote attacker to obtain sensitive information via the firmware update process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-14T17:15:13Z"
advisories/unreviewed/2024/10/GHSA-75jw-84pf-jxc9/GHSA-75jw-84pf-jxc9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-75jw-84pf-jxc9",
"modified": "2024-10-15T15:30:54Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-15T15:30:54Z",
"aliases": [
"CVE-2024-48280"
],
"details": "A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T13:15:11Z"
advisories/unreviewed/2024/10/GHSA-7892-3f52-8277/GHSA-7892-3f52-8277.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/10/GHSA-7rc4-v56c-j5pm/GHSA-7rc4-v56c-j5pm.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7rc4-v56c-j5pm",
"modified": "2024-10-14T21:30:26Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-14T21:30:26Z",
"aliases": [
"CVE-2024-48822"
],
"details": "Privilege escalation in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the FtpConfig.php page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-14T21:15:11Z"
advisories/unreviewed/2024/10/GHSA-8f5f-8xpp-8qfr/GHSA-8f5f-8xpp-8qfr.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8f5f-8xpp-8qfr",
"modified": "2024-10-14T21:30:27Z",
"modified": "2024-10-15T18:30:49Z",
"published": "2024-10-14T21:30:26Z",
"aliases": [
"CVE-2024-48821"
],
"details": "Cross Site Scripting vulnerability in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the FtpConfig.php component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-14T21:15:11Z"

Some files were not shown because too many files have changed in this diff Show More