mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Advisory Database Sync
This commit is contained in:
advisory-database[bot]
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-236f-m6gm-vp93",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52944"
|
||||
],
|
||||
"details": "An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52944"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.veritas.com/support/en_US/security/VTS24-013"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T06:15:06Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-3fvw-4j76-wpj7",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52922"
|
||||
],
|
||||
"details": "In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52922"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/11/05/cb-stall-hindering-propagation"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:05Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,35 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-3r2v-8348-hx3r",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52946"
|
||||
],
|
||||
"details": "An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an \"Adaptative authentication rule\" with an increment instead of an absolute value.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52946"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3255"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T06:15:06Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,35 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-425w-xhjg-hfcm",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52947"
|
||||
],
|
||||
"details": "A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter of the upgrade session confirmation page (upgradeSession / forceUpgrade) if the \"Upgrade session\" plugin has been enabled by an admin",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52947"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3257"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T06:15:06Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,42 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-48rr-fh2m-hhjh",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-11309"
|
||||
],
|
||||
"details": "The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11309"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-8243-3d818-2.html"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-8242-384a1-1.html"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-23"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T06:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-4w2f-m236-fggc",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52943"
|
||||
],
|
||||
"details": "An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52943"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.veritas.com/support/en_US/security/VTS24-013"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T06:15:05Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-7ph6-jpfh-8f79",
|
||||
"modified": "2024-11-18T06:30:35Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52914"
|
||||
],
|
||||
"details": "In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52914"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/07/03/disclose-orphan-dos"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-fx2f-v4hx-q8h6",
|
||||
"modified": "2024-11-18T06:30:35Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52917"
|
||||
],
|
||||
"details": "Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52917"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/07/31/disclose-upnp-oom"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-h7hm-94xj-mhpm",
|
||||
"modified": "2024-11-18T06:30:35Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52913"
|
||||
],
|
||||
"details": "In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52913"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/07/03/disclose_already_asked_for"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-hcpj-7xxx-7pm4",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52945"
|
||||
],
|
||||
"details": "An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52945"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.veritas.com/content/support/en_US/security/VTS24-012"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T06:15:06Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,42 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-hjr8-c78p-hrvc",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-11310"
|
||||
],
|
||||
"details": "The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11310"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-8245-ad7d7-2.html"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-8244-c45b5-1.html"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-23"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T06:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-m86g-cwq8-wqrm",
|
||||
"modified": "2024-11-18T06:30:35Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52915"
|
||||
],
|
||||
"details": "Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52915"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/07/03/disclose-inv-buffer-blowup"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,35 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-mh9h-44jv-cw34",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-43704"
|
||||
],
|
||||
"details": "Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43704"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-668"
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T05:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-mxcf-88m3-99v7",
|
||||
"modified": "2024-11-18T06:30:35Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52912"
|
||||
],
|
||||
"details": "Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connecting peers) and an abs64 logic bug.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52912"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/07/03/disclose-timestamp-overflow"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-px5f-j76h-8w39",
|
||||
"modified": "2024-11-18T06:30:35Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2019-25220"
|
||||
],
|
||||
"details": "Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a \"Chain Width Expansion\" attack) because a node does not first verify that a presented chain has enough work before committing to store it.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25220"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/09/18/disclose-headers-oom"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-October/017354.html"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-qcrh-jqxf-mgm4",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52926"
|
||||
],
|
||||
"details": "Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52926"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://docs.delinea.com/online-help/privilege-manager/release-notes/12.0.2-combined.htm"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:05Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-qcxm-3xrq-pj5f",
|
||||
"modified": "2024-11-18T06:30:35Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52916"
|
||||
],
|
||||
"details": "Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty headers.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52916"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/07/03/disclose-header-spam"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-qwp9-p9rr-h729",
|
||||
"modified": "2024-11-18T06:30:35Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52919"
|
||||
],
|
||||
"details": "Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via a flood of addr messages.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52919"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/07/31/disclose-addrman-int-overflow"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-r2ph-vgmf-8gqh",
|
||||
"modified": "2024-11-18T06:30:36Z",
|
||||
"published": "2024-11-18T06:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52940"
|
||||
],
|
||||
"details": "AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52940"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://download.anydesk.com/changelog.txt"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/ebrasha/abdal-anydesk-remote-ip-detector"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://x.com/ProfShafiei/status/1850856458017009830"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T05:15:05Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-rxgg-vpm5-pccw",
|
||||
"modified": "2024-11-18T06:30:35Z",
|
||||
"published": "2024-11-18T06:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-52921"
|
||||
],
|
||||
"details": "In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52921"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://bitcoincore.org/en/2024/10/08/disclose-mutated-blocks-hindering-propagation"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-11-18T04:15:05Z"
|
||||
}
|
||||
}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user