netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-02-21 21:33:34 +00:00
parent 40f6f01303
commit dcb20670c4
41 changed files with 578 additions and 86 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/04/GHSA-349c-6q2h-wwhm/GHSA-349c-6q2h-wwhm.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-349c-6q2h-wwhm",
"modified": "2024-04-29T06:30:42Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-04-29T06:30:42Z",
"aliases": [
"CVE-2024-33551"
],
"details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5.\n\n",
"details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/04/GHSA-894f-rh68-m2vm/GHSA-894f-rh68-m2vm.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-894f-rh68-m2vm",
"modified": "2024-04-29T06:30:42Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-04-29T06:30:42Z",
"aliases": [
"CVE-2024-33554"
],
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core allows Reflected XSS.This issue affects XStore Core: from n/a through 5.3.5.\n\n",
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core allows Reflected XSS.This issue affects XStore Core: from n/a through 5.3.5.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/04/GHSA-fwrh-xmxv-qj39/GHSA-fwrh-xmxv-qj39.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fwrh-xmxv-qj39",
"modified": "2024-04-29T09:31:52Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-04-29T09:31:52Z",
"aliases": [
"CVE-2024-33553"
],
"details": "Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.\n\n",
"details": "Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/05/GHSA-2462-qrqm-7hxr/GHSA-2462-qrqm-7hxr.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2462-qrqm-7hxr",
"modified": "2024-05-01T21:30:34Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-01T21:30:34Z",
"aliases": [
"CVE-2023-23021"
],
"details": "Cross Site Scripting (XSS) vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-01T19:15:21Z"
advisories/unreviewed/2024/05/GHSA-2gpg-5qhm-v86q/GHSA-2gpg-5qhm-v86q.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2gpg-5qhm-v86q",
"modified": "2024-05-20T06:30:34Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T06:30:34Z",
"aliases": [
"CVE-2024-5115"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-3cwv-x695-72xm/GHSA-3cwv-x695-72xm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3cwv-x695-72xm",
"modified": "2024-05-20T00:30:26Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T00:30:26Z",
"aliases": [
"CVE-2024-5108"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-3wv2-ww7w-98gm/GHSA-3wv2-ww7w-98gm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3wv2-ww7w-98gm",
"modified": "2024-05-20T03:30:30Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T03:30:30Z",
"aliases": [
"CVE-2024-5110"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-677j-rh7m-pr6j/GHSA-677j-rh7m-pr6j.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-677j-rh7m-pr6j",
"modified": "2024-05-20T03:30:29Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T03:30:29Z",
"aliases": [
"CVE-2024-5109"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-7x39-8rpm-5hm4/GHSA-7x39-8rpm-5hm4.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7x39-8rpm-5hm4",
"modified": "2024-05-01T21:30:36Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-01T21:30:36Z",
"aliases": [
"CVE-2023-23022"
],
"details": "Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, from_date and to_date inputs in file Main.php.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-01T19:15:21Z"
advisories/unreviewed/2024/05/GHSA-8gq8-vqf9-3x48/GHSA-8gq8-vqf9-3x48.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8gq8-vqf9-3x48",
"modified": "2024-05-20T03:30:30Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T03:30:30Z",
"aliases": [
"CVE-2024-5111"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-97q3-wprp-9xjv/GHSA-97q3-wprp-9xjv.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-97q3-wprp-9xjv",
"modified": "2024-05-20T03:30:30Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T03:30:30Z",
"aliases": [
"CVE-2024-5113"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-9q3j-vp3j-6rc7/GHSA-9q3j-vp3j-6rc7.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9q3j-vp3j-6rc7",
"modified": "2024-05-20T03:30:30Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T03:30:30Z",
"aliases": [
"CVE-2024-5112"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-9qvh-qx28-p5p7/GHSA-9qvh-qx28-p5p7.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9qvh-qx28-p5p7",
"modified": "2024-05-20T03:30:31Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T03:30:31Z",
"aliases": [
"CVE-2024-5114"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-9x94-xcqm-57hf/GHSA-9x94-xcqm-57hf.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9x94-xcqm-57hf",
"modified": "2024-05-20T09:30:50Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T09:30:50Z",
"aliases": [
"CVE-2024-5136"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-j7cp-f9gr-cjj8/GHSA-j7cp-f9gr-cjj8.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j7cp-f9gr-cjj8",
"modified": "2024-05-20T00:30:26Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T00:30:26Z",
"aliases": [
"CVE-2024-5107"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-jrjg-p2fp-6rhw/GHSA-jrjg-p2fp-6rhw.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jrjg-p2fp-6rhw",
"modified": "2024-05-20T09:30:50Z",
"modified": "2025-02-21T21:32:03Z",
"published": "2024-05-20T09:30:50Z",
"aliases": [
"CVE-2024-5135"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2025/02/GHSA-27wp-chg4-ffw3/GHSA-27wp-chg4-ffw3.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27wp-chg4-ffw3",
"modified": "2025-02-21T18:31:13Z",
"modified": "2025-02-21T21:32:07Z",
"published": "2025-02-21T18:31:13Z",
"aliases": [
"CVE-2025-26013"
],
"details": "An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-540"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-21T16:15:33Z"
advisories/unreviewed/2025/02/GHSA-3vwg-x7c5-rg6m/GHSA-3vwg-x7c5-rg6m.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3vwg-x7c5-rg6m",
"modified": "2025-02-21T18:31:14Z",
"modified": "2025-02-21T21:32:07Z",
"published": "2025-02-21T18:31:14Z",
"aliases": [
"CVE-2025-25505"
],
"details": "Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-120"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-21T17:15:14Z"
advisories/unreviewed/2025/02/GHSA-472m-7rg9-p78j/GHSA-472m-7rg9-p78j.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-472m-7rg9-p78j",
"modified": "2025-02-21T21:32:07Z",
"published": "2025-02-21T21:32:07Z",
"aliases": [
"CVE-2020-19248"
],
"details": "SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-19248"
},
{
"type": "WEB",
"url": "https://github.com/SticKManII/SticKManII.github.io/tree/master/2019/07/31/PbootCMSv1-4-1-%E5%89%8D%E5%8F%B0%E6%90%9C%E7%B4%A2%E9%A1%B5%E9%9D%A2%E6%A8%A1%E6%9D%BF%E6%B3%A8%E5%85%A5"
},
{
"type": "WEB",
"url": "https://unh3x.github.io/2019/07/19/PbootCMSv1.4.1_Template_Injection"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-21T19:15:10Z"
}
}
advisories/unreviewed/2025/02/GHSA-4hwx-j6w8-9w2r/GHSA-4hwx-j6w8-9w2r.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4hwx-j6w8-9w2r",
"modified": "2025-02-21T21:32:08Z",
"published": "2025-02-21T21:32:08Z",
"aliases": [
"CVE-2025-25767"
],
"details": "A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25767"
},
{
"type": "WEB",
"url": "https://flowus.cn/share/a6170a19-032b-462d-8bf9-06ab139f78ba"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-21T19:15:14Z"
}
}

Some files were not shown because too many files have changed in this diff Show More