netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2023-07-06 03:32:00 +00:00
parent 4cc1adac90
commit e4b2594814
53 changed files with 1728 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/06/GHSA-3vjj-f6mx-v6mf/GHSA-3vjj-f6mx-v6mf.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3vjj-f6mx-v6mf",
"modified": "2023-06-28T18:30:26Z",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-06-28T18:30:26Z",
"aliases": [
"CVE-2023-21183"
],
"details": "In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235863754",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
advisories/unreviewed/2023/06/GHSA-82j3-37rp-v59p/GHSA-82j3-37rp-v59p.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-82j3-37rp-v59p",
"modified": "2023-06-28T18:30:26Z",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-06-28T18:30:26Z",
"aliases": [
"CVE-2023-21181"
],
"details": "In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264880969",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/06/GHSA-8q9j-479x-6g5g/GHSA-8q9j-479x-6g5g.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8q9j-479x-6g5g",
"modified": "2023-06-28T18:30:26Z",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-06-28T18:30:26Z",
"aliases": [
"CVE-2023-21210"
],
"details": "In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236331",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/06/GHSA-cx5j-85rf-rq2m/GHSA-cx5j-85rf-rq2m.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cx5j-85rf-rq2m",
"modified": "2023-06-28T18:30:25Z",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-06-28T18:30:25Z",
"aliases": [
"CVE-2023-21167"
],
"details": "In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259942964",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/06/GHSA-jh4x-45p8-48r4/GHSA-jh4x-45p8-48r4.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jh4x-45p8-48r4",
"modified": "2023-06-28T18:30:25Z",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-06-28T18:30:25Z",
"aliases": [
"CVE-2023-21161"
],
"details": "In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783702References: N/A",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/06/GHSA-phhq-j3pr-xv78/GHSA-phhq-j3pr-xv78.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-phhq-j3pr-xv78",
"modified": "2023-06-28T18:30:26Z",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-06-28T18:30:26Z",
"aliases": [
"CVE-2023-21211"
],
"details": "In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235998",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/06/GHSA-r74p-fm7h-v58h/GHSA-r74p-fm7h-v58h.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r74p-fm7h-v58h",
"modified": "2023-06-28T18:30:26Z",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-06-28T18:30:26Z",
"aliases": [
"CVE-2023-21180"
],
"details": "In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261365944",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/06/GHSA-x5v3-9hgf-599q/GHSA-x5v3-9hgf-599q.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x5v3-9hgf-599q",
"modified": "2023-06-27T06:30:43Z",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-06-27T06:30:43Z",
"aliases": [
"CVE-2023-3411"
advisories/unreviewed/2023/06/GHSA-xwcr-4pfv-3qm8/GHSA-xwcr-4pfv-3qm8.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xwcr-4pfv-3qm8",
"modified": "2023-06-28T18:30:26Z",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-06-28T18:30:26Z",
"aliases": [
"CVE-2023-21182"
],
"details": "In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252764175",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-2jjp-c35x-v2v9/GHSA-2jjp-c35x-v2v9.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2jjp-c35x-v2v9",
"modified": "2023-07-06T03:30:45Z",
"published": "2023-07-06T03:30:45Z",
"aliases": [
"CVE-2023-30670"
],
"details": "Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30670"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-2xph-w2r8-f9pw/GHSA-2xph-w2r8-f9pw.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2xph-w2r8-f9pw",
"modified": "2023-07-06T03:30:44Z",
"published": "2023-07-06T03:30:44Z",
"aliases": [
"CVE-2023-30642"
],
"details": "Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilege function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30642"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-36wc-2jgf-p9gp/GHSA-36wc-2jgf-p9gp.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-36wc-2jgf-p9gp",
"modified": "2023-07-06T03:30:45Z",
"published": "2023-07-06T03:30:45Z",
"aliases": [
"CVE-2023-30677"
],
"details": "Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on a certain state of an unlocked device.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30677"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07"
}
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-48cv-xv53-cgjf/GHSA-48cv-xv53-cgjf.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-48cv-xv53-cgjf",
"modified": "2023-07-06T03:30:45Z",
"published": "2023-07-06T03:30:45Z",
"aliases": [
"CVE-2023-30673"
],
"details": "Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attackers to delete arbitrary directory using directory junction.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30673"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07"
}
],
"database_specific": {
"cwe_ids": [
"CWE-354"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-49vx-vwj9-q95m/GHSA-49vx-vwj9-q95m.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-49vx-vwj9-q95m",
"modified": "2023-07-06T03:30:43Z",
"published": "2023-07-06T03:30:43Z",
"aliases": [
"CVE-2023-24256"
],
"details": "An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24256"
},
{
"type": "WEB",
"url": "https://github.com/hhj4ck/JailBreakEC6/blob/main/BugReport.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-4c89-hmqm-65h7/GHSA-4c89-hmqm-65h7.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4c89-hmqm-65h7",
"modified": "2023-07-06T03:30:45Z",
"published": "2023-07-06T03:30:45Z",
"aliases": [
"CVE-2023-30672"
],
"details": "Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.23043_3 allows attackers to cause permanent DoS via directory junction.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30672"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-4h27-fj22-482r/GHSA-4h27-fj22-482r.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4h27-fj22-482r",
"modified": "2023-07-06T03:30:45Z",
"published": "2023-07-06T03:30:45Z",
"aliases": [
"CVE-2023-30661"
],
"details": "Exposure of Sensitive Information vulnerability in getChipInfos in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB chipset Identifier.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30661"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-5jxc-mmv9-x77x/GHSA-5jxc-mmv9-x77x.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5jxc-mmv9-x77x",
"modified": "2023-07-06T03:30:44Z",
"published": "2023-07-06T03:30:44Z",
"aliases": [
"CVE-2023-30645"
],
"details": "Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30645"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-6g4h-q5wf-4cv7/GHSA-6g4h-q5wf-4cv7.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6g4h-q5wf-4cv7",
"modified": "2023-07-06T03:30:45Z",
"published": "2023-07-06T03:30:45Z",
"aliases": [
"CVE-2023-30666"
],
"details": "Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30666"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-6p4h-xvj3-j477/GHSA-6p4h-xvj3-j477.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6p4h-xvj3-j477",
"modified": "2023-07-06T03:30:45Z",
"published": "2023-07-06T03:30:45Z",
"aliases": [
"CVE-2023-30678"
],
"details": "Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows attackers to write arbitrary file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30678"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-83q5-ph4f-qx3w/GHSA-83q5-ph4f-qx3w.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-83q5-ph4f-qx3w",
"modified": "2023-07-06T03:30:44Z",
"published": "2023-07-06T03:30:44Z",
"aliases": [
"CVE-2023-29656"
],
"details": "An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control \"antigena\" actions(block/unblock traffic) from the mobile application. This vulnerability could create a \"shutdown\", blocking all ingress or egress traffic in the entire infrastructure where darktrace agents are deployed.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29656"
},
{
"type": "WEB",
"url": "https://darktrace.com"
},
{
"type": "WEB",
"url": "https://ramihub.github.io/"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}

Some files were not shown because too many files have changed in this diff Show More