mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Advisory Database Sync
This commit is contained in:
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-498m-2jp9-66x5",
|
||||
"modified": "2022-02-11T00:01:10Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-02-08T00:00:31Z",
|
||||
"aliases": [
|
||||
"CVE-2021-43926"
|
||||
],
|
||||
"details": "Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-fgfm-hjh9-vxjr",
|
||||
"modified": "2022-02-11T00:01:09Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-02-08T00:00:30Z",
|
||||
"aliases": [
|
||||
"CVE-2022-22679"
|
||||
],
|
||||
"details": "Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to write arbitrary files via unspecified vectors.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-fhcm-g3vr-2xmr",
|
||||
"modified": "2022-02-11T00:01:11Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-02-08T00:00:31Z",
|
||||
"aliases": [
|
||||
"CVE-2022-22680"
|
||||
],
|
||||
"details": "Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to obtain sensitive information via unspecified vectors.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-vcp7-93pm-gh73",
|
||||
"modified": "2022-02-11T00:01:10Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-02-08T00:00:30Z",
|
||||
"aliases": [
|
||||
"CVE-2021-43927"
|
||||
],
|
||||
"details": "Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-vm8g-vm3g-c3rm",
|
||||
"modified": "2022-02-11T00:01:10Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-02-08T00:00:31Z",
|
||||
"aliases": [
|
||||
"CVE-2021-43925"
|
||||
],
|
||||
"details": "Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-m4px-ph3f-7964",
|
||||
"modified": "2022-04-30T00:02:19Z",
|
||||
"modified": "2025-01-14T21:31:36Z",
|
||||
"published": "2022-04-30T00:02:19Z",
|
||||
"aliases": [
|
||||
"CVE-2017-14491"
|
||||
@@ -31,6 +31,14 @@
|
||||
"type": "WEB",
|
||||
"url": "https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg11664.html"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.kb.cert.org/vuls/id/973527"
|
||||
@@ -71,6 +79,18 @@
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXRZ2W6TV6NLUJC5NOFBSG6PZSMDTYPV"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MMPCJOYPPL4B5RBY4U425PWG7EETDTD"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf"
|
||||
@@ -135,6 +155,10 @@
|
||||
"type": "WEB",
|
||||
"url": "http://thekelleys.org.uk/dnsmasq/CHANGELOG"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=0549c73b7ea6b22a3c49beb4d432f185a81efcbc"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-3p35-64mh-v96v",
|
||||
"modified": "2022-08-13T00:00:31Z",
|
||||
"modified": "2025-01-14T21:31:39Z",
|
||||
"published": "2022-05-24T16:53:18Z",
|
||||
"aliases": [
|
||||
"CVE-2019-9513"
|
||||
@@ -21,7 +21,15 @@
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2019:2692"
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
@@ -59,6 +67,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K02591030"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support&%3Butm_medium=RSS"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support&utm_medium=RSS"
|
||||
@@ -91,6 +103,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://www.synology.com/security/advisory/Synology_SA_19_33"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2019:2692"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2019:2745"
|
||||
@@ -157,11 +173,23 @@
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC"
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP"
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
@@ -189,7 +217,9 @@
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [],
|
||||
"cwe_ids": [
|
||||
"CWE-400"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
|
||||
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-487r-hmj9-h7h2",
|
||||
"modified": "2022-05-24T19:05:59Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-05-24T19:05:59Z",
|
||||
"aliases": [
|
||||
"CVE-2021-29084"
|
||||
],
|
||||
"details": "Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -30,7 +30,8 @@
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-119"
|
||||
"CWE-119",
|
||||
"CWE-121"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
|
||||
@@ -26,6 +26,7 @@
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-620",
|
||||
"CWE-640"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
|
||||
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-59pm-73xx-3pvc",
|
||||
"modified": "2022-05-24T19:06:01Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-05-24T19:06:01Z",
|
||||
"aliases": [
|
||||
"CVE-2021-27649"
|
||||
],
|
||||
"details": "Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -26,6 +26,7 @@
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-284",
|
||||
"CWE-74"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-6gw7-c226-vg73",
|
||||
"modified": "2022-08-06T00:00:49Z",
|
||||
"modified": "2025-01-14T21:31:40Z",
|
||||
"published": "2022-05-24T16:53:19Z",
|
||||
"aliases": [
|
||||
"CVE-2019-9516"
|
||||
@@ -23,6 +23,18 @@
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2019:2745"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS"
|
||||
@@ -67,6 +79,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K02591030"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support&%3Butm_medium=RSS"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support&utm_medium=RSS"
|
||||
@@ -145,7 +161,23 @@
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC"
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H472D5HPXN6RRXCNFML3BK5OYC52CXF2"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
@@ -170,6 +202,7 @@
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-400",
|
||||
"CWE-770"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-8292-4xc6-r7cv",
|
||||
"modified": "2023-05-17T03:30:15Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-05-24T19:02:57Z",
|
||||
"aliases": [
|
||||
"CVE-2021-31439"
|
||||
|
||||
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-88jq-fmhx-7gr3",
|
||||
"modified": "2022-05-24T19:03:45Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-05-24T19:03:45Z",
|
||||
"aliases": [
|
||||
"CVE-2021-29088"
|
||||
],
|
||||
"details": "Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-89fc-749h-w2fj",
|
||||
"modified": "2022-08-13T00:00:31Z",
|
||||
"modified": "2025-01-14T21:31:39Z",
|
||||
"published": "2022-05-24T16:53:17Z",
|
||||
"aliases": [
|
||||
"CVE-2019-9511"
|
||||
@@ -19,6 +19,18 @@
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2019:2692"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS"
|
||||
@@ -63,6 +75,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K02591030"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support&%3Butm_medium=RSS"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support&utm_medium=RSS"
|
||||
@@ -99,10 +115,6 @@
|
||||
"type": "WEB",
|
||||
"url": "https://www.synology.com/security/advisory/Synology_SA_19_33"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2019:2692"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2019:2745"
|
||||
@@ -183,6 +195,22 @@
|
||||
"type": "WEB",
|
||||
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10296"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
|
||||
@@ -210,6 +238,7 @@
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-400",
|
||||
"CWE-770"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
|
||||
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-8mf3-6333-x5rm",
|
||||
"modified": "2022-05-24T17:32:36Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-05-24T17:32:36Z",
|
||||
"aliases": [
|
||||
"CVE-2020-27656"
|
||||
],
|
||||
"details": "Cleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to eavesdrop authentication information of DNSExit via unspecified vectors.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -1,13 +1,18 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-8rp4-gqh3-jpxm",
|
||||
"modified": "2022-05-24T17:43:19Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-05-24T17:43:19Z",
|
||||
"aliases": [
|
||||
"CVE-2021-26565"
|
||||
],
|
||||
"details": "Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-9259-5376-vjcj",
|
||||
"modified": "2022-08-13T00:00:31Z",
|
||||
"modified": "2025-01-14T21:31:39Z",
|
||||
"published": "2022-05-24T16:53:20Z",
|
||||
"aliases": [
|
||||
"CVE-2019-9515"
|
||||
@@ -19,26 +19,34 @@
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://kb.cert.org/vuls/id/605641"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10296"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04@%3Cusers.trafficserver.apache.org%3E"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19%40%3Cannounce.trafficserver.apache.org%3E"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19@%3Cannounce.trafficserver.apache.org%3E"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7%40%3Cdev.trafficserver.apache.org%3E"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7@%3Cdev.trafficserver.apache.org%3E"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC"
|
||||
@@ -67,6 +75,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K50233772"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K50233772?utm_source=f5support&%3Butm_medium=RSS"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://support.f5.com/csp/article/K50233772?utm_source=f5support&utm_medium=RSS"
|
||||
@@ -159,6 +171,18 @@
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://kb.cert.org/vuls/id/605641"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10296"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04%40%3Cusers.trafficserver.apache.org%3E"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
|
||||
@@ -174,6 +198,7 @@
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-400",
|
||||
"CWE-770"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-932g-58jj-wp5q",
|
||||
"modified": "2023-09-14T18:32:37Z",
|
||||
"modified": "2025-01-14T21:31:41Z",
|
||||
"published": "2022-05-24T17:07:01Z",
|
||||
"aliases": [
|
||||
"CVE-2019-19344"
|
||||
@@ -27,6 +27,14 @@
|
||||
"type": "WEB",
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY"
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user