netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-02-18 15:32:17 +00:00
parent f28015d59f
commit e828a043c0
38 changed files with 556 additions and 86 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-xjgh-8jrf-3xgw/GHSA-xjgh-8jrf-3xgw.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xjgh-8jrf-3xgw",
"modified": "2022-05-24T19:01:48Z",
"modified": "2025-02-18T15:31:02Z",
"published": "2022-05-24T19:01:48Z",
"aliases": [
"CVE-2021-1906"
],
"details": "Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/09/GHSA-vp7q-rg64-pxr9/GHSA-vp7q-rg64-pxr9.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2023/03/GHSA-5j89-9926-36q5/GHSA-5j89-9926-36q5.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5j89-9926-36q5",
"modified": "2023-04-07T18:30:50Z",
"modified": "2025-02-18T15:31:04Z",
"published": "2023-03-31T18:30:22Z",
"aliases": [
"CVE-2023-26830"
advisories/unreviewed/2023/03/GHSA-f9v3-rvrm-52r5/GHSA-f9v3-rvrm-52r5.json
+2 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f9v3-rvrm-52r5",
"modified": "2023-04-06T18:30:19Z",
"modified": "2025-02-18T15:31:04Z",
"published": "2023-03-29T21:30:15Z",
"aliases": [
"CVE-2023-28508"
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120",
"CWE-787"
],
"severity": "HIGH",
advisories/unreviewed/2023/03/GHSA-pvmm-fgf7-r833/GHSA-pvmm-fgf7-r833.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pvmm-fgf7-r833",
"modified": "2023-04-06T18:30:19Z",
"modified": "2025-02-18T15:31:04Z",
"published": "2023-03-29T21:30:15Z",
"aliases": [
"CVE-2023-28507"
advisories/unreviewed/2023/04/GHSA-7fg2-xxpc-hg8m/GHSA-7fg2-xxpc-hg8m.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7fg2-xxpc-hg8m",
"modified": "2023-04-11T18:30:30Z",
"modified": "2025-02-18T15:31:05Z",
"published": "2023-04-04T00:30:15Z",
"aliases": [
"CVE-2023-24724"
@@ -19,6 +19,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24724"
},
{
"type": "WEB",
"url": "https://medium.com/%40williamamorim256/stored-xss-vulnerability-discovered-in-sas-9-4-admin-console-5680e9e4062c"
},
{
"type": "WEB",
"url": "https://medium.com/@williamamorim256/stored-xss-vulnerability-discovered-in-sas-9-4-admin-console-5680e9e4062c"
advisories/unreviewed/2023/04/GHSA-rfh2-62gc-x7hw/GHSA-rfh2-62gc-x7hw.json
+3 -1
View File
@@ -45,7 +45,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-400"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2023/04/GHSA-rgjq-f6gr-756j/GHSA-rgjq-f6gr-756j.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rgjq-f6gr-756j",
"modified": "2023-04-09T03:30:18Z",
"modified": "2025-02-18T15:31:05Z",
"published": "2023-04-04T00:30:15Z",
"aliases": [
"CVE-2023-26916"
@@ -23,6 +23,14 @@
"type": "WEB",
"url": "https://github.com/CESNET/libyang/issues/1979"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6NQZHCJG3SBMFOQNIPRZGKDK3ARHLTTB"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2VWGCMYKQH4BTFEHX5VYEXXOPIKKFHS"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6NQZHCJG3SBMFOQNIPRZGKDK3ARHLTTB"
advisories/unreviewed/2024/03/GHSA-4ph3-7qqh-5h7g/GHSA-4ph3-7qqh-5h7g.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4ph3-7qqh-5h7g",
"modified": "2024-03-11T21:31:27Z",
"modified": "2025-02-18T15:31:05Z",
"published": "2024-03-11T21:31:27Z",
"aliases": [
"CVE-2024-27229"
],
"details": "In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-476"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:48Z"
advisories/unreviewed/2024/03/GHSA-4xff-6v5v-4gj4/GHSA-4xff-6v5v-4gj4.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4xff-6v5v-4gj4",
"modified": "2024-03-06T00:31:26Z",
"modified": "2025-02-18T15:31:05Z",
"published": "2024-03-06T00:31:26Z",
"aliases": [
"CVE-2024-24276"
],
"details": "Cross Site Scripting (XSS) vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the chat name, message preview, username and group name components.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-05T23:15:07Z"
advisories/unreviewed/2024/03/GHSA-64pw-78r7-788g/GHSA-64pw-78r7-788g.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-64pw-78r7-788g",
"modified": "2024-03-11T21:31:25Z",
"modified": "2025-02-18T15:31:05Z",
"published": "2024-03-11T21:31:25Z",
"aliases": [
"CVE-2024-22011"
],
"details": "In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-125"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:47Z"
advisories/unreviewed/2024/03/GHSA-cqwq-wj9g-qgrx/GHSA-cqwq-wj9g-qgrx.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cqwq-wj9g-qgrx",
"modified": "2024-03-11T21:31:27Z",
"modified": "2025-02-18T15:31:05Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-27227"
],
"details": "Android kernel allows Remote code execution.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-787"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:48Z"
advisories/unreviewed/2024/03/GHSA-f43r-5jhm-fh67/GHSA-f43r-5jhm-fh67.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f43r-5jhm-fh67",
"modified": "2024-03-06T00:31:26Z",
"modified": "2025-02-18T15:31:05Z",
"published": "2024-03-06T00:31:26Z",
"aliases": [
"CVE-2024-24275"
],
"details": "Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-05T23:15:07Z"
advisories/unreviewed/2024/03/GHSA-fqh8-982r-rggm/GHSA-fqh8-982r-rggm.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fqh8-982r-rggm",
"modified": "2024-03-11T21:31:27Z",
"modified": "2025-02-18T15:31:05Z",
"published": "2024-03-11T21:31:27Z",
"aliases": [
"CVE-2024-27237"
],
"details": "In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-131"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:49Z"
advisories/unreviewed/2024/03/GHSA-v85c-wg53-qgrm/GHSA-v85c-wg53-qgrm.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v85c-wg53-qgrm",
"modified": "2024-03-11T21:31:26Z",
"modified": "2025-02-18T15:31:05Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-27218"
],
"details": "In update_freq_data of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-125"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:48Z"
advisories/unreviewed/2025/01/GHSA-37pg-r5mj-5q6w/GHSA-37pg-r5mj-5q6w.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-37pg-r5mj-5q6w",
"modified": "2025-02-02T12:30:24Z",
"modified": "2025-02-18T15:31:06Z",
"published": "2025-01-19T12:31:26Z",
"aliases": [
"CVE-2024-57912"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: zpa2326: fix information leak in triggered buffer\n\nThe 'sample' local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the temperature and the\ntimestamp (u32 pressure, u16 temperature, GAP, u64 timestamp).\nThis hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -44,8 +49,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-908"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-19T12:15:25Z"
advisories/unreviewed/2025/01/GHSA-52cr-8q5h-6fpf/GHSA-52cr-8q5h-6fpf.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-52cr-8q5h-6fpf",
"modified": "2025-01-19T12:31:26Z",
"modified": "2025-02-18T15:31:06Z",
"published": "2025-01-19T12:31:26Z",
"aliases": [
"CVE-2024-57909"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: bh1745: fix information leak in triggered buffer\n\nThe 'scan' local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-908"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-19T12:15:25Z"
advisories/unreviewed/2025/01/GHSA-6hmf-56g8-p898/GHSA-6hmf-56g8-p898.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6hmf-56g8-p898",
"modified": "2025-02-02T12:30:24Z",
"modified": "2025-02-18T15:31:06Z",
"published": "2025-01-19T12:31:26Z",
"aliases": [
"CVE-2024-57907"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: rockchip_saradc: fix information leak in triggered buffer\n\nThe 'data' local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -40,8 +45,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-908"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-19T12:15:24Z"
advisories/unreviewed/2025/01/GHSA-cm46-j2rc-99mf/GHSA-cm46-j2rc-99mf.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cm46-j2rc-99mf",
"modified": "2025-01-19T12:31:26Z",
"modified": "2025-02-18T15:31:06Z",
"published": "2025-01-19T12:31:26Z",
"aliases": [
"CVE-2024-57905"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-ads1119: fix information leak in triggered buffer\n\nThe 'scan' local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the sample (unsigned int)\nand the timestamp. This hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-908"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-19T12:15:24Z"
advisories/unreviewed/2025/01/GHSA-f5j6-wv5v-rgw9/GHSA-f5j6-wv5v-rgw9.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f5j6-wv5v-rgw9",
"modified": "2025-02-02T12:30:24Z",
"modified": "2025-02-18T15:31:06Z",
"published": "2025-01-19T12:31:26Z",
"aliases": [
"CVE-2024-57908"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: kmx61: fix information leak in triggered buffer\n\nThe 'buffer' local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -44,8 +49,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-908"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-19T12:15:24Z"

Some files were not shown because too many files have changed in this diff Show More