diff --git a/advisories/github-reviewed/2018/11/GHSA-mh6f-8j2x-4483/GHSA-mh6f-8j2x-4483.json b/advisories/github-reviewed/2018/11/GHSA-mh6f-8j2x-4483/GHSA-mh6f-8j2x-4483.json index b7c6b38afb3..873fe73e2de 100644 --- a/advisories/github-reviewed/2018/11/GHSA-mh6f-8j2x-4483/GHSA-mh6f-8j2x-4483.json +++ b/advisories/github-reviewed/2018/11/GHSA-mh6f-8j2x-4483/GHSA-mh6f-8j2x-4483.json @@ -3,9 +3,7 @@ "id": "GHSA-mh6f-8j2x-4483", "modified": "2021-09-15T20:08:26Z", "published": "2018-11-26T23:58:21Z", - "aliases": [ - - ], + "aliases": [], "summary": "Critical severity vulnerability that affects event-stream and flatmap-stream", "details": "The NPM package `flatmap-stream` is considered malicious. A malicious actor added this package as a dependency to the NPM `event-stream` package in version `3.3.6`. Users of `event-stream` are encouraged to downgrade to the last non-malicious version, `3.3.4`, or upgrade to the latest 4.x version. \n\nUsers of `flatmap-stream` are encouraged to remove the dependency entirely.\n", "severity": [ diff --git a/advisories/github-reviewed/2022/05/GHSA-28cq-6rmx-pjq4/GHSA-28cq-6rmx-pjq4.json b/advisories/github-reviewed/2022/05/GHSA-28cq-6rmx-pjq4/GHSA-28cq-6rmx-pjq4.json index f9afb099744..adb8f255560 100644 --- a/advisories/github-reviewed/2022/05/GHSA-28cq-6rmx-pjq4/GHSA-28cq-6rmx-pjq4.json +++ b/advisories/github-reviewed/2022/05/GHSA-28cq-6rmx-pjq4/GHSA-28cq-6rmx-pjq4.json @@ -8,9 +8,7 @@ ], "summary": "Improper Authentication in Apache Tomcat", "details": "The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-hrgc-54mv-58gv/GHSA-hrgc-54mv-58gv.json b/advisories/github-reviewed/2022/05/GHSA-hrgc-54mv-58gv/GHSA-hrgc-54mv-58gv.json index 5bdca93bceb..9a4e490a1e4 100644 --- a/advisories/github-reviewed/2022/05/GHSA-hrgc-54mv-58gv/GHSA-hrgc-54mv-58gv.json +++ b/advisories/github-reviewed/2022/05/GHSA-hrgc-54mv-58gv/GHSA-hrgc-54mv-58gv.json @@ -8,9 +8,7 @@ ], "summary": "Denial of service in Apache Struts", "details": "Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -71,9 +69,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-11-03T19:12:17Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-wwq7-pxwc-p4rc/GHSA-wwq7-pxwc-p4rc.json b/advisories/github-reviewed/2022/05/GHSA-wwq7-pxwc-p4rc/GHSA-wwq7-pxwc-p4rc.json index dab741ce99c..4ce3f1ca3ce 100644 --- a/advisories/github-reviewed/2022/05/GHSA-wwq7-pxwc-p4rc/GHSA-wwq7-pxwc-p4rc.json +++ b/advisories/github-reviewed/2022/05/GHSA-wwq7-pxwc-p4rc/GHSA-wwq7-pxwc-p4rc.json @@ -8,9 +8,7 @@ ], "summary": "Improper Input Validation in Apache Axis2", "details": "Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/02/GHSA-3hwc-rqwp-v36q/GHSA-3hwc-rqwp-v36q.json b/advisories/github-reviewed/2024/02/GHSA-3hwc-rqwp-v36q/GHSA-3hwc-rqwp-v36q.json index 0c497d9bf70..b4407488fe5 100644 --- a/advisories/github-reviewed/2024/02/GHSA-3hwc-rqwp-v36q/GHSA-3hwc-rqwp-v36q.json +++ b/advisories/github-reviewed/2024/02/GHSA-3hwc-rqwp-v36q/GHSA-3hwc-rqwp-v36q.json @@ -8,9 +8,7 @@ ], "summary": "Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies", "details": "Insufficiently Protected Credentials vulnerability in Apache Solr.\n\nThis issue affects Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.3.0.\nOne of the two endpoints that publishes the Solr process' Java system properties, /admin/info/properties, was only setup to hide system properties that had \"password\" contained in the name.\nThere are a number of sensitive system properties, such as \"basicauth\" and \"aws.secretKey\" do not contain \"password\", thus their values were published via the \"/admin/info/properties\" endpoint.\nThis endpoint populates the list of System Properties on the home screen of the Solr Admin page, making the exposed credentials visible in the UI.\n\nThis /admin/info/properties endpoint is protected under the \"config-read\" permission.\nTherefore, Solr Clouds with Authorization enabled will only be vulnerable through logged-in users that have the \"config-read\" permission.\nUsers are recommended to upgrade to version 9.3.0 or 8.11.3, both of which fix the issue.\nA single option now controls hiding Java system property for all endpoints, \"-Dsolr.hiddenSysProps\".\nBy default all known sensitive properties are hidden (including \"-Dbasicauth\"), as well as any property with a name containing \"secret\" or \"password\".\n\nUsers who cannot upgrade can also use the following Java system property to fix the issue:\n  `-Dsolr.redaction.system.pattern=.*(password|secret|basicauth).*`", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/02/GHSA-4wxw-42wx-2wfx/GHSA-4wxw-42wx-2wfx.json b/advisories/github-reviewed/2024/02/GHSA-4wxw-42wx-2wfx/GHSA-4wxw-42wx-2wfx.json index a75bf9b9fd6..6639e9d56fe 100644 --- a/advisories/github-reviewed/2024/02/GHSA-4wxw-42wx-2wfx/GHSA-4wxw-42wx-2wfx.json +++ b/advisories/github-reviewed/2024/02/GHSA-4wxw-42wx-2wfx/GHSA-4wxw-42wx-2wfx.json @@ -8,9 +8,7 @@ ], "summary": "Apache Solr Schema Designer blindly \"trusts\" all configsets", "details": "Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr.\n\nThis issue affects Apache Solr from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0.\n\nThe Schema Designer was introduced to allow users to more easily configure and test new Schemas and configSets.\nHowever, when the feature was created, the \"trust\" (authentication) of these configSets was not considered.\nExternal library loading is only available to configSets that are \"trusted\" (created by authenticated users), thus non-authenticated users are unable to perform Remote Code Execution.\nSince the Schema Designer loaded configSets without taking their \"trust\" into account, configSets that were created by unauthenticated users were allowed to load external libraries when used in the Schema Designer.\n\nUsers are recommended to upgrade to version 9.3.0 or 8.11.3, both of which fix the issue.\n\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/02/GHSA-78xj-cgh5-2h22/GHSA-78xj-cgh5-2h22.json b/advisories/github-reviewed/2024/02/GHSA-78xj-cgh5-2h22/GHSA-78xj-cgh5-2h22.json index 33f8f23c64f..cfdd2a88584 100644 --- a/advisories/github-reviewed/2024/02/GHSA-78xj-cgh5-2h22/GHSA-78xj-cgh5-2h22.json +++ b/advisories/github-reviewed/2024/02/GHSA-78xj-cgh5-2h22/GHSA-78xj-cgh5-2h22.json @@ -8,9 +8,7 @@ ], "summary": "NPM IP package incorrectly identifies some private IP addresses as public", "details": "The `isPublic()` function in the NPM package `ip` doesn't correctly identify certain private IP addresses in uncommon formats such as `0x7F.1` as private. Instead, it reports them as public by returning `true`. This can lead to security issues such as Server-Side Request Forgery (SSRF) if `isPublic()` is used to protect sensitive code paths when passed user input. Versions 1.1.9 and 2.0.1 fix the issue.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/unreviewed/2021/12/GHSA-g4wc-2gqq-5g7v/GHSA-g4wc-2gqq-5g7v.json b/advisories/unreviewed/2021/12/GHSA-g4wc-2gqq-5g7v/GHSA-g4wc-2gqq-5g7v.json index e2857638037..e30bedc2e95 100644 --- a/advisories/unreviewed/2021/12/GHSA-g4wc-2gqq-5g7v/GHSA-g4wc-2gqq-5g7v.json +++ b/advisories/unreviewed/2021/12/GHSA-g4wc-2gqq-5g7v/GHSA-g4wc-2gqq-5g7v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3vgv-pgwc-8f57/GHSA-3vgv-pgwc-8f57.json b/advisories/unreviewed/2022/04/GHSA-3vgv-pgwc-8f57/GHSA-3vgv-pgwc-8f57.json index aff4681ac55..0b13df186d3 100644 --- a/advisories/unreviewed/2022/04/GHSA-3vgv-pgwc-8f57/GHSA-3vgv-pgwc-8f57.json +++ b/advisories/unreviewed/2022/04/GHSA-3vgv-pgwc-8f57/GHSA-3vgv-pgwc-8f57.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-69rx-rcww-qf58/GHSA-69rx-rcww-qf58.json b/advisories/unreviewed/2022/04/GHSA-69rx-rcww-qf58/GHSA-69rx-rcww-qf58.json index 11b6e412da8..03ddd48af7d 100644 --- a/advisories/unreviewed/2022/04/GHSA-69rx-rcww-qf58/GHSA-69rx-rcww-qf58.json +++ b/advisories/unreviewed/2022/04/GHSA-69rx-rcww-qf58/GHSA-69rx-rcww-qf58.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-6m44-c224-92xx/GHSA-6m44-c224-92xx.json b/advisories/unreviewed/2022/04/GHSA-6m44-c224-92xx/GHSA-6m44-c224-92xx.json index 003df624ec2..233dc02383b 100644 --- a/advisories/unreviewed/2022/04/GHSA-6m44-c224-92xx/GHSA-6m44-c224-92xx.json +++ b/advisories/unreviewed/2022/04/GHSA-6m44-c224-92xx/GHSA-6m44-c224-92xx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-727m-cq8c-8qrv/GHSA-727m-cq8c-8qrv.json b/advisories/unreviewed/2022/04/GHSA-727m-cq8c-8qrv/GHSA-727m-cq8c-8qrv.json index 499d784d330..1200cdf87a8 100644 --- a/advisories/unreviewed/2022/04/GHSA-727m-cq8c-8qrv/GHSA-727m-cq8c-8qrv.json +++ b/advisories/unreviewed/2022/04/GHSA-727m-cq8c-8qrv/GHSA-727m-cq8c-8qrv.json @@ -7,12 +7,8 @@ "CVE-2003-0836" ], "details": "Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with \"Connect\" privileges to execute arbitrary code via a LOAD command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-746g-hg8c-j9cg/GHSA-746g-hg8c-j9cg.json b/advisories/unreviewed/2022/04/GHSA-746g-hg8c-j9cg/GHSA-746g-hg8c-j9cg.json index c3bf43189f7..5f1164e94c7 100644 --- a/advisories/unreviewed/2022/04/GHSA-746g-hg8c-j9cg/GHSA-746g-hg8c-j9cg.json +++ b/advisories/unreviewed/2022/04/GHSA-746g-hg8c-j9cg/GHSA-746g-hg8c-j9cg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7hcc-g6hm-h786/GHSA-7hcc-g6hm-h786.json b/advisories/unreviewed/2022/04/GHSA-7hcc-g6hm-h786/GHSA-7hcc-g6hm-h786.json index 4aa047a9db7..b09d1a05675 100644 --- a/advisories/unreviewed/2022/04/GHSA-7hcc-g6hm-h786/GHSA-7hcc-g6hm-h786.json +++ b/advisories/unreviewed/2022/04/GHSA-7hcc-g6hm-h786/GHSA-7hcc-g6hm-h786.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-832g-rwmf-rc6m/GHSA-832g-rwmf-rc6m.json b/advisories/unreviewed/2022/04/GHSA-832g-rwmf-rc6m/GHSA-832g-rwmf-rc6m.json index 10632c4ad9c..f5efc9a04fa 100644 --- a/advisories/unreviewed/2022/04/GHSA-832g-rwmf-rc6m/GHSA-832g-rwmf-rc6m.json +++ b/advisories/unreviewed/2022/04/GHSA-832g-rwmf-rc6m/GHSA-832g-rwmf-rc6m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-885f-x463-v454/GHSA-885f-x463-v454.json b/advisories/unreviewed/2022/04/GHSA-885f-x463-v454/GHSA-885f-x463-v454.json index a1a2696d35a..6a637eec2bc 100644 --- a/advisories/unreviewed/2022/04/GHSA-885f-x463-v454/GHSA-885f-x463-v454.json +++ b/advisories/unreviewed/2022/04/GHSA-885f-x463-v454/GHSA-885f-x463-v454.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8ffw-58mq-48w9/GHSA-8ffw-58mq-48w9.json b/advisories/unreviewed/2022/04/GHSA-8ffw-58mq-48w9/GHSA-8ffw-58mq-48w9.json index a4ecf9584d4..25989085ff5 100644 --- a/advisories/unreviewed/2022/04/GHSA-8ffw-58mq-48w9/GHSA-8ffw-58mq-48w9.json +++ b/advisories/unreviewed/2022/04/GHSA-8ffw-58mq-48w9/GHSA-8ffw-58mq-48w9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-c29f-v77w-5564/GHSA-c29f-v77w-5564.json b/advisories/unreviewed/2022/04/GHSA-c29f-v77w-5564/GHSA-c29f-v77w-5564.json index 322c4785f49..7afd8998648 100644 --- a/advisories/unreviewed/2022/04/GHSA-c29f-v77w-5564/GHSA-c29f-v77w-5564.json +++ b/advisories/unreviewed/2022/04/GHSA-c29f-v77w-5564/GHSA-c29f-v77w-5564.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-c8cf-4f7h-ccj4/GHSA-c8cf-4f7h-ccj4.json b/advisories/unreviewed/2022/04/GHSA-c8cf-4f7h-ccj4/GHSA-c8cf-4f7h-ccj4.json index 03bba634658..0adca9fa0e7 100644 --- a/advisories/unreviewed/2022/04/GHSA-c8cf-4f7h-ccj4/GHSA-c8cf-4f7h-ccj4.json +++ b/advisories/unreviewed/2022/04/GHSA-c8cf-4f7h-ccj4/GHSA-c8cf-4f7h-ccj4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-ffwc-j4xg-37cv/GHSA-ffwc-j4xg-37cv.json b/advisories/unreviewed/2022/04/GHSA-ffwc-j4xg-37cv/GHSA-ffwc-j4xg-37cv.json index 846d6a02814..68b320ab81d 100644 --- a/advisories/unreviewed/2022/04/GHSA-ffwc-j4xg-37cv/GHSA-ffwc-j4xg-37cv.json +++ b/advisories/unreviewed/2022/04/GHSA-ffwc-j4xg-37cv/GHSA-ffwc-j4xg-37cv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-h92h-m4pr-cxfx/GHSA-h92h-m4pr-cxfx.json b/advisories/unreviewed/2022/04/GHSA-h92h-m4pr-cxfx/GHSA-h92h-m4pr-cxfx.json index b6cd20d4d41..b7ed17846b4 100644 --- a/advisories/unreviewed/2022/04/GHSA-h92h-m4pr-cxfx/GHSA-h92h-m4pr-cxfx.json +++ b/advisories/unreviewed/2022/04/GHSA-h92h-m4pr-cxfx/GHSA-h92h-m4pr-cxfx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-r8qw-7677-x9rf/GHSA-r8qw-7677-x9rf.json b/advisories/unreviewed/2022/04/GHSA-r8qw-7677-x9rf/GHSA-r8qw-7677-x9rf.json index 44ef7cdbe63..aeb792707de 100644 --- a/advisories/unreviewed/2022/04/GHSA-r8qw-7677-x9rf/GHSA-r8qw-7677-x9rf.json +++ b/advisories/unreviewed/2022/04/GHSA-r8qw-7677-x9rf/GHSA-r8qw-7677-x9rf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-vcjq-7hcj-xh74/GHSA-vcjq-7hcj-xh74.json b/advisories/unreviewed/2022/04/GHSA-vcjq-7hcj-xh74/GHSA-vcjq-7hcj-xh74.json index 5ea2e9d5327..aa6f7e22181 100644 --- a/advisories/unreviewed/2022/04/GHSA-vcjq-7hcj-xh74/GHSA-vcjq-7hcj-xh74.json +++ b/advisories/unreviewed/2022/04/GHSA-vcjq-7hcj-xh74/GHSA-vcjq-7hcj-xh74.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-vv6h-2fw3-xm26/GHSA-vv6h-2fw3-xm26.json b/advisories/unreviewed/2022/04/GHSA-vv6h-2fw3-xm26/GHSA-vv6h-2fw3-xm26.json index 00a2eb1ab60..e003d039b67 100644 --- a/advisories/unreviewed/2022/04/GHSA-vv6h-2fw3-xm26/GHSA-vv6h-2fw3-xm26.json +++ b/advisories/unreviewed/2022/04/GHSA-vv6h-2fw3-xm26/GHSA-vv6h-2fw3-xm26.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-xcmq-73gm-f83r/GHSA-xcmq-73gm-f83r.json b/advisories/unreviewed/2022/04/GHSA-xcmq-73gm-f83r/GHSA-xcmq-73gm-f83r.json index d24dc93bd30..f376b00b3c7 100644 --- a/advisories/unreviewed/2022/04/GHSA-xcmq-73gm-f83r/GHSA-xcmq-73gm-f83r.json +++ b/advisories/unreviewed/2022/04/GHSA-xcmq-73gm-f83r/GHSA-xcmq-73gm-f83r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-xr97-cg4f-4xr7/GHSA-xr97-cg4f-4xr7.json b/advisories/unreviewed/2022/04/GHSA-xr97-cg4f-4xr7/GHSA-xr97-cg4f-4xr7.json index 2fb2a6330c1..c6a89ba7e48 100644 --- a/advisories/unreviewed/2022/04/GHSA-xr97-cg4f-4xr7/GHSA-xr97-cg4f-4xr7.json +++ b/advisories/unreviewed/2022/04/GHSA-xr97-cg4f-4xr7/GHSA-xr97-cg4f-4xr7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-226m-h7gc-7939/GHSA-226m-h7gc-7939.json b/advisories/unreviewed/2022/05/GHSA-226m-h7gc-7939/GHSA-226m-h7gc-7939.json index 71758c35b10..c20452af147 100644 --- a/advisories/unreviewed/2022/05/GHSA-226m-h7gc-7939/GHSA-226m-h7gc-7939.json +++ b/advisories/unreviewed/2022/05/GHSA-226m-h7gc-7939/GHSA-226m-h7gc-7939.json @@ -7,12 +7,8 @@ "CVE-2013-2997" ], "details": "IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-22qx-x99p-8745/GHSA-22qx-x99p-8745.json b/advisories/unreviewed/2022/05/GHSA-22qx-x99p-8745/GHSA-22qx-x99p-8745.json index b2135ed6a28..959160f10c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-22qx-x99p-8745/GHSA-22qx-x99p-8745.json +++ b/advisories/unreviewed/2022/05/GHSA-22qx-x99p-8745/GHSA-22qx-x99p-8745.json @@ -7,12 +7,8 @@ "CVE-2013-0805" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the search feature in iTop (aka IT Operations Portal) 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to pages/UI.php or (2) expression parameter to pages/run_query.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-238c-g57x-fg8c/GHSA-238c-g57x-fg8c.json b/advisories/unreviewed/2022/05/GHSA-238c-g57x-fg8c/GHSA-238c-g57x-fg8c.json index 2dec50fb04a..045b1b66fdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-238c-g57x-fg8c/GHSA-238c-g57x-fg8c.json +++ b/advisories/unreviewed/2022/05/GHSA-238c-g57x-fg8c/GHSA-238c-g57x-fg8c.json @@ -7,12 +7,8 @@ "CVE-2012-4233" ], "details": "LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-23r5-4wc9-f64r/GHSA-23r5-4wc9-f64r.json b/advisories/unreviewed/2022/05/GHSA-23r5-4wc9-f64r/GHSA-23r5-4wc9-f64r.json index 69e7a5836e7..314e1689921 100644 --- a/advisories/unreviewed/2022/05/GHSA-23r5-4wc9-f64r/GHSA-23r5-4wc9-f64r.json +++ b/advisories/unreviewed/2022/05/GHSA-23r5-4wc9-f64r/GHSA-23r5-4wc9-f64r.json @@ -7,12 +7,8 @@ "CVE-2012-5003" ], "details": "nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted (1) SiteUrl or (2) RedirectUrl parameter that points to a Trojan Horse client.zip update file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-24q6-6vv9-w6vj/GHSA-24q6-6vv9-w6vj.json b/advisories/unreviewed/2022/05/GHSA-24q6-6vv9-w6vj/GHSA-24q6-6vv9-w6vj.json index 7d73a819ce7..c057dfdaa54 100644 --- a/advisories/unreviewed/2022/05/GHSA-24q6-6vv9-w6vj/GHSA-24q6-6vv9-w6vj.json +++ b/advisories/unreviewed/2022/05/GHSA-24q6-6vv9-w6vj/GHSA-24q6-6vv9-w6vj.json @@ -7,12 +7,8 @@ "CVE-2012-4856" ], "details": "The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-24v6-wpg8-6mjg/GHSA-24v6-wpg8-6mjg.json b/advisories/unreviewed/2022/05/GHSA-24v6-wpg8-6mjg/GHSA-24v6-wpg8-6mjg.json index 08a4c6ce237..bd622c85f22 100644 --- a/advisories/unreviewed/2022/05/GHSA-24v6-wpg8-6mjg/GHSA-24v6-wpg8-6mjg.json +++ b/advisories/unreviewed/2022/05/GHSA-24v6-wpg8-6mjg/GHSA-24v6-wpg8-6mjg.json @@ -7,12 +7,8 @@ "CVE-2012-6355" ], "details": "IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-252x-53mm-q5hm/GHSA-252x-53mm-q5hm.json b/advisories/unreviewed/2022/05/GHSA-252x-53mm-q5hm/GHSA-252x-53mm-q5hm.json index d4f7c3da27d..a4c879882cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-252x-53mm-q5hm/GHSA-252x-53mm-q5hm.json +++ b/advisories/unreviewed/2022/05/GHSA-252x-53mm-q5hm/GHSA-252x-53mm-q5hm.json @@ -7,12 +7,8 @@ "CVE-2012-4098" ], "details": "The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed UPDATE message, aka Bug ID CSCtn13055.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2552-r9rc-6x22/GHSA-2552-r9rc-6x22.json b/advisories/unreviewed/2022/05/GHSA-2552-r9rc-6x22/GHSA-2552-r9rc-6x22.json index 6f59e42de72..3903de01556 100644 --- a/advisories/unreviewed/2022/05/GHSA-2552-r9rc-6x22/GHSA-2552-r9rc-6x22.json +++ b/advisories/unreviewed/2022/05/GHSA-2552-r9rc-6x22/GHSA-2552-r9rc-6x22.json @@ -7,12 +7,8 @@ "CVE-2012-5102" ], "details": "Cross-site scripting (XSS) vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject arbitrary web script or HTML via the ext parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-25gj-4578-83qm/GHSA-25gj-4578-83qm.json b/advisories/unreviewed/2022/05/GHSA-25gj-4578-83qm/GHSA-25gj-4578-83qm.json index 86d6218f4a5..bed5ddd8e64 100644 --- a/advisories/unreviewed/2022/05/GHSA-25gj-4578-83qm/GHSA-25gj-4578-83qm.json +++ b/advisories/unreviewed/2022/05/GHSA-25gj-4578-83qm/GHSA-25gj-4578-83qm.json @@ -7,12 +7,8 @@ "CVE-2012-4866" ], "details": "Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-25r8-4ph4-p8ww/GHSA-25r8-4ph4-p8ww.json b/advisories/unreviewed/2022/05/GHSA-25r8-4ph4-p8ww/GHSA-25r8-4ph4-p8ww.json index 3bab9334bbc..37a4aa220a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-25r8-4ph4-p8ww/GHSA-25r8-4ph4-p8ww.json +++ b/advisories/unreviewed/2022/05/GHSA-25r8-4ph4-p8ww/GHSA-25r8-4ph4-p8ww.json @@ -7,12 +7,8 @@ "CVE-2013-3464" ], "details": "Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-266g-57p5-2hr4/GHSA-266g-57p5-2hr4.json b/advisories/unreviewed/2022/05/GHSA-266g-57p5-2hr4/GHSA-266g-57p5-2hr4.json index 04b8bc21204..6ff43f03fd3 100644 --- a/advisories/unreviewed/2022/05/GHSA-266g-57p5-2hr4/GHSA-266g-57p5-2hr4.json +++ b/advisories/unreviewed/2022/05/GHSA-266g-57p5-2hr4/GHSA-266g-57p5-2hr4.json @@ -7,12 +7,8 @@ "CVE-2012-5106" ], "details": "Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a PUT command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26gh-f8r9-c8p5/GHSA-26gh-f8r9-c8p5.json b/advisories/unreviewed/2022/05/GHSA-26gh-f8r9-c8p5/GHSA-26gh-f8r9-c8p5.json index 710e48bfd01..308e709f083 100644 --- a/advisories/unreviewed/2022/05/GHSA-26gh-f8r9-c8p5/GHSA-26gh-f8r9-c8p5.json +++ b/advisories/unreviewed/2022/05/GHSA-26gh-f8r9-c8p5/GHSA-26gh-f8r9-c8p5.json @@ -7,12 +7,8 @@ "CVE-2013-3048" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26p6-3rqx-jxq4/GHSA-26p6-3rqx-jxq4.json b/advisories/unreviewed/2022/05/GHSA-26p6-3rqx-jxq4/GHSA-26p6-3rqx-jxq4.json index 66fe641f79d..c28c78e631e 100644 --- a/advisories/unreviewed/2022/05/GHSA-26p6-3rqx-jxq4/GHSA-26p6-3rqx-jxq4.json +++ b/advisories/unreviewed/2022/05/GHSA-26p6-3rqx-jxq4/GHSA-26p6-3rqx-jxq4.json @@ -7,12 +7,8 @@ "CVE-2012-4327" ], "details": "Unspecified vulnerability in the Image News slider plugin before 3.3 for WordPress has unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-27c4-phc8-rm9h/GHSA-27c4-phc8-rm9h.json b/advisories/unreviewed/2022/05/GHSA-27c4-phc8-rm9h/GHSA-27c4-phc8-rm9h.json index 37fd101e080..d1368d3f306 100644 --- a/advisories/unreviewed/2022/05/GHSA-27c4-phc8-rm9h/GHSA-27c4-phc8-rm9h.json +++ b/advisories/unreviewed/2022/05/GHSA-27c4-phc8-rm9h/GHSA-27c4-phc8-rm9h.json @@ -7,12 +7,8 @@ "CVE-2012-6645" ], "details": "Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28p6-384f-vhg4/GHSA-28p6-384f-vhg4.json b/advisories/unreviewed/2022/05/GHSA-28p6-384f-vhg4/GHSA-28p6-384f-vhg4.json index 7e09c0aca35..11d632adfcb 100644 --- a/advisories/unreviewed/2022/05/GHSA-28p6-384f-vhg4/GHSA-28p6-384f-vhg4.json +++ b/advisories/unreviewed/2022/05/GHSA-28p6-384f-vhg4/GHSA-28p6-384f-vhg4.json @@ -7,12 +7,8 @@ "CVE-2012-4992" ], "details": "Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28q2-r9rp-jg2h/GHSA-28q2-r9rp-jg2h.json b/advisories/unreviewed/2022/05/GHSA-28q2-r9rp-jg2h/GHSA-28q2-r9rp-jg2h.json index fa81495a98d..958749e3386 100644 --- a/advisories/unreviewed/2022/05/GHSA-28q2-r9rp-jg2h/GHSA-28q2-r9rp-jg2h.json +++ b/advisories/unreviewed/2022/05/GHSA-28q2-r9rp-jg2h/GHSA-28q2-r9rp-jg2h.json @@ -7,12 +7,8 @@ "CVE-2012-4996" ], "details": "Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28wx-779m-f4hf/GHSA-28wx-779m-f4hf.json b/advisories/unreviewed/2022/05/GHSA-28wx-779m-f4hf/GHSA-28wx-779m-f4hf.json index 2c6c04db850..1a338836d3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-28wx-779m-f4hf/GHSA-28wx-779m-f4hf.json +++ b/advisories/unreviewed/2022/05/GHSA-28wx-779m-f4hf/GHSA-28wx-779m-f4hf.json @@ -7,12 +7,8 @@ "CVE-2012-5858" ], "details": "Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-299w-wrq3-r3wf/GHSA-299w-wrq3-r3wf.json b/advisories/unreviewed/2022/05/GHSA-299w-wrq3-r3wf/GHSA-299w-wrq3-r3wf.json index 7a9ea6dea5a..a170c7a949d 100644 --- a/advisories/unreviewed/2022/05/GHSA-299w-wrq3-r3wf/GHSA-299w-wrq3-r3wf.json +++ b/advisories/unreviewed/2022/05/GHSA-299w-wrq3-r3wf/GHSA-299w-wrq3-r3wf.json @@ -7,12 +7,8 @@ "CVE-2013-3042" ], "details": "Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2ccw-9fqf-xvp4/GHSA-2ccw-9fqf-xvp4.json b/advisories/unreviewed/2022/05/GHSA-2ccw-9fqf-xvp4/GHSA-2ccw-9fqf-xvp4.json index 28ca19022ed..c1c70f4e505 100644 --- a/advisories/unreviewed/2022/05/GHSA-2ccw-9fqf-xvp4/GHSA-2ccw-9fqf-xvp4.json +++ b/advisories/unreviewed/2022/05/GHSA-2ccw-9fqf-xvp4/GHSA-2ccw-9fqf-xvp4.json @@ -7,12 +7,8 @@ "CVE-2012-5512" ], "details": "Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2cmc-76vf-3g3r/GHSA-2cmc-76vf-3g3r.json b/advisories/unreviewed/2022/05/GHSA-2cmc-76vf-3g3r/GHSA-2cmc-76vf-3g3r.json index fb32748dae8..00e7f31740e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2cmc-76vf-3g3r/GHSA-2cmc-76vf-3g3r.json +++ b/advisories/unreviewed/2022/05/GHSA-2cmc-76vf-3g3r/GHSA-2cmc-76vf-3g3r.json @@ -7,12 +7,8 @@ "CVE-2013-2987" ], "details": "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-3020, CVE-2013-0568, CVE-2013-0475, and CVE-2013-0567.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2cp8-rpw3-7698/GHSA-2cp8-rpw3-7698.json b/advisories/unreviewed/2022/05/GHSA-2cp8-rpw3-7698/GHSA-2cp8-rpw3-7698.json index ad0b352a416..2253b7cf543 100644 --- a/advisories/unreviewed/2022/05/GHSA-2cp8-rpw3-7698/GHSA-2cp8-rpw3-7698.json +++ b/advisories/unreviewed/2022/05/GHSA-2cp8-rpw3-7698/GHSA-2cp8-rpw3-7698.json @@ -7,12 +7,8 @@ "CVE-2013-1466" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the (1) subject parameter to profiles.php; (2) address1, (3) address2, (4) calendar_type, (5) city, (6) state, (7) title, (8) url, or (9) zipcode parameter to calendar/index.php; (10) title or (11) url parameter to links/index.php; or (12) PATH_INFO to admin/plugins/mediagallery/xppubwiz.php/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2cx2-wv26-jp38/GHSA-2cx2-wv26-jp38.json b/advisories/unreviewed/2022/05/GHSA-2cx2-wv26-jp38/GHSA-2cx2-wv26-jp38.json index e4e6c872320..a9f4e74641d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2cx2-wv26-jp38/GHSA-2cx2-wv26-jp38.json +++ b/advisories/unreviewed/2022/05/GHSA-2cx2-wv26-jp38/GHSA-2cx2-wv26-jp38.json @@ -7,12 +7,8 @@ "CVE-2012-5196" ], "details": "Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2g2v-frmf-48r9/GHSA-2g2v-frmf-48r9.json b/advisories/unreviewed/2022/05/GHSA-2g2v-frmf-48r9/GHSA-2g2v-frmf-48r9.json index edd1654bf25..9b46917526b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2g2v-frmf-48r9/GHSA-2g2v-frmf-48r9.json +++ b/advisories/unreviewed/2022/05/GHSA-2g2v-frmf-48r9/GHSA-2g2v-frmf-48r9.json @@ -7,12 +7,8 @@ "CVE-2012-5904" ], "details": "Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2hg8-4q64-3p6w/GHSA-2hg8-4q64-3p6w.json b/advisories/unreviewed/2022/05/GHSA-2hg8-4q64-3p6w/GHSA-2hg8-4q64-3p6w.json index b2d9c13833f..f1a493a3cae 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hg8-4q64-3p6w/GHSA-2hg8-4q64-3p6w.json +++ b/advisories/unreviewed/2022/05/GHSA-2hg8-4q64-3p6w/GHSA-2hg8-4q64-3p6w.json @@ -7,12 +7,8 @@ "CVE-2012-6620" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 before 3.0.17 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2j8x-42f8-xghg/GHSA-2j8x-42f8-xghg.json b/advisories/unreviewed/2022/05/GHSA-2j8x-42f8-xghg/GHSA-2j8x-42f8-xghg.json index cfe050f99c4..b3ec3cbdc81 100644 --- a/advisories/unreviewed/2022/05/GHSA-2j8x-42f8-xghg/GHSA-2j8x-42f8-xghg.json +++ b/advisories/unreviewed/2022/05/GHSA-2j8x-42f8-xghg/GHSA-2j8x-42f8-xghg.json @@ -7,12 +7,8 @@ "CVE-2012-5940" ], "details": "The WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza, when SSL is not enabled, allows remote attackers to discover credentials by sniffing the network during the authentication process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jch-w7cm-rw24/GHSA-2jch-w7cm-rw24.json b/advisories/unreviewed/2022/05/GHSA-2jch-w7cm-rw24/GHSA-2jch-w7cm-rw24.json index d7ec916a73d..9a6a4173cea 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jch-w7cm-rw24/GHSA-2jch-w7cm-rw24.json +++ b/advisories/unreviewed/2022/05/GHSA-2jch-w7cm-rw24/GHSA-2jch-w7cm-rw24.json @@ -7,12 +7,8 @@ "CVE-2012-5883" ], "details": "Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore.swf, a similar issue to CVE-2010-4209.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2mc7-7977-x6p5/GHSA-2mc7-7977-x6p5.json b/advisories/unreviewed/2022/05/GHSA-2mc7-7977-x6p5/GHSA-2mc7-7977-x6p5.json index 564eea0a99a..9bbd0f09342 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mc7-7977-x6p5/GHSA-2mc7-7977-x6p5.json +++ b/advisories/unreviewed/2022/05/GHSA-2mc7-7977-x6p5/GHSA-2mc7-7977-x6p5.json @@ -7,12 +7,8 @@ "CVE-2012-5859" ], "details": "Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service (crash) via a crafted request to www/apps/KiesAir/jws/ssd.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2mp4-qw33-xj6q/GHSA-2mp4-qw33-xj6q.json b/advisories/unreviewed/2022/05/GHSA-2mp4-qw33-xj6q/GHSA-2mp4-qw33-xj6q.json index 37aabebf7e8..3e11a9b758a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mp4-qw33-xj6q/GHSA-2mp4-qw33-xj6q.json +++ b/advisories/unreviewed/2022/05/GHSA-2mp4-qw33-xj6q/GHSA-2mp4-qw33-xj6q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p53-7wvg-49xh/GHSA-2p53-7wvg-49xh.json b/advisories/unreviewed/2022/05/GHSA-2p53-7wvg-49xh/GHSA-2p53-7wvg-49xh.json index 56640c91f98..9dc2161a32a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p53-7wvg-49xh/GHSA-2p53-7wvg-49xh.json +++ b/advisories/unreviewed/2022/05/GHSA-2p53-7wvg-49xh/GHSA-2p53-7wvg-49xh.json @@ -7,12 +7,8 @@ "CVE-2013-0597" ], "details": "Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0, when OAuth is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p85-7pjm-gp5r/GHSA-2p85-7pjm-gp5r.json b/advisories/unreviewed/2022/05/GHSA-2p85-7pjm-gp5r/GHSA-2p85-7pjm-gp5r.json index 56d09beae64..b0b15fbdf2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p85-7pjm-gp5r/GHSA-2p85-7pjm-gp5r.json +++ b/advisories/unreviewed/2022/05/GHSA-2p85-7pjm-gp5r/GHSA-2p85-7pjm-gp5r.json @@ -7,12 +7,8 @@ "CVE-2012-4282" ], "details": "SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p9f-j97g-5gvv/GHSA-2p9f-j97g-5gvv.json b/advisories/unreviewed/2022/05/GHSA-2p9f-j97g-5gvv/GHSA-2p9f-j97g-5gvv.json index 49bfdb61eab..412cba3c740 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p9f-j97g-5gvv/GHSA-2p9f-j97g-5gvv.json +++ b/advisories/unreviewed/2022/05/GHSA-2p9f-j97g-5gvv/GHSA-2p9f-j97g-5gvv.json @@ -7,12 +7,8 @@ "CVE-2013-3476" ], "details": "Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2q3w-q48r-7m5f/GHSA-2q3w-q48r-7m5f.json b/advisories/unreviewed/2022/05/GHSA-2q3w-q48r-7m5f/GHSA-2q3w-q48r-7m5f.json index 2e0cc905d79..68f3b57fab9 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q3w-q48r-7m5f/GHSA-2q3w-q48r-7m5f.json +++ b/advisories/unreviewed/2022/05/GHSA-2q3w-q48r-7m5f/GHSA-2q3w-q48r-7m5f.json @@ -7,12 +7,8 @@ "CVE-2012-4857" ], "details": "Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2q6x-7cfj-5w4q/GHSA-2q6x-7cfj-5w4q.json b/advisories/unreviewed/2022/05/GHSA-2q6x-7cfj-5w4q/GHSA-2q6x-7cfj-5w4q.json index 7f34944f7ba..19a23166d07 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q6x-7cfj-5w4q/GHSA-2q6x-7cfj-5w4q.json +++ b/advisories/unreviewed/2022/05/GHSA-2q6x-7cfj-5w4q/GHSA-2q6x-7cfj-5w4q.json @@ -7,12 +7,8 @@ "CVE-2013-3084" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Belkin Model F5D8236-4 v2 router allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2qqc-4hrp-xvcg/GHSA-2qqc-4hrp-xvcg.json b/advisories/unreviewed/2022/05/GHSA-2qqc-4hrp-xvcg/GHSA-2qqc-4hrp-xvcg.json index a7b17c5a6ae..9073bff6e64 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qqc-4hrp-xvcg/GHSA-2qqc-4hrp-xvcg.json +++ b/advisories/unreviewed/2022/05/GHSA-2qqc-4hrp-xvcg/GHSA-2qqc-4hrp-xvcg.json @@ -7,12 +7,8 @@ "CVE-2012-5769" ], "details": "IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vm6-973m-fwf6/GHSA-2vm6-973m-fwf6.json b/advisories/unreviewed/2022/05/GHSA-2vm6-973m-fwf6/GHSA-2vm6-973m-fwf6.json index efc745a5554..764f3544ea1 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vm6-973m-fwf6/GHSA-2vm6-973m-fwf6.json +++ b/advisories/unreviewed/2022/05/GHSA-2vm6-973m-fwf6/GHSA-2vm6-973m-fwf6.json @@ -7,12 +7,8 @@ "CVE-2013-1890" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) new_name parameter to apps/bookmarks/ajax/renameTag.php or (2) multiple unspecified parameters to unknown files in apps/contacts/ajax/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2vvj-8q22-v822/GHSA-2vvj-8q22-v822.json b/advisories/unreviewed/2022/05/GHSA-2vvj-8q22-v822/GHSA-2vvj-8q22-v822.json index 04e8b596c94..cdac6747078 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vvj-8q22-v822/GHSA-2vvj-8q22-v822.json +++ b/advisories/unreviewed/2022/05/GHSA-2vvj-8q22-v822/GHSA-2vvj-8q22-v822.json @@ -7,12 +7,8 @@ "CVE-2013-2992" ], "details": "The Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term association configurations, allows remote attackers to cause a denial of service via a crafted query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2wp6-3qrw-p6q9/GHSA-2wp6-3qrw-p6q9.json b/advisories/unreviewed/2022/05/GHSA-2wp6-3qrw-p6q9/GHSA-2wp6-3qrw-p6q9.json index 3836d1eb2e1..750e5c8cf43 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wp6-3qrw-p6q9/GHSA-2wp6-3qrw-p6q9.json +++ b/advisories/unreviewed/2022/05/GHSA-2wp6-3qrw-p6q9/GHSA-2wp6-3qrw-p6q9.json @@ -7,12 +7,8 @@ "CVE-2012-4261" ], "details": "SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2wr7-qwh3-x9h7/GHSA-2wr7-qwh3-x9h7.json b/advisories/unreviewed/2022/05/GHSA-2wr7-qwh3-x9h7/GHSA-2wr7-qwh3-x9h7.json index bf1df988b2d..5adcd365792 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wr7-qwh3-x9h7/GHSA-2wr7-qwh3-x9h7.json +++ b/advisories/unreviewed/2022/05/GHSA-2wr7-qwh3-x9h7/GHSA-2wr7-qwh3-x9h7.json @@ -7,12 +7,8 @@ "CVE-2012-5064" ], "details": "Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 allows remote authenticated users to affect confidentiality, related to BASE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2xc2-pjxc-5w86/GHSA-2xc2-pjxc-5w86.json b/advisories/unreviewed/2022/05/GHSA-2xc2-pjxc-5w86/GHSA-2xc2-pjxc-5w86.json index 3914c530ab2..124c468c73b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xc2-pjxc-5w86/GHSA-2xc2-pjxc-5w86.json +++ b/advisories/unreviewed/2022/05/GHSA-2xc2-pjxc-5w86/GHSA-2xc2-pjxc-5w86.json @@ -7,12 +7,8 @@ "CVE-2012-5228" ], "details": "Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the testtarget parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xjj-2wcr-mj9m/GHSA-2xjj-2wcr-mj9m.json b/advisories/unreviewed/2022/05/GHSA-2xjj-2wcr-mj9m/GHSA-2xjj-2wcr-mj9m.json index f7ad7953e52..ace8d0923b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xjj-2wcr-mj9m/GHSA-2xjj-2wcr-mj9m.json +++ b/advisories/unreviewed/2022/05/GHSA-2xjj-2wcr-mj9m/GHSA-2xjj-2wcr-mj9m.json @@ -7,12 +7,8 @@ "CVE-2013-0734" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) search_words parameter in a search action to wpf.class.php or (2) togroupusers parameter in an add_user_togroup action to fs-admin/fs-admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xmq-mr23-jvxq/GHSA-2xmq-mr23-jvxq.json b/advisories/unreviewed/2022/05/GHSA-2xmq-mr23-jvxq/GHSA-2xmq-mr23-jvxq.json index ee7eb594966..990dbbe2796 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xmq-mr23-jvxq/GHSA-2xmq-mr23-jvxq.json +++ b/advisories/unreviewed/2022/05/GHSA-2xmq-mr23-jvxq/GHSA-2xmq-mr23-jvxq.json @@ -7,12 +7,8 @@ "CVE-2012-4251" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to index.php, (2) phase parameter to install.php, (3) tablename or (4) dbid parameter to sql.php, or (5) filename parameter to restore.php in learn/cubemail/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xrv-6g4w-wcv4/GHSA-2xrv-6g4w-wcv4.json b/advisories/unreviewed/2022/05/GHSA-2xrv-6g4w-wcv4/GHSA-2xrv-6g4w-wcv4.json index 8a7a2db6a09..ce026f7e0d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xrv-6g4w-wcv4/GHSA-2xrv-6g4w-wcv4.json +++ b/advisories/unreviewed/2022/05/GHSA-2xrv-6g4w-wcv4/GHSA-2xrv-6g4w-wcv4.json @@ -7,12 +7,8 @@ "CVE-2012-5907" ], "details": "Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter in a \"3\" action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-325x-mqxg-v6jq/GHSA-325x-mqxg-v6jq.json b/advisories/unreviewed/2022/05/GHSA-325x-mqxg-v6jq/GHSA-325x-mqxg-v6jq.json index e6671962d31..b35995884cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-325x-mqxg-v6jq/GHSA-325x-mqxg-v6jq.json +++ b/advisories/unreviewed/2022/05/GHSA-325x-mqxg-v6jq/GHSA-325x-mqxg-v6jq.json @@ -7,12 +7,8 @@ "CVE-2013-3257" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-326h-8cxw-9hrx/GHSA-326h-8cxw-9hrx.json b/advisories/unreviewed/2022/05/GHSA-326h-8cxw-9hrx/GHSA-326h-8cxw-9hrx.json index e44caada972..b10481313fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-326h-8cxw-9hrx/GHSA-326h-8cxw-9hrx.json +++ b/advisories/unreviewed/2022/05/GHSA-326h-8cxw-9hrx/GHSA-326h-8cxw-9hrx.json @@ -7,12 +7,8 @@ "CVE-2012-5269" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-32g2-hc9h-69wc/GHSA-32g2-hc9h-69wc.json b/advisories/unreviewed/2022/05/GHSA-32g2-hc9h-69wc/GHSA-32g2-hc9h-69wc.json index 05a497fa0f2..d3df2592359 100644 --- a/advisories/unreviewed/2022/05/GHSA-32g2-hc9h-69wc/GHSA-32g2-hc9h-69wc.json +++ b/advisories/unreviewed/2022/05/GHSA-32g2-hc9h-69wc/GHSA-32g2-hc9h-69wc.json @@ -7,12 +7,8 @@ "CVE-2012-6333" ], "details": "Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-34mm-8gf5-xj36/GHSA-34mm-8gf5-xj36.json b/advisories/unreviewed/2022/05/GHSA-34mm-8gf5-xj36/GHSA-34mm-8gf5-xj36.json index 12927c2c97d..60a35bee78d 100644 --- a/advisories/unreviewed/2022/05/GHSA-34mm-8gf5-xj36/GHSA-34mm-8gf5-xj36.json +++ b/advisories/unreviewed/2022/05/GHSA-34mm-8gf5-xj36/GHSA-34mm-8gf5-xj36.json @@ -7,12 +7,8 @@ "CVE-2012-6429" ], "details": "Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute arbitrary code via a long string to the password argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-354c-w7g5-xvpv/GHSA-354c-w7g5-xvpv.json b/advisories/unreviewed/2022/05/GHSA-354c-w7g5-xvpv/GHSA-354c-w7g5-xvpv.json index 1b773e68bfe..1b5f0529d66 100644 --- a/advisories/unreviewed/2022/05/GHSA-354c-w7g5-xvpv/GHSA-354c-w7g5-xvpv.json +++ b/advisories/unreviewed/2022/05/GHSA-354c-w7g5-xvpv/GHSA-354c-w7g5-xvpv.json @@ -7,12 +7,8 @@ "CVE-2012-5061" ], "details": "Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, 11.0.0 through 11.4.0, and 12.0.0 allows remote authenticated users to affect confidentiality, related to BASE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-35v4-cfj4-wrvg/GHSA-35v4-cfj4-wrvg.json b/advisories/unreviewed/2022/05/GHSA-35v4-cfj4-wrvg/GHSA-35v4-cfj4-wrvg.json index c1e5b5fa4e7..5228489853e 100644 --- a/advisories/unreviewed/2022/05/GHSA-35v4-cfj4-wrvg/GHSA-35v4-cfj4-wrvg.json +++ b/advisories/unreviewed/2022/05/GHSA-35v4-cfj4-wrvg/GHSA-35v4-cfj4-wrvg.json @@ -7,12 +7,8 @@ "CVE-2012-4084" ], "details": "Cross-site request forgery (CSRF) vulnerability in the web-management interface in the fabric interconnect (FI) component in Cisco Unified Computing System (UCS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-35wx-qhfj-hc3p/GHSA-35wx-qhfj-hc3p.json b/advisories/unreviewed/2022/05/GHSA-35wx-qhfj-hc3p/GHSA-35wx-qhfj-hc3p.json index ccc8ff05275..e48d365997b 100644 --- a/advisories/unreviewed/2022/05/GHSA-35wx-qhfj-hc3p/GHSA-35wx-qhfj-hc3p.json +++ b/advisories/unreviewed/2022/05/GHSA-35wx-qhfj-hc3p/GHSA-35wx-qhfj-hc3p.json @@ -7,12 +7,8 @@ "CVE-2012-5943" ], "details": "Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving mail, aka SPR JDOE8ZZS9.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-365x-9xpx-m78x/GHSA-365x-9xpx-m78x.json b/advisories/unreviewed/2022/05/GHSA-365x-9xpx-m78x/GHSA-365x-9xpx-m78x.json index a2e6178fc82..a1f8b53b5da 100644 --- a/advisories/unreviewed/2022/05/GHSA-365x-9xpx-m78x/GHSA-365x-9xpx-m78x.json +++ b/advisories/unreviewed/2022/05/GHSA-365x-9xpx-m78x/GHSA-365x-9xpx-m78x.json @@ -7,12 +7,8 @@ "CVE-2012-5170" ], "details": "Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3696-x4fh-6hw8/GHSA-3696-x4fh-6hw8.json b/advisories/unreviewed/2022/05/GHSA-3696-x4fh-6hw8/GHSA-3696-x4fh-6hw8.json index 494ee9348c0..e9812176a22 100644 --- a/advisories/unreviewed/2022/05/GHSA-3696-x4fh-6hw8/GHSA-3696-x4fh-6hw8.json +++ b/advisories/unreviewed/2022/05/GHSA-3696-x4fh-6hw8/GHSA-3696-x4fh-6hw8.json @@ -7,12 +7,8 @@ "CVE-2013-1463" ], "details": "Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likely that CVE-2013-1463 will be REJECTed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-372h-g394-rq35/GHSA-372h-g394-rq35.json b/advisories/unreviewed/2022/05/GHSA-372h-g394-rq35/GHSA-372h-g394-rq35.json index fc2865c1700..9d65994081c 100644 --- a/advisories/unreviewed/2022/05/GHSA-372h-g394-rq35/GHSA-372h-g394-rq35.json +++ b/advisories/unreviewed/2022/05/GHSA-372h-g394-rq35/GHSA-372h-g394-rq35.json @@ -7,12 +7,8 @@ "CVE-2012-5913" ], "details": "Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirect_to parameter to wp-login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37cp-q8r5-mf55/GHSA-37cp-q8r5-mf55.json b/advisories/unreviewed/2022/05/GHSA-37cp-q8r5-mf55/GHSA-37cp-q8r5-mf55.json index bc20f678c18..72a2fd06dc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-37cp-q8r5-mf55/GHSA-37cp-q8r5-mf55.json +++ b/advisories/unreviewed/2022/05/GHSA-37cp-q8r5-mf55/GHSA-37cp-q8r5-mf55.json @@ -7,12 +7,8 @@ "CVE-2013-0586" ], "details": "Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-384j-3c7v-xh2f/GHSA-384j-3c7v-xh2f.json b/advisories/unreviewed/2022/05/GHSA-384j-3c7v-xh2f/GHSA-384j-3c7v-xh2f.json index a5bb02b5a74..ed797838a9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-384j-3c7v-xh2f/GHSA-384j-3c7v-xh2f.json +++ b/advisories/unreviewed/2022/05/GHSA-384j-3c7v-xh2f/GHSA-384j-3c7v-xh2f.json @@ -7,12 +7,8 @@ "CVE-2012-5702" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) callback parameter in a color_selector action, (2) field parameter in a date_format action, or (3) company_name parameter in an addedit action to index.php. NOTE: the date parameter vector is already covered by CVE-2008-3886.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38q2-7hp2-xq9v/GHSA-38q2-7hp2-xq9v.json b/advisories/unreviewed/2022/05/GHSA-38q2-7hp2-xq9v/GHSA-38q2-7hp2-xq9v.json index d205def185b..87b76137655 100644 --- a/advisories/unreviewed/2022/05/GHSA-38q2-7hp2-xq9v/GHSA-38q2-7hp2-xq9v.json +++ b/advisories/unreviewed/2022/05/GHSA-38q2-7hp2-xq9v/GHSA-38q2-7hp2-xq9v.json @@ -7,12 +7,8 @@ "CVE-2012-5264" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-395f-v3mq-5j4j/GHSA-395f-v3mq-5j4j.json b/advisories/unreviewed/2022/05/GHSA-395f-v3mq-5j4j/GHSA-395f-v3mq-5j4j.json index 407534c00ab..161f7cdff68 100644 --- a/advisories/unreviewed/2022/05/GHSA-395f-v3mq-5j4j/GHSA-395f-v3mq-5j4j.json +++ b/advisories/unreviewed/2022/05/GHSA-395f-v3mq-5j4j/GHSA-395f-v3mq-5j4j.json @@ -7,12 +7,8 @@ "CVE-2013-3728" ], "details": "Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categories to inject arbitrary web script or HTML via the cat parameter in an admin_new_category action to admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-397m-73pj-3xm8/GHSA-397m-73pj-3xm8.json b/advisories/unreviewed/2022/05/GHSA-397m-73pj-3xm8/GHSA-397m-73pj-3xm8.json index fcd810a9611..e570738263f 100644 --- a/advisories/unreviewed/2022/05/GHSA-397m-73pj-3xm8/GHSA-397m-73pj-3xm8.json +++ b/advisories/unreviewed/2022/05/GHSA-397m-73pj-3xm8/GHSA-397m-73pj-3xm8.json @@ -7,12 +7,8 @@ "CVE-2013-1453" ], "details": "plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter. Note: it was originally reported that this issue only allowed attackers to obtain sensitive information, but later analysis demonstrated that other attacks exist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-39f9-33vw-m4qr/GHSA-39f9-33vw-m4qr.json b/advisories/unreviewed/2022/05/GHSA-39f9-33vw-m4qr/GHSA-39f9-33vw-m4qr.json index ca817a78881..89ec73062d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-39f9-33vw-m4qr/GHSA-39f9-33vw-m4qr.json +++ b/advisories/unreviewed/2022/05/GHSA-39f9-33vw-m4qr/GHSA-39f9-33vw-m4qr.json @@ -7,12 +7,8 @@ "CVE-2013-2993" ], "details": "IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform authentication for unspecified web services, which allows remote attackers to issue requests in the context of an arbitrary user's active session via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39x9-vxp8-rf3h/GHSA-39x9-vxp8-rf3h.json b/advisories/unreviewed/2022/05/GHSA-39x9-vxp8-rf3h/GHSA-39x9-vxp8-rf3h.json index 402e6ad4a93..f4d31f45bfc 100644 --- a/advisories/unreviewed/2022/05/GHSA-39x9-vxp8-rf3h/GHSA-39x9-vxp8-rf3h.json +++ b/advisories/unreviewed/2022/05/GHSA-39x9-vxp8-rf3h/GHSA-39x9-vxp8-rf3h.json @@ -7,12 +7,8 @@ "CVE-2013-3050" ], "details": "SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3c96-x4xm-9p54/GHSA-3c96-x4xm-9p54.json b/advisories/unreviewed/2022/05/GHSA-3c96-x4xm-9p54/GHSA-3c96-x4xm-9p54.json index b5a88721aad..a41f2dbf9bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-3c96-x4xm-9p54/GHSA-3c96-x4xm-9p54.json +++ b/advisories/unreviewed/2022/05/GHSA-3c96-x4xm-9p54/GHSA-3c96-x4xm-9p54.json @@ -7,12 +7,8 @@ "CVE-2012-4936" ], "details": "The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3cv6-rq95-c6hf/GHSA-3cv6-rq95-c6hf.json b/advisories/unreviewed/2022/05/GHSA-3cv6-rq95-c6hf/GHSA-3cv6-rq95-c6hf.json index 80f8bb2b003..34a58efce4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cv6-rq95-c6hf/GHSA-3cv6-rq95-c6hf.json +++ b/advisories/unreviewed/2022/05/GHSA-3cv6-rq95-c6hf/GHSA-3cv6-rq95-c6hf.json @@ -7,12 +7,8 @@ "CVE-2013-1123" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3fm9-w6wx-jjf7/GHSA-3fm9-w6wx-jjf7.json b/advisories/unreviewed/2022/05/GHSA-3fm9-w6wx-jjf7/GHSA-3fm9-w6wx-jjf7.json index 0bbebcbaff5..0108cf95fb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fm9-w6wx-jjf7/GHSA-3fm9-w6wx-jjf7.json +++ b/advisories/unreviewed/2022/05/GHSA-3fm9-w6wx-jjf7/GHSA-3fm9-w6wx-jjf7.json @@ -7,12 +7,8 @@ "CVE-2012-4087" ], "details": "A cluster setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commands via invalid parameters, aka Bug ID CSCtg20793.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3fq2-5669-f3x9/GHSA-3fq2-5669-f3x9.json b/advisories/unreviewed/2022/05/GHSA-3fq2-5669-f3x9/GHSA-3fq2-5669-f3x9.json index 3b6fbf363f9..e50e78c4625 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fq2-5669-f3x9/GHSA-3fq2-5669-f3x9.json +++ b/advisories/unreviewed/2022/05/GHSA-3fq2-5669-f3x9/GHSA-3fq2-5669-f3x9.json @@ -7,12 +7,8 @@ "CVE-2012-5803" ], "details": "The Authorize.Net module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3gx9-chfw-vff5/GHSA-3gx9-chfw-vff5.json b/advisories/unreviewed/2022/05/GHSA-3gx9-chfw-vff5/GHSA-3gx9-chfw-vff5.json index 80dfaa06efb..335385cfde1 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gx9-chfw-vff5/GHSA-3gx9-chfw-vff5.json +++ b/advisories/unreviewed/2022/05/GHSA-3gx9-chfw-vff5/GHSA-3gx9-chfw-vff5.json @@ -7,12 +7,8 @@ "CVE-2012-4675" ], "details": "Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3h2j-95j8-599v/GHSA-3h2j-95j8-599v.json b/advisories/unreviewed/2022/05/GHSA-3h2j-95j8-599v/GHSA-3h2j-95j8-599v.json index 07f8d9cad23..4e5d7defbc7 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h2j-95j8-599v/GHSA-3h2j-95j8-599v.json +++ b/advisories/unreviewed/2022/05/GHSA-3h2j-95j8-599v/GHSA-3h2j-95j8-599v.json @@ -7,12 +7,8 @@ "CVE-2012-6573" ], "details": "Cross-site scripting (XSS) vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3h76-cfv5-34fg/GHSA-3h76-cfv5-34fg.json b/advisories/unreviewed/2022/05/GHSA-3h76-cfv5-34fg/GHSA-3h76-cfv5-34fg.json index 3449c6e884d..13f6704e6a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h76-cfv5-34fg/GHSA-3h76-cfv5-34fg.json +++ b/advisories/unreviewed/2022/05/GHSA-3h76-cfv5-34fg/GHSA-3h76-cfv5-34fg.json @@ -7,12 +7,8 @@ "CVE-2012-5373" ], "details": "Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3hcj-h2rg-j2hj/GHSA-3hcj-h2rg-j2hj.json b/advisories/unreviewed/2022/05/GHSA-3hcj-h2rg-j2hj/GHSA-3hcj-h2rg-j2hj.json index 0a7da8fee02..37a10ce9a10 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hcj-h2rg-j2hj/GHSA-3hcj-h2rg-j2hj.json +++ b/advisories/unreviewed/2022/05/GHSA-3hcj-h2rg-j2hj/GHSA-3hcj-h2rg-j2hj.json @@ -7,12 +7,8 @@ "CVE-2012-4578" ], "details": "The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3hfj-pw8w-wj22/GHSA-3hfj-pw8w-wj22.json b/advisories/unreviewed/2022/05/GHSA-3hfj-pw8w-wj22/GHSA-3hfj-pw8w-wj22.json index 39d93bb5e98..f3dabc7431c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hfj-pw8w-wj22/GHSA-3hfj-pw8w-wj22.json +++ b/advisories/unreviewed/2022/05/GHSA-3hfj-pw8w-wj22/GHSA-3hfj-pw8w-wj22.json @@ -7,12 +7,8 @@ "CVE-2012-6049" ], "details": "Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a cookie, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hwg-mg48-rrmm/GHSA-3hwg-mg48-rrmm.json b/advisories/unreviewed/2022/05/GHSA-3hwg-mg48-rrmm/GHSA-3hwg-mg48-rrmm.json index ad8d54ca023..4b5c167959c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hwg-mg48-rrmm/GHSA-3hwg-mg48-rrmm.json +++ b/advisories/unreviewed/2022/05/GHSA-3hwg-mg48-rrmm/GHSA-3hwg-mg48-rrmm.json @@ -7,12 +7,8 @@ "CVE-2012-5310" ], "details": "SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3j5m-7mq9-mfj7/GHSA-3j5m-7mq9-mfj7.json b/advisories/unreviewed/2022/05/GHSA-3j5m-7mq9-mfj7/GHSA-3j5m-7mq9-mfj7.json index 0d5d8593b17..f14f5590528 100644 --- a/advisories/unreviewed/2022/05/GHSA-3j5m-7mq9-mfj7/GHSA-3j5m-7mq9-mfj7.json +++ b/advisories/unreviewed/2022/05/GHSA-3j5m-7mq9-mfj7/GHSA-3j5m-7mq9-mfj7.json @@ -7,12 +7,8 @@ "CVE-2012-5793" ], "details": "The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jc2-j36q-cq67/GHSA-3jc2-j36q-cq67.json b/advisories/unreviewed/2022/05/GHSA-3jc2-j36q-cq67/GHSA-3jc2-j36q-cq67.json index 9f125e38761..9ab1b0c5dd1 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jc2-j36q-cq67/GHSA-3jc2-j36q-cq67.json +++ b/advisories/unreviewed/2022/05/GHSA-3jc2-j36q-cq67/GHSA-3jc2-j36q-cq67.json @@ -7,12 +7,8 @@ "CVE-2012-5296" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) approve.asp, (2) delete.asp, (3) edit.asp, or (4) edit2.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jhj-2cfq-97q3/GHSA-3jhj-2cfq-97q3.json b/advisories/unreviewed/2022/05/GHSA-3jhj-2cfq-97q3/GHSA-3jhj-2cfq-97q3.json index 2b1648cff8f..6be6fddf966 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jhj-2cfq-97q3/GHSA-3jhj-2cfq-97q3.json +++ b/advisories/unreviewed/2022/05/GHSA-3jhj-2cfq-97q3/GHSA-3jhj-2cfq-97q3.json @@ -7,12 +7,8 @@ "CVE-2013-3037" ], "details": "Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3jpp-jwvr-524v/GHSA-3jpp-jwvr-524v.json b/advisories/unreviewed/2022/05/GHSA-3jpp-jwvr-524v/GHSA-3jpp-jwvr-524v.json index ff185681714..b8ca73ae427 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jpp-jwvr-524v/GHSA-3jpp-jwvr-524v.json +++ b/advisories/unreviewed/2022/05/GHSA-3jpp-jwvr-524v/GHSA-3jpp-jwvr-524v.json @@ -7,12 +7,8 @@ "CVE-2012-5777" ], "details": "Eval injection vulnerability in the ReplaceListVars function in the template parser in e/class/connect.php in EmpireCMS 6.6 allows user-assisted remote attackers to execute arbitrary PHP code via a crafted template.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3m2g-2grr-jhgw/GHSA-3m2g-2grr-jhgw.json b/advisories/unreviewed/2022/05/GHSA-3m2g-2grr-jhgw/GHSA-3m2g-2grr-jhgw.json index 94da2137a92..f2897bdb1e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m2g-2grr-jhgw/GHSA-3m2g-2grr-jhgw.json +++ b/advisories/unreviewed/2022/05/GHSA-3m2g-2grr-jhgw/GHSA-3m2g-2grr-jhgw.json @@ -7,12 +7,8 @@ "CVE-2012-5290" ], "details": "Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via the (1) lstid parameter to listings.php or (2) infoid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3m35-gcc7-4v6r/GHSA-3m35-gcc7-4v6r.json b/advisories/unreviewed/2022/05/GHSA-3m35-gcc7-4v6r/GHSA-3m35-gcc7-4v6r.json index bcdd0d1dd28..a5943375f3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m35-gcc7-4v6r/GHSA-3m35-gcc7-4v6r.json +++ b/advisories/unreviewed/2022/05/GHSA-3m35-gcc7-4v6r/GHSA-3m35-gcc7-4v6r.json @@ -7,12 +7,8 @@ "CVE-2012-4835" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mg2-6rqc-xvmj/GHSA-3mg2-6rqc-xvmj.json b/advisories/unreviewed/2022/05/GHSA-3mg2-6rqc-xvmj/GHSA-3mg2-6rqc-xvmj.json index cc634f9295b..82aa4657ac2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mg2-6rqc-xvmj/GHSA-3mg2-6rqc-xvmj.json +++ b/advisories/unreviewed/2022/05/GHSA-3mg2-6rqc-xvmj/GHSA-3mg2-6rqc-xvmj.json @@ -7,12 +7,8 @@ "CVE-2012-4928" ], "details": "Cross-site scripting (XSS) vulnerability in ow_updates/index.php in Oxwall 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the plugin parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pf7-c5vh-fj2r/GHSA-3pf7-c5vh-fj2r.json b/advisories/unreviewed/2022/05/GHSA-3pf7-c5vh-fj2r/GHSA-3pf7-c5vh-fj2r.json index 103e4270ceb..efdf47da699 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pf7-c5vh-fj2r/GHSA-3pf7-c5vh-fj2r.json +++ b/advisories/unreviewed/2022/05/GHSA-3pf7-c5vh-fj2r/GHSA-3pf7-c5vh-fj2r.json @@ -7,12 +7,8 @@ "CVE-2013-3268" ], "details": "Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qg4-2rww-w8jv/GHSA-3qg4-2rww-w8jv.json b/advisories/unreviewed/2022/05/GHSA-3qg4-2rww-w8jv/GHSA-3qg4-2rww-w8jv.json index 313e5e8a486..8a310457e18 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qg4-2rww-w8jv/GHSA-3qg4-2rww-w8jv.json +++ b/advisories/unreviewed/2022/05/GHSA-3qg4-2rww-w8jv/GHSA-3qg4-2rww-w8jv.json @@ -7,12 +7,8 @@ "CVE-2013-3032" ], "details": "Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN986NAA.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r4r-6824-gpc7/GHSA-3r4r-6824-gpc7.json b/advisories/unreviewed/2022/05/GHSA-3r4r-6824-gpc7/GHSA-3r4r-6824-gpc7.json index 35a78f5f933..172c8e29a51 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r4r-6824-gpc7/GHSA-3r4r-6824-gpc7.json +++ b/advisories/unreviewed/2022/05/GHSA-3r4r-6824-gpc7/GHSA-3r4r-6824-gpc7.json @@ -7,12 +7,8 @@ "CVE-2012-4610" ], "details": "EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging \"network access\" to the proxy client.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3r5w-8fgx-8jrh/GHSA-3r5w-8fgx-8jrh.json b/advisories/unreviewed/2022/05/GHSA-3r5w-8fgx-8jrh/GHSA-3r5w-8fgx-8jrh.json index a2859b8b56a..8589bbe1d54 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r5w-8fgx-8jrh/GHSA-3r5w-8fgx-8jrh.json +++ b/advisories/unreviewed/2022/05/GHSA-3r5w-8fgx-8jrh/GHSA-3r5w-8fgx-8jrh.json @@ -7,12 +7,8 @@ "CVE-2012-5452" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) multi_title parameter to blocks/add/; (2) cost, (3) days, or (4) title[en] parameter to plans/add/; (5) name or (6) title[en] parameter to fields/group/add/ in admin/manage/; or (7) f[accounts][fullname] or (8) f[accounts][username] parameter to advsearch/. NOTE: This might overlap CVE-2011-5211. NOTE: it was later reported that the f[accounts][fullname] and f[accounts][username] vectors might also affect 2.2.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r8p-ffv9-xpjq/GHSA-3r8p-ffv9-xpjq.json b/advisories/unreviewed/2022/05/GHSA-3r8p-ffv9-xpjq/GHSA-3r8p-ffv9-xpjq.json index aa981c51872..1af824818ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r8p-ffv9-xpjq/GHSA-3r8p-ffv9-xpjq.json +++ b/advisories/unreviewed/2022/05/GHSA-3r8p-ffv9-xpjq/GHSA-3r8p-ffv9-xpjq.json @@ -7,12 +7,8 @@ "CVE-2013-3269" ], "details": "Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0 allows remote attackers to hijack the authentication of arbitrary users for requests that change mobile passwords, a different vulnerability than CVE-2013-2305.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3v24-cp75-hv5g/GHSA-3v24-cp75-hv5g.json b/advisories/unreviewed/2022/05/GHSA-3v24-cp75-hv5g/GHSA-3v24-cp75-hv5g.json index a1881edd2c1..b30a65f61d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-3v24-cp75-hv5g/GHSA-3v24-cp75-hv5g.json +++ b/advisories/unreviewed/2022/05/GHSA-3v24-cp75-hv5g/GHSA-3v24-cp75-hv5g.json @@ -7,12 +7,8 @@ "CVE-2012-6631" ], "details": "Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3v57-5947-5vgp/GHSA-3v57-5947-5vgp.json b/advisories/unreviewed/2022/05/GHSA-3v57-5947-5vgp/GHSA-3v57-5947-5vgp.json index 691457bf4e4..4f4b7bb6d72 100644 --- a/advisories/unreviewed/2022/05/GHSA-3v57-5947-5vgp/GHSA-3v57-5947-5vgp.json +++ b/advisories/unreviewed/2022/05/GHSA-3v57-5947-5vgp/GHSA-3v57-5947-5vgp.json @@ -7,12 +7,8 @@ "CVE-2013-1783" ], "details": "Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x-1.8 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3v5p-j7j2-c443/GHSA-3v5p-j7j2-c443.json b/advisories/unreviewed/2022/05/GHSA-3v5p-j7j2-c443/GHSA-3v5p-j7j2-c443.json index e2db77b73b5..91859e81e34 100644 --- a/advisories/unreviewed/2022/05/GHSA-3v5p-j7j2-c443/GHSA-3v5p-j7j2-c443.json +++ b/advisories/unreviewed/2022/05/GHSA-3v5p-j7j2-c443/GHSA-3v5p-j7j2-c443.json @@ -7,12 +7,8 @@ "CVE-2012-6626" ], "details": "SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3v72-4xqg-8rpf/GHSA-3v72-4xqg-8rpf.json b/advisories/unreviewed/2022/05/GHSA-3v72-4xqg-8rpf/GHSA-3v72-4xqg-8rpf.json index 2f367f6317c..2bf8b28ebae 100644 --- a/advisories/unreviewed/2022/05/GHSA-3v72-4xqg-8rpf/GHSA-3v72-4xqg-8rpf.json +++ b/advisories/unreviewed/2022/05/GHSA-3v72-4xqg-8rpf/GHSA-3v72-4xqg-8rpf.json @@ -7,12 +7,8 @@ "CVE-2012-4937" ], "details": "Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web sessions via a jsession_id cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3vjc-wc96-396x/GHSA-3vjc-wc96-396x.json b/advisories/unreviewed/2022/05/GHSA-3vjc-wc96-396x/GHSA-3vjc-wc96-396x.json index 0b4fdf28026..cfaa4f3cecc 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vjc-wc96-396x/GHSA-3vjc-wc96-396x.json +++ b/advisories/unreviewed/2022/05/GHSA-3vjc-wc96-396x/GHSA-3vjc-wc96-396x.json @@ -7,12 +7,8 @@ "CVE-2012-5230" ], "details": "Unspecified vulnerability in the JE Story Submit (com_jesubmit) component before 1.9 for Joomla! has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3wr8-qx7x-96hg/GHSA-3wr8-qx7x-96hg.json b/advisories/unreviewed/2022/05/GHSA-3wr8-qx7x-96hg/GHSA-3wr8-qx7x-96hg.json index 66b202c2cc9..15e10afa7da 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wr8-qx7x-96hg/GHSA-3wr8-qx7x-96hg.json +++ b/advisories/unreviewed/2022/05/GHSA-3wr8-qx7x-96hg/GHSA-3wr8-qx7x-96hg.json @@ -7,12 +7,8 @@ "CVE-2013-3045" ], "details": "The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3wxc-gqjr-6mh6/GHSA-3wxc-gqjr-6mh6.json b/advisories/unreviewed/2022/05/GHSA-3wxc-gqjr-6mh6/GHSA-3wxc-gqjr-6mh6.json index a9730e6e20c..5e34c5d269d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wxc-gqjr-6mh6/GHSA-3wxc-gqjr-6mh6.json +++ b/advisories/unreviewed/2022/05/GHSA-3wxc-gqjr-6mh6/GHSA-3wxc-gqjr-6mh6.json @@ -7,12 +7,8 @@ "CVE-2012-5391" ], "details": "Session fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the session_id.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3x4p-qxv4-r792/GHSA-3x4p-qxv4-r792.json b/advisories/unreviewed/2022/05/GHSA-3x4p-qxv4-r792/GHSA-3x4p-qxv4-r792.json index 0551b756d8f..70f30172659 100644 --- a/advisories/unreviewed/2022/05/GHSA-3x4p-qxv4-r792/GHSA-3x4p-qxv4-r792.json +++ b/advisories/unreviewed/2022/05/GHSA-3x4p-qxv4-r792/GHSA-3x4p-qxv4-r792.json @@ -7,12 +7,8 @@ "CVE-2012-4577" ], "details": "The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers has a hardcoded password of \"password\" for the root account, which allows remote attackers to obtain administrative access via an SSH session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3x98-xr5x-2c7r/GHSA-3x98-xr5x-2c7r.json b/advisories/unreviewed/2022/05/GHSA-3x98-xr5x-2c7r/GHSA-3x98-xr5x-2c7r.json index 4478f270210..c11bd2f0f2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-3x98-xr5x-2c7r/GHSA-3x98-xr5x-2c7r.json +++ b/advisories/unreviewed/2022/05/GHSA-3x98-xr5x-2c7r/GHSA-3x98-xr5x-2c7r.json @@ -7,12 +7,8 @@ "CVE-2012-5937" ], "details": "Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3xgr-6gm3-9657/GHSA-3xgr-6gm3-9657.json b/advisories/unreviewed/2022/05/GHSA-3xgr-6gm3-9657/GHSA-3xgr-6gm3-9657.json index 88c572ee9c1..349cd6e076b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xgr-6gm3-9657/GHSA-3xgr-6gm3-9657.json +++ b/advisories/unreviewed/2022/05/GHSA-3xgr-6gm3-9657/GHSA-3xgr-6gm3-9657.json @@ -7,12 +7,8 @@ "CVE-2012-5346" ], "details": "Cross-site scripting (XSS) vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xxh-2rc7-7mx7/GHSA-3xxh-2rc7-7mx7.json b/advisories/unreviewed/2022/05/GHSA-3xxh-2rc7-7mx7/GHSA-3xxh-2rc7-7mx7.json index 2a9935556d8..44d943995ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xxh-2rc7-7mx7/GHSA-3xxh-2rc7-7mx7.json +++ b/advisories/unreviewed/2022/05/GHSA-3xxh-2rc7-7mx7/GHSA-3xxh-2rc7-7mx7.json @@ -7,12 +7,8 @@ "CVE-2012-5760" ], "details": "SQL injection vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xxx-crf3-jm97/GHSA-3xxx-crf3-jm97.json b/advisories/unreviewed/2022/05/GHSA-3xxx-crf3-jm97/GHSA-3xxx-crf3-jm97.json index d711780bbfc..e92baee47ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xxx-crf3-jm97/GHSA-3xxx-crf3-jm97.json +++ b/advisories/unreviewed/2022/05/GHSA-3xxx-crf3-jm97/GHSA-3xxx-crf3-jm97.json @@ -7,12 +7,8 @@ "CVE-2013-0593" ], "details": "Unspecified vulnerability in the olch2x32 ActiveX control in IBM SPSS SamplePower 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 allows remote attackers to execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4276-4w95-82xg/GHSA-4276-4w95-82xg.json b/advisories/unreviewed/2022/05/GHSA-4276-4w95-82xg/GHSA-4276-4w95-82xg.json index f65be64b5f6..8f2e0ef5b91 100644 --- a/advisories/unreviewed/2022/05/GHSA-4276-4w95-82xg/GHSA-4276-4w95-82xg.json +++ b/advisories/unreviewed/2022/05/GHSA-4276-4w95-82xg/GHSA-4276-4w95-82xg.json @@ -7,12 +7,8 @@ "CVE-2012-5787" ], "details": "The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-42g5-v694-j53w/GHSA-42g5-v694-j53w.json b/advisories/unreviewed/2022/05/GHSA-42g5-v694-j53w/GHSA-42g5-v694-j53w.json index e909931f955..dfd69950f79 100644 --- a/advisories/unreviewed/2022/05/GHSA-42g5-v694-j53w/GHSA-42g5-v694-j53w.json +++ b/advisories/unreviewed/2022/05/GHSA-42g5-v694-j53w/GHSA-42g5-v694-j53w.json @@ -7,12 +7,8 @@ "CVE-2012-6452" ], "details": "Axway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides different responses to authentication requests depending on whether the user exists, which allows remote attackers to enumerate users via a series of requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4446-59jv-fw78/GHSA-4446-59jv-fw78.json b/advisories/unreviewed/2022/05/GHSA-4446-59jv-fw78/GHSA-4446-59jv-fw78.json index 2af9454a2f7..537056fc6b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4446-59jv-fw78/GHSA-4446-59jv-fw78.json +++ b/advisories/unreviewed/2022/05/GHSA-4446-59jv-fw78/GHSA-4446-59jv-fw78.json @@ -7,12 +7,8 @@ "CVE-2012-5262" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-44f3-h584-r9pm/GHSA-44f3-h584-r9pm.json b/advisories/unreviewed/2022/05/GHSA-44f3-h584-r9pm/GHSA-44f3-h584-r9pm.json index 8e22323f1a7..71f478e3e94 100644 --- a/advisories/unreviewed/2022/05/GHSA-44f3-h584-r9pm/GHSA-44f3-h584-r9pm.json +++ b/advisories/unreviewed/2022/05/GHSA-44f3-h584-r9pm/GHSA-44f3-h584-r9pm.json @@ -7,12 +7,8 @@ "CVE-2012-4562" ], "details": "Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-44xp-g462-97fp/GHSA-44xp-g462-97fp.json b/advisories/unreviewed/2022/05/GHSA-44xp-g462-97fp/GHSA-44xp-g462-97fp.json index 26f8bec7849..3f965ab6999 100644 --- a/advisories/unreviewed/2022/05/GHSA-44xp-g462-97fp/GHSA-44xp-g462-97fp.json +++ b/advisories/unreviewed/2022/05/GHSA-44xp-g462-97fp/GHSA-44xp-g462-97fp.json @@ -7,12 +7,8 @@ "CVE-2012-5863" ], "details": "ping.php on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in the ip_dominio parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-459q-r253-85jx/GHSA-459q-r253-85jx.json b/advisories/unreviewed/2022/05/GHSA-459q-r253-85jx/GHSA-459q-r253-85jx.json index ddc28d5447a..de40dad720e 100644 --- a/advisories/unreviewed/2022/05/GHSA-459q-r253-85jx/GHSA-459q-r253-85jx.json +++ b/advisories/unreviewed/2022/05/GHSA-459q-r253-85jx/GHSA-459q-r253-85jx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-45p2-fw7m-wc4p/GHSA-45p2-fw7m-wc4p.json b/advisories/unreviewed/2022/05/GHSA-45p2-fw7m-wc4p/GHSA-45p2-fw7m-wc4p.json index 86e34368803..c8221cb1778 100644 --- a/advisories/unreviewed/2022/05/GHSA-45p2-fw7m-wc4p/GHSA-45p2-fw7m-wc4p.json +++ b/advisories/unreviewed/2022/05/GHSA-45p2-fw7m-wc4p/GHSA-45p2-fw7m-wc4p.json @@ -7,12 +7,8 @@ "CVE-2013-1883" ], "details": "Mantis Bug Tracker (aka MantisBT) 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service (resource consumption) via a filter using a criteria, text search, and the \"any condition\" match type.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-477r-xm26-c24r/GHSA-477r-xm26-c24r.json b/advisories/unreviewed/2022/05/GHSA-477r-xm26-c24r/GHSA-477r-xm26-c24r.json index 23e3daca6ce..0b8281f6915 100644 --- a/advisories/unreviewed/2022/05/GHSA-477r-xm26-c24r/GHSA-477r-xm26-c24r.json +++ b/advisories/unreviewed/2022/05/GHSA-477r-xm26-c24r/GHSA-477r-xm26-c24r.json @@ -7,12 +7,8 @@ "CVE-2012-4830" ], "details": "Unspecified vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 through 7.0.0.6 allows remote attackers to obtain users' personal data via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-47xg-7rw2-23v2/GHSA-47xg-7rw2-23v2.json b/advisories/unreviewed/2022/05/GHSA-47xg-7rw2-23v2/GHSA-47xg-7rw2-23v2.json index 2af1b063d76..4e345f71e65 100644 --- a/advisories/unreviewed/2022/05/GHSA-47xg-7rw2-23v2/GHSA-47xg-7rw2-23v2.json +++ b/advisories/unreviewed/2022/05/GHSA-47xg-7rw2-23v2/GHSA-47xg-7rw2-23v2.json @@ -7,12 +7,8 @@ "CVE-2013-3087" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via the (1) ssid2 parameter to wl_channel.html or (2) guest_psk parameter to wl_guest.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49pj-gwcg-9jhj/GHSA-49pj-gwcg-9jhj.json b/advisories/unreviewed/2022/05/GHSA-49pj-gwcg-9jhj/GHSA-49pj-gwcg-9jhj.json index 2e9f4ad8e94..c21e826639f 100644 --- a/advisories/unreviewed/2022/05/GHSA-49pj-gwcg-9jhj/GHSA-49pj-gwcg-9jhj.json +++ b/advisories/unreviewed/2022/05/GHSA-49pj-gwcg-9jhj/GHSA-49pj-gwcg-9jhj.json @@ -7,12 +7,8 @@ "CVE-2012-6352" ], "details": "The Session Manager in IBM Sterling Connect:Direct through 4.1.0.3 on UNIX allows remote attackers to cause a denial of service (daemon crash and disk consumption) via crafted data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4c88-vc7v-vjc9/GHSA-4c88-vc7v-vjc9.json b/advisories/unreviewed/2022/05/GHSA-4c88-vc7v-vjc9/GHSA-4c88-vc7v-vjc9.json index 5bc82dff8ef..3b661fb1fb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4c88-vc7v-vjc9/GHSA-4c88-vc7v-vjc9.json +++ b/advisories/unreviewed/2022/05/GHSA-4c88-vc7v-vjc9/GHSA-4c88-vc7v-vjc9.json @@ -7,12 +7,8 @@ "CVE-2012-6350" ], "details": "Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4f82-64j5-842v/GHSA-4f82-64j5-842v.json b/advisories/unreviewed/2022/05/GHSA-4f82-64j5-842v/GHSA-4f82-64j5-842v.json index d4965e7cc28..c30db30bed0 100644 --- a/advisories/unreviewed/2022/05/GHSA-4f82-64j5-842v/GHSA-4f82-64j5-842v.json +++ b/advisories/unreviewed/2022/05/GHSA-4f82-64j5-842v/GHSA-4f82-64j5-842v.json @@ -7,12 +7,8 @@ "CVE-2012-5788" ], "details": "The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP fsockopen function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fw6-xfgg-vh7h/GHSA-4fw6-xfgg-vh7h.json b/advisories/unreviewed/2022/05/GHSA-4fw6-xfgg-vh7h/GHSA-4fw6-xfgg-vh7h.json index 3ead6389f96..815182b9a51 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fw6-xfgg-vh7h/GHSA-4fw6-xfgg-vh7h.json +++ b/advisories/unreviewed/2022/05/GHSA-4fw6-xfgg-vh7h/GHSA-4fw6-xfgg-vh7h.json @@ -7,12 +7,8 @@ "CVE-2012-5251" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4g79-8pmr-hjx2/GHSA-4g79-8pmr-hjx2.json b/advisories/unreviewed/2022/05/GHSA-4g79-8pmr-hjx2/GHSA-4g79-8pmr-hjx2.json index d2c2b53b10a..7bc392b5de4 100644 --- a/advisories/unreviewed/2022/05/GHSA-4g79-8pmr-hjx2/GHSA-4g79-8pmr-hjx2.json +++ b/advisories/unreviewed/2022/05/GHSA-4g79-8pmr-hjx2/GHSA-4g79-8pmr-hjx2.json @@ -7,12 +7,8 @@ "CVE-2012-5459" ], "details": "Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a \"system folder.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4gfq-6cg6-xc56/GHSA-4gfq-6cg6-xc56.json b/advisories/unreviewed/2022/05/GHSA-4gfq-6cg6-xc56/GHSA-4gfq-6cg6-xc56.json index 87b318557e4..a951c136ce7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gfq-6cg6-xc56/GHSA-4gfq-6cg6-xc56.json +++ b/advisories/unreviewed/2022/05/GHSA-4gfq-6cg6-xc56/GHSA-4gfq-6cg6-xc56.json @@ -7,12 +7,8 @@ "CVE-2013-1105" ], "details": "Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4hch-m6mj-gw8m/GHSA-4hch-m6mj-gw8m.json b/advisories/unreviewed/2022/05/GHSA-4hch-m6mj-gw8m/GHSA-4hch-m6mj-gw8m.json index f22a7c9c219..72cfe7f11f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hch-m6mj-gw8m/GHSA-4hch-m6mj-gw8m.json +++ b/advisories/unreviewed/2022/05/GHSA-4hch-m6mj-gw8m/GHSA-4hch-m6mj-gw8m.json @@ -7,12 +7,8 @@ "CVE-2012-5002" ], "details": "Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hff-wr64-4cgv/GHSA-4hff-wr64-4cgv.json b/advisories/unreviewed/2022/05/GHSA-4hff-wr64-4cgv/GHSA-4hff-wr64-4cgv.json index c670991fb16..30635807b6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hff-wr64-4cgv/GHSA-4hff-wr64-4cgv.json +++ b/advisories/unreviewed/2022/05/GHSA-4hff-wr64-4cgv/GHSA-4hff-wr64-4cgv.json @@ -7,12 +7,8 @@ "CVE-2012-5796" ], "details": "The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hjg-8mv8-5cfh/GHSA-4hjg-8mv8-5cfh.json b/advisories/unreviewed/2022/05/GHSA-4hjg-8mv8-5cfh/GHSA-4hjg-8mv8-5cfh.json index 676a83609a2..be738061916 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hjg-8mv8-5cfh/GHSA-4hjg-8mv8-5cfh.json +++ b/advisories/unreviewed/2022/05/GHSA-4hjg-8mv8-5cfh/GHSA-4hjg-8mv8-5cfh.json @@ -7,12 +7,8 @@ "CVE-2012-5884" ], "details": "The User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to obtain sensitive information about the saved searches of arbitrary users via an XMLRPC request or a JSONRPC request, a different vulnerability than CVE-2012-4198.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hmc-wjwv-5gj5/GHSA-4hmc-wjwv-5gj5.json b/advisories/unreviewed/2022/05/GHSA-4hmc-wjwv-5gj5/GHSA-4hmc-wjwv-5gj5.json index 56a63c0e537..291ab0731f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hmc-wjwv-5gj5/GHSA-4hmc-wjwv-5gj5.json +++ b/advisories/unreviewed/2022/05/GHSA-4hmc-wjwv-5gj5/GHSA-4hmc-wjwv-5gj5.json @@ -7,12 +7,8 @@ "CVE-2013-1864" ], "details": "The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted PXML document containing a large number of nested entity references, aka a \"billion laughs attack.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hqm-jw29-p8wm/GHSA-4hqm-jw29-p8wm.json b/advisories/unreviewed/2022/05/GHSA-4hqm-jw29-p8wm/GHSA-4hqm-jw29-p8wm.json index f03c1cad3fe..b15c61ef152 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hqm-jw29-p8wm/GHSA-4hqm-jw29-p8wm.json +++ b/advisories/unreviewed/2022/05/GHSA-4hqm-jw29-p8wm/GHSA-4hqm-jw29-p8wm.json @@ -7,12 +7,8 @@ "CVE-2013-1427" ], "details": "The configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux creates a socket file with a predictable name in /tmp, which allows local users to hijack the PHP control socket and perform unauthorized actions such as forcing the use of a different version of PHP via a symlink attack or a race condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4j8x-f97v-67w4/GHSA-4j8x-f97v-67w4.json b/advisories/unreviewed/2022/05/GHSA-4j8x-f97v-67w4/GHSA-4j8x-f97v-67w4.json index 510357c89e9..b101f7075b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-4j8x-f97v-67w4/GHSA-4j8x-f97v-67w4.json +++ b/advisories/unreviewed/2022/05/GHSA-4j8x-f97v-67w4/GHSA-4j8x-f97v-67w4.json @@ -7,12 +7,8 @@ "CVE-2012-5104" ], "details": "Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4j94-jg47-hpc4/GHSA-4j94-jg47-hpc4.json b/advisories/unreviewed/2022/05/GHSA-4j94-jg47-hpc4/GHSA-4j94-jg47-hpc4.json index 27204157c77..88777ac70eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-4j94-jg47-hpc4/GHSA-4j94-jg47-hpc4.json +++ b/advisories/unreviewed/2022/05/GHSA-4j94-jg47-hpc4/GHSA-4j94-jg47-hpc4.json @@ -7,12 +7,8 @@ "CVE-2013-2988" ], "details": "Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2978.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jpm-qv63-23qh/GHSA-4jpm-qv63-23qh.json b/advisories/unreviewed/2022/05/GHSA-4jpm-qv63-23qh/GHSA-4jpm-qv63-23qh.json index 289a8b66f2d..cedd1088725 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jpm-qv63-23qh/GHSA-4jpm-qv63-23qh.json +++ b/advisories/unreviewed/2022/05/GHSA-4jpm-qv63-23qh/GHSA-4jpm-qv63-23qh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4m2v-w3h4-4gwc/GHSA-4m2v-w3h4-4gwc.json b/advisories/unreviewed/2022/05/GHSA-4m2v-w3h4-4gwc/GHSA-4m2v-w3h4-4gwc.json index 4aed76bdbaa..11a7f766056 100644 --- a/advisories/unreviewed/2022/05/GHSA-4m2v-w3h4-4gwc/GHSA-4m2v-w3h4-4gwc.json +++ b/advisories/unreviewed/2022/05/GHSA-4m2v-w3h4-4gwc/GHSA-4m2v-w3h4-4gwc.json @@ -7,12 +7,8 @@ "CVE-2012-5916" ], "details": "Neocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct request to (1) docs/new/seditio-createnew-160.sql, (2) docs/upgrade/sedito_convert_to_utf8.optional.sql, or (3) system/install/install.parser.sql.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4m6w-hg8g-fm5w/GHSA-4m6w-hg8g-fm5w.json b/advisories/unreviewed/2022/05/GHSA-4m6w-hg8g-fm5w/GHSA-4m6w-hg8g-fm5w.json index 2213829664f..aff389ddf11 100644 --- a/advisories/unreviewed/2022/05/GHSA-4m6w-hg8g-fm5w/GHSA-4m6w-hg8g-fm5w.json +++ b/advisories/unreviewed/2022/05/GHSA-4m6w-hg8g-fm5w/GHSA-4m6w-hg8g-fm5w.json @@ -7,12 +7,8 @@ "CVE-2013-3047" ], "details": "IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4m7r-jfv6-r27r/GHSA-4m7r-jfv6-r27r.json b/advisories/unreviewed/2022/05/GHSA-4m7r-jfv6-r27r/GHSA-4m7r-jfv6-r27r.json index 1db3e96c75a..ca261654f87 100644 --- a/advisories/unreviewed/2022/05/GHSA-4m7r-jfv6-r27r/GHSA-4m7r-jfv6-r27r.json +++ b/advisories/unreviewed/2022/05/GHSA-4m7r-jfv6-r27r/GHSA-4m7r-jfv6-r27r.json @@ -7,12 +7,8 @@ "CVE-2012-6036" ], "details": "The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 do not check for negative id pools, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or possibly execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4mfg-22xg-v2xx/GHSA-4mfg-22xg-v2xx.json b/advisories/unreviewed/2022/05/GHSA-4mfg-22xg-v2xx/GHSA-4mfg-22xg-v2xx.json index e76ca71332d..84e09d5bed8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mfg-22xg-v2xx/GHSA-4mfg-22xg-v2xx.json +++ b/advisories/unreviewed/2022/05/GHSA-4mfg-22xg-v2xx/GHSA-4mfg-22xg-v2xx.json @@ -7,12 +7,8 @@ "CVE-2013-0598" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4mfj-8rv9-j9f2/GHSA-4mfj-8rv9-j9f2.json b/advisories/unreviewed/2022/05/GHSA-4mfj-8rv9-j9f2/GHSA-4mfj-8rv9-j9f2.json index ef50529c932..450375db24f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mfj-8rv9-j9f2/GHSA-4mfj-8rv9-j9f2.json +++ b/advisories/unreviewed/2022/05/GHSA-4mfj-8rv9-j9f2/GHSA-4mfj-8rv9-j9f2.json @@ -7,12 +7,8 @@ "CVE-2012-4091" ], "details": "The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2) RIPv6 message, aka Bug ID CSCtj73415.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4mw4-3fxh-2q7x/GHSA-4mw4-3fxh-2q7x.json b/advisories/unreviewed/2022/05/GHSA-4mw4-3fxh-2q7x/GHSA-4mw4-3fxh-2q7x.json index 51402fb592f..9d0ecde73d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mw4-3fxh-2q7x/GHSA-4mw4-3fxh-2q7x.json +++ b/advisories/unreviewed/2022/05/GHSA-4mw4-3fxh-2q7x/GHSA-4mw4-3fxh-2q7x.json @@ -7,12 +7,8 @@ "CVE-2012-5341" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in statistik.php in Otterware StatIt 4 allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter, (2) show parameter in a stat_tld action, or (3) order parameter in a stat_abfragen action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qrw-gq38-58jq/GHSA-4qrw-gq38-58jq.json b/advisories/unreviewed/2022/05/GHSA-4qrw-gq38-58jq/GHSA-4qrw-gq38-58jq.json index 5cb213da21b..5d8fa6d2dc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qrw-gq38-58jq/GHSA-4qrw-gq38-58jq.json +++ b/advisories/unreviewed/2022/05/GHSA-4qrw-gq38-58jq/GHSA-4qrw-gq38-58jq.json @@ -7,12 +7,8 @@ "CVE-2012-4592" ], "details": "The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4qvx-5chg-whr8/GHSA-4qvx-5chg-whr8.json b/advisories/unreviewed/2022/05/GHSA-4qvx-5chg-whr8/GHSA-4qvx-5chg-whr8.json index 26692a8c752..c44df3631e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qvx-5chg-whr8/GHSA-4qvx-5chg-whr8.json +++ b/advisories/unreviewed/2022/05/GHSA-4qvx-5chg-whr8/GHSA-4qvx-5chg-whr8.json @@ -7,12 +7,8 @@ "CVE-2013-1052" ], "details": "pam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable, which allows local users to gain privileges via unspecified vectors related to sudo.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4vm3-7378-9hc4/GHSA-4vm3-7378-9hc4.json b/advisories/unreviewed/2022/05/GHSA-4vm3-7378-9hc4/GHSA-4vm3-7378-9hc4.json index 9b12d350e24..38f70b80ba7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4vm3-7378-9hc4/GHSA-4vm3-7378-9hc4.json +++ b/advisories/unreviewed/2022/05/GHSA-4vm3-7378-9hc4/GHSA-4vm3-7378-9hc4.json @@ -7,12 +7,8 @@ "CVE-2012-4574" ], "details": "Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4vp5-69h8-gr86/GHSA-4vp5-69h8-gr86.json b/advisories/unreviewed/2022/05/GHSA-4vp5-69h8-gr86/GHSA-4vp5-69h8-gr86.json index 9d9599b8f06..4ee0ea1d79b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4vp5-69h8-gr86/GHSA-4vp5-69h8-gr86.json +++ b/advisories/unreviewed/2022/05/GHSA-4vp5-69h8-gr86/GHSA-4vp5-69h8-gr86.json @@ -7,12 +7,8 @@ "CVE-2012-4174" ], "details": "Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4175, and CVE-2012-5273.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4w4c-mg22-2cf8/GHSA-4w4c-mg22-2cf8.json b/advisories/unreviewed/2022/05/GHSA-4w4c-mg22-2cf8/GHSA-4w4c-mg22-2cf8.json index 11bae46cfe2..d0a2c4163a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w4c-mg22-2cf8/GHSA-4w4c-mg22-2cf8.json +++ b/advisories/unreviewed/2022/05/GHSA-4w4c-mg22-2cf8/GHSA-4w4c-mg22-2cf8.json @@ -7,12 +7,8 @@ "CVE-2012-6044" ], "details": "M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4whx-q4g9-v3mj/GHSA-4whx-q4g9-v3mj.json b/advisories/unreviewed/2022/05/GHSA-4whx-q4g9-v3mj/GHSA-4whx-q4g9-v3mj.json index 1e33e216db4..35efe038dac 100644 --- a/advisories/unreviewed/2022/05/GHSA-4whx-q4g9-v3mj/GHSA-4whx-q4g9-v3mj.json +++ b/advisories/unreviewed/2022/05/GHSA-4whx-q4g9-v3mj/GHSA-4whx-q4g9-v3mj.json @@ -7,12 +7,8 @@ "CVE-2012-6644" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to channels.php, (2) collections.php, (3) groups.php, or (4) videos.php; (5) query parameter to search_result.php; or (6) type parameter to view_collection.php or (7) view_item.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4x9f-qjp9-p2g6/GHSA-4x9f-qjp9-p2g6.json b/advisories/unreviewed/2022/05/GHSA-4x9f-qjp9-p2g6/GHSA-4x9f-qjp9-p2g6.json index e67ba33b3dd..71012ab32c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x9f-qjp9-p2g6/GHSA-4x9f-qjp9-p2g6.json +++ b/advisories/unreviewed/2022/05/GHSA-4x9f-qjp9-p2g6/GHSA-4x9f-qjp9-p2g6.json @@ -7,12 +7,8 @@ "CVE-2012-4841" ], "details": "Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service (resource consumption) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-53fq-h8w2-qrfw/GHSA-53fq-h8w2-qrfw.json b/advisories/unreviewed/2022/05/GHSA-53fq-h8w2-qrfw/GHSA-53fq-h8w2-qrfw.json index 662b0e50c9e..0cc9b953b80 100644 --- a/advisories/unreviewed/2022/05/GHSA-53fq-h8w2-qrfw/GHSA-53fq-h8w2-qrfw.json +++ b/advisories/unreviewed/2022/05/GHSA-53fq-h8w2-qrfw/GHSA-53fq-h8w2-qrfw.json @@ -7,12 +7,8 @@ "CVE-2012-5050" ], "details": "Cross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps) before 5.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53x9-4x79-73hc/GHSA-53x9-4x79-73hc.json b/advisories/unreviewed/2022/05/GHSA-53x9-4x79-73hc/GHSA-53x9-4x79-73hc.json index de01057f875..f2f032e8985 100644 --- a/advisories/unreviewed/2022/05/GHSA-53x9-4x79-73hc/GHSA-53x9-4x79-73hc.json +++ b/advisories/unreviewed/2022/05/GHSA-53x9-4x79-73hc/GHSA-53x9-4x79-73hc.json @@ -7,12 +7,8 @@ "CVE-2013-1874" ], "details": "Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-53xx-pxgc-j8qv/GHSA-53xx-pxgc-j8qv.json b/advisories/unreviewed/2022/05/GHSA-53xx-pxgc-j8qv/GHSA-53xx-pxgc-j8qv.json index d035aec2d24..57084d8d289 100644 --- a/advisories/unreviewed/2022/05/GHSA-53xx-pxgc-j8qv/GHSA-53xx-pxgc-j8qv.json +++ b/advisories/unreviewed/2022/05/GHSA-53xx-pxgc-j8qv/GHSA-53xx-pxgc-j8qv.json @@ -7,12 +7,8 @@ "CVE-2012-5001" ], "details": "Multiple unspecified vulnerabilities in Hitachi JP1/Cm2/Network Node Manager i before 09-50-03 allow remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-542f-cg4p-xchv/GHSA-542f-cg4p-xchv.json b/advisories/unreviewed/2022/05/GHSA-542f-cg4p-xchv/GHSA-542f-cg4p-xchv.json index 582b5440ffc..963404d0290 100644 --- a/advisories/unreviewed/2022/05/GHSA-542f-cg4p-xchv/GHSA-542f-cg4p-xchv.json +++ b/advisories/unreviewed/2022/05/GHSA-542f-cg4p-xchv/GHSA-542f-cg4p-xchv.json @@ -7,12 +7,8 @@ "CVE-2012-6518" ], "details": "Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54mh-x596-rpcq/GHSA-54mh-x596-rpcq.json b/advisories/unreviewed/2022/05/GHSA-54mh-x596-rpcq/GHSA-54mh-x596-rpcq.json index 3f76024687d..7ec80aa6530 100644 --- a/advisories/unreviewed/2022/05/GHSA-54mh-x596-rpcq/GHSA-54mh-x596-rpcq.json +++ b/advisories/unreviewed/2022/05/GHSA-54mh-x596-rpcq/GHSA-54mh-x596-rpcq.json @@ -7,12 +7,8 @@ "CVE-2012-5648" ], "details": "Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) app/models/hostext/search.rb or (2) app/models/puppetclass.rb, related to the search mechanism.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-553f-j478-v9xg/GHSA-553f-j478-v9xg.json b/advisories/unreviewed/2022/05/GHSA-553f-j478-v9xg/GHSA-553f-j478-v9xg.json index 06aa33cb877..ce631bb1dac 100644 --- a/advisories/unreviewed/2022/05/GHSA-553f-j478-v9xg/GHSA-553f-j478-v9xg.json +++ b/advisories/unreviewed/2022/05/GHSA-553f-j478-v9xg/GHSA-553f-j478-v9xg.json @@ -7,12 +7,8 @@ "CVE-2012-4897" ], "details": "Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-554h-6rq4-vxf5/GHSA-554h-6rq4-vxf5.json b/advisories/unreviewed/2022/05/GHSA-554h-6rq4-vxf5/GHSA-554h-6rq4-vxf5.json index ec48ce0914c..52c72b12a58 100644 --- a/advisories/unreviewed/2022/05/GHSA-554h-6rq4-vxf5/GHSA-554h-6rq4-vxf5.json +++ b/advisories/unreviewed/2022/05/GHSA-554h-6rq4-vxf5/GHSA-554h-6rq4-vxf5.json @@ -7,12 +7,8 @@ "CVE-2013-3043" ], "details": "Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-55x5-m23j-3fr2/GHSA-55x5-m23j-3fr2.json b/advisories/unreviewed/2022/05/GHSA-55x5-m23j-3fr2/GHSA-55x5-m23j-3fr2.json index c532dd98b4b..0156ded645b 100644 --- a/advisories/unreviewed/2022/05/GHSA-55x5-m23j-3fr2/GHSA-55x5-m23j-3fr2.json +++ b/advisories/unreviewed/2022/05/GHSA-55x5-m23j-3fr2/GHSA-55x5-m23j-3fr2.json @@ -7,12 +7,8 @@ "CVE-2012-4972" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sys_solution_id, (2) sys_requesttype_id, (3) sys_problem_desc, (4) sys_solution_desc, (5) sys_problemsummary, (6) usr_Action_testing, (7) usr_Escalation, or (8) usr_Additional_Resources parameter to writesolutionuser.asp or the (9) sys_solution_id parameter to deletesolution.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-565j-mpfh-22p5/GHSA-565j-mpfh-22p5.json b/advisories/unreviewed/2022/05/GHSA-565j-mpfh-22p5/GHSA-565j-mpfh-22p5.json index 6183885bf56..6880beefc66 100644 --- a/advisories/unreviewed/2022/05/GHSA-565j-mpfh-22p5/GHSA-565j-mpfh-22p5.json +++ b/advisories/unreviewed/2022/05/GHSA-565j-mpfh-22p5/GHSA-565j-mpfh-22p5.json @@ -7,12 +7,8 @@ "CVE-2013-2124" ], "details": "Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x, 1.22.0, and 1.23.0 allows remote attackers to cause a denial of service (crash) via empty guest files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-56g2-qq6q-38fh/GHSA-56g2-qq6q-38fh.json b/advisories/unreviewed/2022/05/GHSA-56g2-qq6q-38fh/GHSA-56g2-qq6q-38fh.json index 0fad70956ac..e83d6e24306 100644 --- a/advisories/unreviewed/2022/05/GHSA-56g2-qq6q-38fh/GHSA-56g2-qq6q-38fh.json +++ b/advisories/unreviewed/2022/05/GHSA-56g2-qq6q-38fh/GHSA-56g2-qq6q-38fh.json @@ -7,12 +7,8 @@ "CVE-2013-3007" ], "details": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-56h6-fch2-ghhm/GHSA-56h6-fch2-ghhm.json b/advisories/unreviewed/2022/05/GHSA-56h6-fch2-ghhm/GHSA-56h6-fch2-ghhm.json index 5f74a18fbfd..33ede0e6ac1 100644 --- a/advisories/unreviewed/2022/05/GHSA-56h6-fch2-ghhm/GHSA-56h6-fch2-ghhm.json +++ b/advisories/unreviewed/2022/05/GHSA-56h6-fch2-ghhm/GHSA-56h6-fch2-ghhm.json @@ -7,12 +7,8 @@ "CVE-2012-4946" ], "details": "Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-56q8-wv5h-r272/GHSA-56q8-wv5h-r272.json b/advisories/unreviewed/2022/05/GHSA-56q8-wv5h-r272/GHSA-56q8-wv5h-r272.json index 366e55f3c39..409865d5523 100644 --- a/advisories/unreviewed/2022/05/GHSA-56q8-wv5h-r272/GHSA-56q8-wv5h-r272.json +++ b/advisories/unreviewed/2022/05/GHSA-56q8-wv5h-r272/GHSA-56q8-wv5h-r272.json @@ -7,12 +7,8 @@ "CVE-2012-4597" ], "details": "Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management Console/Dashboard.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-56wg-jgw9-q9vr/GHSA-56wg-jgw9-q9vr.json b/advisories/unreviewed/2022/05/GHSA-56wg-jgw9-q9vr/GHSA-56wg-jgw9-q9vr.json index 1e24bf71120..a9f999e33c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-56wg-jgw9-q9vr/GHSA-56wg-jgw9-q9vr.json +++ b/advisories/unreviewed/2022/05/GHSA-56wg-jgw9-q9vr/GHSA-56wg-jgw9-q9vr.json @@ -7,12 +7,8 @@ "CVE-2012-6520" ], "details": "Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. NOTE: this issue could not be reproduced by third parties.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-583r-395v-x5rg/GHSA-583r-395v-x5rg.json b/advisories/unreviewed/2022/05/GHSA-583r-395v-x5rg/GHSA-583r-395v-x5rg.json index 6812304154b..e85eaa47f9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-583r-395v-x5rg/GHSA-583r-395v-x5rg.json +++ b/advisories/unreviewed/2022/05/GHSA-583r-395v-x5rg/GHSA-583r-395v-x5rg.json @@ -7,12 +7,8 @@ "CVE-2012-5323" ], "details": "Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html/admin_passwd in Xavi X7968 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysUserName, sysPassword, and sysCfmPwd parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5859-8qc6-3q5v/GHSA-5859-8qc6-3q5v.json b/advisories/unreviewed/2022/05/GHSA-5859-8qc6-3q5v/GHSA-5859-8qc6-3q5v.json index 79cf955ec06..cdd02374b3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5859-8qc6-3q5v/GHSA-5859-8qc6-3q5v.json +++ b/advisories/unreviewed/2022/05/GHSA-5859-8qc6-3q5v/GHSA-5859-8qc6-3q5v.json @@ -7,12 +7,8 @@ "CVE-2012-4122" ], "details": "The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output redirection, aka Bug IDs CSCts56672 and CSCts56669.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-586c-rmq2-67j8/GHSA-586c-rmq2-67j8.json b/advisories/unreviewed/2022/05/GHSA-586c-rmq2-67j8/GHSA-586c-rmq2-67j8.json index 1e51d0f27a8..fbe4b16f76c 100644 --- a/advisories/unreviewed/2022/05/GHSA-586c-rmq2-67j8/GHSA-586c-rmq2-67j8.json +++ b/advisories/unreviewed/2022/05/GHSA-586c-rmq2-67j8/GHSA-586c-rmq2-67j8.json @@ -7,12 +7,8 @@ "CVE-2013-0591" ], "details": "Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3, a different vulnerability than CVE-2013-0590.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5f3x-vhw5-3rcg/GHSA-5f3x-vhw5-3rcg.json b/advisories/unreviewed/2022/05/GHSA-5f3x-vhw5-3rcg/GHSA-5f3x-vhw5-3rcg.json index 78300670d9d..58f7c1b8b16 100644 --- a/advisories/unreviewed/2022/05/GHSA-5f3x-vhw5-3rcg/GHSA-5f3x-vhw5-3rcg.json +++ b/advisories/unreviewed/2022/05/GHSA-5f3x-vhw5-3rcg/GHSA-5f3x-vhw5-3rcg.json @@ -7,12 +7,8 @@ "CVE-2012-6142" ], "details": "Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5ffh-rmm5-wpcf/GHSA-5ffh-rmm5-wpcf.json b/advisories/unreviewed/2022/05/GHSA-5ffh-rmm5-wpcf/GHSA-5ffh-rmm5-wpcf.json index 5a5fd67db46..84b62dc5e03 100644 --- a/advisories/unreviewed/2022/05/GHSA-5ffh-rmm5-wpcf/GHSA-5ffh-rmm5-wpcf.json +++ b/advisories/unreviewed/2022/05/GHSA-5ffh-rmm5-wpcf/GHSA-5ffh-rmm5-wpcf.json @@ -7,12 +7,8 @@ "CVE-2012-5261" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5ggg-wqqw-9v43/GHSA-5ggg-wqqw-9v43.json b/advisories/unreviewed/2022/05/GHSA-5ggg-wqqw-9v43/GHSA-5ggg-wqqw-9v43.json index 1dc92ee1da6..c0ced007ba3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5ggg-wqqw-9v43/GHSA-5ggg-wqqw-9v43.json +++ b/advisories/unreviewed/2022/05/GHSA-5ggg-wqqw-9v43/GHSA-5ggg-wqqw-9v43.json @@ -7,12 +7,8 @@ "CVE-2012-6314" ], "details": "Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5hhr-8qw3-63p2/GHSA-5hhr-8qw3-63p2.json b/advisories/unreviewed/2022/05/GHSA-5hhr-8qw3-63p2/GHSA-5hhr-8qw3-63p2.json index a20bb014c20..ad120f11bd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hhr-8qw3-63p2/GHSA-5hhr-8qw3-63p2.json +++ b/advisories/unreviewed/2022/05/GHSA-5hhr-8qw3-63p2/GHSA-5hhr-8qw3-63p2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hpc-qgc3-79p9/GHSA-5hpc-qgc3-79p9.json b/advisories/unreviewed/2022/05/GHSA-5hpc-qgc3-79p9/GHSA-5hpc-qgc3-79p9.json index 5b2f05a0066..b30bff1b9fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hpc-qgc3-79p9/GHSA-5hpc-qgc3-79p9.json +++ b/advisories/unreviewed/2022/05/GHSA-5hpc-qgc3-79p9/GHSA-5hpc-qgc3-79p9.json @@ -7,12 +7,8 @@ "CVE-2012-5896" ], "details": "The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an \"uninitialized pointer.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5hqg-2g59-p32c/GHSA-5hqg-2g59-p32c.json b/advisories/unreviewed/2022/05/GHSA-5hqg-2g59-p32c/GHSA-5hqg-2g59-p32c.json index bc8190c7332..46834b6fd44 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hqg-2g59-p32c/GHSA-5hqg-2g59-p32c.json +++ b/advisories/unreviewed/2022/05/GHSA-5hqg-2g59-p32c/GHSA-5hqg-2g59-p32c.json @@ -7,12 +7,8 @@ "CVE-2012-5294" ], "details": "SQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5j5p-vmmc-8gmj/GHSA-5j5p-vmmc-8gmj.json b/advisories/unreviewed/2022/05/GHSA-5j5p-vmmc-8gmj/GHSA-5j5p-vmmc-8gmj.json index 6b09130f8af..11cc7d1d43e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j5p-vmmc-8gmj/GHSA-5j5p-vmmc-8gmj.json +++ b/advisories/unreviewed/2022/05/GHSA-5j5p-vmmc-8gmj/GHSA-5j5p-vmmc-8gmj.json @@ -7,12 +7,8 @@ "CVE-2012-5225" ], "details": "Cross-site scripting (XSS) vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shopping_url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5jj2-mffv-rjh4/GHSA-5jj2-mffv-rjh4.json b/advisories/unreviewed/2022/05/GHSA-5jj2-mffv-rjh4/GHSA-5jj2-mffv-rjh4.json index 587945ea436..bf6effa45c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jj2-mffv-rjh4/GHSA-5jj2-mffv-rjh4.json +++ b/advisories/unreviewed/2022/05/GHSA-5jj2-mffv-rjh4/GHSA-5jj2-mffv-rjh4.json @@ -7,12 +7,8 @@ "CVE-2012-4670" ], "details": "Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5jqv-gv2g-j3fx/GHSA-5jqv-gv2g-j3fx.json b/advisories/unreviewed/2022/05/GHSA-5jqv-gv2g-j3fx/GHSA-5jqv-gv2g-j3fx.json index 031d4f97b43..d46fb21c1ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jqv-gv2g-j3fx/GHSA-5jqv-gv2g-j3fx.json +++ b/advisories/unreviewed/2022/05/GHSA-5jqv-gv2g-j3fx/GHSA-5jqv-gv2g-j3fx.json @@ -7,12 +7,8 @@ "CVE-2012-5257" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5mwc-rp6j-mw6r/GHSA-5mwc-rp6j-mw6r.json b/advisories/unreviewed/2022/05/GHSA-5mwc-rp6j-mw6r/GHSA-5mwc-rp6j-mw6r.json index 23b439f8bdc..1fb825d49f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mwc-rp6j-mw6r/GHSA-5mwc-rp6j-mw6r.json +++ b/advisories/unreviewed/2022/05/GHSA-5mwc-rp6j-mw6r/GHSA-5mwc-rp6j-mw6r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5pqr-836h-25qw/GHSA-5pqr-836h-25qw.json b/advisories/unreviewed/2022/05/GHSA-5pqr-836h-25qw/GHSA-5pqr-836h-25qw.json index 83a8d8dc186..c9f51a342e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pqr-836h-25qw/GHSA-5pqr-836h-25qw.json +++ b/advisories/unreviewed/2022/05/GHSA-5pqr-836h-25qw/GHSA-5pqr-836h-25qw.json @@ -7,12 +7,8 @@ "CVE-2012-5005" ], "details": "Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an add action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5r9h-4wc8-qhf9/GHSA-5r9h-4wc8-qhf9.json b/advisories/unreviewed/2022/05/GHSA-5r9h-4wc8-qhf9/GHSA-5r9h-4wc8-qhf9.json index d6b44b338ef..6689c52fa13 100644 --- a/advisories/unreviewed/2022/05/GHSA-5r9h-4wc8-qhf9/GHSA-5r9h-4wc8-qhf9.json +++ b/advisories/unreviewed/2022/05/GHSA-5r9h-4wc8-qhf9/GHSA-5r9h-4wc8-qhf9.json @@ -7,12 +7,8 @@ "CVE-2013-3025" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5rjw-24xh-w7xw/GHSA-5rjw-24xh-w7xw.json b/advisories/unreviewed/2022/05/GHSA-5rjw-24xh-w7xw/GHSA-5rjw-24xh-w7xw.json index ecca592fe9f..2d60bbe66ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rjw-24xh-w7xw/GHSA-5rjw-24xh-w7xw.json +++ b/advisories/unreviewed/2022/05/GHSA-5rjw-24xh-w7xw/GHSA-5rjw-24xh-w7xw.json @@ -7,12 +7,8 @@ "CVE-2012-5327" ], "details": "Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) delete_usrgrp[] parameter in a delete_usergroups action, (2) usergroup parameter in an add_user_togroup action, or (3) add_forum_group_id parameter in an add_forum_submit action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5rr6-rgq8-52wh/GHSA-5rr6-rgq8-52wh.json b/advisories/unreviewed/2022/05/GHSA-5rr6-rgq8-52wh/GHSA-5rr6-rgq8-52wh.json index c0cafcb987f..1cb2d43e412 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rr6-rgq8-52wh/GHSA-5rr6-rgq8-52wh.json +++ b/advisories/unreviewed/2022/05/GHSA-5rr6-rgq8-52wh/GHSA-5rr6-rgq8-52wh.json @@ -7,12 +7,8 @@ "CVE-2012-5795" ], "details": "The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5v59-hc9m-99jv/GHSA-5v59-hc9m-99jv.json b/advisories/unreviewed/2022/05/GHSA-5v59-hc9m-99jv/GHSA-5v59-hc9m-99jv.json index c8d93b14f63..076381a964f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5v59-hc9m-99jv/GHSA-5v59-hc9m-99jv.json +++ b/advisories/unreviewed/2022/05/GHSA-5v59-hc9m-99jv/GHSA-5v59-hc9m-99jv.json @@ -7,12 +7,8 @@ "CVE-2013-2956" ], "details": "SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5vgr-8hw2-wp3h/GHSA-5vgr-8hw2-wp3h.json b/advisories/unreviewed/2022/05/GHSA-5vgr-8hw2-wp3h/GHSA-5vgr-8hw2-wp3h.json index a4a6c7a0cd3..ef27d752ef4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vgr-8hw2-wp3h/GHSA-5vgr-8hw2-wp3h.json +++ b/advisories/unreviewed/2022/05/GHSA-5vgr-8hw2-wp3h/GHSA-5vgr-8hw2-wp3h.json @@ -7,12 +7,8 @@ "CVE-2012-4544" ], "details": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w62-6f9v-h43w/GHSA-5w62-6f9v-h43w.json b/advisories/unreviewed/2022/05/GHSA-5w62-6f9v-h43w/GHSA-5w62-6f9v-h43w.json index f0b9ce9e7b8..d8dc372898f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w62-6f9v-h43w/GHSA-5w62-6f9v-h43w.json +++ b/advisories/unreviewed/2022/05/GHSA-5w62-6f9v-h43w/GHSA-5w62-6f9v-h43w.json @@ -7,12 +7,8 @@ "CVE-2013-2977" ], "details": "Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1 on Linux, allows remote attackers to execute arbitrary code via a malformed PNG image in a previewed e-mail message, aka SPR NPEI96K82Q.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5w7r-vv9c-xhfh/GHSA-5w7r-vv9c-xhfh.json b/advisories/unreviewed/2022/05/GHSA-5w7r-vv9c-xhfh/GHSA-5w7r-vv9c-xhfh.json index df58201cc8a..ec784cf2f98 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w7r-vv9c-xhfh/GHSA-5w7r-vv9c-xhfh.json +++ b/advisories/unreviewed/2022/05/GHSA-5w7r-vv9c-xhfh/GHSA-5w7r-vv9c-xhfh.json @@ -7,12 +7,8 @@ "CVE-2013-0585" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to the (1) web console and (2) repository management user interfaces.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62gq-j2xq-gfj7/GHSA-62gq-j2xq-gfj7.json b/advisories/unreviewed/2022/05/GHSA-62gq-j2xq-gfj7/GHSA-62gq-j2xq-gfj7.json index 31626b828cb..f4c619981d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-62gq-j2xq-gfj7/GHSA-62gq-j2xq-gfj7.json +++ b/advisories/unreviewed/2022/05/GHSA-62gq-j2xq-gfj7/GHSA-62gq-j2xq-gfj7.json @@ -7,12 +7,8 @@ "CVE-2013-0724" ], "details": "PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-63q3-5f3r-v5j4/GHSA-63q3-5f3r-v5j4.json b/advisories/unreviewed/2022/05/GHSA-63q3-5f3r-v5j4/GHSA-63q3-5f3r-v5j4.json index 7b646fca6aa..cd4071626a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-63q3-5f3r-v5j4/GHSA-63q3-5f3r-v5j4.json +++ b/advisories/unreviewed/2022/05/GHSA-63q3-5f3r-v5j4/GHSA-63q3-5f3r-v5j4.json @@ -7,12 +7,8 @@ "CVE-2013-2125" ], "details": "OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection blocking) by keeping a connection open.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-63qr-5qh2-mq5w/GHSA-63qr-5qh2-mq5w.json b/advisories/unreviewed/2022/05/GHSA-63qr-5qh2-mq5w/GHSA-63qr-5qh2-mq5w.json index 228da3f4ce2..d58fecb17ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-63qr-5qh2-mq5w/GHSA-63qr-5qh2-mq5w.json +++ b/advisories/unreviewed/2022/05/GHSA-63qr-5qh2-mq5w/GHSA-63qr-5qh2-mq5w.json @@ -7,12 +7,8 @@ "CVE-2012-4252" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of administrators for requests that (1) remove file access restriction via a deletehtaccess action, (2) drop a database via a kill value in a db action, (3) uninstall the application via a 101 value in the phase parameter to learn/cubemail/install.php, (4) delete config.php via a 2 value in the phase parameter to learn/cubemail/install.php, (5) change a password via a schutz action, or (6) execute arbitrary SQL commands via the sql_statement parameter to learn/cubemail/sql.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-643c-6c7m-wvfq/GHSA-643c-6c7m-wvfq.json b/advisories/unreviewed/2022/05/GHSA-643c-6c7m-wvfq/GHSA-643c-6c7m-wvfq.json index b39f4a92ecc..c7c5198de1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-643c-6c7m-wvfq/GHSA-643c-6c7m-wvfq.json +++ b/advisories/unreviewed/2022/05/GHSA-643c-6c7m-wvfq/GHSA-643c-6c7m-wvfq.json @@ -7,12 +7,8 @@ "CVE-2012-5766" ], "details": "Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than CVE-2013-0560.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6464-8hp4-gm69/GHSA-6464-8hp4-gm69.json b/advisories/unreviewed/2022/05/GHSA-6464-8hp4-gm69/GHSA-6464-8hp4-gm69.json index 842ce2b68c2..677d56b50ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-6464-8hp4-gm69/GHSA-6464-8hp4-gm69.json +++ b/advisories/unreviewed/2022/05/GHSA-6464-8hp4-gm69/GHSA-6464-8hp4-gm69.json @@ -7,12 +7,8 @@ "CVE-2012-5827" ], "details": "Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors involving \"Inadequate protection.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-64x7-vx9j-p2rg/GHSA-64x7-vx9j-p2rg.json b/advisories/unreviewed/2022/05/GHSA-64x7-vx9j-p2rg/GHSA-64x7-vx9j-p2rg.json index 2e1599a625f..f0a609bf658 100644 --- a/advisories/unreviewed/2022/05/GHSA-64x7-vx9j-p2rg/GHSA-64x7-vx9j-p2rg.json +++ b/advisories/unreviewed/2022/05/GHSA-64x7-vx9j-p2rg/GHSA-64x7-vx9j-p2rg.json @@ -7,12 +7,8 @@ "CVE-2012-5271" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-65gp-cjj6-w8mh/GHSA-65gp-cjj6-w8mh.json b/advisories/unreviewed/2022/05/GHSA-65gp-cjj6-w8mh/GHSA-65gp-cjj6-w8mh.json index 4124216c869..32afdceb135 100644 --- a/advisories/unreviewed/2022/05/GHSA-65gp-cjj6-w8mh/GHSA-65gp-cjj6-w8mh.json +++ b/advisories/unreviewed/2022/05/GHSA-65gp-cjj6-w8mh/GHSA-65gp-cjj6-w8mh.json @@ -7,12 +7,8 @@ "CVE-2012-4837" ], "details": "IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-65hw-395w-9g27/GHSA-65hw-395w-9g27.json b/advisories/unreviewed/2022/05/GHSA-65hw-395w-9g27/GHSA-65hw-395w-9g27.json index 9716616185a..417d85b7d88 100644 --- a/advisories/unreviewed/2022/05/GHSA-65hw-395w-9g27/GHSA-65hw-395w-9g27.json +++ b/advisories/unreviewed/2022/05/GHSA-65hw-395w-9g27/GHSA-65hw-395w-9g27.json @@ -7,12 +7,8 @@ "CVE-2012-5297" ], "details": "SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-668j-g6rh-jxw7/GHSA-668j-g6rh-jxw7.json b/advisories/unreviewed/2022/05/GHSA-668j-g6rh-jxw7/GHSA-668j-g6rh-jxw7.json index e5461b7442d..388c331cd2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-668j-g6rh-jxw7/GHSA-668j-g6rh-jxw7.json +++ b/advisories/unreviewed/2022/05/GHSA-668j-g6rh-jxw7/GHSA-668j-g6rh-jxw7.json @@ -7,12 +7,8 @@ "CVE-2013-3262" ], "details": "Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66p8-7mgp-j78p/GHSA-66p8-7mgp-j78p.json b/advisories/unreviewed/2022/05/GHSA-66p8-7mgp-j78p/GHSA-66p8-7mgp-j78p.json index 8cae13da2e0..4998d1db5d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-66p8-7mgp-j78p/GHSA-66p8-7mgp-j78p.json +++ b/advisories/unreviewed/2022/05/GHSA-66p8-7mgp-j78p/GHSA-66p8-7mgp-j78p.json @@ -7,12 +7,8 @@ "CVE-2012-4943" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to hijack the authentication of arbitrary users for requests that modify (1) passwords, (2) accounts, or (3) permissions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-683m-h8mg-5rmc/GHSA-683m-h8mg-5rmc.json b/advisories/unreviewed/2022/05/GHSA-683m-h8mg-5rmc/GHSA-683m-h8mg-5rmc.json index ac0901e5bf1..219e16778d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-683m-h8mg-5rmc/GHSA-683m-h8mg-5rmc.json +++ b/advisories/unreviewed/2022/05/GHSA-683m-h8mg-5rmc/GHSA-683m-h8mg-5rmc.json @@ -7,12 +7,8 @@ "CVE-2012-5332" ], "details": "at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69fh-mhqq-m6vc/GHSA-69fh-mhqq-m6vc.json b/advisories/unreviewed/2022/05/GHSA-69fh-mhqq-m6vc/GHSA-69fh-mhqq-m6vc.json index 2f0d23d4c3d..485e0e1dab7 100644 --- a/advisories/unreviewed/2022/05/GHSA-69fh-mhqq-m6vc/GHSA-69fh-mhqq-m6vc.json +++ b/advisories/unreviewed/2022/05/GHSA-69fh-mhqq-m6vc/GHSA-69fh-mhqq-m6vc.json @@ -7,12 +7,8 @@ "CVE-2012-5529" ], "details": "TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69qj-w566-92r6/GHSA-69qj-w566-92r6.json b/advisories/unreviewed/2022/05/GHSA-69qj-w566-92r6/GHSA-69qj-w566-92r6.json index 1c14de4eef2..7218f9e16a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-69qj-w566-92r6/GHSA-69qj-w566-92r6.json +++ b/advisories/unreviewed/2022/05/GHSA-69qj-w566-92r6/GHSA-69qj-w566-92r6.json @@ -7,12 +7,8 @@ "CVE-2012-5291" ], "details": "SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL commands via the idteam parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-69v6-39p3-jq6w/GHSA-69v6-39p3-jq6w.json b/advisories/unreviewed/2022/05/GHSA-69v6-39p3-jq6w/GHSA-69v6-39p3-jq6w.json index 27a403d2cee..d96fb479e87 100644 --- a/advisories/unreviewed/2022/05/GHSA-69v6-39p3-jq6w/GHSA-69v6-39p3-jq6w.json +++ b/advisories/unreviewed/2022/05/GHSA-69v6-39p3-jq6w/GHSA-69v6-39p3-jq6w.json @@ -7,12 +7,8 @@ "CVE-2012-5299" ], "details": "Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages via a direct request to (1) edit.asp, (2) delete.asp, or (3) approve.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6c5g-538q-r74p/GHSA-6c5g-538q-r74p.json b/advisories/unreviewed/2022/05/GHSA-6c5g-538q-r74p/GHSA-6c5g-538q-r74p.json index f19a51327c9..0469844499e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6c5g-538q-r74p/GHSA-6c5g-538q-r74p.json +++ b/advisories/unreviewed/2022/05/GHSA-6c5g-538q-r74p/GHSA-6c5g-538q-r74p.json @@ -7,12 +7,8 @@ "CVE-2013-1971" ], "details": "Cross-site scripting (XSS) vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the file name of a MP3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6cwp-4jmq-8g23/GHSA-6cwp-4jmq-8g23.json b/advisories/unreviewed/2022/05/GHSA-6cwp-4jmq-8g23/GHSA-6cwp-4jmq-8g23.json index 5ad73128425..1465fbcd01b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6cwp-4jmq-8g23/GHSA-6cwp-4jmq-8g23.json +++ b/advisories/unreviewed/2022/05/GHSA-6cwp-4jmq-8g23/GHSA-6cwp-4jmq-8g23.json @@ -7,12 +7,8 @@ "CVE-2012-4851" ], "details": "Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6f67-c287-q72r/GHSA-6f67-c287-q72r.json b/advisories/unreviewed/2022/05/GHSA-6f67-c287-q72r/GHSA-6f67-c287-q72r.json index 7ca49655faf..f084e8aae21 100644 --- a/advisories/unreviewed/2022/05/GHSA-6f67-c287-q72r/GHSA-6f67-c287-q72r.json +++ b/advisories/unreviewed/2022/05/GHSA-6f67-c287-q72r/GHSA-6f67-c287-q72r.json @@ -7,12 +7,8 @@ "CVE-2013-0599" ], "details": "IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP status code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6f83-j99m-v5q3/GHSA-6f83-j99m-v5q3.json b/advisories/unreviewed/2022/05/GHSA-6f83-j99m-v5q3/GHSA-6f83-j99m-v5q3.json index e7167d812fe..4577d729fff 100644 --- a/advisories/unreviewed/2022/05/GHSA-6f83-j99m-v5q3/GHSA-6f83-j99m-v5q3.json +++ b/advisories/unreviewed/2022/05/GHSA-6f83-j99m-v5q3/GHSA-6f83-j99m-v5q3.json @@ -7,12 +7,8 @@ "CVE-2012-5256" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fhf-vjwm-h7w6/GHSA-6fhf-vjwm-h7w6.json b/advisories/unreviewed/2022/05/GHSA-6fhf-vjwm-h7w6/GHSA-6fhf-vjwm-h7w6.json index 950c2d17d6b..4e343370597 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fhf-vjwm-h7w6/GHSA-6fhf-vjwm-h7w6.json +++ b/advisories/unreviewed/2022/05/GHSA-6fhf-vjwm-h7w6/GHSA-6fhf-vjwm-h7w6.json @@ -7,12 +7,8 @@ "CVE-2012-5936" ], "details": "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6g3m-5x69-693c/GHSA-6g3m-5x69-693c.json b/advisories/unreviewed/2022/05/GHSA-6g3m-5x69-693c/GHSA-6g3m-5x69-693c.json index 3e1ef7230c6..03393de5834 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g3m-5x69-693c/GHSA-6g3m-5x69-693c.json +++ b/advisories/unreviewed/2022/05/GHSA-6g3m-5x69-693c/GHSA-6g3m-5x69-693c.json @@ -7,12 +7,8 @@ "CVE-2012-5101" ], "details": "SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6h72-hh8m-p9h2/GHSA-6h72-hh8m-p9h2.json b/advisories/unreviewed/2022/05/GHSA-6h72-hh8m-p9h2/GHSA-6h72-hh8m-p9h2.json index a121bb9c18a..37703fc9729 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h72-hh8m-p9h2/GHSA-6h72-hh8m-p9h2.json +++ b/advisories/unreviewed/2022/05/GHSA-6h72-hh8m-p9h2/GHSA-6h72-hh8m-p9h2.json @@ -7,12 +7,8 @@ "CVE-2013-3443" ], "details": "The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6hgm-gvr3-qpw7/GHSA-6hgm-gvr3-qpw7.json b/advisories/unreviewed/2022/05/GHSA-6hgm-gvr3-qpw7/GHSA-6hgm-gvr3-qpw7.json index cf276773ba5..1761fabb087 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hgm-gvr3-qpw7/GHSA-6hgm-gvr3-qpw7.json +++ b/advisories/unreviewed/2022/05/GHSA-6hgm-gvr3-qpw7/GHSA-6hgm-gvr3-qpw7.json @@ -7,12 +7,8 @@ "CVE-2012-5287" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jhc-7v5j-xgxw/GHSA-6jhc-7v5j-xgxw.json b/advisories/unreviewed/2022/05/GHSA-6jhc-7v5j-xgxw/GHSA-6jhc-7v5j-xgxw.json index a9675729cfd..75b163bbfc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jhc-7v5j-xgxw/GHSA-6jhc-7v5j-xgxw.json +++ b/advisories/unreviewed/2022/05/GHSA-6jhc-7v5j-xgxw/GHSA-6jhc-7v5j-xgxw.json @@ -7,12 +7,8 @@ "CVE-2013-3319" ], "details": "The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6m45-m4hg-v9vc/GHSA-6m45-m4hg-v9vc.json b/advisories/unreviewed/2022/05/GHSA-6m45-m4hg-v9vc/GHSA-6m45-m4hg-v9vc.json index e647d477b1e..e4cd9015547 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m45-m4hg-v9vc/GHSA-6m45-m4hg-v9vc.json +++ b/advisories/unreviewed/2022/05/GHSA-6m45-m4hg-v9vc/GHSA-6m45-m4hg-v9vc.json @@ -7,12 +7,8 @@ "CVE-2012-4955" ], "details": "Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mrg-rh36-jh7r/GHSA-6mrg-rh36-jh7r.json b/advisories/unreviewed/2022/05/GHSA-6mrg-rh36-jh7r/GHSA-6mrg-rh36-jh7r.json index 7ef9a2ddb03..ccfb9bb7ea1 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mrg-rh36-jh7r/GHSA-6mrg-rh36-jh7r.json +++ b/advisories/unreviewed/2022/05/GHSA-6mrg-rh36-jh7r/GHSA-6mrg-rh36-jh7r.json @@ -7,12 +7,8 @@ "CVE-2012-5906" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in GreenBrowser 6.1.0117 and 6.1.0216 allow remote attackers to inject arbitrary web script or HTML via (1) the URI in an about: page or (2) the last visited URL in the LastVisitWriteEn function in function.js.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6qrv-fm9p-fmv8/GHSA-6qrv-fm9p-fmv8.json b/advisories/unreviewed/2022/05/GHSA-6qrv-fm9p-fmv8/GHSA-6qrv-fm9p-fmv8.json index 7d47f4b9135..fb4d24755c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qrv-fm9p-fmv8/GHSA-6qrv-fm9p-fmv8.json +++ b/advisories/unreviewed/2022/05/GHSA-6qrv-fm9p-fmv8/GHSA-6qrv-fm9p-fmv8.json @@ -7,12 +7,8 @@ "CVE-2012-5920" ], "details": "Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as used in JBoss Operations Network (ON) 3.1.1 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2012-4563.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6r59-rjfh-9hm2/GHSA-6r59-rjfh-9hm2.json b/advisories/unreviewed/2022/05/GHSA-6r59-rjfh-9hm2/GHSA-6r59-rjfh-9hm2.json index 87b3d92d099..36d9a46d150 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r59-rjfh-9hm2/GHSA-6r59-rjfh-9hm2.json +++ b/advisories/unreviewed/2022/05/GHSA-6r59-rjfh-9hm2/GHSA-6r59-rjfh-9hm2.json @@ -7,12 +7,8 @@ "CVE-2012-4269" ], "details": "Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6r6r-4q6c-c9vg/GHSA-6r6r-4q6c-c9vg.json b/advisories/unreviewed/2022/05/GHSA-6r6r-4q6c-c9vg/GHSA-6r6r-4q6c-c9vg.json index 7dc51434b7d..759694fd572 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r6r-4q6c-c9vg/GHSA-6r6r-4q6c-c9vg.json +++ b/advisories/unreviewed/2022/05/GHSA-6r6r-4q6c-c9vg/GHSA-6r6r-4q6c-c9vg.json @@ -7,12 +7,8 @@ "CVE-2012-4878" ], "details": "Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6vp9-x665-gpr4/GHSA-6vp9-x665-gpr4.json b/advisories/unreviewed/2022/05/GHSA-6vp9-x665-gpr4/GHSA-6vp9-x665-gpr4.json index 5d6b1150373..eca5ef73a32 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vp9-x665-gpr4/GHSA-6vp9-x665-gpr4.json +++ b/advisories/unreviewed/2022/05/GHSA-6vp9-x665-gpr4/GHSA-6vp9-x665-gpr4.json @@ -7,12 +7,8 @@ "CVE-2012-5815" ], "details": "The Rackspace app 2.1.5 for iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6vxc-9w39-44rj/GHSA-6vxc-9w39-44rj.json b/advisories/unreviewed/2022/05/GHSA-6vxc-9w39-44rj/GHSA-6vxc-9w39-44rj.json index ba3f1d98d00..eb61a61ee52 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vxc-9w39-44rj/GHSA-6vxc-9w39-44rj.json +++ b/advisories/unreviewed/2022/05/GHSA-6vxc-9w39-44rj/GHSA-6vxc-9w39-44rj.json @@ -7,12 +7,8 @@ "CVE-2012-5105" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to (1) main.php or (2) index.php; or (3) nsextt parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6whm-cwc2-p7rg/GHSA-6whm-cwc2-p7rg.json b/advisories/unreviewed/2022/05/GHSA-6whm-cwc2-p7rg/GHSA-6whm-cwc2-p7rg.json index cbf1750f621..78afd7228df 100644 --- a/advisories/unreviewed/2022/05/GHSA-6whm-cwc2-p7rg/GHSA-6whm-cwc2-p7rg.json +++ b/advisories/unreviewed/2022/05/GHSA-6whm-cwc2-p7rg/GHSA-6whm-cwc2-p7rg.json @@ -7,12 +7,8 @@ "CVE-2012-4587" ], "details": "McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6wq4-xv9r-8vq7/GHSA-6wq4-xv9r-8vq7.json b/advisories/unreviewed/2022/05/GHSA-6wq4-xv9r-8vq7/GHSA-6wq4-xv9r-8vq7.json index 1c5205e7afe..a1496a895a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wq4-xv9r-8vq7/GHSA-6wq4-xv9r-8vq7.json +++ b/advisories/unreviewed/2022/05/GHSA-6wq4-xv9r-8vq7/GHSA-6wq4-xv9r-8vq7.json @@ -7,12 +7,8 @@ "CVE-2012-6554" ], "details": "functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the preg_replace function with the eval switch.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6xgv-xq79-gp8c/GHSA-6xgv-xq79-gp8c.json b/advisories/unreviewed/2022/05/GHSA-6xgv-xq79-gp8c/GHSA-6xgv-xq79-gp8c.json index 4710bf81c2c..a580cd8815d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xgv-xq79-gp8c/GHSA-6xgv-xq79-gp8c.json +++ b/advisories/unreviewed/2022/05/GHSA-6xgv-xq79-gp8c/GHSA-6xgv-xq79-gp8c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-724f-83mw-fgp7/GHSA-724f-83mw-fgp7.json b/advisories/unreviewed/2022/05/GHSA-724f-83mw-fgp7/GHSA-724f-83mw-fgp7.json index 1a7d3947039..3dfbc63bc26 100644 --- a/advisories/unreviewed/2022/05/GHSA-724f-83mw-fgp7/GHSA-724f-83mw-fgp7.json +++ b/advisories/unreviewed/2022/05/GHSA-724f-83mw-fgp7/GHSA-724f-83mw-fgp7.json @@ -7,12 +7,8 @@ "CVE-2012-5356" ], "details": "The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x before 0.82.7.3, and 0.92.x before 0.92.8 does not properly check PPA GPG keys imported from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7338-3qqv-q9xh/GHSA-7338-3qqv-q9xh.json b/advisories/unreviewed/2022/05/GHSA-7338-3qqv-q9xh/GHSA-7338-3qqv-q9xh.json index 521ac078c2c..6b881e96a4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7338-3qqv-q9xh/GHSA-7338-3qqv-q9xh.json +++ b/advisories/unreviewed/2022/05/GHSA-7338-3qqv-q9xh/GHSA-7338-3qqv-q9xh.json @@ -7,12 +7,8 @@ "CVE-2012-4995" ], "details": "Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91+ Build 120224 allows remote attackers to inject arbitrary web script or HTML via the full_name parameter in a moduser action to admin/admin.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-73gm-693r-4g36/GHSA-73gm-693r-4g36.json b/advisories/unreviewed/2022/05/GHSA-73gm-693r-4g36/GHSA-73gm-693r-4g36.json index d60434929d0..c86629c18d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-73gm-693r-4g36/GHSA-73gm-693r-4g36.json +++ b/advisories/unreviewed/2022/05/GHSA-73gm-693r-4g36/GHSA-73gm-693r-4g36.json @@ -7,12 +7,8 @@ "CVE-2012-5388" ], "details": "Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wlcms_o_developer_name parameter in a save action to wp-admin/admin.php, a related issue to CVE-2012-5387.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-74g5-8xgv-w42f/GHSA-74g5-8xgv-w42f.json b/advisories/unreviewed/2022/05/GHSA-74g5-8xgv-w42f/GHSA-74g5-8xgv-w42f.json index 3823e37c587..f5f1bacbf6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-74g5-8xgv-w42f/GHSA-74g5-8xgv-w42f.json +++ b/advisories/unreviewed/2022/05/GHSA-74g5-8xgv-w42f/GHSA-74g5-8xgv-w42f.json @@ -7,12 +7,8 @@ "CVE-2012-5791" ], "details": "PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-75wr-64hp-88pq/GHSA-75wr-64hp-88pq.json b/advisories/unreviewed/2022/05/GHSA-75wr-64hp-88pq/GHSA-75wr-64hp-88pq.json index 81d36302660..abf4e8bb435 100644 --- a/advisories/unreviewed/2022/05/GHSA-75wr-64hp-88pq/GHSA-75wr-64hp-88pq.json +++ b/advisories/unreviewed/2022/05/GHSA-75wr-64hp-88pq/GHSA-75wr-64hp-88pq.json @@ -7,12 +7,8 @@ "CVE-2012-4536" ], "details": "The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-76cx-3rq6-74pr/GHSA-76cx-3rq6-74pr.json b/advisories/unreviewed/2022/05/GHSA-76cx-3rq6-74pr/GHSA-76cx-3rq6-74pr.json index 0eba77db6bf..bd9feb6c77c 100644 --- a/advisories/unreviewed/2022/05/GHSA-76cx-3rq6-74pr/GHSA-76cx-3rq6-74pr.json +++ b/advisories/unreviewed/2022/05/GHSA-76cx-3rq6-74pr/GHSA-76cx-3rq6-74pr.json @@ -7,12 +7,8 @@ "CVE-2012-5794" ], "details": "The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-77f6-h32c-hjr7/GHSA-77f6-h32c-hjr7.json b/advisories/unreviewed/2022/05/GHSA-77f6-h32c-hjr7/GHSA-77f6-h32c-hjr7.json index 70fd5522958..e79e427ece0 100644 --- a/advisories/unreviewed/2022/05/GHSA-77f6-h32c-hjr7/GHSA-77f6-h32c-hjr7.json +++ b/advisories/unreviewed/2022/05/GHSA-77f6-h32c-hjr7/GHSA-77f6-h32c-hjr7.json @@ -7,12 +7,8 @@ "CVE-2013-2982" ], "details": "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-77jp-2rxw-vqvq/GHSA-77jp-2rxw-vqvq.json b/advisories/unreviewed/2022/05/GHSA-77jp-2rxw-vqvq/GHSA-77jp-2rxw-vqvq.json index f1c153ce4b4..a204d3bef6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-77jp-2rxw-vqvq/GHSA-77jp-2rxw-vqvq.json +++ b/advisories/unreviewed/2022/05/GHSA-77jp-2rxw-vqvq/GHSA-77jp-2rxw-vqvq.json @@ -7,12 +7,8 @@ "CVE-2012-4768" ], "details": "Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dlsearch parameter to the default URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-785q-6cv4-2vm9/GHSA-785q-6cv4-2vm9.json b/advisories/unreviewed/2022/05/GHSA-785q-6cv4-2vm9/GHSA-785q-6cv4-2vm9.json index d5e754d8f00..f8b24005dd3 100644 --- a/advisories/unreviewed/2022/05/GHSA-785q-6cv4-2vm9/GHSA-785q-6cv4-2vm9.json +++ b/advisories/unreviewed/2022/05/GHSA-785q-6cv4-2vm9/GHSA-785q-6cv4-2vm9.json @@ -7,12 +7,8 @@ "CVE-2012-4938" ], "details": "Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated administrators to inject arbitrary web script or HTML via the banner message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7882-q4m2-7m5j/GHSA-7882-q4m2-7m5j.json b/advisories/unreviewed/2022/05/GHSA-7882-q4m2-7m5j/GHSA-7882-q4m2-7m5j.json index 331abc82c81..8f7b5679db1 100644 --- a/advisories/unreviewed/2022/05/GHSA-7882-q4m2-7m5j/GHSA-7882-q4m2-7m5j.json +++ b/advisories/unreviewed/2022/05/GHSA-7882-q4m2-7m5j/GHSA-7882-q4m2-7m5j.json @@ -7,12 +7,8 @@ "CVE-2012-5792" ], "details": "The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-792h-xrgg-jfhw/GHSA-792h-xrgg-jfhw.json b/advisories/unreviewed/2022/05/GHSA-792h-xrgg-jfhw/GHSA-792h-xrgg-jfhw.json index fcaf67dd97f..bf40c2df951 100644 --- a/advisories/unreviewed/2022/05/GHSA-792h-xrgg-jfhw/GHSA-792h-xrgg-jfhw.json +++ b/advisories/unreviewed/2022/05/GHSA-792h-xrgg-jfhw/GHSA-792h-xrgg-jfhw.json @@ -7,12 +7,8 @@ "CVE-2012-5450" ], "details": "Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7c3m-cjc4-58wg/GHSA-7c3m-cjc4-58wg.json b/advisories/unreviewed/2022/05/GHSA-7c3m-cjc4-58wg/GHSA-7c3m-cjc4-58wg.json index 9e39d89d79c..1bcfd8e8e1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c3m-cjc4-58wg/GHSA-7c3m-cjc4-58wg.json +++ b/advisories/unreviewed/2022/05/GHSA-7c3m-cjc4-58wg/GHSA-7c3m-cjc4-58wg.json @@ -7,12 +7,8 @@ "CVE-2012-6032" ], "details": "Multiple integer overflows in the (1) tmh_copy_from_client and (2) tmh_copy_to_client functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (memory corruption and host crash) via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7f4g-r584-2243/GHSA-7f4g-r584-2243.json b/advisories/unreviewed/2022/05/GHSA-7f4g-r584-2243/GHSA-7f4g-r584-2243.json index 6405c985b3a..2a13cdb106f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7f4g-r584-2243/GHSA-7f4g-r584-2243.json +++ b/advisories/unreviewed/2022/05/GHSA-7f4g-r584-2243/GHSA-7f4g-r584-2243.json @@ -7,12 +7,8 @@ "CVE-2012-6046" ], "details": "Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fj8-rgvj-wrgh/GHSA-7fj8-rgvj-wrgh.json b/advisories/unreviewed/2022/05/GHSA-7fj8-rgvj-wrgh/GHSA-7fj8-rgvj-wrgh.json index 776eca46de3..4b3c2ae81bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fj8-rgvj-wrgh/GHSA-7fj8-rgvj-wrgh.json +++ b/advisories/unreviewed/2022/05/GHSA-7fj8-rgvj-wrgh/GHSA-7fj8-rgvj-wrgh.json @@ -7,12 +7,8 @@ "CVE-2012-5953" ], "details": "IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fxw-32rc-24r9/GHSA-7fxw-32rc-24r9.json b/advisories/unreviewed/2022/05/GHSA-7fxw-32rc-24r9/GHSA-7fxw-32rc-24r9.json index 7d5b2b2fb45..9798cee025e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fxw-32rc-24r9/GHSA-7fxw-32rc-24r9.json +++ b/advisories/unreviewed/2022/05/GHSA-7fxw-32rc-24r9/GHSA-7fxw-32rc-24r9.json @@ -7,12 +7,8 @@ "CVE-2012-5248" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7gpq-4vwj-j795/GHSA-7gpq-4vwj-j795.json b/advisories/unreviewed/2022/05/GHSA-7gpq-4vwj-j795/GHSA-7gpq-4vwj-j795.json index 2b061f81b3d..0118d0934ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gpq-4vwj-j795/GHSA-7gpq-4vwj-j795.json +++ b/advisories/unreviewed/2022/05/GHSA-7gpq-4vwj-j795/GHSA-7gpq-4vwj-j795.json @@ -7,12 +7,8 @@ "CVE-2012-4240" ], "details": "SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7gx9-p2wj-j239/GHSA-7gx9-p2wj-j239.json b/advisories/unreviewed/2022/05/GHSA-7gx9-p2wj-j239/GHSA-7gx9-p2wj-j239.json index d5af81480a0..9e59b146953 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gx9-p2wj-j239/GHSA-7gx9-p2wj-j239.json +++ b/advisories/unreviewed/2022/05/GHSA-7gx9-p2wj-j239/GHSA-7gx9-p2wj-j239.json @@ -7,12 +7,8 @@ "CVE-2012-4260" ], "details": "Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1) aktion or (2) callurl parameter to modules/patient/mycare2x_pat_info.php; (3) dept_nr or (4) pid parameter to modules/importer/mycare2x_importer.php; (5) myOpsEintrag or (6) keyword parameter in a Suchen action to modules/drg/mycare2x_proc_search.php; or (7) name_last or (8) pid parameter to modules/patient/mycare_pid.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hxv-8jrw-xxw4/GHSA-7hxv-8jrw-xxw4.json b/advisories/unreviewed/2022/05/GHSA-7hxv-8jrw-xxw4/GHSA-7hxv-8jrw-xxw4.json index c281f496434..ab8f4eaac5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hxv-8jrw-xxw4/GHSA-7hxv-8jrw-xxw4.json +++ b/advisories/unreviewed/2022/05/GHSA-7hxv-8jrw-xxw4/GHSA-7hxv-8jrw-xxw4.json @@ -7,12 +7,8 @@ "CVE-2012-6560" ], "details": "SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7jcj-p85j-j3r9/GHSA-7jcj-p85j-j3r9.json b/advisories/unreviewed/2022/05/GHSA-7jcj-p85j-j3r9/GHSA-7jcj-p85j-j3r9.json index 27dfda59866..aa96be6024c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jcj-p85j-j3r9/GHSA-7jcj-p85j-j3r9.json +++ b/advisories/unreviewed/2022/05/GHSA-7jcj-p85j-j3r9/GHSA-7jcj-p85j-j3r9.json @@ -7,12 +7,8 @@ "CVE-2013-3260" ], "details": "Heap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mqg-jxr5-f9f4/GHSA-7mqg-jxr5-f9f4.json b/advisories/unreviewed/2022/05/GHSA-7mqg-jxr5-f9f4/GHSA-7mqg-jxr5-f9f4.json index d98c6498b89..ac1f8eb71c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mqg-jxr5-f9f4/GHSA-7mqg-jxr5-f9f4.json +++ b/advisories/unreviewed/2022/05/GHSA-7mqg-jxr5-f9f4/GHSA-7mqg-jxr5-f9f4.json @@ -7,12 +7,8 @@ "CVE-2013-3294" ], "details": "Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL commands via the (1) src or (2) username parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mvc-65x2-6c66/GHSA-7mvc-65x2-6c66.json b/advisories/unreviewed/2022/05/GHSA-7mvc-65x2-6c66/GHSA-7mvc-65x2-6c66.json index cfe72ab46e8..bd61736bc05 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mvc-65x2-6c66/GHSA-7mvc-65x2-6c66.json +++ b/advisories/unreviewed/2022/05/GHSA-7mvc-65x2-6c66/GHSA-7mvc-65x2-6c66.json @@ -7,12 +7,8 @@ "CVE-2013-2981" ], "details": "Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p53-8wjr-j8h4/GHSA-7p53-8wjr-j8h4.json b/advisories/unreviewed/2022/05/GHSA-7p53-8wjr-j8h4/GHSA-7p53-8wjr-j8h4.json index 4e8c3b36f22..a9afda960ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p53-8wjr-j8h4/GHSA-7p53-8wjr-j8h4.json +++ b/advisories/unreviewed/2022/05/GHSA-7p53-8wjr-j8h4/GHSA-7p53-8wjr-j8h4.json @@ -7,12 +7,8 @@ "CVE-2012-5888" ], "details": "Cross-site scripting (XSS) vulnerability in Basic SEO Features (seo_basics) extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p6f-596p-xrcj/GHSA-7p6f-596p-xrcj.json b/advisories/unreviewed/2022/05/GHSA-7p6f-596p-xrcj/GHSA-7p6f-596p-xrcj.json index 6db277cfe4d..b6bc5c3ac72 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p6f-596p-xrcj/GHSA-7p6f-596p-xrcj.json +++ b/advisories/unreviewed/2022/05/GHSA-7p6f-596p-xrcj/GHSA-7p6f-596p-xrcj.json @@ -7,12 +7,8 @@ "CVE-2012-4975" ], "details": "editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sys_request_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7phg-3439-wh4j/GHSA-7phg-3439-wh4j.json b/advisories/unreviewed/2022/05/GHSA-7phg-3439-wh4j/GHSA-7phg-3439-wh4j.json index 70f4da15190..ae6ec9fdabe 100644 --- a/advisories/unreviewed/2022/05/GHSA-7phg-3439-wh4j/GHSA-7phg-3439-wh4j.json +++ b/advisories/unreviewed/2022/05/GHSA-7phg-3439-wh4j/GHSA-7phg-3439-wh4j.json @@ -7,12 +7,8 @@ "CVE-2013-3478" ], "details": "SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7pjw-c9w7-9xgf/GHSA-7pjw-c9w7-9xgf.json b/advisories/unreviewed/2022/05/GHSA-7pjw-c9w7-9xgf/GHSA-7pjw-c9w7-9xgf.json index 3c25a8df400..45045d4fa7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pjw-c9w7-9xgf/GHSA-7pjw-c9w7-9xgf.json +++ b/advisories/unreviewed/2022/05/GHSA-7pjw-c9w7-9xgf/GHSA-7pjw-c9w7-9xgf.json @@ -7,12 +7,8 @@ "CVE-2013-0578" ], "details": "The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0 before HF73, 9.1.0 before FP45, and 9.2.0 before FP17, when the API tester is enabled, do not require administrative credentials, which allows remote authenticated users to obtain sensitive database information via a request to the API tester URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7pr8-p7jp-8qv2/GHSA-7pr8-p7jp-8qv2.json b/advisories/unreviewed/2022/05/GHSA-7pr8-p7jp-8qv2/GHSA-7pr8-p7jp-8qv2.json index e00bcd30a06..59b7d30877f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pr8-p7jp-8qv2/GHSA-7pr8-p7jp-8qv2.json +++ b/advisories/unreviewed/2022/05/GHSA-7pr8-p7jp-8qv2/GHSA-7pr8-p7jp-8qv2.json @@ -7,12 +7,8 @@ "CVE-2012-5951" ], "details": "Unspecified vulnerability in IBM Tivoli NetView 1.4, 5.1 through 5.4, and 6.1 on z/OS allows local users to gain privileges by leveraging access to the normal Unix System Services (USS) security level.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7pr9-v59p-fw7h/GHSA-7pr9-v59p-fw7h.json b/advisories/unreviewed/2022/05/GHSA-7pr9-v59p-fw7h/GHSA-7pr9-v59p-fw7h.json index 78ccd57a6c2..98d39e04d7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pr9-v59p-fw7h/GHSA-7pr9-v59p-fw7h.json +++ b/advisories/unreviewed/2022/05/GHSA-7pr9-v59p-fw7h/GHSA-7pr9-v59p-fw7h.json @@ -7,12 +7,8 @@ "CVE-2012-6525" ], "details": "SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7q6v-9564-57r5/GHSA-7q6v-9564-57r5.json b/advisories/unreviewed/2022/05/GHSA-7q6v-9564-57r5/GHSA-7q6v-9564-57r5.json index b45f82ce7ff..b86b95093f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q6v-9564-57r5/GHSA-7q6v-9564-57r5.json +++ b/advisories/unreviewed/2022/05/GHSA-7q6v-9564-57r5/GHSA-7q6v-9564-57r5.json @@ -7,12 +7,8 @@ "CVE-2012-5168" ], "details": "ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or category names via a direct request to (1) user/index_inline_editor_submit.php or (2) course_category/index_inline_editor_submit.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7q8x-9mc6-rcxg/GHSA-7q8x-9mc6-rcxg.json b/advisories/unreviewed/2022/05/GHSA-7q8x-9mc6-rcxg/GHSA-7q8x-9mc6-rcxg.json index 2f4d852a960..920e154175f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q8x-9mc6-rcxg/GHSA-7q8x-9mc6-rcxg.json +++ b/advisories/unreviewed/2022/05/GHSA-7q8x-9mc6-rcxg/GHSA-7q8x-9mc6-rcxg.json @@ -7,12 +7,8 @@ "CVE-2012-4328" ], "details": "Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7rwj-wfgm-v7fq/GHSA-7rwj-wfgm-v7fq.json b/advisories/unreviewed/2022/05/GHSA-7rwj-wfgm-v7fq/GHSA-7rwj-wfgm-v7fq.json index 2eba91536be..5002a82bb9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rwj-wfgm-v7fq/GHSA-7rwj-wfgm-v7fq.json +++ b/advisories/unreviewed/2022/05/GHSA-7rwj-wfgm-v7fq/GHSA-7rwj-wfgm-v7fq.json @@ -7,12 +7,8 @@ "CVE-2012-6572" ], "details": "Cross-site scripting (XSS) vulnerability in the phptemplate_preprocess_node function in template.php in the Inf08 theme 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with the \"administer taxonomy\" permission to inject arbitrary web script or HTML via a taxonomy vocabulary name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7vmp-r3hr-pff4/GHSA-7vmp-r3hr-pff4.json b/advisories/unreviewed/2022/05/GHSA-7vmp-r3hr-pff4/GHSA-7vmp-r3hr-pff4.json index 33b57a13dee..bb43526ec01 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vmp-r3hr-pff4/GHSA-7vmp-r3hr-pff4.json +++ b/advisories/unreviewed/2022/05/GHSA-7vmp-r3hr-pff4/GHSA-7vmp-r3hr-pff4.json @@ -7,12 +7,8 @@ "CVE-2012-5226" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) motclef parameter to achat/recherche.php or (2) PATH_INFO to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7whr-c582-hxj6/GHSA-7whr-c582-hxj6.json b/advisories/unreviewed/2022/05/GHSA-7whr-c582-hxj6/GHSA-7whr-c582-hxj6.json index 94e3c6bd93d..21867c34c42 100644 --- a/advisories/unreviewed/2022/05/GHSA-7whr-c582-hxj6/GHSA-7whr-c582-hxj6.json +++ b/advisories/unreviewed/2022/05/GHSA-7whr-c582-hxj6/GHSA-7whr-c582-hxj6.json @@ -7,12 +7,8 @@ "CVE-2013-1841" ], "details": "Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7wr9-wqrq-wjv4/GHSA-7wr9-wqrq-wjv4.json b/advisories/unreviewed/2022/05/GHSA-7wr9-wqrq-wjv4/GHSA-7wr9-wqrq-wjv4.json index 716e4d9a063..1bbf7966d3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wr9-wqrq-wjv4/GHSA-7wr9-wqrq-wjv4.json +++ b/advisories/unreviewed/2022/05/GHSA-7wr9-wqrq-wjv4/GHSA-7wr9-wqrq-wjv4.json @@ -7,12 +7,8 @@ "CVE-2012-4432" ], "details": "Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execute arbitrary code via unspecified vectors related to \"palette reduction.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-823m-h7jf-28xh/GHSA-823m-h7jf-28xh.json b/advisories/unreviewed/2022/05/GHSA-823m-h7jf-28xh/GHSA-823m-h7jf-28xh.json index c804fa67a35..189ef611579 100644 --- a/advisories/unreviewed/2022/05/GHSA-823m-h7jf-28xh/GHSA-823m-h7jf-28xh.json +++ b/advisories/unreviewed/2022/05/GHSA-823m-h7jf-28xh/GHSA-823m-h7jf-28xh.json @@ -7,12 +7,8 @@ "CVE-2012-4672" ], "details": "Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-824x-3vjp-5jfh/GHSA-824x-3vjp-5jfh.json b/advisories/unreviewed/2022/05/GHSA-824x-3vjp-5jfh/GHSA-824x-3vjp-5jfh.json index 5501758e8b1..a8e2089e37d 100644 --- a/advisories/unreviewed/2022/05/GHSA-824x-3vjp-5jfh/GHSA-824x-3vjp-5jfh.json +++ b/advisories/unreviewed/2022/05/GHSA-824x-3vjp-5jfh/GHSA-824x-3vjp-5jfh.json @@ -7,12 +7,8 @@ "CVE-2012-6529" ], "details": "Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) galleryphoto.php or (2) gallery.php; or the roomid parameter to (3) room.php or (4) room2.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-828x-pwwm-pchf/GHSA-828x-pwwm-pchf.json b/advisories/unreviewed/2022/05/GHSA-828x-pwwm-pchf/GHSA-828x-pwwm-pchf.json index 27ce97b937d..ca7838785c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-828x-pwwm-pchf/GHSA-828x-pwwm-pchf.json +++ b/advisories/unreviewed/2022/05/GHSA-828x-pwwm-pchf/GHSA-828x-pwwm-pchf.json @@ -7,12 +7,8 @@ "CVE-2013-2976" ], "details": "The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-83xj-wgx6-qphf/GHSA-83xj-wgx6-qphf.json b/advisories/unreviewed/2022/05/GHSA-83xj-wgx6-qphf/GHSA-83xj-wgx6-qphf.json index 05f8ff7ff9a..2bf5496523e 100644 --- a/advisories/unreviewed/2022/05/GHSA-83xj-wgx6-qphf/GHSA-83xj-wgx6-qphf.json +++ b/advisories/unreviewed/2022/05/GHSA-83xj-wgx6-qphf/GHSA-83xj-wgx6-qphf.json @@ -7,12 +7,8 @@ "CVE-2012-4250" ], "details": "Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8434-qgp6-wwxf/GHSA-8434-qgp6-wwxf.json b/advisories/unreviewed/2022/05/GHSA-8434-qgp6-wwxf/GHSA-8434-qgp6-wwxf.json index f93e229e70c..3fcb8eded27 100644 --- a/advisories/unreviewed/2022/05/GHSA-8434-qgp6-wwxf/GHSA-8434-qgp6-wwxf.json +++ b/advisories/unreviewed/2022/05/GHSA-8434-qgp6-wwxf/GHSA-8434-qgp6-wwxf.json @@ -7,12 +7,8 @@ "CVE-2012-4075" ], "details": "Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-858v-2qrq-xwph/GHSA-858v-2qrq-xwph.json b/advisories/unreviewed/2022/05/GHSA-858v-2qrq-xwph/GHSA-858v-2qrq-xwph.json index 778e6f8b422..b5a96fed704 100644 --- a/advisories/unreviewed/2022/05/GHSA-858v-2qrq-xwph/GHSA-858v-2qrq-xwph.json +++ b/advisories/unreviewed/2022/05/GHSA-858v-2qrq-xwph/GHSA-858v-2qrq-xwph.json @@ -7,12 +7,8 @@ "CVE-2012-6582" ], "details": "Cross-site scripting (XSS) vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8792-vr9v-9wx3/GHSA-8792-vr9v-9wx3.json b/advisories/unreviewed/2022/05/GHSA-8792-vr9v-9wx3/GHSA-8792-vr9v-9wx3.json index e4f604deeef..9c530c8cc17 100644 --- a/advisories/unreviewed/2022/05/GHSA-8792-vr9v-9wx3/GHSA-8792-vr9v-9wx3.json +++ b/advisories/unreviewed/2022/05/GHSA-8792-vr9v-9wx3/GHSA-8792-vr9v-9wx3.json @@ -7,12 +7,8 @@ "CVE-2013-1455" ], "details": "Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an \"Undefined variable.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-886f-w9xh-gjq3/GHSA-886f-w9xh-gjq3.json b/advisories/unreviewed/2022/05/GHSA-886f-w9xh-gjq3/GHSA-886f-w9xh-gjq3.json index 742076db513..ca20a2af8e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-886f-w9xh-gjq3/GHSA-886f-w9xh-gjq3.json +++ b/advisories/unreviewed/2022/05/GHSA-886f-w9xh-gjq3/GHSA-886f-w9xh-gjq3.json @@ -7,12 +7,8 @@ "CVE-2012-5910" ], "details": "SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-89ph-4mm5-c325/GHSA-89ph-4mm5-c325.json b/advisories/unreviewed/2022/05/GHSA-89ph-4mm5-c325/GHSA-89ph-4mm5-c325.json index fb70e3973dd..3e1c06d7870 100644 --- a/advisories/unreviewed/2022/05/GHSA-89ph-4mm5-c325/GHSA-89ph-4mm5-c325.json +++ b/advisories/unreviewed/2022/05/GHSA-89ph-4mm5-c325/GHSA-89ph-4mm5-c325.json @@ -7,12 +7,8 @@ "CVE-2012-4605" ], "details": "The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the \"SurfControl plc\\SuperScout Email Filter\\SMTP\" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack against encrypted session data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8c2j-4fw8-5r95/GHSA-8c2j-4fw8-5r95.json b/advisories/unreviewed/2022/05/GHSA-8c2j-4fw8-5r95/GHSA-8c2j-4fw8-5r95.json index 6df8a2c0c5a..2f7cce90e57 100644 --- a/advisories/unreviewed/2022/05/GHSA-8c2j-4fw8-5r95/GHSA-8c2j-4fw8-5r95.json +++ b/advisories/unreviewed/2022/05/GHSA-8c2j-4fw8-5r95/GHSA-8c2j-4fw8-5r95.json @@ -7,12 +7,8 @@ "CVE-2012-4927" ], "details": "SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attackers to execute arbitrary SQL commands via the fieldnames parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8cg3-jfjx-3pp2/GHSA-8cg3-jfjx-3pp2.json b/advisories/unreviewed/2022/05/GHSA-8cg3-jfjx-3pp2/GHSA-8cg3-jfjx-3pp2.json index c5740719f00..2395c4be268 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cg3-jfjx-3pp2/GHSA-8cg3-jfjx-3pp2.json +++ b/advisories/unreviewed/2022/05/GHSA-8cg3-jfjx-3pp2/GHSA-8cg3-jfjx-3pp2.json @@ -7,12 +7,8 @@ "CVE-2012-5889" ], "details": "Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8cqc-hvqp-r434/GHSA-8cqc-hvqp-r434.json b/advisories/unreviewed/2022/05/GHSA-8cqc-hvqp-r434/GHSA-8cqc-hvqp-r434.json index d7663063911..7da89826c79 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cqc-hvqp-r434/GHSA-8cqc-hvqp-r434.json +++ b/advisories/unreviewed/2022/05/GHSA-8cqc-hvqp-r434/GHSA-8cqc-hvqp-r434.json @@ -7,12 +7,8 @@ "CVE-2012-5908" ], "details": "Cross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to inject arbitrary web script or HTML via the conditions[usergroup][] parameter in a search action to admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8cv6-5hqj-rcj2/GHSA-8cv6-5hqj-rcj2.json b/advisories/unreviewed/2022/05/GHSA-8cv6-5hqj-rcj2/GHSA-8cv6-5hqj-rcj2.json index 2ecf7cb7067..7bb6d410ff2 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cv6-5hqj-rcj2/GHSA-8cv6-5hqj-rcj2.json +++ b/advisories/unreviewed/2022/05/GHSA-8cv6-5hqj-rcj2/GHSA-8cv6-5hqj-rcj2.json @@ -7,12 +7,8 @@ "CVE-2012-5163" ], "details": "Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enable_category action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8cx8-xmvm-66wj/GHSA-8cx8-xmvm-66wj.json b/advisories/unreviewed/2022/05/GHSA-8cx8-xmvm-66wj/GHSA-8cx8-xmvm-66wj.json index 497e14787a0..6df5156354e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cx8-xmvm-66wj/GHSA-8cx8-xmvm-66wj.json +++ b/advisories/unreviewed/2022/05/GHSA-8cx8-xmvm-66wj/GHSA-8cx8-xmvm-66wj.json @@ -7,12 +7,8 @@ "CVE-2012-5483" ], "details": "tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8fq4-fp76-vppr/GHSA-8fq4-fp76-vppr.json b/advisories/unreviewed/2022/05/GHSA-8fq4-fp76-vppr/GHSA-8fq4-fp76-vppr.json index f63b39fbf5c..46ea356afe3 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fq4-fp76-vppr/GHSA-8fq4-fp76-vppr.json +++ b/advisories/unreviewed/2022/05/GHSA-8fq4-fp76-vppr/GHSA-8fq4-fp76-vppr.json @@ -7,12 +7,8 @@ "CVE-2012-5911" ], "details": "Cross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8g94-jwh4-877r/GHSA-8g94-jwh4-877r.json b/advisories/unreviewed/2022/05/GHSA-8g94-jwh4-877r/GHSA-8g94-jwh4-877r.json index e14a6f8dc58..51f4ac2bc8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g94-jwh4-877r/GHSA-8g94-jwh4-877r.json +++ b/advisories/unreviewed/2022/05/GHSA-8g94-jwh4-877r/GHSA-8g94-jwh4-877r.json @@ -7,12 +7,8 @@ "CVE-2012-4270" ], "details": "Cross-site scripting (XSS) vulnerability in eFront 3.6.11 allows remote authenticated users to inject arbitrary web script or HTML via the subject box of a message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8m6w-vv6g-c3q6/GHSA-8m6w-vv6g-c3q6.json b/advisories/unreviewed/2022/05/GHSA-8m6w-vv6g-c3q6/GHSA-8m6w-vv6g-c3q6.json index fee3c812b14..a6e7428f7b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m6w-vv6g-c3q6/GHSA-8m6w-vv6g-c3q6.json +++ b/advisories/unreviewed/2022/05/GHSA-8m6w-vv6g-c3q6/GHSA-8m6w-vv6g-c3q6.json @@ -7,12 +7,8 @@ "CVE-2012-5249" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8m99-2chw-3g2m/GHSA-8m99-2chw-3g2m.json b/advisories/unreviewed/2022/05/GHSA-8m99-2chw-3g2m/GHSA-8m99-2chw-3g2m.json index b716c5265b6..c8765e1cd53 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m99-2chw-3g2m/GHSA-8m99-2chw-3g2m.json +++ b/advisories/unreviewed/2022/05/GHSA-8m99-2chw-3g2m/GHSA-8m99-2chw-3g2m.json @@ -7,12 +7,8 @@ "CVE-2012-5455" ], "details": "Cross-site scripting (XSS) vulnerability in the language search component in Joomla! before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a \"typographical error.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8p64-g888-56pp/GHSA-8p64-g888-56pp.json b/advisories/unreviewed/2022/05/GHSA-8p64-g888-56pp/GHSA-8p64-g888-56pp.json index f2cc89695fb..7d0692cdffd 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p64-g888-56pp/GHSA-8p64-g888-56pp.json +++ b/advisories/unreviewed/2022/05/GHSA-8p64-g888-56pp/GHSA-8p64-g888-56pp.json @@ -7,12 +7,8 @@ "CVE-2012-5892" ], "details": "Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite.db3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8pp6-343g-mgj6/GHSA-8pp6-343g-mgj6.json b/advisories/unreviewed/2022/05/GHSA-8pp6-343g-mgj6/GHSA-8pp6-343g-mgj6.json index e0a2e8dc3d8..d8e54d11c00 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pp6-343g-mgj6/GHSA-8pp6-343g-mgj6.json +++ b/advisories/unreviewed/2022/05/GHSA-8pp6-343g-mgj6/GHSA-8pp6-343g-mgj6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8px7-w4mw-2rcm/GHSA-8px7-w4mw-2rcm.json b/advisories/unreviewed/2022/05/GHSA-8px7-w4mw-2rcm/GHSA-8px7-w4mw-2rcm.json index e359c2d9a1c..e63280134f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8px7-w4mw-2rcm/GHSA-8px7-w4mw-2rcm.json +++ b/advisories/unreviewed/2022/05/GHSA-8px7-w4mw-2rcm/GHSA-8px7-w4mw-2rcm.json @@ -7,12 +7,8 @@ "CVE-2013-1641" ], "details": "Directory traversal vulnerability in the zip download functionality in QuiXplorer before 2.5.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the selitems[] parameter in a download_selected action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8qcj-gwpm-qpqv/GHSA-8qcj-gwpm-qpqv.json b/advisories/unreviewed/2022/05/GHSA-8qcj-gwpm-qpqv/GHSA-8qcj-gwpm-qpqv.json index bb6593671f8..864c3284d72 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qcj-gwpm-qpqv/GHSA-8qcj-gwpm-qpqv.json +++ b/advisories/unreviewed/2022/05/GHSA-8qcj-gwpm-qpqv/GHSA-8qcj-gwpm-qpqv.json @@ -7,12 +7,8 @@ "CVE-2012-4085" ], "details": "The Intelligent Platform Management Interface (IPMI) implementation in the Blade Management Controller in Cisco Unified Computing System (UCS) allows remote attackers to enumerate valid usernames by observing IPMI interface responses, aka Bug ID CSCtg20761.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8r2p-hx5x-8fj7/GHSA-8r2p-hx5x-8fj7.json b/advisories/unreviewed/2022/05/GHSA-8r2p-hx5x-8fj7/GHSA-8r2p-hx5x-8fj7.json index 88b6e8d6292..90f5fbe3785 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r2p-hx5x-8fj7/GHSA-8r2p-hx5x-8fj7.json +++ b/advisories/unreviewed/2022/05/GHSA-8r2p-hx5x-8fj7/GHSA-8r2p-hx5x-8fj7.json @@ -7,12 +7,8 @@ "CVE-2013-1795" ], "details": "Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8v5c-chfg-fcjx/GHSA-8v5c-chfg-fcjx.json b/advisories/unreviewed/2022/05/GHSA-8v5c-chfg-fcjx/GHSA-8v5c-chfg-fcjx.json index 93f0881dae0..4b964aab270 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v5c-chfg-fcjx/GHSA-8v5c-chfg-fcjx.json +++ b/advisories/unreviewed/2022/05/GHSA-8v5c-chfg-fcjx/GHSA-8v5c-chfg-fcjx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8v6g-rf54-42cg/GHSA-8v6g-rf54-42cg.json b/advisories/unreviewed/2022/05/GHSA-8v6g-rf54-42cg/GHSA-8v6g-rf54-42cg.json index 5384ba58fc2..2381c82983e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v6g-rf54-42cg/GHSA-8v6g-rf54-42cg.json +++ b/advisories/unreviewed/2022/05/GHSA-8v6g-rf54-42cg/GHSA-8v6g-rf54-42cg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8x4w-mfgj-fgpr/GHSA-8x4w-mfgj-fgpr.json b/advisories/unreviewed/2022/05/GHSA-8x4w-mfgj-fgpr/GHSA-8x4w-mfgj-fgpr.json index 316e1e34d37..6fc3e8d03b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x4w-mfgj-fgpr/GHSA-8x4w-mfgj-fgpr.json +++ b/advisories/unreviewed/2022/05/GHSA-8x4w-mfgj-fgpr/GHSA-8x4w-mfgj-fgpr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8x87-86c6-rwj9/GHSA-8x87-86c6-rwj9.json b/advisories/unreviewed/2022/05/GHSA-8x87-86c6-rwj9/GHSA-8x87-86c6-rwj9.json index 46312945de4..727eaca3f9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x87-86c6-rwj9/GHSA-8x87-86c6-rwj9.json +++ b/advisories/unreviewed/2022/05/GHSA-8x87-86c6-rwj9/GHSA-8x87-86c6-rwj9.json @@ -7,12 +7,8 @@ "CVE-2013-3531" ], "details": "SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the playlist_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xw2-rf2c-8v7w/GHSA-8xw2-rf2c-8v7w.json b/advisories/unreviewed/2022/05/GHSA-8xw2-rf2c-8v7w/GHSA-8xw2-rf2c-8v7w.json index 285adf6fd2a..f865154554e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xw2-rf2c-8v7w/GHSA-8xw2-rf2c-8v7w.json +++ b/advisories/unreviewed/2022/05/GHSA-8xw2-rf2c-8v7w/GHSA-8xw2-rf2c-8v7w.json @@ -7,12 +7,8 @@ "CVE-2012-5862" ], "details": "login.php on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12 establishes multiple hardcoded accounts, which makes it easier for remote attackers to obtain administrative access by leveraging a (1) cleartext password or (2) password hash contained in this script, as demonstrated by a password of astridservice or 36e44c9b64.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8xx8-qvj6-3xqj/GHSA-8xx8-qvj6-3xqj.json b/advisories/unreviewed/2022/05/GHSA-8xx8-qvj6-3xqj/GHSA-8xx8-qvj6-3xqj.json index b292065c0be..cf3abeed26f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xx8-qvj6-3xqj/GHSA-8xx8-qvj6-3xqj.json +++ b/advisories/unreviewed/2022/05/GHSA-8xx8-qvj6-3xqj/GHSA-8xx8-qvj6-3xqj.json @@ -7,12 +7,8 @@ "CVE-2012-4836" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of stored data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9285-vccj-gq3v/GHSA-9285-vccj-gq3v.json b/advisories/unreviewed/2022/05/GHSA-9285-vccj-gq3v/GHSA-9285-vccj-gq3v.json index 81063b22c84..0db1c9b2bd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-9285-vccj-gq3v/GHSA-9285-vccj-gq3v.json +++ b/advisories/unreviewed/2022/05/GHSA-9285-vccj-gq3v/GHSA-9285-vccj-gq3v.json @@ -7,12 +7,8 @@ "CVE-2012-5316" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) Troubleshooting in the Trace route Device module or (2) LDAP Username in the LDAP Configuration module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9338-252x-62pc/GHSA-9338-252x-62pc.json b/advisories/unreviewed/2022/05/GHSA-9338-252x-62pc/GHSA-9338-252x-62pc.json index 987eeec6881..bd8dbfe2c3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9338-252x-62pc/GHSA-9338-252x-62pc.json +++ b/advisories/unreviewed/2022/05/GHSA-9338-252x-62pc/GHSA-9338-252x-62pc.json @@ -7,12 +7,8 @@ "CVE-2012-4429" ], "details": "Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-93p9-f9cv-7qvf/GHSA-93p9-f9cv-7qvf.json b/advisories/unreviewed/2022/05/GHSA-93p9-f9cv-7qvf/GHSA-93p9-f9cv-7qvf.json index bbd914bf279..9756ba249b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-93p9-f9cv-7qvf/GHSA-93p9-f9cv-7qvf.json +++ b/advisories/unreviewed/2022/05/GHSA-93p9-f9cv-7qvf/GHSA-93p9-f9cv-7qvf.json @@ -7,12 +7,8 @@ "CVE-2013-2968" ], "details": "An unspecified buffer-read method in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to cause a denial of service via a large file that lacks end-of-line characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9435-jcpg-pfq8/GHSA-9435-jcpg-pfq8.json b/advisories/unreviewed/2022/05/GHSA-9435-jcpg-pfq8/GHSA-9435-jcpg-pfq8.json index 4628c9e84bc..032f045d3de 100644 --- a/advisories/unreviewed/2022/05/GHSA-9435-jcpg-pfq8/GHSA-9435-jcpg-pfq8.json +++ b/advisories/unreviewed/2022/05/GHSA-9435-jcpg-pfq8/GHSA-9435-jcpg-pfq8.json @@ -7,12 +7,8 @@ "CVE-2012-5231" ], "details": "miniCMS 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code via a crafted (1) pagename or (2) area variable containing an executable extension, which is not properly handled by (a) update.php when writing files to content/, or (b) updatenews.php when writing files to content/news/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9445-9pgw-5fxf/GHSA-9445-9pgw-5fxf.json b/advisories/unreviewed/2022/05/GHSA-9445-9pgw-5fxf/GHSA-9445-9pgw-5fxf.json index 2e9dd6a4b9c..1cf70acba3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9445-9pgw-5fxf/GHSA-9445-9pgw-5fxf.json +++ b/advisories/unreviewed/2022/05/GHSA-9445-9pgw-5fxf/GHSA-9445-9pgw-5fxf.json @@ -7,12 +7,8 @@ "CVE-2013-0587" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Portal, (2) Portal 7.0.0.2, (3) Portal 8.0, or (4) PortalWeb2 theme.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-94jr-q888-qxgx/GHSA-94jr-q888-qxgx.json b/advisories/unreviewed/2022/05/GHSA-94jr-q888-qxgx/GHSA-94jr-q888-qxgx.json index 62b60cf99ce..2f3a9a39eea 100644 --- a/advisories/unreviewed/2022/05/GHSA-94jr-q888-qxgx/GHSA-94jr-q888-qxgx.json +++ b/advisories/unreviewed/2022/05/GHSA-94jr-q888-qxgx/GHSA-94jr-q888-qxgx.json @@ -7,12 +7,8 @@ "CVE-2013-3526" ], "details": "Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the aoid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-94pm-q285-wp32/GHSA-94pm-q285-wp32.json b/advisories/unreviewed/2022/05/GHSA-94pm-q285-wp32/GHSA-94pm-q285-wp32.json index 69f3a806756..b54bd603482 100644 --- a/advisories/unreviewed/2022/05/GHSA-94pm-q285-wp32/GHSA-94pm-q285-wp32.json +++ b/advisories/unreviewed/2022/05/GHSA-94pm-q285-wp32/GHSA-94pm-q285-wp32.json @@ -7,12 +7,8 @@ "CVE-2013-3036" ], "details": "Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-959v-3hq8-w2gx/GHSA-959v-3hq8-w2gx.json b/advisories/unreviewed/2022/05/GHSA-959v-3hq8-w2gx/GHSA-959v-3hq8-w2gx.json index 8ec3463426f..fd714e3c4bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-959v-3hq8-w2gx/GHSA-959v-3hq8-w2gx.json +++ b/advisories/unreviewed/2022/05/GHSA-959v-3hq8-w2gx/GHSA-959v-3hq8-w2gx.json @@ -7,12 +7,8 @@ "CVE-2012-5268" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-95gx-ccr4-3qc4/GHSA-95gx-ccr4-3qc4.json b/advisories/unreviewed/2022/05/GHSA-95gx-ccr4-3qc4/GHSA-95gx-ccr4-3qc4.json index b9b7a9223b0..3bd0cb54c36 100644 --- a/advisories/unreviewed/2022/05/GHSA-95gx-ccr4-3qc4/GHSA-95gx-ccr4-3qc4.json +++ b/advisories/unreviewed/2022/05/GHSA-95gx-ccr4-3qc4/GHSA-95gx-ccr4-3qc4.json @@ -7,12 +7,8 @@ "CVE-2012-5954" ], "details": "Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows remote attackers to read or modify HSM-managed file system objects via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-96ch-x39f-q5jh/GHSA-96ch-x39f-q5jh.json b/advisories/unreviewed/2022/05/GHSA-96ch-x39f-q5jh/GHSA-96ch-x39f-q5jh.json index 8e0280bd102..1543dcf8a21 100644 --- a/advisories/unreviewed/2022/05/GHSA-96ch-x39f-q5jh/GHSA-96ch-x39f-q5jh.json +++ b/advisories/unreviewed/2022/05/GHSA-96ch-x39f-q5jh/GHSA-96ch-x39f-q5jh.json @@ -7,12 +7,8 @@ "CVE-2013-3016" ], "details": "IBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attackers to access the user directory via a crafted request for a servlet, related to the serveServletsByClassnameEnabled setting.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-96p6-g5p3-jx2m/GHSA-96p6-g5p3-jx2m.json b/advisories/unreviewed/2022/05/GHSA-96p6-g5p3-jx2m/GHSA-96p6-g5p3-jx2m.json index 63361d5edf2..bdc5f730c37 100644 --- a/advisories/unreviewed/2022/05/GHSA-96p6-g5p3-jx2m/GHSA-96p6-g5p3-jx2m.json +++ b/advisories/unreviewed/2022/05/GHSA-96p6-g5p3-jx2m/GHSA-96p6-g5p3-jx2m.json @@ -7,12 +7,8 @@ "CVE-2012-6553" ], "details": "Heap-based buffer overflow in Resource Hacker 3.6.0.92 allows remote attackers to execute arbitrary code via a Portable Executable (PE) file with a resource section containing a string that has many tab or line feed characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-96qx-7wjx-crxw/GHSA-96qx-7wjx-crxw.json b/advisories/unreviewed/2022/05/GHSA-96qx-7wjx-crxw/GHSA-96qx-7wjx-crxw.json index e48733ae91f..d53b185bd8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-96qx-7wjx-crxw/GHSA-96qx-7wjx-crxw.json +++ b/advisories/unreviewed/2022/05/GHSA-96qx-7wjx-crxw/GHSA-96qx-7wjx-crxw.json @@ -7,12 +7,8 @@ "CVE-2013-3259" ], "details": "Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-975q-pjpw-j92p/GHSA-975q-pjpw-j92p.json b/advisories/unreviewed/2022/05/GHSA-975q-pjpw-j92p/GHSA-975q-pjpw-j92p.json index 4c76d09af52..6235eb97973 100644 --- a/advisories/unreviewed/2022/05/GHSA-975q-pjpw-j92p/GHSA-975q-pjpw-j92p.json +++ b/advisories/unreviewed/2022/05/GHSA-975q-pjpw-j92p/GHSA-975q-pjpw-j92p.json @@ -7,12 +7,8 @@ "CVE-2012-4173" ], "details": "Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4175, and CVE-2012-5273.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9856-f7j5-p4jw/GHSA-9856-f7j5-p4jw.json b/advisories/unreviewed/2022/05/GHSA-9856-f7j5-p4jw/GHSA-9856-f7j5-p4jw.json index 8ad3e96f70b..bb9f4005c53 100644 --- a/advisories/unreviewed/2022/05/GHSA-9856-f7j5-p4jw/GHSA-9856-f7j5-p4jw.json +++ b/advisories/unreviewed/2022/05/GHSA-9856-f7j5-p4jw/GHSA-9856-f7j5-p4jw.json @@ -7,12 +7,8 @@ "CVE-2012-5103" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) message parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9865-2p5q-66jx/GHSA-9865-2p5q-66jx.json b/advisories/unreviewed/2022/05/GHSA-9865-2p5q-66jx/GHSA-9865-2p5q-66jx.json index 830296e0577..85d00f01677 100644 --- a/advisories/unreviewed/2022/05/GHSA-9865-2p5q-66jx/GHSA-9865-2p5q-66jx.json +++ b/advisories/unreviewed/2022/05/GHSA-9865-2p5q-66jx/GHSA-9865-2p5q-66jx.json @@ -7,12 +7,8 @@ "CVE-2012-5919" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) find or (2) replace fields to havalite/findReplace.php; (3) username parameter to havalite/hava_login.php, (4) the Edit Article module, or (5) hava_post.php in the postAuthor module; (6) postId parameter to hava_post.php; (7) userId parameter to hava_user.php; or (8) linkId parameter to hava_link.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98ph-fw25-m44w/GHSA-98ph-fw25-m44w.json b/advisories/unreviewed/2022/05/GHSA-98ph-fw25-m44w/GHSA-98ph-fw25-m44w.json index 919897bbf68..c02e6c79900 100644 --- a/advisories/unreviewed/2022/05/GHSA-98ph-fw25-m44w/GHSA-98ph-fw25-m44w.json +++ b/advisories/unreviewed/2022/05/GHSA-98ph-fw25-m44w/GHSA-98ph-fw25-m44w.json @@ -7,12 +7,8 @@ "CVE-2012-4861" ], "details": "The web server in InfoSphere Data Replication Dashboard in IBM InfoSphere Replication Server 9.7 and 10.1 through 10.1.0.4 allows remote authenticated users to list directories via a direct request for a directory URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-99cg-5x2f-2c7j/GHSA-99cg-5x2f-2c7j.json b/advisories/unreviewed/2022/05/GHSA-99cg-5x2f-2c7j/GHSA-99cg-5x2f-2c7j.json index 10452d62238..a49d9df469b 100644 --- a/advisories/unreviewed/2022/05/GHSA-99cg-5x2f-2c7j/GHSA-99cg-5x2f-2c7j.json +++ b/advisories/unreviewed/2022/05/GHSA-99cg-5x2f-2c7j/GHSA-99cg-5x2f-2c7j.json @@ -7,12 +7,8 @@ "CVE-2012-5761" ], "details": "Cross-site scripting (XSS) vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99f2-r88j-43fv/GHSA-99f2-r88j-43fv.json b/advisories/unreviewed/2022/05/GHSA-99f2-r88j-43fv/GHSA-99f2-r88j-43fv.json index b47b876e05d..ebc0c1316a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-99f2-r88j-43fv/GHSA-99f2-r88j-43fv.json +++ b/advisories/unreviewed/2022/05/GHSA-99f2-r88j-43fv/GHSA-99f2-r88j-43fv.json @@ -7,12 +7,8 @@ "CVE-2012-4816" ], "details": "IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard (aka Environment Generation Wizard) access restrictions by visiting context roots in HTTP sessions on port 8080.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-99r9-958v-rr3x/GHSA-99r9-958v-rr3x.json b/advisories/unreviewed/2022/05/GHSA-99r9-958v-rr3x/GHSA-99r9-958v-rr3x.json index f004717acbe..5dae7b6b1ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-99r9-958v-rr3x/GHSA-99r9-958v-rr3x.json +++ b/advisories/unreviewed/2022/05/GHSA-99r9-958v-rr3x/GHSA-99r9-958v-rr3x.json @@ -7,12 +7,8 @@ "CVE-2012-5641" ], "details": "Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1, allows remote attackers to read arbitrary files via a ..\\ (dot dot backslash) in the default URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99xv-3qh6-x4m9/GHSA-99xv-3qh6-x4m9.json b/advisories/unreviewed/2022/05/GHSA-99xv-3qh6-x4m9/GHSA-99xv-3qh6-x4m9.json index 51e3d600a6b..c89d6c82b60 100644 --- a/advisories/unreviewed/2022/05/GHSA-99xv-3qh6-x4m9/GHSA-99xv-3qh6-x4m9.json +++ b/advisories/unreviewed/2022/05/GHSA-99xv-3qh6-x4m9/GHSA-99xv-3qh6-x4m9.json @@ -7,12 +7,8 @@ "CVE-2013-1604" ], "details": "Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to read arbitrary files via a .. (dot dot) in the default URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cr7-35ww-6fxq/GHSA-9cr7-35ww-6fxq.json b/advisories/unreviewed/2022/05/GHSA-9cr7-35ww-6fxq/GHSA-9cr7-35ww-6fxq.json index 565389d5d20..c19f27e1ee6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cr7-35ww-6fxq/GHSA-9cr7-35ww-6fxq.json +++ b/advisories/unreviewed/2022/05/GHSA-9cr7-35ww-6fxq/GHSA-9cr7-35ww-6fxq.json @@ -7,12 +7,8 @@ "CVE-2013-3027" ], "details": "Integer overflow in the DWA9W ActiveX control in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to execute arbitrary code via a crafted web page, aka SPR PTHN97XHFW.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9f7h-h7w3-g7cv/GHSA-9f7h-h7w3-g7cv.json b/advisories/unreviewed/2022/05/GHSA-9f7h-h7w3-g7cv/GHSA-9f7h-h7w3-g7cv.json index 12823a3584c..a95af2fca53 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f7h-h7w3-g7cv/GHSA-9f7h-h7w3-g7cv.json +++ b/advisories/unreviewed/2022/05/GHSA-9f7h-h7w3-g7cv/GHSA-9f7h-h7w3-g7cv.json @@ -7,12 +7,8 @@ "CVE-2012-5315" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web script or HTML via the message parameter to (1) messages_viewer.php, (2) home.php, or (3) history.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9ffq-vhwj-qwhf/GHSA-9ffq-vhwj-qwhf.json b/advisories/unreviewed/2022/05/GHSA-9ffq-vhwj-qwhf/GHSA-9ffq-vhwj-qwhf.json index 349d268a479..328fcfa077c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9ffq-vhwj-qwhf/GHSA-9ffq-vhwj-qwhf.json +++ b/advisories/unreviewed/2022/05/GHSA-9ffq-vhwj-qwhf/GHSA-9ffq-vhwj-qwhf.json @@ -7,12 +7,8 @@ "CVE-2013-3008" ], "details": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9fwf-m56x-47j8/GHSA-9fwf-m56x-47j8.json b/advisories/unreviewed/2022/05/GHSA-9fwf-m56x-47j8/GHSA-9fwf-m56x-47j8.json index 36cedc4bad3..c35ee67509e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fwf-m56x-47j8/GHSA-9fwf-m56x-47j8.json +++ b/advisories/unreviewed/2022/05/GHSA-9fwf-m56x-47j8/GHSA-9fwf-m56x-47j8.json @@ -7,12 +7,8 @@ "CVE-2012-5254" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9g2m-w47p-qwmv/GHSA-9g2m-w47p-qwmv.json b/advisories/unreviewed/2022/05/GHSA-9g2m-w47p-qwmv/GHSA-9g2m-w47p-qwmv.json index a61a14b4d22..9c2edbf95f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g2m-w47p-qwmv/GHSA-9g2m-w47p-qwmv.json +++ b/advisories/unreviewed/2022/05/GHSA-9g2m-w47p-qwmv/GHSA-9g2m-w47p-qwmv.json @@ -7,12 +7,8 @@ "CVE-2013-0584" ], "details": "The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9ghj-wqv6-hw98/GHSA-9ghj-wqv6-hw98.json b/advisories/unreviewed/2022/05/GHSA-9ghj-wqv6-hw98/GHSA-9ghj-wqv6-hw98.json index de14a1e59b5..1dae8e33d21 100644 --- a/advisories/unreviewed/2022/05/GHSA-9ghj-wqv6-hw98/GHSA-9ghj-wqv6-hw98.json +++ b/advisories/unreviewed/2022/05/GHSA-9ghj-wqv6-hw98/GHSA-9ghj-wqv6-hw98.json @@ -7,12 +7,8 @@ "CVE-2013-3033" ], "details": "SQL injection vulnerability in the server component in IBM Tivoli Remote Control 5.1.2 before 5.1.2-TIV-TRC512-IF0015 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9h9f-5hm6-prqq/GHSA-9h9f-5hm6-prqq.json b/advisories/unreviewed/2022/05/GHSA-9h9f-5hm6-prqq/GHSA-9h9f-5hm6-prqq.json index 23496385648..0584d277709 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h9f-5hm6-prqq/GHSA-9h9f-5hm6-prqq.json +++ b/advisories/unreviewed/2022/05/GHSA-9h9f-5hm6-prqq/GHSA-9h9f-5hm6-prqq.json @@ -7,12 +7,8 @@ "CVE-2013-3538" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id_post or (2) pg parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9hqr-6p2v-pfp2/GHSA-9hqr-6p2v-pfp2.json b/advisories/unreviewed/2022/05/GHSA-9hqr-6p2v-pfp2/GHSA-9hqr-6p2v-pfp2.json index ac4b340fb53..1584b409b58 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hqr-6p2v-pfp2/GHSA-9hqr-6p2v-pfp2.json +++ b/advisories/unreviewed/2022/05/GHSA-9hqr-6p2v-pfp2/GHSA-9hqr-6p2v-pfp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jcp-mw5v-cq77/GHSA-9jcp-mw5v-cq77.json b/advisories/unreviewed/2022/05/GHSA-9jcp-mw5v-cq77/GHSA-9jcp-mw5v-cq77.json index 706fdc0af2c..dc73d97dd66 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jcp-mw5v-cq77/GHSA-9jcp-mw5v-cq77.json +++ b/advisories/unreviewed/2022/05/GHSA-9jcp-mw5v-cq77/GHSA-9jcp-mw5v-cq77.json @@ -7,12 +7,8 @@ "CVE-2012-4344" ], "details": "Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP system name of the attacking host.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jxv-q65h-87wc/GHSA-9jxv-q65h-87wc.json b/advisories/unreviewed/2022/05/GHSA-9jxv-q65h-87wc/GHSA-9jxv-q65h-87wc.json index caa6b9dc95c..86147b74c35 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jxv-q65h-87wc/GHSA-9jxv-q65h-87wc.json +++ b/advisories/unreviewed/2022/05/GHSA-9jxv-q65h-87wc/GHSA-9jxv-q65h-87wc.json @@ -7,12 +7,8 @@ "CVE-2012-4363" ], "details": "Multiple unspecified vulnerabilities in Adobe Reader through 10.1.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, related to \"sixteen more crashes affecting Windows, OS X, or both systems.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9mj7-g6p8-v73f/GHSA-9mj7-g6p8-v73f.json b/advisories/unreviewed/2022/05/GHSA-9mj7-g6p8-v73f/GHSA-9mj7-g6p8-v73f.json index 9e3a6e55e52..26afc32ded8 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mj7-g6p8-v73f/GHSA-9mj7-g6p8-v73f.json +++ b/advisories/unreviewed/2022/05/GHSA-9mj7-g6p8-v73f/GHSA-9mj7-g6p8-v73f.json @@ -7,12 +7,8 @@ "CVE-2012-5671" ], "details": "Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not set to \"warn control = dkim_disable_verify,\" allows remote attackers to execute arbitrary code via an email from a malicious DNS server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9mw5-4838-m8cc/GHSA-9mw5-4838-m8cc.json b/advisories/unreviewed/2022/05/GHSA-9mw5-4838-m8cc/GHSA-9mw5-4838-m8cc.json index b5a3a29d62a..f4b2a8b2211 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mw5-4838-m8cc/GHSA-9mw5-4838-m8cc.json +++ b/advisories/unreviewed/2022/05/GHSA-9mw5-4838-m8cc/GHSA-9mw5-4838-m8cc.json @@ -7,12 +7,8 @@ "CVE-2012-4772" ], "details": "SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the plan_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9p57-xx42-3mx3/GHSA-9p57-xx42-3mx3.json b/advisories/unreviewed/2022/05/GHSA-9p57-xx42-3mx3/GHSA-9p57-xx42-3mx3.json index 0476174262e..f533efe6fe4 100644 --- a/advisories/unreviewed/2022/05/GHSA-9p57-xx42-3mx3/GHSA-9p57-xx42-3mx3.json +++ b/advisories/unreviewed/2022/05/GHSA-9p57-xx42-3mx3/GHSA-9p57-xx42-3mx3.json @@ -7,12 +7,8 @@ "CVE-2012-5949" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject content, and conduct phishing attacks, via vectors involving (1) the html/en/default/ directory, (2) birt/frameset, (3) WebProcess.srv, (4) sqa/html/en/default/reportTemplate/reportTemplateOrderCols.jsp, or (5) a/html/en/default/om2/omObjectFinder.jsp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pf2-fqfc-vhx2/GHSA-9pf2-fqfc-vhx2.json b/advisories/unreviewed/2022/05/GHSA-9pf2-fqfc-vhx2/GHSA-9pf2-fqfc-vhx2.json index 9790cec134e..b9dbf940d1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pf2-fqfc-vhx2/GHSA-9pf2-fqfc-vhx2.json +++ b/advisories/unreviewed/2022/05/GHSA-9pf2-fqfc-vhx2/GHSA-9pf2-fqfc-vhx2.json @@ -7,12 +7,8 @@ "CVE-2012-4679" ], "details": "Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9qfq-67cw-h54c/GHSA-9qfq-67cw-h54c.json b/advisories/unreviewed/2022/05/GHSA-9qfq-67cw-h54c/GHSA-9qfq-67cw-h54c.json index 832707cc6e0..4ee3bd7a058 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qfq-67cw-h54c/GHSA-9qfq-67cw-h54c.json +++ b/advisories/unreviewed/2022/05/GHSA-9qfq-67cw-h54c/GHSA-9qfq-67cw-h54c.json @@ -7,12 +7,8 @@ "CVE-2012-5511" ], "details": "Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9qhw-fgvr-j3cm/GHSA-9qhw-fgvr-j3cm.json b/advisories/unreviewed/2022/05/GHSA-9qhw-fgvr-j3cm/GHSA-9qhw-fgvr-j3cm.json index 6e7534b9f3f..39dd26a8f3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qhw-fgvr-j3cm/GHSA-9qhw-fgvr-j3cm.json +++ b/advisories/unreviewed/2022/05/GHSA-9qhw-fgvr-j3cm/GHSA-9qhw-fgvr-j3cm.json @@ -7,12 +7,8 @@ "CVE-2012-5797" ], "details": "The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9rpg-fg7x-wg5h/GHSA-9rpg-fg7x-wg5h.json b/advisories/unreviewed/2022/05/GHSA-9rpg-fg7x-wg5h/GHSA-9rpg-fg7x-wg5h.json index 6f21a2c21ee..d97e968ac77 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rpg-fg7x-wg5h/GHSA-9rpg-fg7x-wg5h.json +++ b/advisories/unreviewed/2022/05/GHSA-9rpg-fg7x-wg5h/GHSA-9rpg-fg7x-wg5h.json @@ -7,12 +7,8 @@ "CVE-2012-5326" ], "details": "Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9rxr-rq8c-95q2/GHSA-9rxr-rq8c-95q2.json b/advisories/unreviewed/2022/05/GHSA-9rxr-rq8c-95q2/GHSA-9rxr-rq8c-95q2.json index 2cd2eadcc22..27c297021a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rxr-rq8c-95q2/GHSA-9rxr-rq8c-95q2.json +++ b/advisories/unreviewed/2022/05/GHSA-9rxr-rq8c-95q2/GHSA-9rxr-rq8c-95q2.json @@ -7,12 +7,8 @@ "CVE-2013-3004" ], "details": "Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.x and 7.2.x before 7.2.1.5 allows remote authenticated users to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9v6g-cc3f-8r7w/GHSA-9v6g-cc3f-8r7w.json b/advisories/unreviewed/2022/05/GHSA-9v6g-cc3f-8r7w/GHSA-9v6g-cc3f-8r7w.json index 89ca560bbc1..aa895f3ea89 100644 --- a/advisories/unreviewed/2022/05/GHSA-9v6g-cc3f-8r7w/GHSA-9v6g-cc3f-8r7w.json +++ b/advisories/unreviewed/2022/05/GHSA-9v6g-cc3f-8r7w/GHSA-9v6g-cc3f-8r7w.json @@ -7,12 +7,8 @@ "CVE-2013-3090" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Belkin N300 router allow remote attackers to inject arbitrary web script or HTML via the Guest Access PSK field to wireless_guest2_print.stm or other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vf6-5gq4-g9w2/GHSA-9vf6-5gq4-g9w2.json b/advisories/unreviewed/2022/05/GHSA-9vf6-5gq4-g9w2/GHSA-9vf6-5gq4-g9w2.json index e35f720095a..28d2c62fcb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vf6-5gq4-g9w2/GHSA-9vf6-5gq4-g9w2.json +++ b/advisories/unreviewed/2022/05/GHSA-9vf6-5gq4-g9w2/GHSA-9vf6-5gq4-g9w2.json @@ -7,12 +7,8 @@ "CVE-2012-5510" ], "details": "Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9wph-276j-gvg9/GHSA-9wph-276j-gvg9.json b/advisories/unreviewed/2022/05/GHSA-9wph-276j-gvg9/GHSA-9wph-276j-gvg9.json index 9a221e9b722..052808d1204 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wph-276j-gvg9/GHSA-9wph-276j-gvg9.json +++ b/advisories/unreviewed/2022/05/GHSA-9wph-276j-gvg9/GHSA-9wph-276j-gvg9.json @@ -7,12 +7,8 @@ "CVE-2012-4997" ], "details": "Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9x3m-wmpr-vc58/GHSA-9x3m-wmpr-vc58.json b/advisories/unreviewed/2022/05/GHSA-9x3m-wmpr-vc58/GHSA-9x3m-wmpr-vc58.json index ff67c411657..29041c1af05 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x3m-wmpr-vc58/GHSA-9x3m-wmpr-vc58.json +++ b/advisories/unreviewed/2022/05/GHSA-9x3m-wmpr-vc58/GHSA-9x3m-wmpr-vc58.json @@ -7,12 +7,8 @@ "CVE-2012-5526" ], "details": "CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9x74-2wgm-h8m4/GHSA-9x74-2wgm-h8m4.json b/advisories/unreviewed/2022/05/GHSA-9x74-2wgm-h8m4/GHSA-9x74-2wgm-h8m4.json index deb0e12d95c..7dd392c5b5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x74-2wgm-h8m4/GHSA-9x74-2wgm-h8m4.json +++ b/advisories/unreviewed/2022/05/GHSA-9x74-2wgm-h8m4/GHSA-9x74-2wgm-h8m4.json @@ -7,12 +7,8 @@ "CVE-2012-4918" ], "details": "Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man-in-the-Middle (MITM) attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c22m-4fxx-w8gx/GHSA-c22m-4fxx-w8gx.json b/advisories/unreviewed/2022/05/GHSA-c22m-4fxx-w8gx/GHSA-c22m-4fxx-w8gx.json index 19a8223d950..ba260e7a68e 100644 --- a/advisories/unreviewed/2022/05/GHSA-c22m-4fxx-w8gx/GHSA-c22m-4fxx-w8gx.json +++ b/advisories/unreviewed/2022/05/GHSA-c22m-4fxx-w8gx/GHSA-c22m-4fxx-w8gx.json @@ -7,12 +7,8 @@ "CVE-2012-4853" ], "details": "Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c29w-532v-h75c/GHSA-c29w-532v-h75c.json b/advisories/unreviewed/2022/05/GHSA-c29w-532v-h75c/GHSA-c29w-532v-h75c.json index 605f8b4b82b..c68bc16a83f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c29w-532v-h75c/GHSA-c29w-532v-h75c.json +++ b/advisories/unreviewed/2022/05/GHSA-c29w-532v-h75c/GHSA-c29w-532v-h75c.json @@ -7,12 +7,8 @@ "CVE-2012-5860" ], "details": "Unspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the generation of non-compliant public keys.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3c5-hgp3-g35x/GHSA-c3c5-hgp3-g35x.json b/advisories/unreviewed/2022/05/GHSA-c3c5-hgp3-g35x/GHSA-c3c5-hgp3-g35x.json index 083aa594919..1ad8b4b9e38 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3c5-hgp3-g35x/GHSA-c3c5-hgp3-g35x.json +++ b/advisories/unreviewed/2022/05/GHSA-c3c5-hgp3-g35x/GHSA-c3c5-hgp3-g35x.json @@ -7,12 +7,8 @@ "CVE-2012-4063" ], "details": "The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transforms to documents, which allows remote attackers to cause a denial of service via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3hw-j754-x5g9/GHSA-c3hw-j754-x5g9.json b/advisories/unreviewed/2022/05/GHSA-c3hw-j754-x5g9/GHSA-c3hw-j754-x5g9.json index afa86cfc724..250e8b171af 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3hw-j754-x5g9/GHSA-c3hw-j754-x5g9.json +++ b/advisories/unreviewed/2022/05/GHSA-c3hw-j754-x5g9/GHSA-c3hw-j754-x5g9.json @@ -7,12 +7,8 @@ "CVE-2012-6561" ], "details": "Cross-site scripting (XSS) vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c4cg-cr9h-pp2c/GHSA-c4cg-cr9h-pp2c.json b/advisories/unreviewed/2022/05/GHSA-c4cg-cr9h-pp2c/GHSA-c4cg-cr9h-pp2c.json index 29e0d3f78ae..a23cc3417a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4cg-cr9h-pp2c/GHSA-c4cg-cr9h-pp2c.json +++ b/advisories/unreviewed/2022/05/GHSA-c4cg-cr9h-pp2c/GHSA-c4cg-cr9h-pp2c.json @@ -7,12 +7,8 @@ "CVE-2013-2758" ], "details": "Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C uses a hash of a predictable sequence, which makes it easier for remote attackers to guess the console access URL via a brute force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c4hm-r2pc-jgj3/GHSA-c4hm-r2pc-jgj3.json b/advisories/unreviewed/2022/05/GHSA-c4hm-r2pc-jgj3/GHSA-c4hm-r2pc-jgj3.json index 6981d6ba603..2d14901db5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4hm-r2pc-jgj3/GHSA-c4hm-r2pc-jgj3.json +++ b/advisories/unreviewed/2022/05/GHSA-c4hm-r2pc-jgj3/GHSA-c4hm-r2pc-jgj3.json @@ -7,12 +7,8 @@ "CVE-2013-3533" ], "details": "Multiple SQL injection vulnerabilities in Virtual Access Monitor 3.10.17 and earlier allow attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c6vh-7mwq-c4gc/GHSA-c6vh-7mwq-c4gc.json b/advisories/unreviewed/2022/05/GHSA-c6vh-7mwq-c4gc/GHSA-c6vh-7mwq-c4gc.json index 41e1d0c89b5..e44f8f4b015 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6vh-7mwq-c4gc/GHSA-c6vh-7mwq-c4gc.json +++ b/advisories/unreviewed/2022/05/GHSA-c6vh-7mwq-c4gc/GHSA-c6vh-7mwq-c4gc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c7vq-qg8q-rc6f/GHSA-c7vq-qg8q-rc6f.json b/advisories/unreviewed/2022/05/GHSA-c7vq-qg8q-rc6f/GHSA-c7vq-qg8q-rc6f.json index 8fe7a6d0027..df21b6c3fb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7vq-qg8q-rc6f/GHSA-c7vq-qg8q-rc6f.json +++ b/advisories/unreviewed/2022/05/GHSA-c7vq-qg8q-rc6f/GHSA-c7vq-qg8q-rc6f.json @@ -7,12 +7,8 @@ "CVE-2013-1925" ], "details": "The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the \"access content\" permission to read restricted node titles via an autocomplete list.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c9fr-6667-m4vh/GHSA-c9fr-6667-m4vh.json b/advisories/unreviewed/2022/05/GHSA-c9fr-6667-m4vh/GHSA-c9fr-6667-m4vh.json index f16ff7096c2..1a234aabf7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9fr-6667-m4vh/GHSA-c9fr-6667-m4vh.json +++ b/advisories/unreviewed/2022/05/GHSA-c9fr-6667-m4vh/GHSA-c9fr-6667-m4vh.json @@ -7,12 +7,8 @@ "CVE-2013-1780" ], "details": "Cross-site scripting (XSS) vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c9w4-x9x3-cqmq/GHSA-c9w4-x9x3-cqmq.json b/advisories/unreviewed/2022/05/GHSA-c9w4-x9x3-cqmq/GHSA-c9w4-x9x3-cqmq.json index f977a74d22d..69d7fa077e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9w4-x9x3-cqmq/GHSA-c9w4-x9x3-cqmq.json +++ b/advisories/unreviewed/2022/05/GHSA-c9w4-x9x3-cqmq/GHSA-c9w4-x9x3-cqmq.json @@ -7,12 +7,8 @@ "CVE-2012-4083" ], "details": "Multiple buffer overflows in the administrative web interface in Cisco Unified Computing System (UCS) allow remote authenticated users to cause a denial of service (memory corruption and session termination) via long string values for unspecified parameters, aka Bug ID CSCtg20751.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cfp3-8x6x-294c/GHSA-cfp3-8x6x-294c.json b/advisories/unreviewed/2022/05/GHSA-cfp3-8x6x-294c/GHSA-cfp3-8x6x-294c.json index 40cad247eaf..0ea19a56442 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfp3-8x6x-294c/GHSA-cfp3-8x6x-294c.json +++ b/advisories/unreviewed/2022/05/GHSA-cfp3-8x6x-294c/GHSA-cfp3-8x6x-294c.json @@ -7,12 +7,8 @@ "CVE-2012-5224" ], "details": "PHP remote file inclusion vulnerability in vb/includes/vba_cmps_include_bottom.php in vBadvanced CMPS 3.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pages[template] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgrh-w43v-hjwc/GHSA-cgrh-w43v-hjwc.json b/advisories/unreviewed/2022/05/GHSA-cgrh-w43v-hjwc/GHSA-cgrh-w43v-hjwc.json index bd2223aaeb2..0cd36f36419 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgrh-w43v-hjwc/GHSA-cgrh-w43v-hjwc.json +++ b/advisories/unreviewed/2022/05/GHSA-cgrh-w43v-hjwc/GHSA-cgrh-w43v-hjwc.json @@ -7,12 +7,8 @@ "CVE-2012-5756" ], "details": "The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective configuration is enabled, has a single secret key that is shared across different customers' installations, which allows remote attackers to spoof a container server by (1) sniffing the network to locate a cleartext transmission of this key or (2) leveraging knowledge of this key from another installation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cjcg-gx96-9j95/GHSA-cjcg-gx96-9j95.json b/advisories/unreviewed/2022/05/GHSA-cjcg-gx96-9j95/GHSA-cjcg-gx96-9j95.json index 5e8d2686fb9..893ca3566c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjcg-gx96-9j95/GHSA-cjcg-gx96-9j95.json +++ b/advisories/unreviewed/2022/05/GHSA-cjcg-gx96-9j95/GHSA-cjcg-gx96-9j95.json @@ -7,12 +7,8 @@ "CVE-2013-2998" ], "details": "frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to obtain sensitive information via an invalid action_code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjf3-7v2c-pgxp/GHSA-cjf3-7v2c-pgxp.json b/advisories/unreviewed/2022/05/GHSA-cjf3-7v2c-pgxp/GHSA-cjf3-7v2c-pgxp.json index cc01d9d228e..b8e323c3546 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjf3-7v2c-pgxp/GHSA-cjf3-7v2c-pgxp.json +++ b/advisories/unreviewed/2022/05/GHSA-cjf3-7v2c-pgxp/GHSA-cjf3-7v2c-pgxp.json @@ -7,12 +7,8 @@ "CVE-2013-0576" ], "details": "Cross-site scripting (XSS) vulnerability in the Tivoli Enterprise Portal browser client in IBM Tivoli Monitoring 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjmp-9gj7-24m6/GHSA-cjmp-9gj7-24m6.json b/advisories/unreviewed/2022/05/GHSA-cjmp-9gj7-24m6/GHSA-cjmp-9gj7-24m6.json index c83040a4ab0..ece4bae2c7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjmp-9gj7-24m6/GHSA-cjmp-9gj7-24m6.json +++ b/advisories/unreviewed/2022/05/GHSA-cjmp-9gj7-24m6/GHSA-cjmp-9gj7-24m6.json @@ -7,12 +7,8 @@ "CVE-2012-4535" ], "details": "Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an \"inappropriate deadline.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cjqw-vhgv-5r7w/GHSA-cjqw-vhgv-5r7w.json b/advisories/unreviewed/2022/05/GHSA-cjqw-vhgv-5r7w/GHSA-cjqw-vhgv-5r7w.json index 590dc5ef6fc..57cdd437e04 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjqw-vhgv-5r7w/GHSA-cjqw-vhgv-5r7w.json +++ b/advisories/unreviewed/2022/05/GHSA-cjqw-vhgv-5r7w/GHSA-cjqw-vhgv-5r7w.json @@ -7,12 +7,8 @@ "CVE-2012-5250" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cpf8-vcfr-v945/GHSA-cpf8-vcfr-v945.json b/advisories/unreviewed/2022/05/GHSA-cpf8-vcfr-v945/GHSA-cpf8-vcfr-v945.json index 4a5dc12e292..f523bd87af4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpf8-vcfr-v945/GHSA-cpf8-vcfr-v945.json +++ b/advisories/unreviewed/2022/05/GHSA-cpf8-vcfr-v945/GHSA-cpf8-vcfr-v945.json @@ -7,12 +7,8 @@ "CVE-2012-5298" ], "details": "Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cq4m-79xv-3259/GHSA-cq4m-79xv-3259.json b/advisories/unreviewed/2022/05/GHSA-cq4m-79xv-3259/GHSA-cq4m-79xv-3259.json index e46d6af36a7..7c0444b7cae 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq4m-79xv-3259/GHSA-cq4m-79xv-3259.json +++ b/advisories/unreviewed/2022/05/GHSA-cq4m-79xv-3259/GHSA-cq4m-79xv-3259.json @@ -7,12 +7,8 @@ "CVE-2012-5300" ], "details": "SQL injection vulnerability in art_catalogo.php in MyStore Xpress Tienda Virtual 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cqj9-r8xg-mxwg/GHSA-cqj9-r8xg-mxwg.json b/advisories/unreviewed/2022/05/GHSA-cqj9-r8xg-mxwg/GHSA-cqj9-r8xg-mxwg.json index 17eeb73e816..02a78e3ddf7 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqj9-r8xg-mxwg/GHSA-cqj9-r8xg-mxwg.json +++ b/advisories/unreviewed/2022/05/GHSA-cqj9-r8xg-mxwg/GHSA-cqj9-r8xg-mxwg.json @@ -7,12 +7,8 @@ "CVE-2013-3030" ], "details": "The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote attackers to cause a denial of service (temporary gateway outage) via crafted HTTP requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cqqf-42xp-fqpj/GHSA-cqqf-42xp-fqpj.json b/advisories/unreviewed/2022/05/GHSA-cqqf-42xp-fqpj/GHSA-cqqf-42xp-fqpj.json index 6d8a6c33e05..625edaf9e94 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqqf-42xp-fqpj/GHSA-cqqf-42xp-fqpj.json +++ b/advisories/unreviewed/2022/05/GHSA-cqqf-42xp-fqpj/GHSA-cqqf-42xp-fqpj.json @@ -7,12 +7,8 @@ "CVE-2012-4620" ], "details": "Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of service (interface queue wedge) via tunneled (1) GRE/IP, (2) IPIP, or (3) IPv6 in IPv4 packets, aka Bug ID CSCts66808.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cqr7-7vf8-g995/GHSA-cqr7-7vf8-g995.json b/advisories/unreviewed/2022/05/GHSA-cqr7-7vf8-g995/GHSA-cqr7-7vf8-g995.json index 65dc33b954d..f69121dda5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqr7-7vf8-g995/GHSA-cqr7-7vf8-g995.json +++ b/advisories/unreviewed/2022/05/GHSA-cqr7-7vf8-g995/GHSA-cqr7-7vf8-g995.json @@ -7,12 +7,8 @@ "CVE-2012-5260" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cr9v-vxqx-f7xm/GHSA-cr9v-vxqx-f7xm.json b/advisories/unreviewed/2022/05/GHSA-cr9v-vxqx-f7xm/GHSA-cr9v-vxqx-f7xm.json index 3e245ee9ddd..53786e011ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr9v-vxqx-f7xm/GHSA-cr9v-vxqx-f7xm.json +++ b/advisories/unreviewed/2022/05/GHSA-cr9v-vxqx-f7xm/GHSA-cr9v-vxqx-f7xm.json @@ -7,12 +7,8 @@ "CVE-2012-4281" ], "details": "Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to (1) holiday.php or (2) holiday_book.php, (3) id parameter to pages.php, (4) fid parameter to admin/airline-edit.php, or (5) cid parameter to admin/customer-edit.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cv5g-6h34-8w32/GHSA-cv5g-6h34-8w32.json b/advisories/unreviewed/2022/05/GHSA-cv5g-6h34-8w32/GHSA-cv5g-6h34-8w32.json index 8b0bf004ca3..08958f5ed67 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv5g-6h34-8w32/GHSA-cv5g-6h34-8w32.json +++ b/advisories/unreviewed/2022/05/GHSA-cv5g-6h34-8w32/GHSA-cv5g-6h34-8w32.json @@ -7,12 +7,8 @@ "CVE-2012-5653" ], "details": "The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the protection mechanism and execute arbitrary PHP code via a null byte in a file name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cv7j-8c4r-vxvx/GHSA-cv7j-8c4r-vxvx.json b/advisories/unreviewed/2022/05/GHSA-cv7j-8c4r-vxvx/GHSA-cv7j-8c4r-vxvx.json index df391ca1c23..f58a3f0b0c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv7j-8c4r-vxvx/GHSA-cv7j-8c4r-vxvx.json +++ b/advisories/unreviewed/2022/05/GHSA-cv7j-8c4r-vxvx/GHSA-cv7j-8c4r-vxvx.json @@ -7,12 +7,8 @@ "CVE-2013-0721" ], "details": "wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvfq-xpqg-547q/GHSA-cvfq-xpqg-547q.json b/advisories/unreviewed/2022/05/GHSA-cvfq-xpqg-547q/GHSA-cvfq-xpqg-547q.json index 9613e4bc643..1137de9587d 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvfq-xpqg-547q/GHSA-cvfq-xpqg-547q.json +++ b/advisories/unreviewed/2022/05/GHSA-cvfq-xpqg-547q/GHSA-cvfq-xpqg-547q.json @@ -7,12 +7,8 @@ "CVE-2012-5901" ], "details": "DFLabs PTK 1.0.5 stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read logs, images, or reports via a direct request to the file in the (1) log, (2) images, or (3) report directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cvrm-5m6p-mw3w/GHSA-cvrm-5m6p-mw3w.json b/advisories/unreviewed/2022/05/GHSA-cvrm-5m6p-mw3w/GHSA-cvrm-5m6p-mw3w.json index 33ac25c1f25..e73a169e805 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvrm-5m6p-mw3w/GHSA-cvrm-5m6p-mw3w.json +++ b/advisories/unreviewed/2022/05/GHSA-cvrm-5m6p-mw3w/GHSA-cvrm-5m6p-mw3w.json @@ -7,12 +7,8 @@ "CVE-2012-5946" ], "details": "Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cw2r-gg44-643w/GHSA-cw2r-gg44-643w.json b/advisories/unreviewed/2022/05/GHSA-cw2r-gg44-643w/GHSA-cw2r-gg44-643w.json index 589edd1c2bc..03fb796a7f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-cw2r-gg44-643w/GHSA-cw2r-gg44-643w.json +++ b/advisories/unreviewed/2022/05/GHSA-cw2r-gg44-643w/GHSA-cw2r-gg44-643w.json @@ -7,12 +7,8 @@ "CVE-2012-4263" ], "details": "Cross-site scripting (XSS) vulnerability in inc/admin/content.php in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP_USER_AGENT header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cwv2-77rj-p78r/GHSA-cwv2-77rj-p78r.json b/advisories/unreviewed/2022/05/GHSA-cwv2-77rj-p78r/GHSA-cwv2-77rj-p78r.json index 0fc7f24d713..9a59e4d0c8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwv2-77rj-p78r/GHSA-cwv2-77rj-p78r.json +++ b/advisories/unreviewed/2022/05/GHSA-cwv2-77rj-p78r/GHSA-cwv2-77rj-p78r.json @@ -7,12 +7,8 @@ "CVE-2012-4950" ], "details": "Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cwx8-vfpp-jm78/GHSA-cwx8-vfpp-jm78.json b/advisories/unreviewed/2022/05/GHSA-cwx8-vfpp-jm78/GHSA-cwx8-vfpp-jm78.json index e40631f1e8a..c029517a8c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwx8-vfpp-jm78/GHSA-cwx8-vfpp-jm78.json +++ b/advisories/unreviewed/2022/05/GHSA-cwx8-vfpp-jm78/GHSA-cwx8-vfpp-jm78.json @@ -7,12 +7,8 @@ "CVE-2012-4548" ], "details": "Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cx59-9474-385v/GHSA-cx59-9474-385v.json b/advisories/unreviewed/2022/05/GHSA-cx59-9474-385v/GHSA-cx59-9474-385v.json index f533a2c6a36..148f40501b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-cx59-9474-385v/GHSA-cx59-9474-385v.json +++ b/advisories/unreviewed/2022/05/GHSA-cx59-9474-385v/GHSA-cx59-9474-385v.json @@ -7,12 +7,8 @@ "CVE-2013-3028" ], "details": "Multiple buffer overflows in mqm programs in IBM WebSphere MQ 7.0.x before 7.0.1.11, 7.1.x before 7.1.0.3, and 7.5.x before 7.5.0.2 on non-Windows platforms allow local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cx65-rqm3-cwj6/GHSA-cx65-rqm3-cwj6.json b/advisories/unreviewed/2022/05/GHSA-cx65-rqm3-cwj6/GHSA-cx65-rqm3-cwj6.json index 7845747b7f5..cd27162be1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-cx65-rqm3-cwj6/GHSA-cx65-rqm3-cwj6.json +++ b/advisories/unreviewed/2022/05/GHSA-cx65-rqm3-cwj6/GHSA-cx65-rqm3-cwj6.json @@ -7,12 +7,8 @@ "CVE-2013-3692" ], "details": "BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrictions by leveraging a user's BlackBerry Protect password-reset request and a user's installation of a crafted application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cxrf-6qjq-j3rp/GHSA-cxrf-6qjq-j3rp.json b/advisories/unreviewed/2022/05/GHSA-cxrf-6qjq-j3rp/GHSA-cxrf-6qjq-j3rp.json index d5f5b52c58c..8be1d522ac9 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxrf-6qjq-j3rp/GHSA-cxrf-6qjq-j3rp.json +++ b/advisories/unreviewed/2022/05/GHSA-cxrf-6qjq-j3rp/GHSA-cxrf-6qjq-j3rp.json @@ -7,12 +7,8 @@ "CVE-2012-5790" ], "details": "PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to misinterpretation of a certain TRUE value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f23h-w38w-mpqj/GHSA-f23h-w38w-mpqj.json b/advisories/unreviewed/2022/05/GHSA-f23h-w38w-mpqj/GHSA-f23h-w38w-mpqj.json index dadc725d24b..e524292327e 100644 --- a/advisories/unreviewed/2022/05/GHSA-f23h-w38w-mpqj/GHSA-f23h-w38w-mpqj.json +++ b/advisories/unreviewed/2022/05/GHSA-f23h-w38w-mpqj/GHSA-f23h-w38w-mpqj.json @@ -7,12 +7,8 @@ "CVE-2012-6447" ], "details": "Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f28h-8w28-q295/GHSA-f28h-8w28-q295.json b/advisories/unreviewed/2022/05/GHSA-f28h-8w28-q295/GHSA-f28h-8w28-q295.json index e59d6d0167c..b1a7f7bb562 100644 --- a/advisories/unreviewed/2022/05/GHSA-f28h-8w28-q295/GHSA-f28h-8w28-q295.json +++ b/advisories/unreviewed/2022/05/GHSA-f28h-8w28-q295/GHSA-f28h-8w28-q295.json @@ -7,12 +7,8 @@ "CVE-2012-6507" ], "details": "Multiple SQL injection vulnerabilities in admin.php in ChurchCMS 0.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameters in a login action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f32p-xm43-x77w/GHSA-f32p-xm43-x77w.json b/advisories/unreviewed/2022/05/GHSA-f32p-xm43-x77w/GHSA-f32p-xm43-x77w.json index 0271313c5e8..41fc942efdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-f32p-xm43-x77w/GHSA-f32p-xm43-x77w.json +++ b/advisories/unreviewed/2022/05/GHSA-f32p-xm43-x77w/GHSA-f32p-xm43-x77w.json @@ -7,12 +7,8 @@ "CVE-2012-5164" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3hj-4gx8-r4q6/GHSA-f3hj-4gx8-r4q6.json b/advisories/unreviewed/2022/05/GHSA-f3hj-4gx8-r4q6/GHSA-f3hj-4gx8-r4q6.json index 9c389b80a72..45328d20a27 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3hj-4gx8-r4q6/GHSA-f3hj-4gx8-r4q6.json +++ b/advisories/unreviewed/2022/05/GHSA-f3hj-4gx8-r4q6/GHSA-f3hj-4gx8-r4q6.json @@ -7,12 +7,8 @@ "CVE-2012-4839" ], "details": "The OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f446-wm48-q9x7/GHSA-f446-wm48-q9x7.json b/advisories/unreviewed/2022/05/GHSA-f446-wm48-q9x7/GHSA-f446-wm48-q9x7.json index 83b5ef2a0e1..c129b07af6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f446-wm48-q9x7/GHSA-f446-wm48-q9x7.json +++ b/advisories/unreviewed/2022/05/GHSA-f446-wm48-q9x7/GHSA-f446-wm48-q9x7.json @@ -7,12 +7,8 @@ "CVE-2012-4366" ], "details": "Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictable default WPA2-PSK passphrase based on eight digits of the WAN MAC address, which allows remote attackers to access the network by sniffing the beacon frames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f4fw-rj48-wj4q/GHSA-f4fw-rj48-wj4q.json b/advisories/unreviewed/2022/05/GHSA-f4fw-rj48-wj4q/GHSA-f4fw-rj48-wj4q.json index b027146249a..0254cbd90e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4fw-rj48-wj4q/GHSA-f4fw-rj48-wj4q.json +++ b/advisories/unreviewed/2022/05/GHSA-f4fw-rj48-wj4q/GHSA-f4fw-rj48-wj4q.json @@ -7,12 +7,8 @@ "CVE-2012-5387" ], "details": "Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcms_o_developer_name parameter in a save action to wp-admin/admin.php, as demonstrated by a developer name containing XSS sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4r2-hvg9-43x3/GHSA-f4r2-hvg9-43x3.json b/advisories/unreviewed/2022/05/GHSA-f4r2-hvg9-43x3/GHSA-f4r2-hvg9-43x3.json index 0ee7c8f8d87..6594f937343 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4r2-hvg9-43x3/GHSA-f4r2-hvg9-43x3.json +++ b/advisories/unreviewed/2022/05/GHSA-f4r2-hvg9-43x3/GHSA-f4r2-hvg9-43x3.json @@ -7,12 +7,8 @@ "CVE-2012-5861" ], "details": "Multiple SQL injection vulnerabilities on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12 allow remote attackers to execute arbitrary SQL commands via (1) the inverterselect parameter in a primo action to dettagliinverter.php or (2) the lingua parameter to changelanguagesession.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4vr-c276-c5cm/GHSA-f4vr-c276-c5cm.json b/advisories/unreviewed/2022/05/GHSA-f4vr-c276-c5cm/GHSA-f4vr-c276-c5cm.json index 6c496e61c2b..b32a372192e 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4vr-c276-c5cm/GHSA-f4vr-c276-c5cm.json +++ b/advisories/unreviewed/2022/05/GHSA-f4vr-c276-c5cm/GHSA-f4vr-c276-c5cm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4vx-q22m-9ghf/GHSA-f4vx-q22m-9ghf.json b/advisories/unreviewed/2022/05/GHSA-f4vx-q22m-9ghf/GHSA-f4vx-q22m-9ghf.json index d7a99686409..9f30e5541c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4vx-q22m-9ghf/GHSA-f4vx-q22m-9ghf.json +++ b/advisories/unreviewed/2022/05/GHSA-f4vx-q22m-9ghf/GHSA-f4vx-q22m-9ghf.json @@ -7,12 +7,8 @@ "CVE-2012-6528" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) themes/default/tile_search/index.tmpl.php, (2) login.php, (3) search.php, (4) password_reminder.php, (5) login.php/jscripts/infusion, (6) login.php/mods/_standard/flowplayer, (7) browse.php/jscripts/infusion/framework/fss, (8) registration.php/themes/default/ie_styles.css, (9) about.php, or (10) themes/default/social/basic_profile.tmpl.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5r3-jgh2-p373/GHSA-f5r3-jgh2-p373.json b/advisories/unreviewed/2022/05/GHSA-f5r3-jgh2-p373/GHSA-f5r3-jgh2-p373.json index e30c11941f7..7432c10d51f 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5r3-jgh2-p373/GHSA-f5r3-jgh2-p373.json +++ b/advisories/unreviewed/2022/05/GHSA-f5r3-jgh2-p373/GHSA-f5r3-jgh2-p373.json @@ -7,12 +7,8 @@ "CVE-2013-2036" ], "details": "Cross-site scripting (XSS) vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to \"lists of files.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f725-96vh-q7pm/GHSA-f725-96vh-q7pm.json b/advisories/unreviewed/2022/05/GHSA-f725-96vh-q7pm/GHSA-f725-96vh-q7pm.json index 884c9ad2f38..a6be0cea7fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-f725-96vh-q7pm/GHSA-f725-96vh-q7pm.json +++ b/advisories/unreviewed/2022/05/GHSA-f725-96vh-q7pm/GHSA-f725-96vh-q7pm.json @@ -7,12 +7,8 @@ "CVE-2012-4336" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f7pp-88gg-96cx/GHSA-f7pp-88gg-96cx.json b/advisories/unreviewed/2022/05/GHSA-f7pp-88gg-96cx/GHSA-f7pp-88gg-96cx.json index a90f87d1224..e67aec98f40 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7pp-88gg-96cx/GHSA-f7pp-88gg-96cx.json +++ b/advisories/unreviewed/2022/05/GHSA-f7pp-88gg-96cx/GHSA-f7pp-88gg-96cx.json @@ -7,12 +7,8 @@ "CVE-2012-5229" ], "details": "Cross-site scripting (XSS) vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the border parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f8vv-fqj4-phcp/GHSA-f8vv-fqj4-phcp.json b/advisories/unreviewed/2022/05/GHSA-f8vv-fqj4-phcp/GHSA-f8vv-fqj4-phcp.json index 51a1d79bd4b..65b79895046 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8vv-fqj4-phcp/GHSA-f8vv-fqj4-phcp.json +++ b/advisories/unreviewed/2022/05/GHSA-f8vv-fqj4-phcp/GHSA-f8vv-fqj4-phcp.json @@ -7,12 +7,8 @@ "CVE-2013-1061" ], "details": "dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f9f8-xghc-582j/GHSA-f9f8-xghc-582j.json b/advisories/unreviewed/2022/05/GHSA-f9f8-xghc-582j/GHSA-f9f8-xghc-582j.json index e84c2fe13a8..0d41118fd4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9f8-xghc-582j/GHSA-f9f8-xghc-582j.json +++ b/advisories/unreviewed/2022/05/GHSA-f9f8-xghc-582j/GHSA-f9f8-xghc-582j.json @@ -7,12 +7,8 @@ "CVE-2012-6506" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f9mp-7f7v-39g9/GHSA-f9mp-7f7v-39g9.json b/advisories/unreviewed/2022/05/GHSA-f9mp-7f7v-39g9/GHSA-f9mp-7f7v-39g9.json index bb974f1ee93..45670c3bb59 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9mp-7f7v-39g9/GHSA-f9mp-7f7v-39g9.json +++ b/advisories/unreviewed/2022/05/GHSA-f9mp-7f7v-39g9/GHSA-f9mp-7f7v-39g9.json @@ -7,12 +7,8 @@ "CVE-2012-5458" ], "details": "VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fcjp-cvc7-v52c/GHSA-fcjp-cvc7-v52c.json b/advisories/unreviewed/2022/05/GHSA-fcjp-cvc7-v52c/GHSA-fcjp-cvc7-v52c.json index b8131a38145..90e6be5a38b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcjp-cvc7-v52c/GHSA-fcjp-cvc7-v52c.json +++ b/advisories/unreviewed/2022/05/GHSA-fcjp-cvc7-v52c/GHSA-fcjp-cvc7-v52c.json @@ -7,12 +7,8 @@ "CVE-2013-3515" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) package parameter to www/admin/plugin-index.php or the (2) group parameter to www/admin/plugin-settings.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcv6-ppm2-r79m/GHSA-fcv6-ppm2-r79m.json b/advisories/unreviewed/2022/05/GHSA-fcv6-ppm2-r79m/GHSA-fcv6-ppm2-r79m.json index 9b71b66aec2..a18f42777b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcv6-ppm2-r79m/GHSA-fcv6-ppm2-r79m.json +++ b/advisories/unreviewed/2022/05/GHSA-fcv6-ppm2-r79m/GHSA-fcv6-ppm2-r79m.json @@ -7,12 +7,8 @@ "CVE-2012-5314" ], "details": "Cross-site scripting (XSS) vulnerability in ViewGit 0.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the f parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ffxp-qpqp-3m38/GHSA-ffxp-qpqp-3m38.json b/advisories/unreviewed/2022/05/GHSA-ffxp-qpqp-3m38/GHSA-ffxp-qpqp-3m38.json index fe35a9ce9c8..c5e6f0a4c75 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffxp-qpqp-3m38/GHSA-ffxp-qpqp-3m38.json +++ b/advisories/unreviewed/2022/05/GHSA-ffxp-qpqp-3m38/GHSA-ffxp-qpqp-3m38.json @@ -7,12 +7,8 @@ "CVE-2012-5169" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in file_manager/preview_top.php in ATutor AContent before 1.2-2 allow remote attackers to inject arbitrary web script or HTML via the (1) pathext, (2) popup, (3) framed, or (4) file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fg2m-gv83-m3q7/GHSA-fg2m-gv83-m3q7.json b/advisories/unreviewed/2022/05/GHSA-fg2m-gv83-m3q7/GHSA-fg2m-gv83-m3q7.json index 9dab8f0141f..d5bd3901199 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg2m-gv83-m3q7/GHSA-fg2m-gv83-m3q7.json +++ b/advisories/unreviewed/2022/05/GHSA-fg2m-gv83-m3q7/GHSA-fg2m-gv83-m3q7.json @@ -7,12 +7,8 @@ "CVE-2012-4771" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/accounts/, (2) admin/manage/, or (3) admin/manage/blocks/edit/; or (4) group parameter to admin/configuration/. NOTE: The f[accounts][fullname] and f[accounts][username] vectors are covered in CVE-2012-5452.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fh46-gpfm-wfxc/GHSA-fh46-gpfm-wfxc.json b/advisories/unreviewed/2022/05/GHSA-fh46-gpfm-wfxc/GHSA-fh46-gpfm-wfxc.json index 1a8de57f07d..dbc52025724 100644 --- a/advisories/unreviewed/2022/05/GHSA-fh46-gpfm-wfxc/GHSA-fh46-gpfm-wfxc.json +++ b/advisories/unreviewed/2022/05/GHSA-fh46-gpfm-wfxc/GHSA-fh46-gpfm-wfxc.json @@ -7,12 +7,8 @@ "CVE-2012-4539" ], "details": "Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka \"Grant table hypercall infinite loop DoS vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -108,9 +104,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fh54-rxv3-35p2/GHSA-fh54-rxv3-35p2.json b/advisories/unreviewed/2022/05/GHSA-fh54-rxv3-35p2/GHSA-fh54-rxv3-35p2.json index c5171c40e6a..c85d969856b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fh54-rxv3-35p2/GHSA-fh54-rxv3-35p2.json +++ b/advisories/unreviewed/2022/05/GHSA-fh54-rxv3-35p2/GHSA-fh54-rxv3-35p2.json @@ -7,12 +7,8 @@ "CVE-2012-5952" ], "details": "IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2 does not validate Basic Authentication credentials before proceeding to WS-Addressing and WS-Security operations, which allows remote attackers to trigger transmission of unauthenticated messages via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhq7-ggf4-7jv5/GHSA-fhq7-ggf4-7jv5.json b/advisories/unreviewed/2022/05/GHSA-fhq7-ggf4-7jv5/GHSA-fhq7-ggf4-7jv5.json index c28aa90124c..c24e28fe813 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhq7-ggf4-7jv5/GHSA-fhq7-ggf4-7jv5.json +++ b/advisories/unreviewed/2022/05/GHSA-fhq7-ggf4-7jv5/GHSA-fhq7-ggf4-7jv5.json @@ -7,12 +7,8 @@ "CVE-2013-2985" ], "details": "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, CVE-2013-0475, and CVE-2013-0567.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhx5-5536-v3j6/GHSA-fhx5-5536-v3j6.json b/advisories/unreviewed/2022/05/GHSA-fhx5-5536-v3j6/GHSA-fhx5-5536-v3j6.json index 9172ed51b85..3943a69b86e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhx5-5536-v3j6/GHSA-fhx5-5536-v3j6.json +++ b/advisories/unreviewed/2022/05/GHSA-fhx5-5536-v3j6/GHSA-fhx5-5536-v3j6.json @@ -7,12 +7,8 @@ "CVE-2012-5917" ], "details": "SnackAmp 3.1.3 allows remote attackers to cause a denial of service (application crash) via a long string in an aiff file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fj27-2j4g-28c4/GHSA-fj27-2j4g-28c4.json b/advisories/unreviewed/2022/05/GHSA-fj27-2j4g-28c4/GHSA-fj27-2j4g-28c4.json index d63c2be643a..52d95429fa2 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj27-2j4g-28c4/GHSA-fj27-2j4g-28c4.json +++ b/advisories/unreviewed/2022/05/GHSA-fj27-2j4g-28c4/GHSA-fj27-2j4g-28c4.json @@ -7,12 +7,8 @@ "CVE-2013-3606" ], "details": "The login page in the GoAhead web server on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device outage) via a long username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fp3c-hq6w-q3rf/GHSA-fp3c-hq6w-q3rf.json b/advisories/unreviewed/2022/05/GHSA-fp3c-hq6w-q3rf/GHSA-fp3c-hq6w-q3rf.json index e94415fc0f7..87b326e0b01 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp3c-hq6w-q3rf/GHSA-fp3c-hq6w-q3rf.json +++ b/advisories/unreviewed/2022/05/GHSA-fp3c-hq6w-q3rf/GHSA-fp3c-hq6w-q3rf.json @@ -7,12 +7,8 @@ "CVE-2014-3581" ], "details": "The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fp78-87mw-cjm6/GHSA-fp78-87mw-cjm6.json b/advisories/unreviewed/2022/05/GHSA-fp78-87mw-cjm6/GHSA-fp78-87mw-cjm6.json index 44cab059cc9..d6ca3d1cae3 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp78-87mw-cjm6/GHSA-fp78-87mw-cjm6.json +++ b/advisories/unreviewed/2022/05/GHSA-fp78-87mw-cjm6/GHSA-fp78-87mw-cjm6.json @@ -7,12 +7,8 @@ "CVE-2012-5197" ], "details": "Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to \"error checking of system calls.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fp87-8q28-x5v6/GHSA-fp87-8q28-x5v6.json b/advisories/unreviewed/2022/05/GHSA-fp87-8q28-x5v6/GHSA-fp87-8q28-x5v6.json index 4f5cf0eada0..0058247c9ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp87-8q28-x5v6/GHSA-fp87-8q28-x5v6.json +++ b/advisories/unreviewed/2022/05/GHSA-fp87-8q28-x5v6/GHSA-fp87-8q28-x5v6.json @@ -7,12 +7,8 @@ "CVE-2013-1815" ], "details": "PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure directories such as /tmp or the current working directory, which allows local users to modify deployed systems by changing this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fpj9-fh8c-26wh/GHSA-fpj9-fh8c-26wh.json b/advisories/unreviewed/2022/05/GHSA-fpj9-fh8c-26wh/GHSA-fpj9-fh8c-26wh.json index 5f556d1b769..d65600d0ebc 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpj9-fh8c-26wh/GHSA-fpj9-fh8c-26wh.json +++ b/advisories/unreviewed/2022/05/GHSA-fpj9-fh8c-26wh/GHSA-fpj9-fh8c-26wh.json @@ -7,12 +7,8 @@ "CVE-2012-6558" ], "details": "Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the size value for a string in the resource section of a Portable Executable (PE) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fpv9-pw36-hv2f/GHSA-fpv9-pw36-hv2f.json b/advisories/unreviewed/2022/05/GHSA-fpv9-pw36-hv2f/GHSA-fpv9-pw36-hv2f.json index 16a36b1ce3c..1a478c9d689 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpv9-pw36-hv2f/GHSA-fpv9-pw36-hv2f.json +++ b/advisories/unreviewed/2022/05/GHSA-fpv9-pw36-hv2f/GHSA-fpv9-pw36-hv2f.json @@ -7,12 +7,8 @@ "CVE-2013-3457" ], "details": "Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID CSCug16772.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fv9g-9ppx-9cm5/GHSA-fv9g-9ppx-9cm5.json b/advisories/unreviewed/2022/05/GHSA-fv9g-9ppx-9cm5/GHSA-fv9g-9ppx-9cm5.json index 8d9ace6c6ad..55c48aded32 100644 --- a/advisories/unreviewed/2022/05/GHSA-fv9g-9ppx-9cm5/GHSA-fv9g-9ppx-9cm5.json +++ b/advisories/unreviewed/2022/05/GHSA-fv9g-9ppx-9cm5/GHSA-fv9g-9ppx-9cm5.json @@ -7,12 +7,8 @@ "CVE-2012-6501" ], "details": "The KillProcess method in the HP PKI ActiveX control (HPPKI.ocx) before 1.2.0.1 allows remote attackers to cause a denial of service (kill process) via the partial or full name of a process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxh3-7cv7-7j5j/GHSA-fxh3-7cv7-7j5j.json b/advisories/unreviewed/2022/05/GHSA-fxh3-7cv7-7j5j/GHSA-fxh3-7cv7-7j5j.json index d016228304d..558da5b760f 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxh3-7cv7-7j5j/GHSA-fxh3-7cv7-7j5j.json +++ b/advisories/unreviewed/2022/05/GHSA-fxh3-7cv7-7j5j/GHSA-fxh3-7cv7-7j5j.json @@ -7,12 +7,8 @@ "CVE-2012-4890" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) comment to the news, (2) title to the news, or (3) the folder names in a gallery.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxv9-65f5-7jp3/GHSA-fxv9-65f5-7jp3.json b/advisories/unreviewed/2022/05/GHSA-fxv9-65f5-7jp3/GHSA-fxv9-65f5-7jp3.json index 1057c54a7cb..fc44e165fbb 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxv9-65f5-7jp3/GHSA-fxv9-65f5-7jp3.json +++ b/advisories/unreviewed/2022/05/GHSA-fxv9-65f5-7jp3/GHSA-fxv9-65f5-7jp3.json @@ -7,12 +7,8 @@ "CVE-2012-6559" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) mac, (3) graphtype, (4) name, or (5) type parameter to stats.php; or (6) comment parameter to deviceadd.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxww-mhrr-rf6r/GHSA-fxww-mhrr-rf6r.json b/advisories/unreviewed/2022/05/GHSA-fxww-mhrr-rf6r/GHSA-fxww-mhrr-rf6r.json index aca77848fb5..38b855af618 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxww-mhrr-rf6r/GHSA-fxww-mhrr-rf6r.json +++ b/advisories/unreviewed/2022/05/GHSA-fxww-mhrr-rf6r/GHSA-fxww-mhrr-rf6r.json @@ -7,12 +7,8 @@ "CVE-2012-5652" ], "details": "Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g29w-mq6x-2pr2/GHSA-g29w-mq6x-2pr2.json b/advisories/unreviewed/2022/05/GHSA-g29w-mq6x-2pr2/GHSA-g29w-mq6x-2pr2.json index 18a0ae4c32d..7569c21ff14 100644 --- a/advisories/unreviewed/2022/05/GHSA-g29w-mq6x-2pr2/GHSA-g29w-mq6x-2pr2.json +++ b/advisories/unreviewed/2022/05/GHSA-g29w-mq6x-2pr2/GHSA-g29w-mq6x-2pr2.json @@ -7,12 +7,8 @@ "CVE-2012-5348" ], "details": "SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via the login parameter in a login action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g39h-q25h-8r2q/GHSA-g39h-q25h-8r2q.json b/advisories/unreviewed/2022/05/GHSA-g39h-q25h-8r2q/GHSA-g39h-q25h-8r2q.json index d0b2e53084f..6a570c2722d 100644 --- a/advisories/unreviewed/2022/05/GHSA-g39h-q25h-8r2q/GHSA-g39h-q25h-8r2q.json +++ b/advisories/unreviewed/2022/05/GHSA-g39h-q25h-8r2q/GHSA-g39h-q25h-8r2q.json @@ -7,12 +7,8 @@ "CVE-2012-4846" ], "details": "IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g4fr-rxr6-272j/GHSA-g4fr-rxr6-272j.json b/advisories/unreviewed/2022/05/GHSA-g4fr-rxr6-272j/GHSA-g4fr-rxr6-272j.json index aac3d222af9..1c29532c36c 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4fr-rxr6-272j/GHSA-g4fr-rxr6-272j.json +++ b/advisories/unreviewed/2022/05/GHSA-g4fr-rxr6-272j/GHSA-g4fr-rxr6-272j.json @@ -7,12 +7,8 @@ "CVE-2012-4947" ], "details": "Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote attackers to obtain sensitive information via requests to unspecified pages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g4qh-86wp-5m5f/GHSA-g4qh-86wp-5m5f.json b/advisories/unreviewed/2022/05/GHSA-g4qh-86wp-5m5f/GHSA-g4qh-86wp-5m5f.json index e3181ff19ec..f29d949644b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4qh-86wp-5m5f/GHSA-g4qh-86wp-5m5f.json +++ b/advisories/unreviewed/2022/05/GHSA-g4qh-86wp-5m5f/GHSA-g4qh-86wp-5m5f.json @@ -7,12 +7,8 @@ "CVE-2012-4990" ], "details": "SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids[] parameter in a link action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g56f-wvrx-5p5r/GHSA-g56f-wvrx-5p5r.json b/advisories/unreviewed/2022/05/GHSA-g56f-wvrx-5p5r/GHSA-g56f-wvrx-5p5r.json index f2374077d42..4bd43360d40 100644 --- a/advisories/unreviewed/2022/05/GHSA-g56f-wvrx-5p5r/GHSA-g56f-wvrx-5p5r.json +++ b/advisories/unreviewed/2022/05/GHSA-g56f-wvrx-5p5r/GHSA-g56f-wvrx-5p5r.json @@ -7,12 +7,8 @@ "CVE-2012-5909" ], "details": "SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to execute arbitrary SQL commands via the conditions[usergroup][] parameter in a search action to admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g59p-2ghh-f52x/GHSA-g59p-2ghh-f52x.json b/advisories/unreviewed/2022/05/GHSA-g59p-2ghh-f52x/GHSA-g59p-2ghh-f52x.json index 104cca6bfc4..7d850f1e098 100644 --- a/advisories/unreviewed/2022/05/GHSA-g59p-2ghh-f52x/GHSA-g59p-2ghh-f52x.json +++ b/advisories/unreviewed/2022/05/GHSA-g59p-2ghh-f52x/GHSA-g59p-2ghh-f52x.json @@ -7,12 +7,8 @@ "CVE-2012-4862" ], "details": "The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g6mr-mvf4-4wvj/GHSA-g6mr-mvf4-4wvj.json b/advisories/unreviewed/2022/05/GHSA-g6mr-mvf4-4wvj/GHSA-g6mr-mvf4-4wvj.json index 5321c1c7f71..9b63378f8ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-g6mr-mvf4-4wvj/GHSA-g6mr-mvf4-4wvj.json +++ b/advisories/unreviewed/2022/05/GHSA-g6mr-mvf4-4wvj/GHSA-g6mr-mvf4-4wvj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g772-wxpp-x63p/GHSA-g772-wxpp-x63p.json b/advisories/unreviewed/2022/05/GHSA-g772-wxpp-x63p/GHSA-g772-wxpp-x63p.json index e2d8157915e..cca30fcf78d 100644 --- a/advisories/unreviewed/2022/05/GHSA-g772-wxpp-x63p/GHSA-g772-wxpp-x63p.json +++ b/advisories/unreviewed/2022/05/GHSA-g772-wxpp-x63p/GHSA-g772-wxpp-x63p.json @@ -7,12 +7,8 @@ "CVE-2012-6356" ], "details": "IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g8fx-vvch-2699/GHSA-g8fx-vvch-2699.json b/advisories/unreviewed/2022/05/GHSA-g8fx-vvch-2699/GHSA-g8fx-vvch-2699.json index bdd4dcf681a..d577601f91a 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8fx-vvch-2699/GHSA-g8fx-vvch-2699.json +++ b/advisories/unreviewed/2022/05/GHSA-g8fx-vvch-2699/GHSA-g8fx-vvch-2699.json @@ -7,12 +7,8 @@ "CVE-2012-5802" ], "details": "The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g97g-9m79-6c2x/GHSA-g97g-9m79-6c2x.json b/advisories/unreviewed/2022/05/GHSA-g97g-9m79-6c2x/GHSA-g97g-9m79-6c2x.json index 424fcc902f7..456168fdb29 100644 --- a/advisories/unreviewed/2022/05/GHSA-g97g-9m79-6c2x/GHSA-g97g-9m79-6c2x.json +++ b/advisories/unreviewed/2022/05/GHSA-g97g-9m79-6c2x/GHSA-g97g-9m79-6c2x.json @@ -7,12 +7,8 @@ "CVE-2012-4847" ], "details": "IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gc2m-7r5q-3wmj/GHSA-gc2m-7r5q-3wmj.json b/advisories/unreviewed/2022/05/GHSA-gc2m-7r5q-3wmj/GHSA-gc2m-7r5q-3wmj.json index 0460bce8592..0f04b3e412e 100644 --- a/advisories/unreviewed/2022/05/GHSA-gc2m-7r5q-3wmj/GHSA-gc2m-7r5q-3wmj.json +++ b/advisories/unreviewed/2022/05/GHSA-gc2m-7r5q-3wmj/GHSA-gc2m-7r5q-3wmj.json @@ -7,12 +7,8 @@ "CVE-2012-5759" ], "details": "The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gf23-39mf-3q9f/GHSA-gf23-39mf-3q9f.json b/advisories/unreviewed/2022/05/GHSA-gf23-39mf-3q9f/GHSA-gf23-39mf-3q9f.json index 6a57dc4db0d..191aa955a69 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf23-39mf-3q9f/GHSA-gf23-39mf-3q9f.json +++ b/advisories/unreviewed/2022/05/GHSA-gf23-39mf-3q9f/GHSA-gf23-39mf-3q9f.json @@ -7,12 +7,8 @@ "CVE-2012-4257" ], "details": "Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ghjc-9j6g-mr7p/GHSA-ghjc-9j6g-mr7p.json b/advisories/unreviewed/2022/05/GHSA-ghjc-9j6g-mr7p/GHSA-ghjc-9j6g-mr7p.json index 1ac7ca3f7e2..9802c788e03 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghjc-9j6g-mr7p/GHSA-ghjc-9j6g-mr7p.json +++ b/advisories/unreviewed/2022/05/GHSA-ghjc-9j6g-mr7p/GHSA-ghjc-9j6g-mr7p.json @@ -7,12 +7,8 @@ "CVE-2013-0581" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) ProcessPortal/jsp/socialPortal/dashboard.jsp, (2) teamworks/executeServiceByName, (3) portal/jsp/viewAdHocReportWizard.do, or (4) rest/bpm/wle/v1/process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ghvr-mww9-3hrg/GHSA-ghvr-mww9-3hrg.json b/advisories/unreviewed/2022/05/GHSA-ghvr-mww9-3hrg/GHSA-ghvr-mww9-3hrg.json index 80d58d126d2..f55c0f6564b 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghvr-mww9-3hrg/GHSA-ghvr-mww9-3hrg.json +++ b/advisories/unreviewed/2022/05/GHSA-ghvr-mww9-3hrg/GHSA-ghvr-mww9-3hrg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gjvw-c69w-xg78/GHSA-gjvw-c69w-xg78.json b/advisories/unreviewed/2022/05/GHSA-gjvw-c69w-xg78/GHSA-gjvw-c69w-xg78.json index cebd02ed01a..7554b5fc227 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjvw-c69w-xg78/GHSA-gjvw-c69w-xg78.json +++ b/advisories/unreviewed/2022/05/GHSA-gjvw-c69w-xg78/GHSA-gjvw-c69w-xg78.json @@ -7,12 +7,8 @@ "CVE-2013-1794" ], "details": "Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gjw6-4wg7-464w/GHSA-gjw6-4wg7-464w.json b/advisories/unreviewed/2022/05/GHSA-gjw6-4wg7-464w/GHSA-gjw6-4wg7-464w.json index 3297e33d64e..90a515f0abe 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjw6-4wg7-464w/GHSA-gjw6-4wg7-464w.json +++ b/advisories/unreviewed/2022/05/GHSA-gjw6-4wg7-464w/GHSA-gjw6-4wg7-464w.json @@ -7,12 +7,8 @@ "CVE-2013-3530" ], "details": "SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the playlist_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gm82-7rxx-g56m/GHSA-gm82-7rxx-g56m.json b/advisories/unreviewed/2022/05/GHSA-gm82-7rxx-g56m/GHSA-gm82-7rxx-g56m.json index 7530879ee7c..0067124dd1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm82-7rxx-g56m/GHSA-gm82-7rxx-g56m.json +++ b/advisories/unreviewed/2022/05/GHSA-gm82-7rxx-g56m/GHSA-gm82-7rxx-g56m.json @@ -7,12 +7,8 @@ "CVE-2012-5161" ], "details": "The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gq2x-c84j-9245/GHSA-gq2x-c84j-9245.json b/advisories/unreviewed/2022/05/GHSA-gq2x-c84j-9245/GHSA-gq2x-c84j-9245.json index f7d676a856c..d38fc4535be 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq2x-c84j-9245/GHSA-gq2x-c84j-9245.json +++ b/advisories/unreviewed/2022/05/GHSA-gq2x-c84j-9245/GHSA-gq2x-c84j-9245.json @@ -7,12 +7,8 @@ "CVE-2012-5350" ], "details": "SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gr7v-c884-98wj/GHSA-gr7v-c884-98wj.json b/advisories/unreviewed/2022/05/GHSA-gr7v-c884-98wj/GHSA-gr7v-c884-98wj.json index 4f63eb3480a..c23811e3a9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr7v-c884-98wj/GHSA-gr7v-c884-98wj.json +++ b/advisories/unreviewed/2022/05/GHSA-gr7v-c884-98wj/GHSA-gr7v-c884-98wj.json @@ -7,12 +7,8 @@ "CVE-2012-6430" ], "details": "Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-grhr-v2c4-37vx/GHSA-grhr-v2c4-37vx.json b/advisories/unreviewed/2022/05/GHSA-grhr-v2c4-37vx/GHSA-grhr-v2c4-37vx.json index 8f93959a064..5ef4980676b 100644 --- a/advisories/unreviewed/2022/05/GHSA-grhr-v2c4-37vx/GHSA-grhr-v2c4-37vx.json +++ b/advisories/unreviewed/2022/05/GHSA-grhr-v2c4-37vx/GHSA-grhr-v2c4-37vx.json @@ -7,12 +7,8 @@ "CVE-2012-4068" ], "details": "Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gv5f-2qgc-g925/GHSA-gv5f-2qgc-g925.json b/advisories/unreviewed/2022/05/GHSA-gv5f-2qgc-g925/GHSA-gv5f-2qgc-g925.json index f0382e37b14..6cf0067e2d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv5f-2qgc-g925/GHSA-gv5f-2qgc-g925.json +++ b/advisories/unreviewed/2022/05/GHSA-gv5f-2qgc-g925/GHSA-gv5f-2qgc-g925.json @@ -7,12 +7,8 @@ "CVE-2012-5895" ], "details": "Multiple unspecified vulnerabilities in iRODS before 3.1 have unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gv5q-gqmf-fh9m/GHSA-gv5q-gqmf-fh9m.json b/advisories/unreviewed/2022/05/GHSA-gv5q-gqmf-fh9m/GHSA-gv5q-gqmf-fh9m.json index 8042909078f..8dbfdc1dfa1 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv5q-gqmf-fh9m/GHSA-gv5q-gqmf-fh9m.json +++ b/advisories/unreviewed/2022/05/GHSA-gv5q-gqmf-fh9m/GHSA-gv5q-gqmf-fh9m.json @@ -7,12 +7,8 @@ "CVE-2012-5767" ], "details": "Unspecified vulnerability in the web interface on the IBM TS3500 Tape Library with firmware before C260 allows remote authenticated users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gw39-q5qm-cq3g/GHSA-gw39-q5qm-cq3g.json b/advisories/unreviewed/2022/05/GHSA-gw39-q5qm-cq3g/GHSA-gw39-q5qm-cq3g.json index f893f6e7fa9..5145ad0b6e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-gw39-q5qm-cq3g/GHSA-gw39-q5qm-cq3g.json +++ b/advisories/unreviewed/2022/05/GHSA-gw39-q5qm-cq3g/GHSA-gw39-q5qm-cq3g.json @@ -7,12 +7,8 @@ "CVE-2012-4622" ], "details": "Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service (card reload) via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gw4x-3jgm-3945/GHSA-gw4x-3jgm-3945.json b/advisories/unreviewed/2022/05/GHSA-gw4x-3jgm-3945/GHSA-gw4x-3jgm-3945.json index 7d442a7cdf8..9b0ee11c027 100644 --- a/advisories/unreviewed/2022/05/GHSA-gw4x-3jgm-3945/GHSA-gw4x-3jgm-3945.json +++ b/advisories/unreviewed/2022/05/GHSA-gw4x-3jgm-3945/GHSA-gw4x-3jgm-3945.json @@ -7,12 +7,8 @@ "CVE-2012-4197" ], "details": "Bugzilla/Attachment.pm in attachment.cgi in Bugzilla 2.x and 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 allows remote attackers to read attachment descriptions from private bugs via an obsolete=1 insert action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gw7p-w332-w75h/GHSA-gw7p-w332-w75h.json b/advisories/unreviewed/2022/05/GHSA-gw7p-w332-w75h/GHSA-gw7p-w332-w75h.json index 9e364fbd70a..5c2cd458d00 100644 --- a/advisories/unreviewed/2022/05/GHSA-gw7p-w332-w75h/GHSA-gw7p-w332-w75h.json +++ b/advisories/unreviewed/2022/05/GHSA-gw7p-w332-w75h/GHSA-gw7p-w332-w75h.json @@ -7,12 +7,8 @@ "CVE-2012-4951" ], "details": "Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalId, (2) ModelName, or (3) ApplicationName parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxcr-ff3v-w6r6/GHSA-gxcr-ff3v-w6r6.json b/advisories/unreviewed/2022/05/GHSA-gxcr-ff3v-w6r6/GHSA-gxcr-ff3v-w6r6.json index f55b9fbd2e3..1e0cc1982a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxcr-ff3v-w6r6/GHSA-gxcr-ff3v-w6r6.json +++ b/advisories/unreviewed/2022/05/GHSA-gxcr-ff3v-w6r6/GHSA-gxcr-ff3v-w6r6.json @@ -7,12 +7,8 @@ "CVE-2013-1967" ], "details": "Cross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11.2, as used in ownCloud Server 5.0.x before 5.0.5 and 4.5.x before 4.5.10, allows remote attackers to inject arbitrary web script or HTML via the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxhm-jmvr-p85c/GHSA-gxhm-jmvr-p85c.json b/advisories/unreviewed/2022/05/GHSA-gxhm-jmvr-p85c/GHSA-gxhm-jmvr-p85c.json index 9a8e5a28095..6642634b076 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxhm-jmvr-p85c/GHSA-gxhm-jmvr-p85c.json +++ b/advisories/unreviewed/2022/05/GHSA-gxhm-jmvr-p85c/GHSA-gxhm-jmvr-p85c.json @@ -7,12 +7,8 @@ "CVE-2012-5947" ], "details": "Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h2f3-x3v9-p3c5/GHSA-h2f3-x3v9-p3c5.json b/advisories/unreviewed/2022/05/GHSA-h2f3-x3v9-p3c5/GHSA-h2f3-x3v9-p3c5.json index 351b0eccc7f..5a59b0457f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2f3-x3v9-p3c5/GHSA-h2f3-x3v9-p3c5.json +++ b/advisories/unreviewed/2022/05/GHSA-h2f3-x3v9-p3c5/GHSA-h2f3-x3v9-p3c5.json @@ -7,12 +7,8 @@ "CVE-2012-5515" ], "details": "The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h3xg-2p49-9cfp/GHSA-h3xg-2p49-9cfp.json b/advisories/unreviewed/2022/05/GHSA-h3xg-2p49-9cfp/GHSA-h3xg-2p49-9cfp.json index ccbe8725c0c..9566fef061c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3xg-2p49-9cfp/GHSA-h3xg-2p49-9cfp.json +++ b/advisories/unreviewed/2022/05/GHSA-h3xg-2p49-9cfp/GHSA-h3xg-2p49-9cfp.json @@ -7,12 +7,8 @@ "CVE-2012-5223" ], "details": "The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via \"complex curly syntax\" in the char_repl parameter, which is inserted into a regular expression that is processed by the preg_replace function with the eval switch.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h425-q855-c9xx/GHSA-h425-q855-c9xx.json b/advisories/unreviewed/2022/05/GHSA-h425-q855-c9xx/GHSA-h425-q855-c9xx.json index d704b0d4193..5c7463d9e26 100644 --- a/advisories/unreviewed/2022/05/GHSA-h425-q855-c9xx/GHSA-h425-q855-c9xx.json +++ b/advisories/unreviewed/2022/05/GHSA-h425-q855-c9xx/GHSA-h425-q855-c9xx.json @@ -7,12 +7,8 @@ "CVE-2012-6577" ], "details": "SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h48c-fg4r-j3m4/GHSA-h48c-fg4r-j3m4.json b/advisories/unreviewed/2022/05/GHSA-h48c-fg4r-j3m4/GHSA-h48c-fg4r-j3m4.json index fba6e54c009..0c4ee7ae804 100644 --- a/advisories/unreviewed/2022/05/GHSA-h48c-fg4r-j3m4/GHSA-h48c-fg4r-j3m4.json +++ b/advisories/unreviewed/2022/05/GHSA-h48c-fg4r-j3m4/GHSA-h48c-fg4r-j3m4.json @@ -7,12 +7,8 @@ "CVE-2012-4655" ], "details": "The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h4c2-xxrm-px2r/GHSA-h4c2-xxrm-px2r.json b/advisories/unreviewed/2022/05/GHSA-h4c2-xxrm-px2r/GHSA-h4c2-xxrm-px2r.json index b57eb5ef42d..d32b8774894 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4c2-xxrm-px2r/GHSA-h4c2-xxrm-px2r.json +++ b/advisories/unreviewed/2022/05/GHSA-h4c2-xxrm-px2r/GHSA-h4c2-xxrm-px2r.json @@ -7,12 +7,8 @@ "CVE-2013-1393" ], "details": "Cross-site scripting (XSS) vulnerability in the CurvyCorners module 6.x-1.x and 7.x-1.x for Drupal allows remote authenticated users with the \"administer curvycorners\" permission to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h4fh-7rp6-262g/GHSA-h4fh-7rp6-262g.json b/advisories/unreviewed/2022/05/GHSA-h4fh-7rp6-262g/GHSA-h4fh-7rp6-262g.json index 7719d22f6ca..ad180eabf4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4fh-7rp6-262g/GHSA-h4fh-7rp6-262g.json +++ b/advisories/unreviewed/2022/05/GHSA-h4fh-7rp6-262g/GHSA-h4fh-7rp6-262g.json @@ -7,12 +7,8 @@ "CVE-2012-5162" ], "details": "Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) edit_category_post or (2) enable_category action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h4wh-9mpw-7f8j/GHSA-h4wh-9mpw-7f8j.json b/advisories/unreviewed/2022/05/GHSA-h4wh-9mpw-7f8j/GHSA-h4wh-9mpw-7f8j.json index 74e0a59817c..97155c15455 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4wh-9mpw-7f8j/GHSA-h4wh-9mpw-7f8j.json +++ b/advisories/unreviewed/2022/05/GHSA-h4wh-9mpw-7f8j/GHSA-h4wh-9mpw-7f8j.json @@ -7,12 +7,8 @@ "CVE-2012-6522" ], "details": "Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h52g-q5hf-3234/GHSA-h52g-q5hf-3234.json b/advisories/unreviewed/2022/05/GHSA-h52g-q5hf-3234/GHSA-h52g-q5hf-3234.json index 362b093c93a..190e509943b 100644 --- a/advisories/unreviewed/2022/05/GHSA-h52g-q5hf-3234/GHSA-h52g-q5hf-3234.json +++ b/advisories/unreviewed/2022/05/GHSA-h52g-q5hf-3234/GHSA-h52g-q5hf-3234.json @@ -7,12 +7,8 @@ "CVE-2012-4923" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule parameter to dansguardian.cgi, or (3) PATH_INFO to openvpn_users.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h55v-wgpx-c3rf/GHSA-h55v-wgpx-c3rf.json b/advisories/unreviewed/2022/05/GHSA-h55v-wgpx-c3rf/GHSA-h55v-wgpx-c3rf.json index 1feb830feee..af8e7dfbce9 100644 --- a/advisories/unreviewed/2022/05/GHSA-h55v-wgpx-c3rf/GHSA-h55v-wgpx-c3rf.json +++ b/advisories/unreviewed/2022/05/GHSA-h55v-wgpx-c3rf/GHSA-h55v-wgpx-c3rf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h633-xqc8-99wj/GHSA-h633-xqc8-99wj.json b/advisories/unreviewed/2022/05/GHSA-h633-xqc8-99wj/GHSA-h633-xqc8-99wj.json index 073abcebca2..f6548664c4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h633-xqc8-99wj/GHSA-h633-xqc8-99wj.json +++ b/advisories/unreviewed/2022/05/GHSA-h633-xqc8-99wj/GHSA-h633-xqc8-99wj.json @@ -7,12 +7,8 @@ "CVE-2012-6035" ], "details": "The do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h7h8-8qrf-frj7/GHSA-h7h8-8qrf-frj7.json b/advisories/unreviewed/2022/05/GHSA-h7h8-8qrf-frj7/GHSA-h7h8-8qrf-frj7.json index 76940fdcb61..263872eb6ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7h8-8qrf-frj7/GHSA-h7h8-8qrf-frj7.json +++ b/advisories/unreviewed/2022/05/GHSA-h7h8-8qrf-frj7/GHSA-h7h8-8qrf-frj7.json @@ -7,12 +7,8 @@ "CVE-2012-5293" ], "details": "Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[root_path] parameter to usr/extensions/get_tree.inc.php or (2) root_path parameter to usr/extensions/get_infochannel.inc.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h899-3m4c-j38f/GHSA-h899-3m4c-j38f.json b/advisories/unreviewed/2022/05/GHSA-h899-3m4c-j38f/GHSA-h899-3m4c-j38f.json index 6caba46300c..6f65e6a8be3 100644 --- a/advisories/unreviewed/2022/05/GHSA-h899-3m4c-j38f/GHSA-h899-3m4c-j38f.json +++ b/advisories/unreviewed/2022/05/GHSA-h899-3m4c-j38f/GHSA-h899-3m4c-j38f.json @@ -7,12 +7,8 @@ "CVE-2013-1113" ], "details": "Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via a crafted parameter value, aka Bug ID CSCue21042.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h8pv-5j53-pm62/GHSA-h8pv-5j53-pm62.json b/advisories/unreviewed/2022/05/GHSA-h8pv-5j53-pm62/GHSA-h8pv-5j53-pm62.json index 42c8ef0c30d..855c6efc959 100644 --- a/advisories/unreviewed/2022/05/GHSA-h8pv-5j53-pm62/GHSA-h8pv-5j53-pm62.json +++ b/advisories/unreviewed/2022/05/GHSA-h8pv-5j53-pm62/GHSA-h8pv-5j53-pm62.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h97f-hm3r-hh8r/GHSA-h97f-hm3r-hh8r.json b/advisories/unreviewed/2022/05/GHSA-h97f-hm3r-hh8r/GHSA-h97f-hm3r-hh8r.json index 489933ecc93..223071d4689 100644 --- a/advisories/unreviewed/2022/05/GHSA-h97f-hm3r-hh8r/GHSA-h97f-hm3r-hh8r.json +++ b/advisories/unreviewed/2022/05/GHSA-h97f-hm3r-hh8r/GHSA-h97f-hm3r-hh8r.json @@ -7,12 +7,8 @@ "CVE-2012-4871" ], "details": "Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h9cf-gghr-p937/GHSA-h9cf-gghr-p937.json b/advisories/unreviewed/2022/05/GHSA-h9cf-gghr-p937/GHSA-h9cf-gghr-p937.json index b4ef54af35b..0a229eb4b20 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9cf-gghr-p937/GHSA-h9cf-gghr-p937.json +++ b/advisories/unreviewed/2022/05/GHSA-h9cf-gghr-p937/GHSA-h9cf-gghr-p937.json @@ -7,12 +7,8 @@ "CVE-2012-6290" ], "details": "SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL commands via the q parameter to admin/admin_search/. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h9w3-3v6q-p98r/GHSA-h9w3-3v6q-p98r.json b/advisories/unreviewed/2022/05/GHSA-h9w3-3v6q-p98r/GHSA-h9w3-3v6q-p98r.json index 24304767dd0..6dd3ee3ced7 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9w3-3v6q-p98r/GHSA-h9w3-3v6q-p98r.json +++ b/advisories/unreviewed/2022/05/GHSA-h9w3-3v6q-p98r/GHSA-h9w3-3v6q-p98r.json @@ -7,12 +7,8 @@ "CVE-2012-4234" ], "details": "Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcxg-jpg7-wqg9/GHSA-hcxg-jpg7-wqg9.json b/advisories/unreviewed/2022/05/GHSA-hcxg-jpg7-wqg9/GHSA-hcxg-jpg7-wqg9.json index 35d38f76411..1008a01a8ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcxg-jpg7-wqg9/GHSA-hcxg-jpg7-wqg9.json +++ b/advisories/unreviewed/2022/05/GHSA-hcxg-jpg7-wqg9/GHSA-hcxg-jpg7-wqg9.json @@ -7,12 +7,8 @@ "CVE-2012-4934" ], "details": "TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hcxh-8mp2-q4w7/GHSA-hcxh-8mp2-q4w7.json b/advisories/unreviewed/2022/05/GHSA-hcxh-8mp2-q4w7/GHSA-hcxh-8mp2-q4w7.json index 738641b9e8f..91323858129 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcxh-8mp2-q4w7/GHSA-hcxh-8mp2-q4w7.json +++ b/advisories/unreviewed/2022/05/GHSA-hcxh-8mp2-q4w7/GHSA-hcxh-8mp2-q4w7.json @@ -7,12 +7,8 @@ "CVE-2012-5099" ], "details": "Cross-site scripting (XSS) vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hf4c-m2jg-33qx/GHSA-hf4c-m2jg-33qx.json b/advisories/unreviewed/2022/05/GHSA-hf4c-m2jg-33qx/GHSA-hf4c-m2jg-33qx.json index a7d9446adf3..2ad5fa72f8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hf4c-m2jg-33qx/GHSA-hf4c-m2jg-33qx.json +++ b/advisories/unreviewed/2022/05/GHSA-hf4c-m2jg-33qx/GHSA-hf4c-m2jg-33qx.json @@ -7,12 +7,8 @@ "CVE-2012-5574" ], "details": "lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hfg9-v7x5-666q/GHSA-hfg9-v7x5-666q.json b/advisories/unreviewed/2022/05/GHSA-hfg9-v7x5-666q/GHSA-hfg9-v7x5-666q.json index cf0df5ab8f8..c8d7a28d313 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfg9-v7x5-666q/GHSA-hfg9-v7x5-666q.json +++ b/advisories/unreviewed/2022/05/GHSA-hfg9-v7x5-666q/GHSA-hfg9-v7x5-666q.json @@ -7,12 +7,8 @@ "CVE-2013-1361" ], "details": "Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a file that is processed by Lenovo Bluetooth.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hfj7-fhv9-mfq2/GHSA-hfj7-fhv9-mfq2.json b/advisories/unreviewed/2022/05/GHSA-hfj7-fhv9-mfq2/GHSA-hfj7-fhv9-mfq2.json index 050cfdda26b..2d35e526813 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfj7-fhv9-mfq2/GHSA-hfj7-fhv9-mfq2.json +++ b/advisories/unreviewed/2022/05/GHSA-hfj7-fhv9-mfq2/GHSA-hfj7-fhv9-mfq2.json @@ -7,12 +7,8 @@ "CVE-2012-5800" ], "details": "The eBay module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hg63-5gfq-wwmc/GHSA-hg63-5gfq-wwmc.json b/advisories/unreviewed/2022/05/GHSA-hg63-5gfq-wwmc/GHSA-hg63-5gfq-wwmc.json index 2185724539f..9302b8f8fa2 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg63-5gfq-wwmc/GHSA-hg63-5gfq-wwmc.json +++ b/advisories/unreviewed/2022/05/GHSA-hg63-5gfq-wwmc/GHSA-hg63-5gfq-wwmc.json @@ -7,12 +7,8 @@ "CVE-2013-3664" ], "details": "Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgch-5345-g787/GHSA-hgch-5345-g787.json b/advisories/unreviewed/2022/05/GHSA-hgch-5345-g787/GHSA-hgch-5345-g787.json index 7df070278c3..1ccdd19978c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgch-5345-g787/GHSA-hgch-5345-g787.json +++ b/advisories/unreviewed/2022/05/GHSA-hgch-5345-g787/GHSA-hgch-5345-g787.json @@ -7,12 +7,8 @@ "CVE-2012-5319" ], "details": "Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the rootpass parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hggx-4r5h-fj6h/GHSA-hggx-4r5h-fj6h.json b/advisories/unreviewed/2022/05/GHSA-hggx-4r5h-fj6h/GHSA-hggx-4r5h-fj6h.json index f12bd8295db..40bafb4ad5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hggx-4r5h-fj6h/GHSA-hggx-4r5h-fj6h.json +++ b/advisories/unreviewed/2022/05/GHSA-hggx-4r5h-fj6h/GHSA-hggx-4r5h-fj6h.json @@ -7,12 +7,8 @@ "CVE-2012-4231" ], "details": "Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject arbitrary web script or HTML via the path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgvh-rm5g-r96j/GHSA-hgvh-rm5g-r96j.json b/advisories/unreviewed/2022/05/GHSA-hgvh-rm5g-r96j/GHSA-hgvh-rm5g-r96j.json index e26511882d7..aab655408e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgvh-rm5g-r96j/GHSA-hgvh-rm5g-r96j.json +++ b/advisories/unreviewed/2022/05/GHSA-hgvh-rm5g-r96j/GHSA-hgvh-rm5g-r96j.json @@ -7,12 +7,8 @@ "CVE-2013-0579" ], "details": "The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either (1) before or (2) after authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hjjh-vqwx-hv5w/GHSA-hjjh-vqwx-hv5w.json b/advisories/unreviewed/2022/05/GHSA-hjjh-vqwx-hv5w/GHSA-hjjh-vqwx-hv5w.json index 7ce61cf53a1..63cd6e9b351 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjjh-vqwx-hv5w/GHSA-hjjh-vqwx-hv5w.json +++ b/advisories/unreviewed/2022/05/GHSA-hjjh-vqwx-hv5w/GHSA-hjjh-vqwx-hv5w.json @@ -7,12 +7,8 @@ "CVE-2012-5335" ], "details": "Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the URI of an HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hm66-682x-8hc9/GHSA-hm66-682x-8hc9.json b/advisories/unreviewed/2022/05/GHSA-hm66-682x-8hc9/GHSA-hm66-682x-8hc9.json index 6dc937e1488..432e5513edc 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm66-682x-8hc9/GHSA-hm66-682x-8hc9.json +++ b/advisories/unreviewed/2022/05/GHSA-hm66-682x-8hc9/GHSA-hm66-682x-8hc9.json @@ -7,12 +7,8 @@ "CVE-2012-5267" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmjc-jvgw-hw44/GHSA-hmjc-jvgw-hw44.json b/advisories/unreviewed/2022/05/GHSA-hmjc-jvgw-hw44/GHSA-hmjc-jvgw-hw44.json index 387e85c3811..067d9382d30 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmjc-jvgw-hw44/GHSA-hmjc-jvgw-hw44.json +++ b/advisories/unreviewed/2022/05/GHSA-hmjc-jvgw-hw44/GHSA-hmjc-jvgw-hw44.json @@ -7,12 +7,8 @@ "CVE-2012-6045" ], "details": "Cross-site scripting (XSS) vulnerability in gb/user/index.php in Ramui Forum, possibly 1.0 Beta, allows remote attackers to inject arbitrary web script or HTML via the query parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpcg-qpfq-rq3x/GHSA-hpcg-qpfq-rq3x.json b/advisories/unreviewed/2022/05/GHSA-hpcg-qpfq-rq3x/GHSA-hpcg-qpfq-rq3x.json index ce34b5a714a..d799f30c93d 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpcg-qpfq-rq3x/GHSA-hpcg-qpfq-rq3x.json +++ b/advisories/unreviewed/2022/05/GHSA-hpcg-qpfq-rq3x/GHSA-hpcg-qpfq-rq3x.json @@ -7,12 +7,8 @@ "CVE-2012-5942" ], "details": "Cross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpf8-fq4j-xr48/GHSA-hpf8-fq4j-xr48.json b/advisories/unreviewed/2022/05/GHSA-hpf8-fq4j-xr48/GHSA-hpf8-fq4j-xr48.json index 3877db9988a..c776147e3b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpf8-fq4j-xr48/GHSA-hpf8-fq4j-xr48.json +++ b/advisories/unreviewed/2022/05/GHSA-hpf8-fq4j-xr48/GHSA-hpf8-fq4j-xr48.json @@ -7,12 +7,8 @@ "CVE-2012-5894" ], "details": "SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hr45-7j4g-c7cj/GHSA-hr45-7j4g-c7cj.json b/advisories/unreviewed/2022/05/GHSA-hr45-7j4g-c7cj/GHSA-hr45-7j4g-c7cj.json index 3e917831ec4..448ebad7b0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr45-7j4g-c7cj/GHSA-hr45-7j4g-c7cj.json +++ b/advisories/unreviewed/2022/05/GHSA-hr45-7j4g-c7cj/GHSA-hr45-7j4g-c7cj.json @@ -7,12 +7,8 @@ "CVE-2013-2698" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Calendar plugin before 1.3.3 for WordPress allows remote attackers to hijack the authentication of users for requests that add a calendar entry via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrr9-f9x5-fm6v/GHSA-hrr9-f9x5-fm6v.json b/advisories/unreviewed/2022/05/GHSA-hrr9-f9x5-fm6v/GHSA-hrr9-f9x5-fm6v.json index 87cb9376fec..49ae16cec69 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrr9-f9x5-fm6v/GHSA-hrr9-f9x5-fm6v.json +++ b/advisories/unreviewed/2022/05/GHSA-hrr9-f9x5-fm6v/GHSA-hrr9-f9x5-fm6v.json @@ -7,12 +7,8 @@ "CVE-2013-1818" ], "details": "maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvcr-4r2h-f6v7/GHSA-hvcr-4r2h-f6v7.json b/advisories/unreviewed/2022/05/GHSA-hvcr-4r2h-f6v7/GHSA-hvcr-4r2h-f6v7.json index 9d5d3b78368..1ca874bdc74 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvcr-4r2h-f6v7/GHSA-hvcr-4r2h-f6v7.json +++ b/advisories/unreviewed/2022/05/GHSA-hvcr-4r2h-f6v7/GHSA-hvcr-4r2h-f6v7.json @@ -7,12 +7,8 @@ "CVE-2012-5292" ], "details": "Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) gallery_e.php, (2) pageE.php, or (3) pageH.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvff-4fq3-p325/GHSA-hvff-4fq3-p325.json b/advisories/unreviewed/2022/05/GHSA-hvff-4fq3-p325/GHSA-hvff-4fq3-p325.json index 64ad95d4c40..2c04d9d4a86 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvff-4fq3-p325/GHSA-hvff-4fq3-p325.json +++ b/advisories/unreviewed/2022/05/GHSA-hvff-4fq3-p325/GHSA-hvff-4fq3-p325.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvgh-6jqx-4v3w/GHSA-hvgh-6jqx-4v3w.json b/advisories/unreviewed/2022/05/GHSA-hvgh-6jqx-4v3w/GHSA-hvgh-6jqx-4v3w.json index fb57404a91c..e718c9ef9a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvgh-6jqx-4v3w/GHSA-hvgh-6jqx-4v3w.json +++ b/advisories/unreviewed/2022/05/GHSA-hvgh-6jqx-4v3w/GHSA-hvgh-6jqx-4v3w.json @@ -7,12 +7,8 @@ "CVE-2013-3213" ], "details": "Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) picklist_name parameter in the get_picklists method to soap/customerportal.php, (2) where parameter in the get_tickets_list method to soap/customerportal.php, or (3) emailaddress parameter in the SearchContactsByEmail method to soap/vtigerolservice.php; or remote authenticated users to execute arbitrary SQL commands via the (4) emailaddress parameter in the SearchContactsByEmail method to soap/thunderbirdplugin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvgj-vxf3-92xr/GHSA-hvgj-vxf3-92xr.json b/advisories/unreviewed/2022/05/GHSA-hvgj-vxf3-92xr/GHSA-hvgj-vxf3-92xr.json index 75c0980b699..3e70fec3b82 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvgj-vxf3-92xr/GHSA-hvgj-vxf3-92xr.json +++ b/advisories/unreviewed/2022/05/GHSA-hvgj-vxf3-92xr/GHSA-hvgj-vxf3-92xr.json @@ -7,12 +7,8 @@ "CVE-2013-2994" ], "details": "IBM WebSphere Commerce 7.0 Feature Pack 4 and Feature Pack 5 incorrectly maintains a valid session after unspecified interaction with REST services, which allows remote attackers to issue REST requests in the context of an arbitrary user's active session via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvp4-qh6p-2h9g/GHSA-hvp4-qh6p-2h9g.json b/advisories/unreviewed/2022/05/GHSA-hvp4-qh6p-2h9g/GHSA-hvp4-qh6p-2h9g.json index 8fc313cb530..ab83b7d4203 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvp4-qh6p-2h9g/GHSA-hvp4-qh6p-2h9g.json +++ b/advisories/unreviewed/2022/05/GHSA-hvp4-qh6p-2h9g/GHSA-hvp4-qh6p-2h9g.json @@ -7,12 +7,8 @@ "CVE-2013-3041" ], "details": "The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a \"JSON hijacking attack.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hx5r-rcj5-f44p/GHSA-hx5r-rcj5-f44p.json b/advisories/unreviewed/2022/05/GHSA-hx5r-rcj5-f44p/GHSA-hx5r-rcj5-f44p.json index 26c3805f4fb..8277c4236ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx5r-rcj5-f44p/GHSA-hx5r-rcj5-f44p.json +++ b/advisories/unreviewed/2022/05/GHSA-hx5r-rcj5-f44p/GHSA-hx5r-rcj5-f44p.json @@ -7,12 +7,8 @@ "CVE-2013-2970" ], "details": "Unspecified vulnerability in IBM QRadar Security Information and Event Manager (SIEM) 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hx79-wghx-8337/GHSA-hx79-wghx-8337.json b/advisories/unreviewed/2022/05/GHSA-hx79-wghx-8337/GHSA-hx79-wghx-8337.json index 1dab840dd99..2bb844b1a1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx79-wghx-8337/GHSA-hx79-wghx-8337.json +++ b/advisories/unreviewed/2022/05/GHSA-hx79-wghx-8337/GHSA-hx79-wghx-8337.json @@ -7,12 +7,8 @@ "CVE-2012-4886" ], "details": "Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code via a long BSTR string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxj6-6hp6-977q/GHSA-hxj6-6hp6-977q.json b/advisories/unreviewed/2022/05/GHSA-hxj6-6hp6-977q/GHSA-hxj6-6hp6-977q.json index d1c7ede2a36..9e2a274b0af 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxj6-6hp6-977q/GHSA-hxj6-6hp6-977q.json +++ b/advisories/unreviewed/2022/05/GHSA-hxj6-6hp6-977q/GHSA-hxj6-6hp6-977q.json @@ -7,12 +7,8 @@ "CVE-2012-4842" ], "details": "Open redirect vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hxp5-wphv-83qm/GHSA-hxp5-wphv-83qm.json b/advisories/unreviewed/2022/05/GHSA-hxp5-wphv-83qm/GHSA-hxp5-wphv-83qm.json index bfdde7fd7d9..dd92d88498b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxp5-wphv-83qm/GHSA-hxp5-wphv-83qm.json +++ b/advisories/unreviewed/2022/05/GHSA-hxp5-wphv-83qm/GHSA-hxp5-wphv-83qm.json @@ -7,12 +7,8 @@ "CVE-2012-5333" ], "details": "SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4xv-v7gm-qj5q/GHSA-j4xv-v7gm-qj5q.json b/advisories/unreviewed/2022/05/GHSA-j4xv-v7gm-qj5q/GHSA-j4xv-v7gm-qj5q.json index b8b6a99e043..fb7b2b3563e 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4xv-v7gm-qj5q/GHSA-j4xv-v7gm-qj5q.json +++ b/advisories/unreviewed/2022/05/GHSA-j4xv-v7gm-qj5q/GHSA-j4xv-v7gm-qj5q.json @@ -7,12 +7,8 @@ "CVE-2013-3487" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to (1) 400.php, (2) 403.php, or (3) 403.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j5g3-6543-2hjc/GHSA-j5g3-6543-2hjc.json b/advisories/unreviewed/2022/05/GHSA-j5g3-6543-2hjc/GHSA-j5g3-6543-2hjc.json index 1120ff698a9..afd0f092ad0 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5g3-6543-2hjc/GHSA-j5g3-6543-2hjc.json +++ b/advisories/unreviewed/2022/05/GHSA-j5g3-6543-2hjc/GHSA-j5g3-6543-2hjc.json @@ -7,12 +7,8 @@ "CVE-2012-4538" ], "details": "The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j5jc-p5q2-hc96/GHSA-j5jc-p5q2-hc96.json b/advisories/unreviewed/2022/05/GHSA-j5jc-p5q2-hc96/GHSA-j5jc-p5q2-hc96.json index 2cb05b2d3e6..a3e3d929ffb 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5jc-p5q2-hc96/GHSA-j5jc-p5q2-hc96.json +++ b/advisories/unreviewed/2022/05/GHSA-j5jc-p5q2-hc96/GHSA-j5jc-p5q2-hc96.json @@ -7,12 +7,8 @@ "CVE-2013-3044" ], "details": "The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j65c-c6pv-j6h4/GHSA-j65c-c6pv-j6h4.json b/advisories/unreviewed/2022/05/GHSA-j65c-c6pv-j6h4/GHSA-j65c-c6pv-j6h4.json index fe0b1223de0..420f73573ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-j65c-c6pv-j6h4/GHSA-j65c-c6pv-j6h4.json +++ b/advisories/unreviewed/2022/05/GHSA-j65c-c6pv-j6h4/GHSA-j65c-c6pv-j6h4.json @@ -7,12 +7,8 @@ "CVE-2012-6575" ], "details": "Cross-site scripting (XSS) vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j67v-3gv5-wjpf/GHSA-j67v-3gv5-wjpf.json b/advisories/unreviewed/2022/05/GHSA-j67v-3gv5-wjpf/GHSA-j67v-3gv5-wjpf.json index e3642b101fd..074ffac0782 100644 --- a/advisories/unreviewed/2022/05/GHSA-j67v-3gv5-wjpf/GHSA-j67v-3gv5-wjpf.json +++ b/advisories/unreviewed/2022/05/GHSA-j67v-3gv5-wjpf/GHSA-j67v-3gv5-wjpf.json @@ -7,12 +7,8 @@ "CVE-2012-4590" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j6f8-7w49-7g29/GHSA-j6f8-7w49-7g29.json b/advisories/unreviewed/2022/05/GHSA-j6f8-7w49-7g29/GHSA-j6f8-7w49-7g29.json index 6ceb70e5974..45e24125341 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6f8-7w49-7g29/GHSA-j6f8-7w49-7g29.json +++ b/advisories/unreviewed/2022/05/GHSA-j6f8-7w49-7g29/GHSA-j6f8-7w49-7g29.json @@ -7,12 +7,8 @@ "CVE-2013-1636" ], "details": "Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers to inject arbitrary web script or HTML via the get-data parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j72g-7q8m-fx32/GHSA-j72g-7q8m-fx32.json b/advisories/unreviewed/2022/05/GHSA-j72g-7q8m-fx32/GHSA-j72g-7q8m-fx32.json index 95c33b34a65..0ecd356004c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j72g-7q8m-fx32/GHSA-j72g-7q8m-fx32.json +++ b/advisories/unreviewed/2022/05/GHSA-j72g-7q8m-fx32/GHSA-j72g-7q8m-fx32.json @@ -7,12 +7,8 @@ "CVE-2012-5763" ], "details": "Cross-site request forgery (CSRF) vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j766-j355-w3c2/GHSA-j766-j355-w3c2.json b/advisories/unreviewed/2022/05/GHSA-j766-j355-w3c2/GHSA-j766-j355-w3c2.json index 1261d8dabab..fa2b4e0b3cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-j766-j355-w3c2/GHSA-j766-j355-w3c2.json +++ b/advisories/unreviewed/2022/05/GHSA-j766-j355-w3c2/GHSA-j766-j355-w3c2.json @@ -7,12 +7,8 @@ "CVE-2013-3029" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j797-37x4-fmcf/GHSA-j797-37x4-fmcf.json b/advisories/unreviewed/2022/05/GHSA-j797-37x4-fmcf/GHSA-j797-37x4-fmcf.json index cef98d67c45..850f54a2ed3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j797-37x4-fmcf/GHSA-j797-37x4-fmcf.json +++ b/advisories/unreviewed/2022/05/GHSA-j797-37x4-fmcf/GHSA-j797-37x4-fmcf.json @@ -7,12 +7,8 @@ "CVE-2012-4623" ], "details": "The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2.xSG before 3.2.5SG, 3.2.xS, 3.2.xXO, 3.3.xS, and 3.3.xSG before 3.3.1SG allows remote attackers to cause a denial of service (device reload) via a malformed DHCPv6 packet, aka Bug ID CSCto57723.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j7h6-hf6p-fgpj/GHSA-j7h6-hf6p-fgpj.json b/advisories/unreviewed/2022/05/GHSA-j7h6-hf6p-fgpj/GHSA-j7h6-hf6p-fgpj.json index 85c5fd26078..ba0ba7a77ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7h6-hf6p-fgpj/GHSA-j7h6-hf6p-fgpj.json +++ b/advisories/unreviewed/2022/05/GHSA-j7h6-hf6p-fgpj/GHSA-j7h6-hf6p-fgpj.json @@ -7,12 +7,8 @@ "CVE-2013-3497" ], "details": "Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j7mm-3m3p-jw5x/GHSA-j7mm-3m3p-jw5x.json b/advisories/unreviewed/2022/05/GHSA-j7mm-3m3p-jw5x/GHSA-j7mm-3m3p-jw5x.json index b2cab1df288..61d3410388c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7mm-3m3p-jw5x/GHSA-j7mm-3m3p-jw5x.json +++ b/advisories/unreviewed/2022/05/GHSA-j7mm-3m3p-jw5x/GHSA-j7mm-3m3p-jw5x.json @@ -7,12 +7,8 @@ "CVE-2012-5134" ], "details": "Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j7wx-9xfp-hhvp/GHSA-j7wx-9xfp-hhvp.json b/advisories/unreviewed/2022/05/GHSA-j7wx-9xfp-hhvp/GHSA-j7wx-9xfp-hhvp.json index efc48046fe4..7422fd9e2d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7wx-9xfp-hhvp/GHSA-j7wx-9xfp-hhvp.json +++ b/advisories/unreviewed/2022/05/GHSA-j7wx-9xfp-hhvp/GHSA-j7wx-9xfp-hhvp.json @@ -7,12 +7,8 @@ "CVE-2013-1972" ], "details": "Cross-site request forgery (CSRF) vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x before 7.x-0.8 for Drupal allows remote attackers to hijack the authentication of unspecified victims to create, modify, or delete files via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j83q-ghq2-28x4/GHSA-j83q-ghq2-28x4.json b/advisories/unreviewed/2022/05/GHSA-j83q-ghq2-28x4/GHSA-j83q-ghq2-28x4.json index 44c3b9b9a73..89e35fb13f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-j83q-ghq2-28x4/GHSA-j83q-ghq2-28x4.json +++ b/advisories/unreviewed/2022/05/GHSA-j83q-ghq2-28x4/GHSA-j83q-ghq2-28x4.json @@ -7,12 +7,8 @@ "CVE-2013-3031" ], "details": "A SQL stored procedure in the Universal Cache component in IBM solidDB 6.0.x before 6.0.1070, 6.3.x before 6.3.0.56, 6.5.x before 6.5.0.12, and 7.0.x before 7.0.0.4 allows remote authenticated users to cause a denial of service (uninitialized-memory access and daemon crash) via a call that includes named arguments and default parameter values, but does not include all of the expected arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8x9-mcxf-5mjm/GHSA-j8x9-mcxf-5mjm.json b/advisories/unreviewed/2022/05/GHSA-j8x9-mcxf-5mjm/GHSA-j8x9-mcxf-5mjm.json index dabb744da90..ed29d94ab86 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8x9-mcxf-5mjm/GHSA-j8x9-mcxf-5mjm.json +++ b/advisories/unreviewed/2022/05/GHSA-j8x9-mcxf-5mjm/GHSA-j8x9-mcxf-5mjm.json @@ -7,12 +7,8 @@ "CVE-2012-6516" ], "details": "SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via the q parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j92p-xh86-8wrm/GHSA-j92p-xh86-8wrm.json b/advisories/unreviewed/2022/05/GHSA-j92p-xh86-8wrm/GHSA-j92p-xh86-8wrm.json index 042e102ca98..69bd590d9b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-j92p-xh86-8wrm/GHSA-j92p-xh86-8wrm.json +++ b/advisories/unreviewed/2022/05/GHSA-j92p-xh86-8wrm/GHSA-j92p-xh86-8wrm.json @@ -7,12 +7,8 @@ "CVE-2013-3477" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j99w-349h-39gr/GHSA-j99w-349h-39gr.json b/advisories/unreviewed/2022/05/GHSA-j99w-349h-39gr/GHSA-j99w-349h-39gr.json index aace99caa2d..37a8d74d327 100644 --- a/advisories/unreviewed/2022/05/GHSA-j99w-349h-39gr/GHSA-j99w-349h-39gr.json +++ b/advisories/unreviewed/2022/05/GHSA-j99w-349h-39gr/GHSA-j99w-349h-39gr.json @@ -7,12 +7,8 @@ "CVE-2013-0731" ], "details": "ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks by setting the wordpress_logged_in cookie. NOTE: this is due to an incomplete fix for a similar issue that was fixed in 1.3.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j9p5-9mcj-v7gh/GHSA-j9p5-9mcj-v7gh.json b/advisories/unreviewed/2022/05/GHSA-j9p5-9mcj-v7gh/GHSA-j9p5-9mcj-v7gh.json index 619bd246c02..78a254eeba1 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9p5-9mcj-v7gh/GHSA-j9p5-9mcj-v7gh.json +++ b/advisories/unreviewed/2022/05/GHSA-j9p5-9mcj-v7gh/GHSA-j9p5-9mcj-v7gh.json @@ -7,12 +7,8 @@ "CVE-2012-6110" ], "details": "bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j9v8-h4rq-56rx/GHSA-j9v8-h4rq-56rx.json b/advisories/unreviewed/2022/05/GHSA-j9v8-h4rq-56rx/GHSA-j9v8-h4rq-56rx.json index f17483a9f6e..c25c5b562d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9v8-h4rq-56rx/GHSA-j9v8-h4rq-56rx.json +++ b/advisories/unreviewed/2022/05/GHSA-j9v8-h4rq-56rx/GHSA-j9v8-h4rq-56rx.json @@ -7,12 +7,8 @@ "CVE-2012-5866" ], "details": "Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j9w2-mwmr-5hwv/GHSA-j9w2-mwmr-5hwv.json b/advisories/unreviewed/2022/05/GHSA-j9w2-mwmr-5hwv/GHSA-j9w2-mwmr-5hwv.json index 475895218cd..8b5ad33ddab 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9w2-mwmr-5hwv/GHSA-j9w2-mwmr-5hwv.json +++ b/advisories/unreviewed/2022/05/GHSA-j9w2-mwmr-5hwv/GHSA-j9w2-mwmr-5hwv.json @@ -7,12 +7,8 @@ "CVE-2012-5939" ], "details": "Cross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jcm8-q732-q4ww/GHSA-jcm8-q732-q4ww.json b/advisories/unreviewed/2022/05/GHSA-jcm8-q732-q4ww/GHSA-jcm8-q732-q4ww.json index 1cb8d9f3e60..c8842dc84d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcm8-q732-q4ww/GHSA-jcm8-q732-q4ww.json +++ b/advisories/unreviewed/2022/05/GHSA-jcm8-q732-q4ww/GHSA-jcm8-q732-q4ww.json @@ -7,12 +7,8 @@ "CVE-2012-5757" ], "details": "Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf33-4g8f-xgpg/GHSA-jf33-4g8f-xgpg.json b/advisories/unreviewed/2022/05/GHSA-jf33-4g8f-xgpg/GHSA-jf33-4g8f-xgpg.json index 5c41287ace9..ca3efb20fb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf33-4g8f-xgpg/GHSA-jf33-4g8f-xgpg.json +++ b/advisories/unreviewed/2022/05/GHSA-jf33-4g8f-xgpg/GHSA-jf33-4g8f-xgpg.json @@ -7,12 +7,8 @@ "CVE-2013-1470" ], "details": "Cross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2sr1 and 2.0.0 before 2.0.0rc2 allows remote attackers to inject arbitrary web script or HTML via the calendar_type parameter to submit.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jffc-hfc6-pjf5/GHSA-jffc-hfc6-pjf5.json b/advisories/unreviewed/2022/05/GHSA-jffc-hfc6-pjf5/GHSA-jffc-hfc6-pjf5.json index 0c79f0a220a..bd892b33e32 100644 --- a/advisories/unreviewed/2022/05/GHSA-jffc-hfc6-pjf5/GHSA-jffc-hfc6-pjf5.json +++ b/advisories/unreviewed/2022/05/GHSA-jffc-hfc6-pjf5/GHSA-jffc-hfc6-pjf5.json @@ -7,12 +7,8 @@ "CVE-2012-5903" ], "details": "Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the scheduled parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfvq-65q8-hq2v/GHSA-jfvq-65q8-hq2v.json b/advisories/unreviewed/2022/05/GHSA-jfvq-65q8-hq2v/GHSA-jfvq-65q8-hq2v.json index cb35425cac3..75330806279 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfvq-65q8-hq2v/GHSA-jfvq-65q8-hq2v.json +++ b/advisories/unreviewed/2022/05/GHSA-jfvq-65q8-hq2v/GHSA-jfvq-65q8-hq2v.json @@ -7,12 +7,8 @@ "CVE-2012-4254" ], "details": "MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/cubemail/restore.php or (2) learn/cubemail/dump.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jgv9-qcmw-x99j/GHSA-jgv9-qcmw-x99j.json b/advisories/unreviewed/2022/05/GHSA-jgv9-qcmw-x99j/GHSA-jgv9-qcmw-x99j.json index 44268e9df5f..c14f5507802 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgv9-qcmw-x99j/GHSA-jgv9-qcmw-x99j.json +++ b/advisories/unreviewed/2022/05/GHSA-jgv9-qcmw-x99j/GHSA-jgv9-qcmw-x99j.json @@ -7,12 +7,8 @@ "CVE-2012-5295" ], "details": "Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the windowed parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jh6g-fpjw-w958/GHSA-jh6g-fpjw-w958.json b/advisories/unreviewed/2022/05/GHSA-jh6g-fpjw-w958/GHSA-jh6g-fpjw-w958.json index c6dfa45441b..1cd9e0004b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jh6g-fpjw-w958/GHSA-jh6g-fpjw-w958.json +++ b/advisories/unreviewed/2022/05/GHSA-jh6g-fpjw-w958/GHSA-jh6g-fpjw-w958.json @@ -7,12 +7,8 @@ "CVE-2012-6643" ], "details": "Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to (1) videos.php or (2) channels.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jhfq-9hcr-5qqv/GHSA-jhfq-9hcr-5qqv.json b/advisories/unreviewed/2022/05/GHSA-jhfq-9hcr-5qqv/GHSA-jhfq-9hcr-5qqv.json index ce5c9675ca1..f5b1c03444e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhfq-9hcr-5qqv/GHSA-jhfq-9hcr-5qqv.json +++ b/advisories/unreviewed/2022/05/GHSA-jhfq-9hcr-5qqv/GHSA-jhfq-9hcr-5qqv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmqc-c5jw-vvp4/GHSA-jmqc-c5jw-vvp4.json b/advisories/unreviewed/2022/05/GHSA-jmqc-c5jw-vvp4/GHSA-jmqc-c5jw-vvp4.json index 5406d1a93da..7ae6fb29479 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmqc-c5jw-vvp4/GHSA-jmqc-c5jw-vvp4.json +++ b/advisories/unreviewed/2022/05/GHSA-jmqc-c5jw-vvp4/GHSA-jmqc-c5jw-vvp4.json @@ -7,12 +7,8 @@ "CVE-2012-5758" ], "details": "The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface, which allows remote attackers to cause a denial of service (process exit) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jp58-xphf-m4g6/GHSA-jp58-xphf-m4g6.json b/advisories/unreviewed/2022/05/GHSA-jp58-xphf-m4g6/GHSA-jp58-xphf-m4g6.json index 2b8468e40ad..1fc570d3f92 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp58-xphf-m4g6/GHSA-jp58-xphf-m4g6.json +++ b/advisories/unreviewed/2022/05/GHSA-jp58-xphf-m4g6/GHSA-jp58-xphf-m4g6.json @@ -7,12 +7,8 @@ "CVE-2013-1408" ], "details": "Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search or (2) orderby parameter to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpqc-v7hp-6xxr/GHSA-jpqc-v7hp-6xxr.json b/advisories/unreviewed/2022/05/GHSA-jpqc-v7hp-6xxr/GHSA-jpqc-v7hp-6xxr.json index 4f69a74c216..654780071c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpqc-v7hp-6xxr/GHSA-jpqc-v7hp-6xxr.json +++ b/advisories/unreviewed/2022/05/GHSA-jpqc-v7hp-6xxr/GHSA-jpqc-v7hp-6xxr.json @@ -7,12 +7,8 @@ "CVE-2012-6574" ], "details": "Cross-site scripting (XSS) vulnerability in the Fonecta verify module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpxp-w99g-6pgv/GHSA-jpxp-w99g-6pgv.json b/advisories/unreviewed/2022/05/GHSA-jpxp-w99g-6pgv/GHSA-jpxp-w99g-6pgv.json index da8a14be831..72a1d93fdde 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpxp-w99g-6pgv/GHSA-jpxp-w99g-6pgv.json +++ b/advisories/unreviewed/2022/05/GHSA-jpxp-w99g-6pgv/GHSA-jpxp-w99g-6pgv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jq58-6p8v-r4h8/GHSA-jq58-6p8v-r4h8.json b/advisories/unreviewed/2022/05/GHSA-jq58-6p8v-r4h8/GHSA-jq58-6p8v-r4h8.json index 8acaa6688bd..5fe8ca6cbba 100644 --- a/advisories/unreviewed/2022/05/GHSA-jq58-6p8v-r4h8/GHSA-jq58-6p8v-r4h8.json +++ b/advisories/unreviewed/2022/05/GHSA-jq58-6p8v-r4h8/GHSA-jq58-6p8v-r4h8.json @@ -7,12 +7,8 @@ "CVE-2012-4740" ], "details": "Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jq68-mm5g-r969/GHSA-jq68-mm5g-r969.json b/advisories/unreviewed/2022/05/GHSA-jq68-mm5g-r969/GHSA-jq68-mm5g-r969.json index efa00f6909b..0edd6420783 100644 --- a/advisories/unreviewed/2022/05/GHSA-jq68-mm5g-r969/GHSA-jq68-mm5g-r969.json +++ b/advisories/unreviewed/2022/05/GHSA-jq68-mm5g-r969/GHSA-jq68-mm5g-r969.json @@ -7,12 +7,8 @@ "CVE-2013-3006" ], "details": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3008.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jr89-w7j9-j5m5/GHSA-jr89-w7j9-j5m5.json b/advisories/unreviewed/2022/05/GHSA-jr89-w7j9-j5m5/GHSA-jr89-w7j9-j5m5.json index 972f2ebdce3..2dac8916497 100644 --- a/advisories/unreviewed/2022/05/GHSA-jr89-w7j9-j5m5/GHSA-jr89-w7j9-j5m5.json +++ b/advisories/unreviewed/2022/05/GHSA-jr89-w7j9-j5m5/GHSA-jr89-w7j9-j5m5.json @@ -7,12 +7,8 @@ "CVE-2012-4829" ], "details": "IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attackers to spoof servers by leveraging an inappropriate certificate-trust relationship.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jrqw-vgjg-qgrh/GHSA-jrqw-vgjg-qgrh.json b/advisories/unreviewed/2022/05/GHSA-jrqw-vgjg-qgrh/GHSA-jrqw-vgjg-qgrh.json index 2724e03b2a0..7a369bb4b0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrqw-vgjg-qgrh/GHSA-jrqw-vgjg-qgrh.json +++ b/advisories/unreviewed/2022/05/GHSA-jrqw-vgjg-qgrh/GHSA-jrqw-vgjg-qgrh.json @@ -7,12 +7,8 @@ "CVE-2012-5877" ], "details": "Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an HTTP header without a name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jvjc-qf53-pgj7/GHSA-jvjc-qf53-pgj7.json b/advisories/unreviewed/2022/05/GHSA-jvjc-qf53-pgj7/GHSA-jvjc-qf53-pgj7.json index 1500e478d69..fc1725af930 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvjc-qf53-pgj7/GHSA-jvjc-qf53-pgj7.json +++ b/advisories/unreviewed/2022/05/GHSA-jvjc-qf53-pgj7/GHSA-jvjc-qf53-pgj7.json @@ -7,12 +7,8 @@ "CVE-2012-4435" ], "details": "fwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated users to cause a denial of service (server crash) via a long IP address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvrg-jfpg-gqx8/GHSA-jvrg-jfpg-gqx8.json b/advisories/unreviewed/2022/05/GHSA-jvrg-jfpg-gqx8/GHSA-jvrg-jfpg-gqx8.json index b1daecf5f0c..64eb4a59fe9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvrg-jfpg-gqx8/GHSA-jvrg-jfpg-gqx8.json +++ b/advisories/unreviewed/2022/05/GHSA-jvrg-jfpg-gqx8/GHSA-jvrg-jfpg-gqx8.json @@ -7,12 +7,8 @@ "CVE-2012-6031" ], "details": "The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the \"bad_copy error path.\" NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jw2w-pjp5-f92g/GHSA-jw2w-pjp5-f92g.json b/advisories/unreviewed/2022/05/GHSA-jw2w-pjp5-f92g/GHSA-jw2w-pjp5-f92g.json index f9bb26598e8..70c0ae195dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw2w-pjp5-f92g/GHSA-jw2w-pjp5-f92g.json +++ b/advisories/unreviewed/2022/05/GHSA-jw2w-pjp5-f92g/GHSA-jw2w-pjp5-f92g.json @@ -7,12 +7,8 @@ "CVE-2013-3003" ], "details": "Unspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows remote authenticated users to execute arbitrary commands via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jwq3-79v5-6j8q/GHSA-jwq3-79v5-6j8q.json b/advisories/unreviewed/2022/05/GHSA-jwq3-79v5-6j8q/GHSA-jwq3-79v5-6j8q.json index 882490a98ef..a2f86de937e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwq3-79v5-6j8q/GHSA-jwq3-79v5-6j8q.json +++ b/advisories/unreviewed/2022/05/GHSA-jwq3-79v5-6j8q/GHSA-jwq3-79v5-6j8q.json @@ -7,12 +7,8 @@ "CVE-2013-2984" ], "details": "Directory traversal vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to read or modify files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx3c-6xm2-5287/GHSA-jx3c-6xm2-5287.json b/advisories/unreviewed/2022/05/GHSA-jx3c-6xm2-5287/GHSA-jx3c-6xm2-5287.json index 83dbc096e38..83b539e0ac4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx3c-6xm2-5287/GHSA-jx3c-6xm2-5287.json +++ b/advisories/unreviewed/2022/05/GHSA-jx3c-6xm2-5287/GHSA-jx3c-6xm2-5287.json @@ -7,12 +7,8 @@ "CVE-2012-4889" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to createAnomaly.do; (3) url, (4) subTab, or (5) tab parameter to mindex.do; (6) tab parameter to index2.do; or (7) port parameter to syslogViewer.do.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx85-239j-h9vf/GHSA-jx85-239j-h9vf.json b/advisories/unreviewed/2022/05/GHSA-jx85-239j-h9vf/GHSA-jx85-239j-h9vf.json index 7bab5085177..3af9532e2bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx85-239j-h9vf/GHSA-jx85-239j-h9vf.json +++ b/advisories/unreviewed/2022/05/GHSA-jx85-239j-h9vf/GHSA-jx85-239j-h9vf.json @@ -7,12 +7,8 @@ "CVE-2012-5288" ], "details": "SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jxhv-66hf-w3mg/GHSA-jxhv-66hf-w3mg.json b/advisories/unreviewed/2022/05/GHSA-jxhv-66hf-w3mg/GHSA-jxhv-66hf-w3mg.json index 8e669937da1..74ff71c95e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxhv-66hf-w3mg/GHSA-jxhv-66hf-w3mg.json +++ b/advisories/unreviewed/2022/05/GHSA-jxhv-66hf-w3mg/GHSA-jxhv-66hf-w3mg.json @@ -7,12 +7,8 @@ "CVE-2013-3481" ], "details": "Stack-based buffer overflow in Artweaver Plus and Free before 3.1.5 allows remote attackers to execute arbitrary code via a crafted JPG image file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m2v7-9rhw-324g/GHSA-m2v7-9rhw-324g.json b/advisories/unreviewed/2022/05/GHSA-m2v7-9rhw-324g/GHSA-m2v7-9rhw-324g.json index b3d01a8cc8c..b9efaf506af 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2v7-9rhw-324g/GHSA-m2v7-9rhw-324g.json +++ b/advisories/unreviewed/2022/05/GHSA-m2v7-9rhw-324g/GHSA-m2v7-9rhw-324g.json @@ -7,12 +7,8 @@ "CVE-2012-4561" ], "details": "The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free \"an invalid pointer on an error path,\" which might allow remote attackers to cause a denial of service (crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m37m-4cgc-j46h/GHSA-m37m-4cgc-j46h.json b/advisories/unreviewed/2022/05/GHSA-m37m-4cgc-j46h/GHSA-m37m-4cgc-j46h.json index 18f90bb962c..058102f1197 100644 --- a/advisories/unreviewed/2022/05/GHSA-m37m-4cgc-j46h/GHSA-m37m-4cgc-j46h.json +++ b/advisories/unreviewed/2022/05/GHSA-m37m-4cgc-j46h/GHSA-m37m-4cgc-j46h.json @@ -7,12 +7,8 @@ "CVE-2012-4925" ], "details": "Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a (1) app0 or (2) app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m3g8-h8w3-8hqm/GHSA-m3g8-h8w3-8hqm.json b/advisories/unreviewed/2022/05/GHSA-m3g8-h8w3-8hqm/GHSA-m3g8-h8w3-8hqm.json index 3e456c66ed1..cec7301d414 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3g8-h8w3-8hqm/GHSA-m3g8-h8w3-8hqm.json +++ b/advisories/unreviewed/2022/05/GHSA-m3g8-h8w3-8hqm/GHSA-m3g8-h8w3-8hqm.json @@ -7,12 +7,8 @@ "CVE-2012-4537" ], "details": "Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka \"Memory mapping failure DoS vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m422-vwp4-mfgf/GHSA-m422-vwp4-mfgf.json b/advisories/unreviewed/2022/05/GHSA-m422-vwp4-mfgf/GHSA-m422-vwp4-mfgf.json index e9ba3739302..74c498124bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-m422-vwp4-mfgf/GHSA-m422-vwp4-mfgf.json +++ b/advisories/unreviewed/2022/05/GHSA-m422-vwp4-mfgf/GHSA-m422-vwp4-mfgf.json @@ -7,12 +7,8 @@ "CVE-2012-5004" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of admins for requests that (1) add group plans via admin/group_plans.html or (2) add extra packages via admin/extra_packs/create_extra_pack.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m499-9mh6-hjx6/GHSA-m499-9mh6-hjx6.json b/advisories/unreviewed/2022/05/GHSA-m499-9mh6-hjx6/GHSA-m499-9mh6-hjx6.json index d6204bb206d..cc0397bce21 100644 --- a/advisories/unreviewed/2022/05/GHSA-m499-9mh6-hjx6/GHSA-m499-9mh6-hjx6.json +++ b/advisories/unreviewed/2022/05/GHSA-m499-9mh6-hjx6/GHSA-m499-9mh6-hjx6.json @@ -7,12 +7,8 @@ "CVE-2012-4176" ], "details": "Array index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m4m2-2g49-p78j/GHSA-m4m2-2g49-p78j.json b/advisories/unreviewed/2022/05/GHSA-m4m2-2g49-p78j/GHSA-m4m2-2g49-p78j.json index b6942ca84b3..dfb9bff2ece 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4m2-2g49-p78j/GHSA-m4m2-2g49-p78j.json +++ b/advisories/unreviewed/2022/05/GHSA-m4m2-2g49-p78j/GHSA-m4m2-2g49-p78j.json @@ -7,12 +7,8 @@ "CVE-2012-5813" ], "details": "The Android_Pusher library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m4p4-q7qh-98j3/GHSA-m4p4-q7qh-98j3.json b/advisories/unreviewed/2022/05/GHSA-m4p4-q7qh-98j3/GHSA-m4p4-q7qh-98j3.json index a69057c8ea4..a9586c5f76e 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4p4-q7qh-98j3/GHSA-m4p4-q7qh-98j3.json +++ b/advisories/unreviewed/2022/05/GHSA-m4p4-q7qh-98j3/GHSA-m4p4-q7qh-98j3.json @@ -7,12 +7,8 @@ "CVE-2012-5765" ], "details": "The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m556-c46g-q894/GHSA-m556-c46g-q894.json b/advisories/unreviewed/2022/05/GHSA-m556-c46g-q894/GHSA-m556-c46g-q894.json index 8aa00cf83e6..24b8dc3b511 100644 --- a/advisories/unreviewed/2022/05/GHSA-m556-c46g-q894/GHSA-m556-c46g-q894.json +++ b/advisories/unreviewed/2022/05/GHSA-m556-c46g-q894/GHSA-m556-c46g-q894.json @@ -7,12 +7,8 @@ "CVE-2012-4326" ], "details": "Cross-site request forgery (CSRF) vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m5mg-489p-j2jg/GHSA-m5mg-489p-j2jg.json b/advisories/unreviewed/2022/05/GHSA-m5mg-489p-j2jg/GHSA-m5mg-489p-j2jg.json index 8b15d0996c4..b833c204d6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5mg-489p-j2jg/GHSA-m5mg-489p-j2jg.json +++ b/advisories/unreviewed/2022/05/GHSA-m5mg-489p-j2jg/GHSA-m5mg-489p-j2jg.json @@ -7,12 +7,8 @@ "CVE-2012-5424" ], "details": "Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configuration involving TACACS+ and LDAP is used, does not properly validate passwords, which allows remote attackers to bypass authentication by sending a valid username and a crafted password string, aka Bug ID CSCuc65634.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m5vh-g3xf-grvj/GHSA-m5vh-g3xf-grvj.json b/advisories/unreviewed/2022/05/GHSA-m5vh-g3xf-grvj/GHSA-m5vh-g3xf-grvj.json index dacabe1d288..7b07b9a63d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5vh-g3xf-grvj/GHSA-m5vh-g3xf-grvj.json +++ b/advisories/unreviewed/2022/05/GHSA-m5vh-g3xf-grvj/GHSA-m5vh-g3xf-grvj.json @@ -7,12 +7,8 @@ "CVE-2012-5367" ], "details": "Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbitrary SQL commands via the sortField parameter to (1) viewCustomers, (2) viewPayGrades, or (3) viewSystemUsers in symfony/web/index.php/admin/, as demonstrated using cross-site request forgery (CSRF) attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m5w6-mh6x-jq9c/GHSA-m5w6-mh6x-jq9c.json b/advisories/unreviewed/2022/05/GHSA-m5w6-mh6x-jq9c/GHSA-m5w6-mh6x-jq9c.json index 491c187b3c3..0b2ad4f0767 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5w6-mh6x-jq9c/GHSA-m5w6-mh6x-jq9c.json +++ b/advisories/unreviewed/2022/05/GHSA-m5w6-mh6x-jq9c/GHSA-m5w6-mh6x-jq9c.json @@ -7,12 +7,8 @@ "CVE-2012-4076" ], "details": "Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m646-h2pw-56h4/GHSA-m646-h2pw-56h4.json b/advisories/unreviewed/2022/05/GHSA-m646-h2pw-56h4/GHSA-m646-h2pw-56h4.json index f4658752d68..40394d74e68 100644 --- a/advisories/unreviewed/2022/05/GHSA-m646-h2pw-56h4/GHSA-m646-h2pw-56h4.json +++ b/advisories/unreviewed/2022/05/GHSA-m646-h2pw-56h4/GHSA-m646-h2pw-56h4.json @@ -7,12 +7,8 @@ "CVE-2012-5890" ], "details": "The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m66m-vxm2-mcv6/GHSA-m66m-vxm2-mcv6.json b/advisories/unreviewed/2022/05/GHSA-m66m-vxm2-mcv6/GHSA-m66m-vxm2-mcv6.json index 784501a8efb..b9597459f28 100644 --- a/advisories/unreviewed/2022/05/GHSA-m66m-vxm2-mcv6/GHSA-m66m-vxm2-mcv6.json +++ b/advisories/unreviewed/2022/05/GHSA-m66m-vxm2-mcv6/GHSA-m66m-vxm2-mcv6.json @@ -7,12 +7,8 @@ "CVE-2012-5289" ], "details": "Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) index.php or (2) gallery.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m693-jc4p-vchj/GHSA-m693-jc4p-vchj.json b/advisories/unreviewed/2022/05/GHSA-m693-jc4p-vchj/GHSA-m693-jc4p-vchj.json index 32ef7e3a203..9a3f2d87c36 100644 --- a/advisories/unreviewed/2022/05/GHSA-m693-jc4p-vchj/GHSA-m693-jc4p-vchj.json +++ b/advisories/unreviewed/2022/05/GHSA-m693-jc4p-vchj/GHSA-m693-jc4p-vchj.json @@ -7,12 +7,8 @@ "CVE-2012-5255" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m6vq-7f4m-cw3p/GHSA-m6vq-7f4m-cw3p.json b/advisories/unreviewed/2022/05/GHSA-m6vq-7f4m-cw3p/GHSA-m6vq-7f4m-cw3p.json index 3b885e7cea3..e108cef6712 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6vq-7f4m-cw3p/GHSA-m6vq-7f4m-cw3p.json +++ b/advisories/unreviewed/2022/05/GHSA-m6vq-7f4m-cw3p/GHSA-m6vq-7f4m-cw3p.json @@ -7,12 +7,8 @@ "CVE-2012-4262" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the (1) name_last, (2) name_first, (3) name_middle, or (4) name_maiden parameter to modules/patient/mycare_pid.php; (5) favorites or (6) lang parameter to modules/nursing/mycare_ward_print.php; (7) aktion or (8) callurl parameter to modules/patient/mycare2x_pat_info.php; or (9) ln parameter to modules/drg/mycare2x_proc_search.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m6w7-mv92-9wrc/GHSA-m6w7-mv92-9wrc.json b/advisories/unreviewed/2022/05/GHSA-m6w7-mv92-9wrc/GHSA-m6w7-mv92-9wrc.json index e776bde709d..b7f97d24248 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6w7-mv92-9wrc/GHSA-m6w7-mv92-9wrc.json +++ b/advisories/unreviewed/2022/05/GHSA-m6w7-mv92-9wrc/GHSA-m6w7-mv92-9wrc.json @@ -7,12 +7,8 @@ "CVE-2013-3039" ], "details": "IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m6wf-9cw4-cjhq/GHSA-m6wf-9cw4-cjhq.json b/advisories/unreviewed/2022/05/GHSA-m6wf-9cw4-cjhq/GHSA-m6wf-9cw4-cjhq.json index 0e089b318ee..d28489ae100 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6wf-9cw4-cjhq/GHSA-m6wf-9cw4-cjhq.json +++ b/advisories/unreviewed/2022/05/GHSA-m6wf-9cw4-cjhq/GHSA-m6wf-9cw4-cjhq.json @@ -7,12 +7,8 @@ "CVE-2013-3474" ], "details": "The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device crash) by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a request that (1) lacks a parameter value or (2) contains a malformed parameter value, aka Bug IDs CSCuh14313, CSCuh14159, CSCuh14368, and CSCuh14436.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m736-xp3x-cfpq/GHSA-m736-xp3x-cfpq.json b/advisories/unreviewed/2022/05/GHSA-m736-xp3x-cfpq/GHSA-m736-xp3x-cfpq.json index 88e407529ab..6a41d16c294 100644 --- a/advisories/unreviewed/2022/05/GHSA-m736-xp3x-cfpq/GHSA-m736-xp3x-cfpq.json +++ b/advisories/unreviewed/2022/05/GHSA-m736-xp3x-cfpq/GHSA-m736-xp3x-cfpq.json @@ -7,12 +7,8 @@ "CVE-2012-4739" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote attackers to inject arbitrary web script or HTML via the (1) policyLaunching, (2) resourcePrefix, or (3) actionPath parameter in showUserResourceCategories.do; (4) list or (5) path parameter to fileSystem.do; or (6) return-To parameter to launchAgent.do.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m872-fpgq-gw4v/GHSA-m872-fpgq-gw4v.json b/advisories/unreviewed/2022/05/GHSA-m872-fpgq-gw4v/GHSA-m872-fpgq-gw4v.json index 3b8d37ef5ee..b19beca084d 100644 --- a/advisories/unreviewed/2022/05/GHSA-m872-fpgq-gw4v/GHSA-m872-fpgq-gw4v.json +++ b/advisories/unreviewed/2022/05/GHSA-m872-fpgq-gw4v/GHSA-m872-fpgq-gw4v.json @@ -7,12 +7,8 @@ "CVE-2013-3020" ], "details": "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-0568, CVE-2013-0475, and CVE-2013-0567.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m8v8-958g-hvgw/GHSA-m8v8-958g-hvgw.json b/advisories/unreviewed/2022/05/GHSA-m8v8-958g-hvgw/GHSA-m8v8-958g-hvgw.json index d4fc4f23c90..4a046977d6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m8v8-958g-hvgw/GHSA-m8v8-958g-hvgw.json +++ b/advisories/unreviewed/2022/05/GHSA-m8v8-958g-hvgw/GHSA-m8v8-958g-hvgw.json @@ -7,12 +7,8 @@ "CVE-2012-5876" ], "details": "Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service (crash) via a long string in the (1) request line or (2) HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m9h2-5r32-9cx9/GHSA-m9h2-5r32-9cx9.json b/advisories/unreviewed/2022/05/GHSA-m9h2-5r32-9cx9/GHSA-m9h2-5r32-9cx9.json index 9630f67a65a..83599ff6237 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9h2-5r32-9cx9/GHSA-m9h2-5r32-9cx9.json +++ b/advisories/unreviewed/2022/05/GHSA-m9h2-5r32-9cx9/GHSA-m9h2-5r32-9cx9.json @@ -7,12 +7,8 @@ "CVE-2013-3010" ], "details": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3007.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m9rr-495w-r5xp/GHSA-m9rr-495w-r5xp.json b/advisories/unreviewed/2022/05/GHSA-m9rr-495w-r5xp/GHSA-m9rr-495w-r5xp.json index 6a90b035ccb..42a666994d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9rr-495w-r5xp/GHSA-m9rr-495w-r5xp.json +++ b/advisories/unreviewed/2022/05/GHSA-m9rr-495w-r5xp/GHSA-m9rr-495w-r5xp.json @@ -7,12 +7,8 @@ "CVE-2013-3034" ], "details": "Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mccr-h554-3wjw/GHSA-mccr-h554-3wjw.json b/advisories/unreviewed/2022/05/GHSA-mccr-h554-3wjw/GHSA-mccr-h554-3wjw.json index 41fbbfe9274..3903f444165 100644 --- a/advisories/unreviewed/2022/05/GHSA-mccr-h554-3wjw/GHSA-mccr-h554-3wjw.json +++ b/advisories/unreviewed/2022/05/GHSA-mccr-h554-3wjw/GHSA-mccr-h554-3wjw.json @@ -7,12 +7,8 @@ "CVE-2012-5580" ], "details": "Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcf8-3mh6-r8mx/GHSA-mcf8-3mh6-r8mx.json b/advisories/unreviewed/2022/05/GHSA-mcf8-3mh6-r8mx/GHSA-mcf8-3mh6-r8mx.json index 7d6c474b1ca..0eb149d9fbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcf8-3mh6-r8mx/GHSA-mcf8-3mh6-r8mx.json +++ b/advisories/unreviewed/2022/05/GHSA-mcf8-3mh6-r8mx/GHSA-mcf8-3mh6-r8mx.json @@ -7,12 +7,8 @@ "CVE-2012-5762" ], "details": "Cross-site scripting (XSS) vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject arbitrary web script or HTML via vectors involving the MHTML protocol.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mfm8-x888-wxxx/GHSA-mfm8-x888-wxxx.json b/advisories/unreviewed/2022/05/GHSA-mfm8-x888-wxxx/GHSA-mfm8-x888-wxxx.json index 11a8b2b6df9..4c9b44e930b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfm8-x888-wxxx/GHSA-mfm8-x888-wxxx.json +++ b/advisories/unreviewed/2022/05/GHSA-mfm8-x888-wxxx/GHSA-mfm8-x888-wxxx.json @@ -7,12 +7,8 @@ "CVE-2012-5352" ], "details": "Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a \"Signature exclusion attack.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mgfc-3528-7px3/GHSA-mgfc-3528-7px3.json b/advisories/unreviewed/2022/05/GHSA-mgfc-3528-7px3/GHSA-mgfc-3528-7px3.json index ff2ffc66378..a3c586ecb8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgfc-3528-7px3/GHSA-mgfc-3528-7px3.json +++ b/advisories/unreviewed/2022/05/GHSA-mgfc-3528-7px3/GHSA-mgfc-3528-7px3.json @@ -7,12 +7,8 @@ "CVE-2012-5789" ], "details": "PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to intentional disabling of certificate-validation checks through a \"FALSE\" value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mhp3-2x76-g9v9/GHSA-mhp3-2x76-g9v9.json b/advisories/unreviewed/2022/05/GHSA-mhp3-2x76-g9v9/GHSA-mhp3-2x76-g9v9.json index 94d79eaebef..fb7ebb45fa8 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhp3-2x76-g9v9/GHSA-mhp3-2x76-g9v9.json +++ b/advisories/unreviewed/2022/05/GHSA-mhp3-2x76-g9v9/GHSA-mhp3-2x76-g9v9.json @@ -7,12 +7,8 @@ "CVE-2012-5167" ], "details": "Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) field parameter to course_category/index_inline_editor_submit.php or (2) user/index_inline_editor_submit.php; or (3) id parameter to user/user_password.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjjm-m83r-gv3w/GHSA-mjjm-m83r-gv3w.json b/advisories/unreviewed/2022/05/GHSA-mjjm-m83r-gv3w/GHSA-mjjm-m83r-gv3w.json index d6859702bee..aaaf59ed25e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjjm-m83r-gv3w/GHSA-mjjm-m83r-gv3w.json +++ b/advisories/unreviewed/2022/05/GHSA-mjjm-m83r-gv3w/GHSA-mjjm-m83r-gv3w.json @@ -7,12 +7,8 @@ "CVE-2012-5662" ], "details": "x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mjv2-cm49-mgwf/GHSA-mjv2-cm49-mgwf.json b/advisories/unreviewed/2022/05/GHSA-mjv2-cm49-mgwf/GHSA-mjv2-cm49-mgwf.json index 086a5bd4989..8c286194a00 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjv2-cm49-mgwf/GHSA-mjv2-cm49-mgwf.json +++ b/advisories/unreviewed/2022/05/GHSA-mjv2-cm49-mgwf/GHSA-mjv2-cm49-mgwf.json @@ -7,12 +7,8 @@ "CVE-2012-5782" ], "details": "Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to misinterpretation of a certain \"true\" value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mp5w-m5wf-mm52/GHSA-mp5w-m5wf-mm52.json b/advisories/unreviewed/2022/05/GHSA-mp5w-m5wf-mm52/GHSA-mp5w-m5wf-mm52.json index 108d33bb1b3..44e872da406 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp5w-m5wf-mm52/GHSA-mp5w-m5wf-mm52.json +++ b/advisories/unreviewed/2022/05/GHSA-mp5w-m5wf-mm52/GHSA-mp5w-m5wf-mm52.json @@ -7,12 +7,8 @@ "CVE-2013-2974" ], "details": "The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration privileges, and consequently create or delete reports or conduct SQL injection attacks, via crafted parameters to the BIRT reporting URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mp8g-c2m5-82jx/GHSA-mp8g-c2m5-82jx.json b/advisories/unreviewed/2022/05/GHSA-mp8g-c2m5-82jx/GHSA-mp8g-c2m5-82jx.json index 096cc4c8441..342da1d3e90 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp8g-c2m5-82jx/GHSA-mp8g-c2m5-82jx.json +++ b/advisories/unreviewed/2022/05/GHSA-mp8g-c2m5-82jx/GHSA-mp8g-c2m5-82jx.json @@ -7,12 +7,8 @@ "CVE-2012-5347" ], "details": "TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to (1) inc/filefunctions.inc or (2) info.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mppg-8528-2mp4/GHSA-mppg-8528-2mp4.json b/advisories/unreviewed/2022/05/GHSA-mppg-8528-2mp4/GHSA-mppg-8528-2mp4.json index 03a9b984dec..615cbe2810c 100644 --- a/advisories/unreviewed/2022/05/GHSA-mppg-8528-2mp4/GHSA-mppg-8528-2mp4.json +++ b/advisories/unreviewed/2022/05/GHSA-mppg-8528-2mp4/GHSA-mppg-8528-2mp4.json @@ -7,12 +7,8 @@ "CVE-2012-5812" ], "details": "The ACRA library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mpxf-p4wx-hx49/GHSA-mpxf-p4wx-hx49.json b/advisories/unreviewed/2022/05/GHSA-mpxf-p4wx-hx49/GHSA-mpxf-p4wx-hx49.json index 529a56c342e..4fc4eae5271 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpxf-p4wx-hx49/GHSA-mpxf-p4wx-hx49.json +++ b/advisories/unreviewed/2022/05/GHSA-mpxf-p4wx-hx49/GHSA-mpxf-p4wx-hx49.json @@ -7,12 +7,8 @@ "CVE-2012-4175" ], "details": "Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-5273.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqrw-x42c-w4gw/GHSA-mqrw-x42c-w4gw.json b/advisories/unreviewed/2022/05/GHSA-mqrw-x42c-w4gw/GHSA-mqrw-x42c-w4gw.json index c4775e65c23..ea2a4e63087 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqrw-x42c-w4gw/GHSA-mqrw-x42c-w4gw.json +++ b/advisories/unreviewed/2022/05/GHSA-mqrw-x42c-w4gw/GHSA-mqrw-x42c-w4gw.json @@ -7,12 +7,8 @@ "CVE-2013-3534" ], "details": "Cross-site scripting (XSS) vulnerability in the aiContactSafe component before 2.0.21 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mv75-h3qp-gpmf/GHSA-mv75-h3qp-gpmf.json b/advisories/unreviewed/2022/05/GHSA-mv75-h3qp-gpmf/GHSA-mv75-h3qp-gpmf.json index e015d81c7f4..19629261d2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv75-h3qp-gpmf/GHSA-mv75-h3qp-gpmf.json +++ b/advisories/unreviewed/2022/05/GHSA-mv75-h3qp-gpmf/GHSA-mv75-h3qp-gpmf.json @@ -7,12 +7,8 @@ "CVE-2012-6151" ], "details": "Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mvf6-9crp-c4ff/GHSA-mvf6-9crp-c4ff.json b/advisories/unreviewed/2022/05/GHSA-mvf6-9crp-c4ff/GHSA-mvf6-9crp-c4ff.json index 084ecd2cbc4..60b73ed0425 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvf6-9crp-c4ff/GHSA-mvf6-9crp-c4ff.json +++ b/advisories/unreviewed/2022/05/GHSA-mvf6-9crp-c4ff/GHSA-mvf6-9crp-c4ff.json @@ -7,12 +7,8 @@ "CVE-2013-2122" ], "details": "The Edit Limit module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to comments, which allows remote authenticated users with the \"edit comments\" permission to edit arbitrary comments of other users via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mvvh-3fqv-jwrv/GHSA-mvvh-3fqv-jwrv.json b/advisories/unreviewed/2022/05/GHSA-mvvh-3fqv-jwrv/GHSA-mvvh-3fqv-jwrv.json index 8cec4f63ed9..780a05a00c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvvh-3fqv-jwrv/GHSA-mvvh-3fqv-jwrv.json +++ b/advisories/unreviewed/2022/05/GHSA-mvvh-3fqv-jwrv/GHSA-mvvh-3fqv-jwrv.json @@ -7,12 +7,8 @@ "CVE-2013-0590" ], "details": "Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3, a different vulnerability than CVE-2013-0591.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwx5-qrmr-p39h/GHSA-mwx5-qrmr-p39h.json b/advisories/unreviewed/2022/05/GHSA-mwx5-qrmr-p39h/GHSA-mwx5-qrmr-p39h.json index 3efbdf54c4f..d70779c8f55 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwx5-qrmr-p39h/GHSA-mwx5-qrmr-p39h.json +++ b/advisories/unreviewed/2022/05/GHSA-mwx5-qrmr-p39h/GHSA-mwx5-qrmr-p39h.json @@ -7,12 +7,8 @@ "CVE-2013-3082" ], "details": "Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter to forgot-password/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxq7-j96v-rx39/GHSA-mxq7-j96v-rx39.json b/advisories/unreviewed/2022/05/GHSA-mxq7-j96v-rx39/GHSA-mxq7-j96v-rx39.json index afa4dfc69bc..0499c230ea8 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxq7-j96v-rx39/GHSA-mxq7-j96v-rx39.json +++ b/advisories/unreviewed/2022/05/GHSA-mxq7-j96v-rx39/GHSA-mxq7-j96v-rx39.json @@ -7,12 +7,8 @@ "CVE-2012-6360" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Intelligent Operations Center 1.5.0 allows remote attackers to inject arbitrary web script or HTML via event data fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxv8-7qpp-vv58/GHSA-mxv8-7qpp-vv58.json b/advisories/unreviewed/2022/05/GHSA-mxv8-7qpp-vv58/GHSA-mxv8-7qpp-vv58.json index ff93d3e6ba5..13e170250c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxv8-7qpp-vv58/GHSA-mxv8-7qpp-vv58.json +++ b/advisories/unreviewed/2022/05/GHSA-mxv8-7qpp-vv58/GHSA-mxv8-7qpp-vv58.json @@ -7,12 +7,8 @@ "CVE-2012-4736" ], "details": "The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions and copy sensitive information to a drive via multiple removal and reattach operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mxxc-gr6g-m46m/GHSA-mxxc-gr6g-m46m.json b/advisories/unreviewed/2022/05/GHSA-mxxc-gr6g-m46m/GHSA-mxxc-gr6g-m46m.json index 589975d1aaa..b55bd5ce74b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxxc-gr6g-m46m/GHSA-mxxc-gr6g-m46m.json +++ b/advisories/unreviewed/2022/05/GHSA-mxxc-gr6g-m46m/GHSA-mxxc-gr6g-m46m.json @@ -7,12 +7,8 @@ "CVE-2013-1605" ], "details": "Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitrary code via a long filename in a GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p542-pm63-7qpp/GHSA-p542-pm63-7qpp.json b/advisories/unreviewed/2022/05/GHSA-p542-pm63-7qpp/GHSA-p542-pm63-7qpp.json index 391439cb63b..ea5800d62a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-p542-pm63-7qpp/GHSA-p542-pm63-7qpp.json +++ b/advisories/unreviewed/2022/05/GHSA-p542-pm63-7qpp/GHSA-p542-pm63-7qpp.json @@ -7,12 +7,8 @@ "CVE-2012-6033" ], "details": "The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p5jq-469q-mxmf/GHSA-p5jq-469q-mxmf.json b/advisories/unreviewed/2022/05/GHSA-p5jq-469q-mxmf/GHSA-p5jq-469q-mxmf.json index c674a9d33fd..e596d6cc5e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5jq-469q-mxmf/GHSA-p5jq-469q-mxmf.json +++ b/advisories/unreviewed/2022/05/GHSA-p5jq-469q-mxmf/GHSA-p5jq-469q-mxmf.json @@ -7,12 +7,8 @@ "CVE-2012-4999" ], "details": "Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header fields such as (1) If-Modified-Since, (2) If-None-Match, or (3) If-Unmodified-Since. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p5x4-466h-8v79/GHSA-p5x4-466h-8v79.json b/advisories/unreviewed/2022/05/GHSA-p5x4-466h-8v79/GHSA-p5x4-466h-8v79.json index 9cdafcf7a52..2a3daea2487 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5x4-466h-8v79/GHSA-p5x4-466h-8v79.json +++ b/advisories/unreviewed/2022/05/GHSA-p5x4-466h-8v79/GHSA-p5x4-466h-8v79.json @@ -7,12 +7,8 @@ "CVE-2012-4935" ], "details": "Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack the authentication of arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p67f-wm66-pw4x/GHSA-p67f-wm66-pw4x.json b/advisories/unreviewed/2022/05/GHSA-p67f-wm66-pw4x/GHSA-p67f-wm66-pw4x.json index c8a136e90e6..2c9d7a80b69 100644 --- a/advisories/unreviewed/2022/05/GHSA-p67f-wm66-pw4x/GHSA-p67f-wm66-pw4x.json +++ b/advisories/unreviewed/2022/05/GHSA-p67f-wm66-pw4x/GHSA-p67f-wm66-pw4x.json @@ -7,12 +7,8 @@ "CVE-2012-4086" ], "details": "A setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commands via invalid parameters, aka Bug ID CSCtg20790.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p6h6-f78v-7wj8/GHSA-p6h6-f78v-7wj8.json b/advisories/unreviewed/2022/05/GHSA-p6h6-f78v-7wj8/GHSA-p6h6-f78v-7wj8.json index 43df20dba6d..f40e8d9e64c 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6h6-f78v-7wj8/GHSA-p6h6-f78v-7wj8.json +++ b/advisories/unreviewed/2022/05/GHSA-p6h6-f78v-7wj8/GHSA-p6h6-f78v-7wj8.json @@ -7,12 +7,8 @@ "CVE-2012-5542" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra panes pane via unspecified vectors related to \"the link to reorder items.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p75r-f57h-pg5w/GHSA-p75r-f57h-pg5w.json b/advisories/unreviewed/2022/05/GHSA-p75r-f57h-pg5w/GHSA-p75r-f57h-pg5w.json index 39dc756587e..a64bb7dc2ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-p75r-f57h-pg5w/GHSA-p75r-f57h-pg5w.json +++ b/advisories/unreviewed/2022/05/GHSA-p75r-f57h-pg5w/GHSA-p75r-f57h-pg5w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7c3-f2pr-v923/GHSA-p7c3-f2pr-v923.json b/advisories/unreviewed/2022/05/GHSA-p7c3-f2pr-v923/GHSA-p7c3-f2pr-v923.json index c5422e9a2e0..00f13a06dab 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7c3-f2pr-v923/GHSA-p7c3-f2pr-v923.json +++ b/advisories/unreviewed/2022/05/GHSA-p7c3-f2pr-v923/GHSA-p7c3-f2pr-v923.json @@ -7,12 +7,8 @@ "CVE-2012-6526" ], "details": "SQL injection vulnerability in show_code.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the code_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p8cm-hqfr-37jr/GHSA-p8cm-hqfr-37jr.json b/advisories/unreviewed/2022/05/GHSA-p8cm-hqfr-37jr/GHSA-p8cm-hqfr-37jr.json index f16273e8bdd..6550d8b8421 100644 --- a/advisories/unreviewed/2022/05/GHSA-p8cm-hqfr-37jr/GHSA-p8cm-hqfr-37jr.json +++ b/advisories/unreviewed/2022/05/GHSA-p8cm-hqfr-37jr/GHSA-p8cm-hqfr-37jr.json @@ -7,12 +7,8 @@ "CVE-2012-5941" ], "details": "Cross-site scripting (XSS) vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p8r2-77q8-jfwh/GHSA-p8r2-77q8-jfwh.json b/advisories/unreviewed/2022/05/GHSA-p8r2-77q8-jfwh/GHSA-p8r2-77q8-jfwh.json index 895b78d4319..2c1c8566859 100644 --- a/advisories/unreviewed/2022/05/GHSA-p8r2-77q8-jfwh/GHSA-p8r2-77q8-jfwh.json +++ b/advisories/unreviewed/2022/05/GHSA-p8r2-77q8-jfwh/GHSA-p8r2-77q8-jfwh.json @@ -7,12 +7,8 @@ "CVE-2012-5330" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to calc.php, (2) chat.php, (3) register.php, or (4) index.php in libs/smarty_ajax/; or the (5) page parameter to libs/smarty_ajax/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p9f2-2m7h-98qm/GHSA-p9f2-2m7h-98qm.json b/advisories/unreviewed/2022/05/GHSA-p9f2-2m7h-98qm/GHSA-p9f2-2m7h-98qm.json index ea2250d6c4e..0f61e859fbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9f2-2m7h-98qm/GHSA-p9f2-2m7h-98qm.json +++ b/advisories/unreviewed/2022/05/GHSA-p9f2-2m7h-98qm/GHSA-p9f2-2m7h-98qm.json @@ -7,12 +7,8 @@ "CVE-2012-5820" ], "details": "The developer-account sample code in Google AdMob does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p9v8-98gx-w56w/GHSA-p9v8-98gx-w56w.json b/advisories/unreviewed/2022/05/GHSA-p9v8-98gx-w56w/GHSA-p9v8-98gx-w56w.json index 753fafb89ae..61865f32532 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9v8-98gx-w56w/GHSA-p9v8-98gx-w56w.json +++ b/advisories/unreviewed/2022/05/GHSA-p9v8-98gx-w56w/GHSA-p9v8-98gx-w56w.json @@ -7,12 +7,8 @@ "CVE-2012-4848" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfm6-24jh-98j7/GHSA-pfm6-24jh-98j7.json b/advisories/unreviewed/2022/05/GHSA-pfm6-24jh-98j7/GHSA-pfm6-24jh-98j7.json index 117beefd175..14c3c6a42f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfm6-24jh-98j7/GHSA-pfm6-24jh-98j7.json +++ b/advisories/unreviewed/2022/05/GHSA-pfm6-24jh-98j7/GHSA-pfm6-24jh-98j7.json @@ -7,12 +7,8 @@ "CVE-2012-4985" ], "details": "The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pggj-h2hx-qrp8/GHSA-pggj-h2hx-qrp8.json b/advisories/unreviewed/2022/05/GHSA-pggj-h2hx-qrp8/GHSA-pggj-h2hx-qrp8.json index bdf5bc063fd..17303145f71 100644 --- a/advisories/unreviewed/2022/05/GHSA-pggj-h2hx-qrp8/GHSA-pggj-h2hx-qrp8.json +++ b/advisories/unreviewed/2022/05/GHSA-pggj-h2hx-qrp8/GHSA-pggj-h2hx-qrp8.json @@ -7,12 +7,8 @@ "CVE-2012-5816" ], "details": "AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ph5w-64g2-6mh3/GHSA-ph5w-64g2-6mh3.json b/advisories/unreviewed/2022/05/GHSA-ph5w-64g2-6mh3/GHSA-ph5w-64g2-6mh3.json index 1035933f844..ed31a35c2fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-ph5w-64g2-6mh3/GHSA-ph5w-64g2-6mh3.json +++ b/advisories/unreviewed/2022/05/GHSA-ph5w-64g2-6mh3/GHSA-ph5w-64g2-6mh3.json @@ -7,12 +7,8 @@ "CVE-2013-3081" ], "details": "SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /articles/test/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ph6p-jmmf-qqv2/GHSA-ph6p-jmmf-qqv2.json b/advisories/unreviewed/2022/05/GHSA-ph6p-jmmf-qqv2/GHSA-ph6p-jmmf-qqv2.json index b336b7eeb55..3278ca95249 100644 --- a/advisories/unreviewed/2022/05/GHSA-ph6p-jmmf-qqv2/GHSA-ph6p-jmmf-qqv2.json +++ b/advisories/unreviewed/2022/05/GHSA-ph6p-jmmf-qqv2/GHSA-ph6p-jmmf-qqv2.json @@ -7,12 +7,8 @@ "CVE-2012-5516" ], "details": "Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being securely deleted and might allow local users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phh9-5f9f-v6mm/GHSA-phh9-5f9f-v6mm.json b/advisories/unreviewed/2022/05/GHSA-phh9-5f9f-v6mm/GHSA-phh9-5f9f-v6mm.json index ca28c38d732..5c349c2ecb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-phh9-5f9f-v6mm/GHSA-phh9-5f9f-v6mm.json +++ b/advisories/unreviewed/2022/05/GHSA-phh9-5f9f-v6mm/GHSA-phh9-5f9f-v6mm.json @@ -7,12 +7,8 @@ "CVE-2012-5416" ], "details": "Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua66341.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phjx-c5q9-2pf3/GHSA-phjx-c5q9-2pf3.json b/advisories/unreviewed/2022/05/GHSA-phjx-c5q9-2pf3/GHSA-phjx-c5q9-2pf3.json index 8c434c09d6f..2313ebf252f 100644 --- a/advisories/unreviewed/2022/05/GHSA-phjx-c5q9-2pf3/GHSA-phjx-c5q9-2pf3.json +++ b/advisories/unreviewed/2022/05/GHSA-phjx-c5q9-2pf3/GHSA-phjx-c5q9-2pf3.json @@ -7,12 +7,8 @@ "CVE-2012-4728" ], "details": "The (1) QProGetNotebookWindowHandle and (2) Ordinal132 functions in QPW160.dll in Corel Quattro Pro X6 Standard Edition 16.0.0.388 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted QPW file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-phmp-5crj-hv29/GHSA-phmp-5crj-hv29.json b/advisories/unreviewed/2022/05/GHSA-phmp-5crj-hv29/GHSA-phmp-5crj-hv29.json index 29009495ca7..c5c2d953a99 100644 --- a/advisories/unreviewed/2022/05/GHSA-phmp-5crj-hv29/GHSA-phmp-5crj-hv29.json +++ b/advisories/unreviewed/2022/05/GHSA-phmp-5crj-hv29/GHSA-phmp-5crj-hv29.json @@ -7,12 +7,8 @@ "CVE-2013-0735" ], "details": "Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL commands via the id parameter in a viewtopic (1) remove_post, (2) sticky, or (3) closed action or (4) thread parameter in a postreply action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phrv-cj28-9h57/GHSA-phrv-cj28-9h57.json b/advisories/unreviewed/2022/05/GHSA-phrv-cj28-9h57/GHSA-phrv-cj28-9h57.json index 234f8baf7b1..5e02979f890 100644 --- a/advisories/unreviewed/2022/05/GHSA-phrv-cj28-9h57/GHSA-phrv-cj28-9h57.json +++ b/advisories/unreviewed/2022/05/GHSA-phrv-cj28-9h57/GHSA-phrv-cj28-9h57.json @@ -7,12 +7,8 @@ "CVE-2012-5371" ], "details": "Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against a variant of the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4815.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pj2j-cmxg-76xc/GHSA-pj2j-cmxg-76xc.json b/advisories/unreviewed/2022/05/GHSA-pj2j-cmxg-76xc/GHSA-pj2j-cmxg-76xc.json index b940fe774dc..0f1b6447c20 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj2j-cmxg-76xc/GHSA-pj2j-cmxg-76xc.json +++ b/advisories/unreviewed/2022/05/GHSA-pj2j-cmxg-76xc/GHSA-pj2j-cmxg-76xc.json @@ -7,12 +7,8 @@ "CVE-2013-3046" ], "details": "The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-Security header, which makes it easier for man-in-the-middle attackers to hijack sessions or obtain sensitive information by leveraging the presence of HTTP requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pjrj-v874-q2mx/GHSA-pjrj-v874-q2mx.json b/advisories/unreviewed/2022/05/GHSA-pjrj-v874-q2mx/GHSA-pjrj-v874-q2mx.json index 37b1db9b76d..5c888850edf 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjrj-v874-q2mx/GHSA-pjrj-v874-q2mx.json +++ b/advisories/unreviewed/2022/05/GHSA-pjrj-v874-q2mx/GHSA-pjrj-v874-q2mx.json @@ -7,12 +7,8 @@ "CVE-2012-5665" ], "details": "ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of user_webdavauth and user_ldap by editing this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pp4v-f6w2-m2hf/GHSA-pp4v-f6w2-m2hf.json b/advisories/unreviewed/2022/05/GHSA-pp4v-f6w2-m2hf/GHSA-pp4v-f6w2-m2hf.json index e4bed024466..e67da3acf8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pp4v-f6w2-m2hf/GHSA-pp4v-f6w2-m2hf.json +++ b/advisories/unreviewed/2022/05/GHSA-pp4v-f6w2-m2hf/GHSA-pp4v-f6w2-m2hf.json @@ -7,12 +7,8 @@ "CVE-2012-5321" ], "details": "tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka \"frame injection.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pp6g-g9c7-3j27/GHSA-pp6g-g9c7-3j27.json b/advisories/unreviewed/2022/05/GHSA-pp6g-g9c7-3j27/GHSA-pp6g-g9c7-3j27.json index a675674063f..6e96d61ff2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-pp6g-g9c7-3j27/GHSA-pp6g-g9c7-3j27.json +++ b/advisories/unreviewed/2022/05/GHSA-pp6g-g9c7-3j27/GHSA-pp6g-g9c7-3j27.json @@ -7,12 +7,8 @@ "CVE-2013-2989" ], "details": "The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows local users to bypass filesystem read permissions and write permissions by leveraging authentication to the Connect:Direct product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pq2w-82wv-xj9m/GHSA-pq2w-82wv-xj9m.json b/advisories/unreviewed/2022/05/GHSA-pq2w-82wv-xj9m/GHSA-pq2w-82wv-xj9m.json index a2af40eeeb4..ec7b91c62f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-pq2w-82wv-xj9m/GHSA-pq2w-82wv-xj9m.json +++ b/advisories/unreviewed/2022/05/GHSA-pq2w-82wv-xj9m/GHSA-pq2w-82wv-xj9m.json @@ -7,12 +7,8 @@ "CVE-2013-1907" ], "details": "The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pqch-95pp-rxjm/GHSA-pqch-95pp-rxjm.json b/advisories/unreviewed/2022/05/GHSA-pqch-95pp-rxjm/GHSA-pqch-95pp-rxjm.json index afc67ca1286..8651228f803 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqch-95pp-rxjm/GHSA-pqch-95pp-rxjm.json +++ b/advisories/unreviewed/2022/05/GHSA-pqch-95pp-rxjm/GHSA-pqch-95pp-rxjm.json @@ -7,12 +7,8 @@ "CVE-2012-4744" ], "details": "Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqcw-pp4c-45vv/GHSA-pqcw-pp4c-45vv.json b/advisories/unreviewed/2022/05/GHSA-pqcw-pp4c-45vv/GHSA-pqcw-pp4c-45vv.json index 4e02bb4fc7f..59e2ca24105 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqcw-pp4c-45vv/GHSA-pqcw-pp4c-45vv.json +++ b/advisories/unreviewed/2022/05/GHSA-pqcw-pp4c-45vv/GHSA-pqcw-pp4c-45vv.json @@ -7,12 +7,8 @@ "CVE-2012-4864" ], "details": "Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted xml file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pr27-pcjh-mxjc/GHSA-pr27-pcjh-mxjc.json b/advisories/unreviewed/2022/05/GHSA-pr27-pcjh-mxjc/GHSA-pr27-pcjh-mxjc.json index e772ab2daa1..372cfd05342 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr27-pcjh-mxjc/GHSA-pr27-pcjh-mxjc.json +++ b/advisories/unreviewed/2022/05/GHSA-pr27-pcjh-mxjc/GHSA-pr27-pcjh-mxjc.json @@ -7,12 +7,8 @@ "CVE-2012-5701" ], "details": "Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search_string or (2) where parameter in a contacts action, (3) dept_id parameter in a departments action, (4) project_id[] parameter in a project action, or (5) company_id parameter in a system action to index.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pv39-69p9-h38r/GHSA-pv39-69p9-h38r.json b/advisories/unreviewed/2022/05/GHSA-pv39-69p9-h38r/GHSA-pv39-69p9-h38r.json index eb24b646e39..879b736efc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv39-69p9-h38r/GHSA-pv39-69p9-h38r.json +++ b/advisories/unreviewed/2022/05/GHSA-pv39-69p9-h38r/GHSA-pv39-69p9-h38r.json @@ -7,12 +7,8 @@ "CVE-2012-5468" ], "details": "Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pv4v-x6g5-c665/GHSA-pv4v-x6g5-c665.json b/advisories/unreviewed/2022/05/GHSA-pv4v-x6g5-c665/GHSA-pv4v-x6g5-c665.json index d18b461013b..9c4e1eaada1 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv4v-x6g5-c665/GHSA-pv4v-x6g5-c665.json +++ b/advisories/unreviewed/2022/05/GHSA-pv4v-x6g5-c665/GHSA-pv4v-x6g5-c665.json @@ -7,12 +7,8 @@ "CVE-2013-3532" ], "details": "SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pv6c-cg8w-h6mw/GHSA-pv6c-cg8w-h6mw.json b/advisories/unreviewed/2022/05/GHSA-pv6c-cg8w-h6mw/GHSA-pv6c-cg8w-h6mw.json index 1efbc2901c9..b632f942d54 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv6c-cg8w-h6mw/GHSA-pv6c-cg8w-h6mw.json +++ b/advisories/unreviewed/2022/05/GHSA-pv6c-cg8w-h6mw/GHSA-pv6c-cg8w-h6mw.json @@ -7,12 +7,8 @@ "CVE-2012-5684" ], "details": "Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccountSettings action in the my_account module to zpanel/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pw57-jjm2-87vh/GHSA-pw57-jjm2-87vh.json b/advisories/unreviewed/2022/05/GHSA-pw57-jjm2-87vh/GHSA-pw57-jjm2-87vh.json index e42b0ea4249..9a349191ca3 100644 --- a/advisories/unreviewed/2022/05/GHSA-pw57-jjm2-87vh/GHSA-pw57-jjm2-87vh.json +++ b/advisories/unreviewed/2022/05/GHSA-pw57-jjm2-87vh/GHSA-pw57-jjm2-87vh.json @@ -7,12 +7,8 @@ "CVE-2013-3026" ], "details": "Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2.0.28-001a, and 8.5.1 before FP 8.5.1.39-002a for Domino allows remote attackers to execute arbitrary code via a crafted web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pw79-h962-2rw9/GHSA-pw79-h962-2rw9.json b/advisories/unreviewed/2022/05/GHSA-pw79-h962-2rw9/GHSA-pw79-h962-2rw9.json index 6f518acfe6f..8bcc7f5c078 100644 --- a/advisories/unreviewed/2022/05/GHSA-pw79-h962-2rw9/GHSA-pw79-h962-2rw9.json +++ b/advisories/unreviewed/2022/05/GHSA-pw79-h962-2rw9/GHSA-pw79-h962-2rw9.json @@ -7,12 +7,8 @@ "CVE-2012-6141" ], "details": "The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session::Cookie or (2) App::Session::HTMLHidden, which is not properly handled when it is deserialized.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-px93-6r58-rr4j/GHSA-px93-6r58-rr4j.json b/advisories/unreviewed/2022/05/GHSA-px93-6r58-rr4j/GHSA-px93-6r58-rr4j.json index e1cea7a37db..b3ed1592d4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-px93-6r58-rr4j/GHSA-px93-6r58-rr4j.json +++ b/advisories/unreviewed/2022/05/GHSA-px93-6r58-rr4j/GHSA-px93-6r58-rr4j.json @@ -7,12 +7,8 @@ "CVE-2012-4559" ], "details": "Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4) sftp_parse_attr_3 function in sftp.c, and (5) try_publickey_from_file function in keyfiles.c in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q283-xqc2-pqjf/GHSA-q283-xqc2-pqjf.json b/advisories/unreviewed/2022/05/GHSA-q283-xqc2-pqjf/GHSA-q283-xqc2-pqjf.json index 4393095eba2..533e3bf4a07 100644 --- a/advisories/unreviewed/2022/05/GHSA-q283-xqc2-pqjf/GHSA-q283-xqc2-pqjf.json +++ b/advisories/unreviewed/2022/05/GHSA-q283-xqc2-pqjf/GHSA-q283-xqc2-pqjf.json @@ -7,12 +7,8 @@ "CVE-2012-5914" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the sed_import function in system/functions.php in Neocrome Seditio build 160 and 161 allow remote attackers to inject arbitrary web script or HTML via the (1) newmsg or (2) rtext parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2f9-32qw-v9vm/GHSA-q2f9-32qw-v9vm.json b/advisories/unreviewed/2022/05/GHSA-q2f9-32qw-v9vm/GHSA-q2f9-32qw-v9vm.json index 2f94e7f1f7e..9cc10b51c12 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2f9-32qw-v9vm/GHSA-q2f9-32qw-v9vm.json +++ b/advisories/unreviewed/2022/05/GHSA-q2f9-32qw-v9vm/GHSA-q2f9-32qw-v9vm.json @@ -7,12 +7,8 @@ "CVE-2012-5171" ], "details": "Directory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create or overwrite arbitrary files via a crafted archive file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q33x-v84x-v9q4/GHSA-q33x-v84x-v9q4.json b/advisories/unreviewed/2022/05/GHSA-q33x-v84x-v9q4/GHSA-q33x-v84x-v9q4.json index 3c87bd6636a..355dfbfb772 100644 --- a/advisories/unreviewed/2022/05/GHSA-q33x-v84x-v9q4/GHSA-q33x-v84x-v9q4.json +++ b/advisories/unreviewed/2022/05/GHSA-q33x-v84x-v9q4/GHSA-q33x-v84x-v9q4.json @@ -7,12 +7,8 @@ "CVE-2012-5856" ], "details": "Cross-site scripting (XSS) vulnerability in the Uk Cookie (aka uk-cookie) plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q39v-4cgc-qvwf/GHSA-q39v-4cgc-qvwf.json b/advisories/unreviewed/2022/05/GHSA-q39v-4cgc-qvwf/GHSA-q39v-4cgc-qvwf.json index e4ab2c38dde..c58014d2320 100644 --- a/advisories/unreviewed/2022/05/GHSA-q39v-4cgc-qvwf/GHSA-q39v-4cgc-qvwf.json +++ b/advisories/unreviewed/2022/05/GHSA-q39v-4cgc-qvwf/GHSA-q39v-4cgc-qvwf.json @@ -7,12 +7,8 @@ "CVE-2013-1759" ], "details": "Cross-site scripting (XSS) vulnerability in the Responsive Logo Slideshow plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the \"URL and Image\" field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q45h-39rg-jm9r/GHSA-q45h-39rg-jm9r.json b/advisories/unreviewed/2022/05/GHSA-q45h-39rg-jm9r/GHSA-q45h-39rg-jm9r.json index 2a1d95d8609..9f7e170e033 100644 --- a/advisories/unreviewed/2022/05/GHSA-q45h-39rg-jm9r/GHSA-q45h-39rg-jm9r.json +++ b/advisories/unreviewed/2022/05/GHSA-q45h-39rg-jm9r/GHSA-q45h-39rg-jm9r.json @@ -7,12 +7,8 @@ "CVE-2012-4891" ], "details": "Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vector than CVE-2012-4889. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q499-3hj9-7qhm/GHSA-q499-3hj9-7qhm.json b/advisories/unreviewed/2022/05/GHSA-q499-3hj9-7qhm/GHSA-q499-3hj9-7qhm.json index dc1e758545b..4dafd902af5 100644 --- a/advisories/unreviewed/2022/05/GHSA-q499-3hj9-7qhm/GHSA-q499-3hj9-7qhm.json +++ b/advisories/unreviewed/2022/05/GHSA-q499-3hj9-7qhm/GHSA-q499-3hj9-7qhm.json @@ -7,12 +7,8 @@ "CVE-2012-4268" ], "details": "Cross-site scripting (XSS) vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP_ACCEPT_ENCODING header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q555-p2fj-fw4f/GHSA-q555-p2fj-fw4f.json b/advisories/unreviewed/2022/05/GHSA-q555-p2fj-fw4f/GHSA-q555-p2fj-fw4f.json index f04de813efe..8e5b737d4de 100644 --- a/advisories/unreviewed/2022/05/GHSA-q555-p2fj-fw4f/GHSA-q555-p2fj-fw4f.json +++ b/advisories/unreviewed/2022/05/GHSA-q555-p2fj-fw4f/GHSA-q555-p2fj-fw4f.json @@ -7,12 +7,8 @@ "CVE-2012-5902" ], "details": "Cross-site scripting (XSS) vulnerability in ptk/lib/modal_bookmark.php in DFLabs PTK 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the arg4 parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q55m-7cw2-wh58/GHSA-q55m-7cw2-wh58.json b/advisories/unreviewed/2022/05/GHSA-q55m-7cw2-wh58/GHSA-q55m-7cw2-wh58.json index 163ae2e4a31..bbdd3ca9e87 100644 --- a/advisories/unreviewed/2022/05/GHSA-q55m-7cw2-wh58/GHSA-q55m-7cw2-wh58.json +++ b/advisories/unreviewed/2022/05/GHSA-q55m-7cw2-wh58/GHSA-q55m-7cw2-wh58.json @@ -7,12 +7,8 @@ "CVE-2012-4325" ], "details": "Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5wp-hv3f-jvh6/GHSA-q5wp-hv3f-jvh6.json b/advisories/unreviewed/2022/05/GHSA-q5wp-hv3f-jvh6/GHSA-q5wp-hv3f-jvh6.json index 5474819015c..a290e90be5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5wp-hv3f-jvh6/GHSA-q5wp-hv3f-jvh6.json +++ b/advisories/unreviewed/2022/05/GHSA-q5wp-hv3f-jvh6/GHSA-q5wp-hv3f-jvh6.json @@ -7,12 +7,8 @@ "CVE-2012-4773" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to admin/accounts/add/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6mh-jmqc-qqqq/GHSA-q6mh-jmqc-qqqq.json b/advisories/unreviewed/2022/05/GHSA-q6mh-jmqc-qqqq/GHSA-q6mh-jmqc-qqqq.json index 66fe6684386..5466e9a3a95 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6mh-jmqc-qqqq/GHSA-q6mh-jmqc-qqqq.json +++ b/advisories/unreviewed/2022/05/GHSA-q6mh-jmqc-qqqq/GHSA-q6mh-jmqc-qqqq.json @@ -7,12 +7,8 @@ "CVE-2012-4560" ], "details": "Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6xr-vqcq-qm8w/GHSA-q6xr-vqcq-qm8w.json b/advisories/unreviewed/2022/05/GHSA-q6xr-vqcq-qm8w/GHSA-q6xr-vqcq-qm8w.json index 6c15c9c52e3..b3631909002 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6xr-vqcq-qm8w/GHSA-q6xr-vqcq-qm8w.json +++ b/advisories/unreviewed/2022/05/GHSA-q6xr-vqcq-qm8w/GHSA-q6xr-vqcq-qm8w.json @@ -7,12 +7,8 @@ "CVE-2013-0596" ], "details": "Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q72j-xrch-q43q/GHSA-q72j-xrch-q43q.json b/advisories/unreviewed/2022/05/GHSA-q72j-xrch-q43q/GHSA-q72j-xrch-q43q.json index 400b9ce1cac..590f559e35b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q72j-xrch-q43q/GHSA-q72j-xrch-q43q.json +++ b/advisories/unreviewed/2022/05/GHSA-q72j-xrch-q43q/GHSA-q72j-xrch-q43q.json @@ -7,12 +7,8 @@ "CVE-2013-3256" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Shareaholic SexyBookmarks plugin 6.1.4.0 for WordPress allows remote attackers to hijack the authentication of users for requests that \"manipulate plugin settings.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q7w6-w686-vfgw/GHSA-q7w6-w686-vfgw.json b/advisories/unreviewed/2022/05/GHSA-q7w6-w686-vfgw/GHSA-q7w6-w686-vfgw.json index f838ec31c93..7b5ceb52f4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7w6-w686-vfgw/GHSA-q7w6-w686-vfgw.json +++ b/advisories/unreviewed/2022/05/GHSA-q7w6-w686-vfgw/GHSA-q7w6-w686-vfgw.json @@ -7,12 +7,8 @@ "CVE-2012-4987" ], "details": "Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect processing of long pathnames by the Watch Folders feature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8cp-5466-38j6/GHSA-q8cp-5466-38j6.json b/advisories/unreviewed/2022/05/GHSA-q8cp-5466-38j6/GHSA-q8cp-5466-38j6.json index eaa80f97029..e2a02178f89 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8cp-5466-38j6/GHSA-q8cp-5466-38j6.json +++ b/advisories/unreviewed/2022/05/GHSA-q8cp-5466-38j6/GHSA-q8cp-5466-38j6.json @@ -7,12 +7,8 @@ "CVE-2012-4335" ], "details": "Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative size value in a TCP request to (1) NiwMasterService or (2) NiwStorageService. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9fq-jp2v-gpw2/GHSA-q9fq-jp2v-gpw2.json b/advisories/unreviewed/2022/05/GHSA-q9fq-jp2v-gpw2/GHSA-q9fq-jp2v-gpw2.json index 55440cfbc13..6d975a8383f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9fq-jp2v-gpw2/GHSA-q9fq-jp2v-gpw2.json +++ b/advisories/unreviewed/2022/05/GHSA-q9fq-jp2v-gpw2/GHSA-q9fq-jp2v-gpw2.json @@ -7,12 +7,8 @@ "CVE-2013-0580" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qc77-grrc-jpc5/GHSA-qc77-grrc-jpc5.json b/advisories/unreviewed/2022/05/GHSA-qc77-grrc-jpc5/GHSA-qc77-grrc-jpc5.json index 5b510ad50e3..fab6b5df85e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc77-grrc-jpc5/GHSA-qc77-grrc-jpc5.json +++ b/advisories/unreviewed/2022/05/GHSA-qc77-grrc-jpc5/GHSA-qc77-grrc-jpc5.json @@ -7,12 +7,8 @@ "CVE-2012-5893" ], "details": "Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif extension, then accessing it via a direct request to the file in tmp/files/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qf4p-jmcc-vw8h/GHSA-qf4p-jmcc-vw8h.json b/advisories/unreviewed/2022/05/GHSA-qf4p-jmcc-vw8h/GHSA-qf4p-jmcc-vw8h.json index bee2383b488..a01b736c1c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-qf4p-jmcc-vw8h/GHSA-qf4p-jmcc-vw8h.json +++ b/advisories/unreviewed/2022/05/GHSA-qf4p-jmcc-vw8h/GHSA-qf4p-jmcc-vw8h.json @@ -7,12 +7,8 @@ "CVE-2012-6128" ], "details": "Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qfmv-qw89-q9jw/GHSA-qfmv-qw89-q9jw.json b/advisories/unreviewed/2022/05/GHSA-qfmv-qw89-q9jw/GHSA-qfmv-qw89-q9jw.json index 7658a80b5f6..dad62b1fd2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfmv-qw89-q9jw/GHSA-qfmv-qw89-q9jw.json +++ b/advisories/unreviewed/2022/05/GHSA-qfmv-qw89-q9jw/GHSA-qfmv-qw89-q9jw.json @@ -7,12 +7,8 @@ "CVE-2012-4273" ], "details": "Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qfpc-6pg9-h7hv/GHSA-qfpc-6pg9-h7hv.json b/advisories/unreviewed/2022/05/GHSA-qfpc-6pg9-h7hv/GHSA-qfpc-6pg9-h7hv.json index ac0cf9d9d34..c8100946ed5 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfpc-6pg9-h7hv/GHSA-qfpc-6pg9-h7hv.json +++ b/advisories/unreviewed/2022/05/GHSA-qfpc-6pg9-h7hv/GHSA-qfpc-6pg9-h7hv.json @@ -7,12 +7,8 @@ "CVE-2013-3524" ], "details": "SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgqj-h99j-9rmj/GHSA-qgqj-h99j-9rmj.json b/advisories/unreviewed/2022/05/GHSA-qgqj-h99j-9rmj/GHSA-qgqj-h99j-9rmj.json index d2b2caf9dca..23857f4ed01 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgqj-h99j-9rmj/GHSA-qgqj-h99j-9rmj.json +++ b/advisories/unreviewed/2022/05/GHSA-qgqj-h99j-9rmj/GHSA-qgqj-h99j-9rmj.json @@ -7,12 +7,8 @@ "CVE-2012-5301" ], "details": "The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qh8w-whmr-r43p/GHSA-qh8w-whmr-r43p.json b/advisories/unreviewed/2022/05/GHSA-qh8w-whmr-r43p/GHSA-qh8w-whmr-r43p.json index 8fc89852e45..657ec78d00c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qh8w-whmr-r43p/GHSA-qh8w-whmr-r43p.json +++ b/advisories/unreviewed/2022/05/GHSA-qh8w-whmr-r43p/GHSA-qh8w-whmr-r43p.json @@ -7,12 +7,8 @@ "CVE-2012-4232" ], "details": "SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL commands via the memberloginid cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qhx9-f5x8-c543/GHSA-qhx9-f5x8-c543.json b/advisories/unreviewed/2022/05/GHSA-qhx9-f5x8-c543/GHSA-qhx9-f5x8-c543.json index ecf91ed1e7b..08d9d22dbd9 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhx9-f5x8-c543/GHSA-qhx9-f5x8-c543.json +++ b/advisories/unreviewed/2022/05/GHSA-qhx9-f5x8-c543/GHSA-qhx9-f5x8-c543.json @@ -7,12 +7,8 @@ "CVE-2013-2019" ], "details": "Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 allows remote attackers to have unspecified impact via multiple file_signature elements.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjc8-mcp6-hq6r/GHSA-qjc8-mcp6-hq6r.json b/advisories/unreviewed/2022/05/GHSA-qjc8-mcp6-hq6r/GHSA-qjc8-mcp6-hq6r.json index 245ea03e555..d4c4de402df 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjc8-mcp6-hq6r/GHSA-qjc8-mcp6-hq6r.json +++ b/advisories/unreviewed/2022/05/GHSA-qjc8-mcp6-hq6r/GHSA-qjc8-mcp6-hq6r.json @@ -7,12 +7,8 @@ "CVE-2012-4199" ], "details": "template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote attackers to obtain sensitive information by reading HTML source code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjx7-c2rm-wr3v/GHSA-qjx7-c2rm-wr3v.json b/advisories/unreviewed/2022/05/GHSA-qjx7-c2rm-wr3v/GHSA-qjx7-c2rm-wr3v.json index 3ea89976cf6..49900573c1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjx7-c2rm-wr3v/GHSA-qjx7-c2rm-wr3v.json +++ b/advisories/unreviewed/2022/05/GHSA-qjx7-c2rm-wr3v/GHSA-qjx7-c2rm-wr3v.json @@ -7,12 +7,8 @@ "CVE-2012-4094" ], "details": "Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service by reading and forging control messages associated with Smart Call Home reports, aka Bug ID CSCtl00198.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qp85-53fg-w9gv/GHSA-qp85-53fg-w9gv.json b/advisories/unreviewed/2022/05/GHSA-qp85-53fg-w9gv/GHSA-qp85-53fg-w9gv.json index 4bd836e2c0e..dff624c0e8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qp85-53fg-w9gv/GHSA-qp85-53fg-w9gv.json +++ b/advisories/unreviewed/2022/05/GHSA-qp85-53fg-w9gv/GHSA-qp85-53fg-w9gv.json @@ -7,12 +7,8 @@ "CVE-2012-4324" ], "details": "Cross-site request forgery (CSRF) vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq49-hmp5-gwv6/GHSA-qq49-hmp5-gwv6.json b/advisories/unreviewed/2022/05/GHSA-qq49-hmp5-gwv6/GHSA-qq49-hmp5-gwv6.json index eaa134bc6df..ba9f809788a 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq49-hmp5-gwv6/GHSA-qq49-hmp5-gwv6.json +++ b/advisories/unreviewed/2022/05/GHSA-qq49-hmp5-gwv6/GHSA-qq49-hmp5-gwv6.json @@ -7,12 +7,8 @@ "CVE-2012-6563" ], "details": "engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qrpp-hchf-5vv5/GHSA-qrpp-hchf-5vv5.json b/advisories/unreviewed/2022/05/GHSA-qrpp-hchf-5vv5/GHSA-qrpp-hchf-5vv5.json index 1e9d4861fe0..51e2d47e5f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-qrpp-hchf-5vv5/GHSA-qrpp-hchf-5vv5.json +++ b/advisories/unreviewed/2022/05/GHSA-qrpp-hchf-5vv5/GHSA-qrpp-hchf-5vv5.json @@ -7,12 +7,8 @@ "CVE-2012-6043" ], "details": "Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qvc4-6q49-px4f/GHSA-qvc4-6q49-px4f.json b/advisories/unreviewed/2022/05/GHSA-qvc4-6q49-px4f/GHSA-qvc4-6q49-px4f.json index f637b126a60..8417254c9e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvc4-6q49-px4f/GHSA-qvc4-6q49-px4f.json +++ b/advisories/unreviewed/2022/05/GHSA-qvc4-6q49-px4f/GHSA-qvc4-6q49-px4f.json @@ -7,12 +7,8 @@ "CVE-2012-5232" ], "details": "Cross-site scripting (XSS) vulnerability in the Quickl Form component for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qw78-gpjg-cm27/GHSA-qw78-gpjg-cm27.json b/advisories/unreviewed/2022/05/GHSA-qw78-gpjg-cm27/GHSA-qw78-gpjg-cm27.json index 0a0fac36043..496e44a1929 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw78-gpjg-cm27/GHSA-qw78-gpjg-cm27.json +++ b/advisories/unreviewed/2022/05/GHSA-qw78-gpjg-cm27/GHSA-qw78-gpjg-cm27.json @@ -7,12 +7,8 @@ "CVE-2012-6137" ], "details": "rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qwq3-q57c-xc3c/GHSA-qwq3-q57c-xc3c.json b/advisories/unreviewed/2022/05/GHSA-qwq3-q57c-xc3c/GHSA-qwq3-q57c-xc3c.json index a506fe3bde3..b89bec01cde 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwq3-q57c-xc3c/GHSA-qwq3-q57c-xc3c.json +++ b/advisories/unreviewed/2022/05/GHSA-qwq3-q57c-xc3c/GHSA-qwq3-q57c-xc3c.json @@ -7,12 +7,8 @@ "CVE-2012-5948" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) WebProcess.srv, (2) the html/en/default/ directory, (3) Widget/resource, (4) birt/frameset, or (5) ganttlib/gantt-jws.jnlp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qwvc-vq5g-8cxv/GHSA-qwvc-vq5g-8cxv.json b/advisories/unreviewed/2022/05/GHSA-qwvc-vq5g-8cxv/GHSA-qwvc-vq5g-8cxv.json index 984113fc2fc..118d9e3cd38 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwvc-vq5g-8cxv/GHSA-qwvc-vq5g-8cxv.json +++ b/advisories/unreviewed/2022/05/GHSA-qwvc-vq5g-8cxv/GHSA-qwvc-vq5g-8cxv.json @@ -7,12 +7,8 @@ "CVE-2012-4230" ], "details": "The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the (1) encoding directive and (2) valid_elements attribute, which allows attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors, as demonstrated using a textarea element.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qxrv-c4qh-mpj4/GHSA-qxrv-c4qh-mpj4.json b/advisories/unreviewed/2022/05/GHSA-qxrv-c4qh-mpj4/GHSA-qxrv-c4qh-mpj4.json index fb1317302a8..d1f4189e467 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxrv-c4qh-mpj4/GHSA-qxrv-c4qh-mpj4.json +++ b/advisories/unreviewed/2022/05/GHSA-qxrv-c4qh-mpj4/GHSA-qxrv-c4qh-mpj4.json @@ -7,12 +7,8 @@ "CVE-2013-3038" ], "details": "Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to discover credentials via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r267-cj3p-f63m/GHSA-r267-cj3p-f63m.json b/advisories/unreviewed/2022/05/GHSA-r267-cj3p-f63m/GHSA-r267-cj3p-f63m.json index deca517af14..2553bda6afe 100644 --- a/advisories/unreviewed/2022/05/GHSA-r267-cj3p-f63m/GHSA-r267-cj3p-f63m.json +++ b/advisories/unreviewed/2022/05/GHSA-r267-cj3p-f63m/GHSA-r267-cj3p-f63m.json @@ -7,12 +7,8 @@ "CVE-2012-4741" ], "details": "The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof user identities via the User-Name RADIUS attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r29p-q48g-5v78/GHSA-r29p-q48g-5v78.json b/advisories/unreviewed/2022/05/GHSA-r29p-q48g-5v78/GHSA-r29p-q48g-5v78.json index 2774e2d410f..ea63b6105a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-r29p-q48g-5v78/GHSA-r29p-q48g-5v78.json +++ b/advisories/unreviewed/2022/05/GHSA-r29p-q48g-5v78/GHSA-r29p-q48g-5v78.json @@ -7,12 +7,8 @@ "CVE-2012-4894" ], "details": "Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SKP file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r36p-32gw-w8wv/GHSA-r36p-32gw-w8wv.json b/advisories/unreviewed/2022/05/GHSA-r36p-32gw-w8wv/GHSA-r36p-32gw-w8wv.json index 54179804353..75a884ef49b 100644 --- a/advisories/unreviewed/2022/05/GHSA-r36p-32gw-w8wv/GHSA-r36p-32gw-w8wv.json +++ b/advisories/unreviewed/2022/05/GHSA-r36p-32gw-w8wv/GHSA-r36p-32gw-w8wv.json @@ -7,12 +7,8 @@ "CVE-2012-5938" ], "details": "The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r386-wm9g-qwpx/GHSA-r386-wm9g-qwpx.json b/advisories/unreviewed/2022/05/GHSA-r386-wm9g-qwpx/GHSA-r386-wm9g-qwpx.json index 6556fb27c28..558cd1c2a7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r386-wm9g-qwpx/GHSA-r386-wm9g-qwpx.json +++ b/advisories/unreviewed/2022/05/GHSA-r386-wm9g-qwpx/GHSA-r386-wm9g-qwpx.json @@ -7,12 +7,8 @@ "CVE-2012-5286" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r464-5gc2-5fcc/GHSA-r464-5gc2-5fcc.json b/advisories/unreviewed/2022/05/GHSA-r464-5gc2-5fcc/GHSA-r464-5gc2-5fcc.json index cb6eaf8b20a..fc1e40a72b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-r464-5gc2-5fcc/GHSA-r464-5gc2-5fcc.json +++ b/advisories/unreviewed/2022/05/GHSA-r464-5gc2-5fcc/GHSA-r464-5gc2-5fcc.json @@ -7,12 +7,8 @@ "CVE-2012-4877" ], "details": "Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r4v7-5jww-mc29/GHSA-r4v7-5jww-mc29.json b/advisories/unreviewed/2022/05/GHSA-r4v7-5jww-mc29/GHSA-r4v7-5jww-mc29.json index e340654e975..827c4096d24 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4v7-5jww-mc29/GHSA-r4v7-5jww-mc29.json +++ b/advisories/unreviewed/2022/05/GHSA-r4v7-5jww-mc29/GHSA-r4v7-5jww-mc29.json @@ -7,12 +7,8 @@ "CVE-2012-4949" ], "details": "SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r4ww-7p2v-cgv7/GHSA-r4ww-7p2v-cgv7.json b/advisories/unreviewed/2022/05/GHSA-r4ww-7p2v-cgv7/GHSA-r4ww-7p2v-cgv7.json index 28d8c884819..5f9b003b73d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4ww-7p2v-cgv7/GHSA-r4ww-7p2v-cgv7.json +++ b/advisories/unreviewed/2022/05/GHSA-r4ww-7p2v-cgv7/GHSA-r4ww-7p2v-cgv7.json @@ -7,12 +7,8 @@ "CVE-2012-5252" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r5fw-pxq2-w826/GHSA-r5fw-pxq2-w826.json b/advisories/unreviewed/2022/05/GHSA-r5fw-pxq2-w826/GHSA-r5fw-pxq2-w826.json index 0a6577b2032..e20bc3886df 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5fw-pxq2-w826/GHSA-r5fw-pxq2-w826.json +++ b/advisories/unreviewed/2022/05/GHSA-r5fw-pxq2-w826/GHSA-r5fw-pxq2-w826.json @@ -7,12 +7,8 @@ "CVE-2013-3049" ], "details": "IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3971.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5q6-7hm3-jq89/GHSA-r5q6-7hm3-jq89.json b/advisories/unreviewed/2022/05/GHSA-r5q6-7hm3-jq89/GHSA-r5q6-7hm3-jq89.json index 21a5998cc65..7eff39c146d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5q6-7hm3-jq89/GHSA-r5q6-7hm3-jq89.json +++ b/advisories/unreviewed/2022/05/GHSA-r5q6-7hm3-jq89/GHSA-r5q6-7hm3-jq89.json @@ -7,12 +7,8 @@ "CVE-2012-5355" ], "details": "welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r629-xj8x-3hfx/GHSA-r629-xj8x-3hfx.json b/advisories/unreviewed/2022/05/GHSA-r629-xj8x-3hfx/GHSA-r629-xj8x-3hfx.json index 8c497e852d9..41a7aee600d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r629-xj8x-3hfx/GHSA-r629-xj8x-3hfx.json +++ b/advisories/unreviewed/2022/05/GHSA-r629-xj8x-3hfx/GHSA-r629-xj8x-3hfx.json @@ -7,12 +7,8 @@ "CVE-2012-5253" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r6qh-qvw2-fm2h/GHSA-r6qh-qvw2-fm2h.json b/advisories/unreviewed/2022/05/GHSA-r6qh-qvw2-fm2h/GHSA-r6qh-qvw2-fm2h.json index e02eb43b3bc..0c0b5aa34f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6qh-qvw2-fm2h/GHSA-r6qh-qvw2-fm2h.json +++ b/advisories/unreviewed/2022/05/GHSA-r6qh-qvw2-fm2h/GHSA-r6qh-qvw2-fm2h.json @@ -7,12 +7,8 @@ "CVE-2012-5700" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/index.php or the (2) username or (3) password parameter in blocks/loginbox/loginbox.template.php to index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r73j-3c4p-q8r8/GHSA-r73j-3c4p-q8r8.json b/advisories/unreviewed/2022/05/GHSA-r73j-3c4p-q8r8/GHSA-r73j-3c4p-q8r8.json index 990d6f75217..335e6b39785 100644 --- a/advisories/unreviewed/2022/05/GHSA-r73j-3c4p-q8r8/GHSA-r73j-3c4p-q8r8.json +++ b/advisories/unreviewed/2022/05/GHSA-r73j-3c4p-q8r8/GHSA-r73j-3c4p-q8r8.json @@ -7,12 +7,8 @@ "CVE-2012-6050" ], "details": "The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r743-88qv-qhcg/GHSA-r743-88qv-qhcg.json b/advisories/unreviewed/2022/05/GHSA-r743-88qv-qhcg/GHSA-r743-88qv-qhcg.json index f9d8b14e941..5bba09885a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r743-88qv-qhcg/GHSA-r743-88qv-qhcg.json +++ b/advisories/unreviewed/2022/05/GHSA-r743-88qv-qhcg/GHSA-r743-88qv-qhcg.json @@ -7,12 +7,8 @@ "CVE-2013-1885" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) tus/ or (2) tus/tus/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r74p-jfg7-phcw/GHSA-r74p-jfg7-phcw.json b/advisories/unreviewed/2022/05/GHSA-r74p-jfg7-phcw/GHSA-r74p-jfg7-phcw.json index 8817d9dcb4b..65a6f2c6f72 100644 --- a/advisories/unreviewed/2022/05/GHSA-r74p-jfg7-phcw/GHSA-r74p-jfg7-phcw.json +++ b/advisories/unreviewed/2022/05/GHSA-r74p-jfg7-phcw/GHSA-r74p-jfg7-phcw.json @@ -7,12 +7,8 @@ "CVE-2013-0807" ], "details": "Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a new_section action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r8qp-r3h5-6cxg/GHSA-r8qp-r3h5-6cxg.json b/advisories/unreviewed/2022/05/GHSA-r8qp-r3h5-6cxg/GHSA-r8qp-r3h5-6cxg.json index b7301e646ec..c8bb095c333 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8qp-r3h5-6cxg/GHSA-r8qp-r3h5-6cxg.json +++ b/advisories/unreviewed/2022/05/GHSA-r8qp-r3h5-6cxg/GHSA-r8qp-r3h5-6cxg.json @@ -7,12 +7,8 @@ "CVE-2012-4832" ], "details": "Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r934-x26m-8244/GHSA-r934-x26m-8244.json b/advisories/unreviewed/2022/05/GHSA-r934-x26m-8244/GHSA-r934-x26m-8244.json index 255f22dbb69..88a91c94450 100644 --- a/advisories/unreviewed/2022/05/GHSA-r934-x26m-8244/GHSA-r934-x26m-8244.json +++ b/advisories/unreviewed/2022/05/GHSA-r934-x26m-8244/GHSA-r934-x26m-8244.json @@ -7,12 +7,8 @@ "CVE-2012-5263" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r993-4vgm-6r2p/GHSA-r993-4vgm-6r2p.json b/advisories/unreviewed/2022/05/GHSA-r993-4vgm-6r2p/GHSA-r993-4vgm-6r2p.json index 6b6c59a7313..5d22a21021b 100644 --- a/advisories/unreviewed/2022/05/GHSA-r993-4vgm-6r2p/GHSA-r993-4vgm-6r2p.json +++ b/advisories/unreviewed/2022/05/GHSA-r993-4vgm-6r2p/GHSA-r993-4vgm-6r2p.json @@ -7,12 +7,8 @@ "CVE-2012-4334" ], "details": "The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r9wr-qv2x-hhw9/GHSA-r9wr-qv2x-hhw9.json b/advisories/unreviewed/2022/05/GHSA-r9wr-qv2x-hhw9/GHSA-r9wr-qv2x-hhw9.json index 35dab8c6a0e..6e0195ea560 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9wr-qv2x-hhw9/GHSA-r9wr-qv2x-hhw9.json +++ b/advisories/unreviewed/2022/05/GHSA-r9wr-qv2x-hhw9/GHSA-r9wr-qv2x-hhw9.json @@ -7,12 +7,8 @@ "CVE-2013-2979" ], "details": "Directory traversal vulnerability in IBM Optim Performance Manager 4.1.1 and IBM InfoSphere Optim Performance Manager 5.x before 5.2 allows remote authenticated users to read arbitrary files via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rcx4-p563-6mqv/GHSA-rcx4-p563-6mqv.json b/advisories/unreviewed/2022/05/GHSA-rcx4-p563-6mqv/GHSA-rcx4-p563-6mqv.json index 8fba15e313c..07f8f2349f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcx4-p563-6mqv/GHSA-rcx4-p563-6mqv.json +++ b/advisories/unreviewed/2022/05/GHSA-rcx4-p563-6mqv/GHSA-rcx4-p563-6mqv.json @@ -7,12 +7,8 @@ "CVE-2013-1104" ], "details": "The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rf3r-fxff-f4xg/GHSA-rf3r-fxff-f4xg.json b/advisories/unreviewed/2022/05/GHSA-rf3r-fxff-f4xg/GHSA-rf3r-fxff-f4xg.json index ee11f9e95d5..6ba0d363afa 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf3r-fxff-f4xg/GHSA-rf3r-fxff-f4xg.json +++ b/advisories/unreviewed/2022/05/GHSA-rf3r-fxff-f4xg/GHSA-rf3r-fxff-f4xg.json @@ -7,12 +7,8 @@ "CVE-2012-5265" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rfj9-gw43-8w26/GHSA-rfj9-gw43-8w26.json b/advisories/unreviewed/2022/05/GHSA-rfj9-gw43-8w26/GHSA-rfj9-gw43-8w26.json index 5c3eca3a9da..7db78808c93 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfj9-gw43-8w26/GHSA-rfj9-gw43-8w26.json +++ b/advisories/unreviewed/2022/05/GHSA-rfj9-gw43-8w26/GHSA-rfj9-gw43-8w26.json @@ -7,12 +7,8 @@ "CVE-2008-1700" ], "details": "The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rfq2-862j-64c2/GHSA-rfq2-862j-64c2.json b/advisories/unreviewed/2022/05/GHSA-rfq2-862j-64c2/GHSA-rfq2-862j-64c2.json index 420822333d9..1244498ce8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfq2-862j-64c2/GHSA-rfq2-862j-64c2.json +++ b/advisories/unreviewed/2022/05/GHSA-rfq2-862j-64c2/GHSA-rfq2-862j-64c2.json @@ -7,12 +7,8 @@ "CVE-2012-5115" ], "details": "Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger \"wild writes.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rg62-gwr6-wv2q/GHSA-rg62-gwr6-wv2q.json b/advisories/unreviewed/2022/05/GHSA-rg62-gwr6-wv2q/GHSA-rg62-gwr6-wv2q.json index 841335a865b..798f6480a9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rg62-gwr6-wv2q/GHSA-rg62-gwr6-wv2q.json +++ b/advisories/unreviewed/2022/05/GHSA-rg62-gwr6-wv2q/GHSA-rg62-gwr6-wv2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgp9-vmqv-r74v/GHSA-rgp9-vmqv-r74v.json b/advisories/unreviewed/2022/05/GHSA-rgp9-vmqv-r74v/GHSA-rgp9-vmqv-r74v.json index 253399816f6..0c9be222c09 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgp9-vmqv-r74v/GHSA-rgp9-vmqv-r74v.json +++ b/advisories/unreviewed/2022/05/GHSA-rgp9-vmqv-r74v/GHSA-rgp9-vmqv-r74v.json @@ -7,12 +7,8 @@ "CVE-2012-5603" ], "details": "proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the \"consumer UUID\" of a system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rh85-6xf8-4wvh/GHSA-rh85-6xf8-4wvh.json b/advisories/unreviewed/2022/05/GHSA-rh85-6xf8-4wvh/GHSA-rh85-6xf8-4wvh.json index 6596ce0bde2..0888800d8e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-rh85-6xf8-4wvh/GHSA-rh85-6xf8-4wvh.json +++ b/advisories/unreviewed/2022/05/GHSA-rh85-6xf8-4wvh/GHSA-rh85-6xf8-4wvh.json @@ -7,12 +7,8 @@ "CVE-2012-5912" ], "details": "Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) page.php or (2) single.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhhr-2j82-c333/GHSA-rhhr-2j82-c333.json b/advisories/unreviewed/2022/05/GHSA-rhhr-2j82-c333/GHSA-rhhr-2j82-c333.json index f6921351187..5fd5dfd233a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhhr-2j82-c333/GHSA-rhhr-2j82-c333.json +++ b/advisories/unreviewed/2022/05/GHSA-rhhr-2j82-c333/GHSA-rhhr-2j82-c333.json @@ -7,12 +7,8 @@ "CVE-2012-5804" ], "details": "The CyberSource module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhmr-wq9p-89c8/GHSA-rhmr-wq9p-89c8.json b/advisories/unreviewed/2022/05/GHSA-rhmr-wq9p-89c8/GHSA-rhmr-wq9p-89c8.json index 488ce116863..1ee580df9e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhmr-wq9p-89c8/GHSA-rhmr-wq9p-89c8.json +++ b/advisories/unreviewed/2022/05/GHSA-rhmr-wq9p-89c8/GHSA-rhmr-wq9p-89c8.json @@ -7,12 +7,8 @@ "CVE-2013-3455" ], "details": "Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rj2q-prgm-3pq9/GHSA-rj2q-prgm-3pq9.json b/advisories/unreviewed/2022/05/GHSA-rj2q-prgm-3pq9/GHSA-rj2q-prgm-3pq9.json index 01da1aa42ac..d174f117f31 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj2q-prgm-3pq9/GHSA-rj2q-prgm-3pq9.json +++ b/advisories/unreviewed/2022/05/GHSA-rj2q-prgm-3pq9/GHSA-rj2q-prgm-3pq9.json @@ -7,12 +7,8 @@ "CVE-2013-3480" ], "details": "Integer overflow in Sagelight 4.4 and earlier allows remote attackers to execute arbitrary code via crafted width and height dimensions in a BMP file, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rjxg-q6rx-6v3h/GHSA-rjxg-q6rx-6v3h.json b/advisories/unreviewed/2022/05/GHSA-rjxg-q6rx-6v3h/GHSA-rjxg-q6rx-6v3h.json index 18c9c2d3ff3..050c1874196 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjxg-q6rx-6v3h/GHSA-rjxg-q6rx-6v3h.json +++ b/advisories/unreviewed/2022/05/GHSA-rjxg-q6rx-6v3h/GHSA-rjxg-q6rx-6v3h.json @@ -7,12 +7,8 @@ "CVE-2012-6523" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via (1) the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter in (2) blog.php, (3) guestbook.php, or (4) forum.php in codes/. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmf6-73g7-v4xm/GHSA-rmf6-73g7-v4xm.json b/advisories/unreviewed/2022/05/GHSA-rmf6-73g7-v4xm/GHSA-rmf6-73g7-v4xm.json index 53d4de1aeee..9ed0ec59431 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmf6-73g7-v4xm/GHSA-rmf6-73g7-v4xm.json +++ b/advisories/unreviewed/2022/05/GHSA-rmf6-73g7-v4xm/GHSA-rmf6-73g7-v4xm.json @@ -7,12 +7,8 @@ "CVE-2012-4463" ], "details": "Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attackers to execute arbitrary commands via a crafted file name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rpc3-pj28-4vq6/GHSA-rpc3-pj28-4vq6.json b/advisories/unreviewed/2022/05/GHSA-rpc3-pj28-4vq6/GHSA-rpc3-pj28-4vq6.json index 650b3b502b3..1a0603cc1e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpc3-pj28-4vq6/GHSA-rpc3-pj28-4vq6.json +++ b/advisories/unreviewed/2022/05/GHSA-rpc3-pj28-4vq6/GHSA-rpc3-pj28-4vq6.json @@ -7,12 +7,8 @@ "CVE-2012-5651" ], "details": "Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rqcr-v8rp-mcvc/GHSA-rqcr-v8rp-mcvc.json b/advisories/unreviewed/2022/05/GHSA-rqcr-v8rp-mcvc/GHSA-rqcr-v8rp-mcvc.json index f15347de6f4..370ae9b0d80 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqcr-v8rp-mcvc/GHSA-rqcr-v8rp-mcvc.json +++ b/advisories/unreviewed/2022/05/GHSA-rqcr-v8rp-mcvc/GHSA-rqcr-v8rp-mcvc.json @@ -7,12 +7,8 @@ "CVE-2012-4545" ], "details": "The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rqh2-3wvv-w2x4/GHSA-rqh2-3wvv-w2x4.json b/advisories/unreviewed/2022/05/GHSA-rqh2-3wvv-w2x4/GHSA-rqh2-3wvv-w2x4.json index bac7b42bc7b..acb60b729ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqh2-3wvv-w2x4/GHSA-rqh2-3wvv-w2x4.json +++ b/advisories/unreviewed/2022/05/GHSA-rqh2-3wvv-w2x4/GHSA-rqh2-3wvv-w2x4.json @@ -7,12 +7,8 @@ "CVE-2012-5915" ], "details": "Neocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information via direct request to (1) view.php, (2) plugins/contact/lang/contact.en.lang.php, (3) system/lang/en/main.lang.php, (4) system/lang/en/message.lang.php, or (5) system/core/view/view.inc.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrvr-9vrm-8659/GHSA-rrvr-9vrm-8659.json b/advisories/unreviewed/2022/05/GHSA-rrvr-9vrm-8659/GHSA-rrvr-9vrm-8659.json index 18609e525aa..b380a5242bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrvr-9vrm-8659/GHSA-rrvr-9vrm-8659.json +++ b/advisories/unreviewed/2022/05/GHSA-rrvr-9vrm-8659/GHSA-rrvr-9vrm-8659.json @@ -7,12 +7,8 @@ "CVE-2012-4082" ], "details": "MCTools in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to gain privileges by entering crafted command-line parameters on a Fabric Interconnect device, aka Bug ID CSCtg20749.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rv9f-378q-hv9j/GHSA-rv9f-378q-hv9j.json b/advisories/unreviewed/2022/05/GHSA-rv9f-378q-hv9j/GHSA-rv9f-378q-hv9j.json index b15f4771a5c..f309755b836 100644 --- a/advisories/unreviewed/2022/05/GHSA-rv9f-378q-hv9j/GHSA-rv9f-378q-hv9j.json +++ b/advisories/unreviewed/2022/05/GHSA-rv9f-378q-hv9j/GHSA-rv9f-378q-hv9j.json @@ -7,12 +7,8 @@ "CVE-2012-4531" ], "details": "Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rvg3-xqwr-pqrf/GHSA-rvg3-xqwr-pqrf.json b/advisories/unreviewed/2022/05/GHSA-rvg3-xqwr-pqrf/GHSA-rvg3-xqwr-pqrf.json index 4ef47fad1c1..ffeb6b006d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvg3-xqwr-pqrf/GHSA-rvg3-xqwr-pqrf.json +++ b/advisories/unreviewed/2022/05/GHSA-rvg3-xqwr-pqrf/GHSA-rvg3-xqwr-pqrf.json @@ -7,12 +7,8 @@ "CVE-2012-5000" ], "details": "SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rvhf-wmr9-jv98/GHSA-rvhf-wmr9-jv98.json b/advisories/unreviewed/2022/05/GHSA-rvhf-wmr9-jv98/GHSA-rvhf-wmr9-jv98.json index 443026dcf6f..cc2672fecac 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvhf-wmr9-jv98/GHSA-rvhf-wmr9-jv98.json +++ b/advisories/unreviewed/2022/05/GHSA-rvhf-wmr9-jv98/GHSA-rvhf-wmr9-jv98.json @@ -7,12 +7,8 @@ "CVE-2013-2969" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving invalid characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rvqj-8964-prw3/GHSA-rvqj-8964-prw3.json b/advisories/unreviewed/2022/05/GHSA-rvqj-8964-prw3/GHSA-rvqj-8964-prw3.json index bb6213a9701..54b4ee0fb1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvqj-8964-prw3/GHSA-rvqj-8964-prw3.json +++ b/advisories/unreviewed/2022/05/GHSA-rvqj-8964-prw3/GHSA-rvqj-8964-prw3.json @@ -7,12 +7,8 @@ "CVE-2013-1770" ], "details": "Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote attackers to inject arbitrary web script or HTML via the view_name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rvwc-f27w-pwwr/GHSA-rvwc-f27w-pwwr.json b/advisories/unreviewed/2022/05/GHSA-rvwc-f27w-pwwr/GHSA-rvwc-f27w-pwwr.json index 4b9e8f8b4d0..98e969a621e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvwc-f27w-pwwr/GHSA-rvwc-f27w-pwwr.json +++ b/advisories/unreviewed/2022/05/GHSA-rvwc-f27w-pwwr/GHSA-rvwc-f27w-pwwr.json @@ -7,12 +7,8 @@ "CVE-2012-5313" ], "details": "SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute arbitrary SQL commands via the TOPIC_ID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rw75-3484-5hqp/GHSA-rw75-3484-5hqp.json b/advisories/unreviewed/2022/05/GHSA-rw75-3484-5hqp/GHSA-rw75-3484-5hqp.json index 7dcba95eb0e..25550838aff 100644 --- a/advisories/unreviewed/2022/05/GHSA-rw75-3484-5hqp/GHSA-rw75-3484-5hqp.json +++ b/advisories/unreviewed/2022/05/GHSA-rw75-3484-5hqp/GHSA-rw75-3484-5hqp.json @@ -7,12 +7,8 @@ "CVE-2013-2978" ], "details": "Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2988.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rw92-2c94-q3x8/GHSA-rw92-2c94-q3x8.json b/advisories/unreviewed/2022/05/GHSA-rw92-2c94-q3x8/GHSA-rw92-2c94-q3x8.json index a5843a4c09f..117a1e5f9ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-rw92-2c94-q3x8/GHSA-rw92-2c94-q3x8.json +++ b/advisories/unreviewed/2022/05/GHSA-rw92-2c94-q3x8/GHSA-rw92-2c94-q3x8.json @@ -7,12 +7,8 @@ "CVE-2012-4819" ], "details": "Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and Repository Management Web Console in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwqv-5vm5-fmv7/GHSA-rwqv-5vm5-fmv7.json b/advisories/unreviewed/2022/05/GHSA-rwqv-5vm5-fmv7/GHSA-rwqv-5vm5-fmv7.json index 095e481b524..51d875f575c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwqv-5vm5-fmv7/GHSA-rwqv-5vm5-fmv7.json +++ b/advisories/unreviewed/2022/05/GHSA-rwqv-5vm5-fmv7/GHSA-rwqv-5vm5-fmv7.json @@ -7,12 +7,8 @@ "CVE-2012-6517" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) question parameter to in /modules/poll/add.php or (2) question or (3) answer parameter to modules/poll/edit.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwrv-fxxr-7f3g/GHSA-rwrv-fxxr-7f3g.json b/advisories/unreviewed/2022/05/GHSA-rwrv-fxxr-7f3g/GHSA-rwrv-fxxr-7f3g.json index f108dad21f1..4fdec0a5e8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwrv-fxxr-7f3g/GHSA-rwrv-fxxr-7f3g.json +++ b/advisories/unreviewed/2022/05/GHSA-rwrv-fxxr-7f3g/GHSA-rwrv-fxxr-7f3g.json @@ -7,12 +7,8 @@ "CVE-2012-5621" ], "details": "lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwwc-p84p-8fxh/GHSA-rwwc-p84p-8fxh.json b/advisories/unreviewed/2022/05/GHSA-rwwc-p84p-8fxh/GHSA-rwwc-p84p-8fxh.json index 28681404c35..8e5fe59744f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwwc-p84p-8fxh/GHSA-rwwc-p84p-8fxh.json +++ b/advisories/unreviewed/2022/05/GHSA-rwwc-p84p-8fxh/GHSA-rwwc-p84p-8fxh.json @@ -7,12 +7,8 @@ "CVE-2013-3258" ], "details": "Cross-site request forgery (CSRF) vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rx5g-g7vf-gvrq/GHSA-rx5g-g7vf-gvrq.json b/advisories/unreviewed/2022/05/GHSA-rx5g-g7vf-gvrq/GHSA-rx5g-g7vf-gvrq.json index ea5ea4d298c..8fc3a7d1a42 100644 --- a/advisories/unreviewed/2022/05/GHSA-rx5g-g7vf-gvrq/GHSA-rx5g-g7vf-gvrq.json +++ b/advisories/unreviewed/2022/05/GHSA-rx5g-g7vf-gvrq/GHSA-rx5g-g7vf-gvrq.json @@ -7,12 +7,8 @@ "CVE-2012-6503" ], "details": "Unspecified vulnerability in the NinjaXplorer component before 1.0.7 for Joomla! has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rxhx-m8c2-3qx9/GHSA-rxhx-m8c2-3qx9.json b/advisories/unreviewed/2022/05/GHSA-rxhx-m8c2-3qx9/GHSA-rxhx-m8c2-3qx9.json index 766f0ebe6c5..779c8311afb 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxhx-m8c2-3qx9/GHSA-rxhx-m8c2-3qx9.json +++ b/advisories/unreviewed/2022/05/GHSA-rxhx-m8c2-3qx9/GHSA-rxhx-m8c2-3qx9.json @@ -7,12 +7,8 @@ "CVE-2012-4859" ], "details": "Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v239-q543-9r88/GHSA-v239-q543-9r88.json b/advisories/unreviewed/2022/05/GHSA-v239-q543-9r88/GHSA-v239-q543-9r88.json index 701efe78aec..1ebe35ec403 100644 --- a/advisories/unreviewed/2022/05/GHSA-v239-q543-9r88/GHSA-v239-q543-9r88.json +++ b/advisories/unreviewed/2022/05/GHSA-v239-q543-9r88/GHSA-v239-q543-9r88.json @@ -7,12 +7,8 @@ "CVE-2012-6632" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) file title to accounts/admin/index.php or (3) comment parameter in the support page to accounts/index2.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v26h-2hg9-6mq7/GHSA-v26h-2hg9-6mq7.json b/advisories/unreviewed/2022/05/GHSA-v26h-2hg9-6mq7/GHSA-v26h-2hg9-6mq7.json index c66527cd11c..27ca0269187 100644 --- a/advisories/unreviewed/2022/05/GHSA-v26h-2hg9-6mq7/GHSA-v26h-2hg9-6mq7.json +++ b/advisories/unreviewed/2022/05/GHSA-v26h-2hg9-6mq7/GHSA-v26h-2hg9-6mq7.json @@ -7,12 +7,8 @@ "CVE-2012-5864" ], "details": "The management web pages on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12 do not require authentication, which allows remote attackers to obtain administrative access via a direct request, as demonstrated by a request to ping.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v27p-mv6r-mg8c/GHSA-v27p-mv6r-mg8c.json b/advisories/unreviewed/2022/05/GHSA-v27p-mv6r-mg8c/GHSA-v27p-mv6r-mg8c.json index 6ca02290189..cc10c38b66b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v27p-mv6r-mg8c/GHSA-v27p-mv6r-mg8c.json +++ b/advisories/unreviewed/2022/05/GHSA-v27p-mv6r-mg8c/GHSA-v27p-mv6r-mg8c.json @@ -7,12 +7,8 @@ "CVE-2012-4594" ], "details": "McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v379-6hwf-84m7/GHSA-v379-6hwf-84m7.json b/advisories/unreviewed/2022/05/GHSA-v379-6hwf-84m7/GHSA-v379-6hwf-84m7.json index 4bc205220fc..69bb93ef150 100644 --- a/advisories/unreviewed/2022/05/GHSA-v379-6hwf-84m7/GHSA-v379-6hwf-84m7.json +++ b/advisories/unreviewed/2022/05/GHSA-v379-6hwf-84m7/GHSA-v379-6hwf-84m7.json @@ -7,12 +7,8 @@ "CVE-2012-6030" ], "details": "The do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (host crash) and possibly have other unspecified impacts via unspecified vectors related to \"broken locking checks\" in an \"error path.\" NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v53w-m46c-w4w4/GHSA-v53w-m46c-w4w4.json b/advisories/unreviewed/2022/05/GHSA-v53w-m46c-w4w4/GHSA-v53w-m46c-w4w4.json index 76355bb98d1..51fa1c28ef9 100644 --- a/advisories/unreviewed/2022/05/GHSA-v53w-m46c-w4w4/GHSA-v53w-m46c-w4w4.json +++ b/advisories/unreviewed/2022/05/GHSA-v53w-m46c-w4w4/GHSA-v53w-m46c-w4w4.json @@ -7,12 +7,8 @@ "CVE-2013-3491" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) modify buttons, or (3) insert cross-site scripting (XSS) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5hg-845j-3wqm/GHSA-v5hg-845j-3wqm.json b/advisories/unreviewed/2022/05/GHSA-v5hg-845j-3wqm/GHSA-v5hg-845j-3wqm.json index 4d2959fe640..d9f2cd10677 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5hg-845j-3wqm/GHSA-v5hg-845j-3wqm.json +++ b/advisories/unreviewed/2022/05/GHSA-v5hg-845j-3wqm/GHSA-v5hg-845j-3wqm.json @@ -7,12 +7,8 @@ "CVE-2012-5814" ], "details": "Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5hm-jmr5-ggx3/GHSA-v5hm-jmr5-ggx3.json b/advisories/unreviewed/2022/05/GHSA-v5hm-jmr5-ggx3/GHSA-v5hm-jmr5-ggx3.json index 584ad88913f..bc694f26721 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5hm-jmr5-ggx3/GHSA-v5hm-jmr5-ggx3.json +++ b/advisories/unreviewed/2022/05/GHSA-v5hm-jmr5-ggx3/GHSA-v5hm-jmr5-ggx3.json @@ -7,12 +7,8 @@ "CVE-2012-4253" ], "details": "Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) language parameter to learn/cubemail/install.php or (2) f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. (dot dot) in the (3) config parameter to learn/cubemail/menu.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6p6-mvpj-6338/GHSA-v6p6-mvpj-6338.json b/advisories/unreviewed/2022/05/GHSA-v6p6-mvpj-6338/GHSA-v6p6-mvpj-6338.json index e2d4b1ac66a..73572a63cdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6p6-mvpj-6338/GHSA-v6p6-mvpj-6338.json +++ b/advisories/unreviewed/2022/05/GHSA-v6p6-mvpj-6338/GHSA-v6p6-mvpj-6338.json @@ -7,12 +7,8 @@ "CVE-2012-4920" ], "details": "Directory traversal vulnerability in the zing_forum_output function in forum.php in the Zingiri Forum (aka Forums) plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6xv-xwqr-x23c/GHSA-v6xv-xwqr-x23c.json b/advisories/unreviewed/2022/05/GHSA-v6xv-xwqr-x23c/GHSA-v6xv-xwqr-x23c.json index 25936133145..081f8f6441b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6xv-xwqr-x23c/GHSA-v6xv-xwqr-x23c.json +++ b/advisories/unreviewed/2022/05/GHSA-v6xv-xwqr-x23c/GHSA-v6xv-xwqr-x23c.json @@ -7,12 +7,8 @@ "CVE-2012-6519" ], "details": "SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v76h-84r2-pmqc/GHSA-v76h-84r2-pmqc.json b/advisories/unreviewed/2022/05/GHSA-v76h-84r2-pmqc/GHSA-v76h-84r2-pmqc.json index f40b146206c..cf89a5c50e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-v76h-84r2-pmqc/GHSA-v76h-84r2-pmqc.json +++ b/advisories/unreviewed/2022/05/GHSA-v76h-84r2-pmqc/GHSA-v76h-84r2-pmqc.json @@ -7,12 +7,8 @@ "CVE-2012-5325" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the scr_do_redirect function in scr.php in the Shortcode Redirect plugin 1.0.01 and earlier for WordPress allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via the (1) url or (2) sec attributes in a redirect tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v778-mwm8-5f4c/GHSA-v778-mwm8-5f4c.json b/advisories/unreviewed/2022/05/GHSA-v778-mwm8-5f4c/GHSA-v778-mwm8-5f4c.json index ff30d18c1cf..b993abfca56 100644 --- a/advisories/unreviewed/2022/05/GHSA-v778-mwm8-5f4c/GHSA-v778-mwm8-5f4c.json +++ b/advisories/unreviewed/2022/05/GHSA-v778-mwm8-5f4c/GHSA-v778-mwm8-5f4c.json @@ -7,12 +7,8 @@ "CVE-2012-5118" ], "details": "Google Chrome before 23.0.1271.64 on Mac OS X does not properly validate an integer value during the handling of GPU command buffers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v835-wwrp-8jgh/GHSA-v835-wwrp-8jgh.json b/advisories/unreviewed/2022/05/GHSA-v835-wwrp-8jgh/GHSA-v835-wwrp-8jgh.json index aec178668b8..f0d5bf4692f 100644 --- a/advisories/unreviewed/2022/05/GHSA-v835-wwrp-8jgh/GHSA-v835-wwrp-8jgh.json +++ b/advisories/unreviewed/2022/05/GHSA-v835-wwrp-8jgh/GHSA-v835-wwrp-8jgh.json @@ -7,12 +7,8 @@ "CVE-2012-5244" ], "details": "Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) return, (2) display, (3) table, or (4) search parameter to functions/suggest.php; (5) the id parameter to functions/widgets.php, (6) the category parameter to functions/print.php; or (7) the name parameter to functions/ajax.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v87j-h4pq-fh3j/GHSA-v87j-h4pq-fh3j.json b/advisories/unreviewed/2022/05/GHSA-v87j-h4pq-fh3j/GHSA-v87j-h4pq-fh3j.json index 3b5c72b53d4..59b1d1780f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-v87j-h4pq-fh3j/GHSA-v87j-h4pq-fh3j.json +++ b/advisories/unreviewed/2022/05/GHSA-v87j-h4pq-fh3j/GHSA-v87j-h4pq-fh3j.json @@ -7,12 +7,8 @@ "CVE-2012-5533" ], "details": "The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the \"Connection: TE,,Keep-Alive\" header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v946-66g4-7cxj/GHSA-v946-66g4-7cxj.json b/advisories/unreviewed/2022/05/GHSA-v946-66g4-7cxj/GHSA-v946-66g4-7cxj.json index 5dc69b8bfe0..23c0630e640 100644 --- a/advisories/unreviewed/2022/05/GHSA-v946-66g4-7cxj/GHSA-v946-66g4-7cxj.json +++ b/advisories/unreviewed/2022/05/GHSA-v946-66g4-7cxj/GHSA-v946-66g4-7cxj.json @@ -7,12 +7,8 @@ "CVE-2012-4850" ], "details": "IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v9jw-7cc5-cw3r/GHSA-v9jw-7cc5-cw3r.json b/advisories/unreviewed/2022/05/GHSA-v9jw-7cc5-cw3r/GHSA-v9jw-7cc5-cw3r.json index aa8f92e09c2..ede7642e740 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9jw-7cc5-cw3r/GHSA-v9jw-7cc5-cw3r.json +++ b/advisories/unreviewed/2022/05/GHSA-v9jw-7cc5-cw3r/GHSA-v9jw-7cc5-cw3r.json @@ -7,12 +7,8 @@ "CVE-2012-6038" ], "details": "admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the (1) dir parameter in a fileman or (2) filemanview action. NOTE: this issue has been referred to as a \"path traversal.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vcp7-xxjg-2gwg/GHSA-vcp7-xxjg-2gwg.json b/advisories/unreviewed/2022/05/GHSA-vcp7-xxjg-2gwg/GHSA-vcp7-xxjg-2gwg.json index 761e1dfe274..a578961fb47 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcp7-xxjg-2gwg/GHSA-vcp7-xxjg-2gwg.json +++ b/advisories/unreviewed/2022/05/GHSA-vcp7-xxjg-2gwg/GHSA-vcp7-xxjg-2gwg.json @@ -7,12 +7,8 @@ "CVE-2012-4256" ], "details": "The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vcpq-8765-95px/GHSA-vcpq-8765-95px.json b/advisories/unreviewed/2022/05/GHSA-vcpq-8765-95px/GHSA-vcpq-8765-95px.json index 570804c12a2..593817fd352 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcpq-8765-95px/GHSA-vcpq-8765-95px.json +++ b/advisories/unreviewed/2022/05/GHSA-vcpq-8765-95px/GHSA-vcpq-8765-95px.json @@ -7,12 +7,8 @@ "CVE-2012-4589" ], "details": "Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vf6x-wgx6-9fxg/GHSA-vf6x-wgx6-9fxg.json b/advisories/unreviewed/2022/05/GHSA-vf6x-wgx6-9fxg/GHSA-vf6x-wgx6-9fxg.json index 660c99393e4..dfd0c063aeb 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf6x-wgx6-9fxg/GHSA-vf6x-wgx6-9fxg.json +++ b/advisories/unreviewed/2022/05/GHSA-vf6x-wgx6-9fxg/GHSA-vf6x-wgx6-9fxg.json @@ -7,12 +7,8 @@ "CVE-2012-6040" ], "details": "Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfgm-xhcw-9pjr/GHSA-vfgm-xhcw-9pjr.json b/advisories/unreviewed/2022/05/GHSA-vfgm-xhcw-9pjr/GHSA-vfgm-xhcw-9pjr.json index d6a57c54aab..944b7946503 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfgm-xhcw-9pjr/GHSA-vfgm-xhcw-9pjr.json +++ b/advisories/unreviewed/2022/05/GHSA-vfgm-xhcw-9pjr/GHSA-vfgm-xhcw-9pjr.json @@ -7,12 +7,8 @@ "CVE-2012-6041" ], "details": "Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote attackers to execute arbitrary code via a crafted iframe.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vgq3-fq3v-gqc3/GHSA-vgq3-fq3v-gqc3.json b/advisories/unreviewed/2022/05/GHSA-vgq3-fq3v-gqc3/GHSA-vgq3-fq3v-gqc3.json index 9ca506ac388..2f0966e6aab 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgq3-fq3v-gqc3/GHSA-vgq3-fq3v-gqc3.json +++ b/advisories/unreviewed/2022/05/GHSA-vgq3-fq3v-gqc3/GHSA-vgq3-fq3v-gqc3.json @@ -7,12 +7,8 @@ "CVE-2013-2967" ], "details": "Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vh38-36gc-xw76/GHSA-vh38-36gc-xw76.json b/advisories/unreviewed/2022/05/GHSA-vh38-36gc-xw76/GHSA-vh38-36gc-xw76.json index acb37265037..16a814bc339 100644 --- a/advisories/unreviewed/2022/05/GHSA-vh38-36gc-xw76/GHSA-vh38-36gc-xw76.json +++ b/advisories/unreviewed/2022/05/GHSA-vh38-36gc-xw76/GHSA-vh38-36gc-xw76.json @@ -7,12 +7,8 @@ "CVE-2012-4259" ], "details": "Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications (UC) 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhcg-x755-m773/GHSA-vhcg-x755-m773.json b/advisories/unreviewed/2022/05/GHSA-vhcg-x755-m773/GHSA-vhcg-x755-m773.json index 3c5d2df62fd..85f8f32275a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhcg-x755-m773/GHSA-vhcg-x755-m773.json +++ b/advisories/unreviewed/2022/05/GHSA-vhcg-x755-m773/GHSA-vhcg-x755-m773.json @@ -7,12 +7,8 @@ "CVE-2013-2980" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhw3-fp9m-v7r8/GHSA-vhw3-fp9m-v7r8.json b/advisories/unreviewed/2022/05/GHSA-vhw3-fp9m-v7r8/GHSA-vhw3-fp9m-v7r8.json index 0de75d761e0..c1e983078e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhw3-fp9m-v7r8/GHSA-vhw3-fp9m-v7r8.json +++ b/advisories/unreviewed/2022/05/GHSA-vhw3-fp9m-v7r8/GHSA-vhw3-fp9m-v7r8.json @@ -7,12 +7,8 @@ "CVE-2013-1905" ], "details": "Cross-site scripting (XSS) vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjq3-454q-w3j4/GHSA-vjq3-454q-w3j4.json b/advisories/unreviewed/2022/05/GHSA-vjq3-454q-w3j4/GHSA-vjq3-454q-w3j4.json index 632f92f7b91..da277e2a14e 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjq3-454q-w3j4/GHSA-vjq3-454q-w3j4.json +++ b/advisories/unreviewed/2022/05/GHSA-vjq3-454q-w3j4/GHSA-vjq3-454q-w3j4.json @@ -7,12 +7,8 @@ "CVE-2013-1066" ], "details": "language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vp4v-c5px-9wg2/GHSA-vp4v-c5px-9wg2.json b/advisories/unreviewed/2022/05/GHSA-vp4v-c5px-9wg2/GHSA-vp4v-c5px-9wg2.json index 463f074df24..c16d176c0b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-vp4v-c5px-9wg2/GHSA-vp4v-c5px-9wg2.json +++ b/advisories/unreviewed/2022/05/GHSA-vp4v-c5px-9wg2/GHSA-vp4v-c5px-9wg2.json @@ -7,12 +7,8 @@ "CVE-2012-6583" ], "details": "Cross-site scripting (XSS) vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the \"administer imagemenu\" permission to inject arbitrary web script or HTML via an image file name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vp62-hh5v-fxcw/GHSA-vp62-hh5v-fxcw.json b/advisories/unreviewed/2022/05/GHSA-vp62-hh5v-fxcw/GHSA-vp62-hh5v-fxcw.json index 603a16e36c6..5d34aee1b5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vp62-hh5v-fxcw/GHSA-vp62-hh5v-fxcw.json +++ b/advisories/unreviewed/2022/05/GHSA-vp62-hh5v-fxcw/GHSA-vp62-hh5v-fxcw.json @@ -7,12 +7,8 @@ "CVE-2012-4190" ], "details": "The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vq94-fv6j-x393/GHSA-vq94-fv6j-x393.json b/advisories/unreviewed/2022/05/GHSA-vq94-fv6j-x393/GHSA-vq94-fv6j-x393.json index 2b7950ca8bb..317abb76b05 100644 --- a/advisories/unreviewed/2022/05/GHSA-vq94-fv6j-x393/GHSA-vq94-fv6j-x393.json +++ b/advisories/unreviewed/2022/05/GHSA-vq94-fv6j-x393/GHSA-vq94-fv6j-x393.json @@ -7,12 +7,8 @@ "CVE-2013-3529" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) message, (2) photo-message, or (3) youtube-message parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqp8-6jg3-37hc/GHSA-vqp8-6jg3-37hc.json b/advisories/unreviewed/2022/05/GHSA-vqp8-6jg3-37hc/GHSA-vqp8-6jg3-37hc.json index 9839ff54259..653298e8578 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqp8-6jg3-37hc/GHSA-vqp8-6jg3-37hc.json +++ b/advisories/unreviewed/2022/05/GHSA-vqp8-6jg3-37hc/GHSA-vqp8-6jg3-37hc.json @@ -7,12 +7,8 @@ "CVE-2012-5349" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) title, or (3) dl parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqpw-3pfq-73hh/GHSA-vqpw-3pfq-73hh.json b/advisories/unreviewed/2022/05/GHSA-vqpw-3pfq-73hh/GHSA-vqpw-3pfq-73hh.json index 7a34e20c901..3bb089eb863 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqpw-3pfq-73hh/GHSA-vqpw-3pfq-73hh.json +++ b/advisories/unreviewed/2022/05/GHSA-vqpw-3pfq-73hh/GHSA-vqpw-3pfq-73hh.json @@ -7,12 +7,8 @@ "CVE-2012-6034" ], "details": "The (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3) TMEMC_SAVE_GET_POOL_UUID sub-operation in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 \"do not check incoming guest output buffer pointers,\" which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqww-3grf-6875/GHSA-vqww-3grf-6875.json b/advisories/unreviewed/2022/05/GHSA-vqww-3grf-6875/GHSA-vqww-3grf-6875.json index 82c7d0aeca5..58c7d846a73 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqww-3grf-6875/GHSA-vqww-3grf-6875.json +++ b/advisories/unreviewed/2022/05/GHSA-vqww-3grf-6875/GHSA-vqww-3grf-6875.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vr42-r92j-3v22/GHSA-vr42-r92j-3v22.json b/advisories/unreviewed/2022/05/GHSA-vr42-r92j-3v22/GHSA-vr42-r92j-3v22.json index dc1b8fc89c8..199a69d7925 100644 --- a/advisories/unreviewed/2022/05/GHSA-vr42-r92j-3v22/GHSA-vr42-r92j-3v22.json +++ b/advisories/unreviewed/2022/05/GHSA-vr42-r92j-3v22/GHSA-vr42-r92j-3v22.json @@ -7,12 +7,8 @@ "CVE-2012-5695" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct (1) shell metacharacter or (2) SQL injection attacks or (3) send an SMS message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vrg2-5ghr-57mf/GHSA-vrg2-5ghr-57mf.json b/advisories/unreviewed/2022/05/GHSA-vrg2-5ghr-57mf/GHSA-vrg2-5ghr-57mf.json index 8870c32ae4d..6f6ea987eda 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrg2-5ghr-57mf/GHSA-vrg2-5ghr-57mf.json +++ b/advisories/unreviewed/2022/05/GHSA-vrg2-5ghr-57mf/GHSA-vrg2-5ghr-57mf.json @@ -7,12 +7,8 @@ "CVE-2012-5322" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the (1) pvcName parameter to webconfig/wan/confirm.html/confirm or (2) host_name_txtbox parameter to webconfig/lan/lan_config.html/local_lan_config.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vwf4-vxx7-44pc/GHSA-vwf4-vxx7-44pc.json b/advisories/unreviewed/2022/05/GHSA-vwf4-vxx7-44pc/GHSA-vwf4-vxx7-44pc.json index 8fd90dd2056..5a1eaa5e6d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwf4-vxx7-44pc/GHSA-vwf4-vxx7-44pc.json +++ b/advisories/unreviewed/2022/05/GHSA-vwf4-vxx7-44pc/GHSA-vwf4-vxx7-44pc.json @@ -7,12 +7,8 @@ "CVE-2012-5266" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vx3h-mw4x-r37x/GHSA-vx3h-mw4x-r37x.json b/advisories/unreviewed/2022/05/GHSA-vx3h-mw4x-r37x/GHSA-vx3h-mw4x-r37x.json index d816f00a9b7..162e7d27942 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx3h-mw4x-r37x/GHSA-vx3h-mw4x-r37x.json +++ b/advisories/unreviewed/2022/05/GHSA-vx3h-mw4x-r37x/GHSA-vx3h-mw4x-r37x.json @@ -7,12 +7,8 @@ "CVE-2012-4547" ], "details": "Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w22q-p8f6-9pph/GHSA-w22q-p8f6-9pph.json b/advisories/unreviewed/2022/05/GHSA-w22q-p8f6-9pph/GHSA-w22q-p8f6-9pph.json index d7f17f0fd7f..38b7a5a4150 100644 --- a/advisories/unreviewed/2022/05/GHSA-w22q-p8f6-9pph/GHSA-w22q-p8f6-9pph.json +++ b/advisories/unreviewed/2022/05/GHSA-w22q-p8f6-9pph/GHSA-w22q-p8f6-9pph.json @@ -7,12 +7,8 @@ "CVE-2012-5945" ], "details": "Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long (1) ComboList or (2) ColComboList property value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w353-4w98-xmh3/GHSA-w353-4w98-xmh3.json b/advisories/unreviewed/2022/05/GHSA-w353-4w98-xmh3/GHSA-w353-4w98-xmh3.json index 22252fb8ba5..0e558f300cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-w353-4w98-xmh3/GHSA-w353-4w98-xmh3.json +++ b/advisories/unreviewed/2022/05/GHSA-w353-4w98-xmh3/GHSA-w353-4w98-xmh3.json @@ -7,12 +7,8 @@ "CVE-2012-5514" ], "details": "The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w372-6384-f8p5/GHSA-w372-6384-f8p5.json b/advisories/unreviewed/2022/05/GHSA-w372-6384-f8p5/GHSA-w372-6384-f8p5.json index 0833a0ccaac..36447ee0966 100644 --- a/advisories/unreviewed/2022/05/GHSA-w372-6384-f8p5/GHSA-w372-6384-f8p5.json +++ b/advisories/unreviewed/2022/05/GHSA-w372-6384-f8p5/GHSA-w372-6384-f8p5.json @@ -7,12 +7,8 @@ "CVE-2012-5478" ], "details": "The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w3h7-76vf-jfc7/GHSA-w3h7-76vf-jfc7.json b/advisories/unreviewed/2022/05/GHSA-w3h7-76vf-jfc7/GHSA-w3h7-76vf-jfc7.json index 1fce3f011cf..212f6fa3c64 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3h7-76vf-jfc7/GHSA-w3h7-76vf-jfc7.json +++ b/advisories/unreviewed/2022/05/GHSA-w3h7-76vf-jfc7/GHSA-w3h7-76vf-jfc7.json @@ -7,12 +7,8 @@ "CVE-2012-5312" ], "details": "SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3p8-mf2q-qgxw/GHSA-w3p8-mf2q-qgxw.json b/advisories/unreviewed/2022/05/GHSA-w3p8-mf2q-qgxw/GHSA-w3p8-mf2q-qgxw.json index cd8a561bfc8..ff6aa78be19 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3p8-mf2q-qgxw/GHSA-w3p8-mf2q-qgxw.json +++ b/advisories/unreviewed/2022/05/GHSA-w3p8-mf2q-qgxw/GHSA-w3p8-mf2q-qgxw.json @@ -7,12 +7,8 @@ "CVE-2012-4998" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in starCMS allows remote attackers to inject arbitrary web script or HTML via the q parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3vc-v49w-cp33/GHSA-w3vc-v49w-cp33.json b/advisories/unreviewed/2022/05/GHSA-w3vc-v49w-cp33/GHSA-w3vc-v49w-cp33.json index 69b505aa2b7..0ebc097bbf6 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3vc-v49w-cp33/GHSA-w3vc-v49w-cp33.json +++ b/advisories/unreviewed/2022/05/GHSA-w3vc-v49w-cp33/GHSA-w3vc-v49w-cp33.json @@ -7,12 +7,8 @@ "CVE-2012-4892" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title_en, (2) summary_en, or (3) body_en parameter in a submitnews action to the news module, a different vulnerability than CVE-2012-4890. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w48m-gwjw-75cg/GHSA-w48m-gwjw-75cg.json b/advisories/unreviewed/2022/05/GHSA-w48m-gwjw-75cg/GHSA-w48m-gwjw-75cg.json index d36015f1d16..c56c1b2b174 100644 --- a/advisories/unreviewed/2022/05/GHSA-w48m-gwjw-75cg/GHSA-w48m-gwjw-75cg.json +++ b/advisories/unreviewed/2022/05/GHSA-w48m-gwjw-75cg/GHSA-w48m-gwjw-75cg.json @@ -7,12 +7,8 @@ "CVE-2012-4333" ], "details": "Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4qh-3585-rqqc/GHSA-w4qh-3585-rqqc.json b/advisories/unreviewed/2022/05/GHSA-w4qh-3585-rqqc/GHSA-w4qh-3585-rqqc.json index ef52cd5f85a..9bfaadc1a1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4qh-3585-rqqc/GHSA-w4qh-3585-rqqc.json +++ b/advisories/unreviewed/2022/05/GHSA-w4qh-3585-rqqc/GHSA-w4qh-3585-rqqc.json @@ -7,12 +7,8 @@ "CVE-2012-4989" ], "details": "Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote attackers to inject arbitrary web script or HTML via the parent parameter in an info action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4xw-cqg8-9w7r/GHSA-w4xw-cqg8-9w7r.json b/advisories/unreviewed/2022/05/GHSA-w4xw-cqg8-9w7r/GHSA-w4xw-cqg8-9w7r.json index c19d84208d6..0723e17d270 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4xw-cqg8-9w7r/GHSA-w4xw-cqg8-9w7r.json +++ b/advisories/unreviewed/2022/05/GHSA-w4xw-cqg8-9w7r/GHSA-w4xw-cqg8-9w7r.json @@ -7,12 +7,8 @@ "CVE-2012-5334" ], "details": "SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w54g-qff3-v6vw/GHSA-w54g-qff3-v6vw.json b/advisories/unreviewed/2022/05/GHSA-w54g-qff3-v6vw/GHSA-w54g-qff3-v6vw.json index b7f972cbdc1..64095b9fc72 100644 --- a/advisories/unreviewed/2022/05/GHSA-w54g-qff3-v6vw/GHSA-w54g-qff3-v6vw.json +++ b/advisories/unreviewed/2022/05/GHSA-w54g-qff3-v6vw/GHSA-w54g-qff3-v6vw.json @@ -7,12 +7,8 @@ "CVE-2012-5343" ], "details": "Cross-site scripting (XSS) vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, related to the \"PHP_SELF\" variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w573-gg4r-5p24/GHSA-w573-gg4r-5p24.json b/advisories/unreviewed/2022/05/GHSA-w573-gg4r-5p24/GHSA-w573-gg4r-5p24.json index 76ecb20db0a..abccaad2c93 100644 --- a/advisories/unreviewed/2022/05/GHSA-w573-gg4r-5p24/GHSA-w573-gg4r-5p24.json +++ b/advisories/unreviewed/2022/05/GHSA-w573-gg4r-5p24/GHSA-w573-gg4r-5p24.json @@ -7,12 +7,8 @@ "CVE-2012-5258" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5cr-843p-q4hf/GHSA-w5cr-843p-q4hf.json b/advisories/unreviewed/2022/05/GHSA-w5cr-843p-q4hf/GHSA-w5cr-843p-q4hf.json index aa0139b33ef..b2c90988a55 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5cr-843p-q4hf/GHSA-w5cr-843p-q4hf.json +++ b/advisories/unreviewed/2022/05/GHSA-w5cr-843p-q4hf/GHSA-w5cr-843p-q4hf.json @@ -7,12 +7,8 @@ "CVE-2012-4271" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in bad-behavior-wordpress-admin.php in the Bad Behavior plugin before 2.0.47 and 2.2.x before 2.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) httpbl_key, (3) httpbl_maxage, (4) httpbl_threat, (5) reverse_proxy_addresses, or (6) reverse_proxy_header parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5p3-vhf8-9h55/GHSA-w5p3-vhf8-9h55.json b/advisories/unreviewed/2022/05/GHSA-w5p3-vhf8-9h55/GHSA-w5p3-vhf8-9h55.json index 03531f2569d..b04cb46de0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5p3-vhf8-9h55/GHSA-w5p3-vhf8-9h55.json +++ b/advisories/unreviewed/2022/05/GHSA-w5p3-vhf8-9h55/GHSA-w5p3-vhf8-9h55.json @@ -7,12 +7,8 @@ "CVE-2012-4595" ], "details": "McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w65x-2cwr-hcvq/GHSA-w65x-2cwr-hcvq.json b/advisories/unreviewed/2022/05/GHSA-w65x-2cwr-hcvq/GHSA-w65x-2cwr-hcvq.json index abb5a432ef6..e6ab0569946 100644 --- a/advisories/unreviewed/2022/05/GHSA-w65x-2cwr-hcvq/GHSA-w65x-2cwr-hcvq.json +++ b/advisories/unreviewed/2022/05/GHSA-w65x-2cwr-hcvq/GHSA-w65x-2cwr-hcvq.json @@ -7,12 +7,8 @@ "CVE-2012-4933" ], "details": "The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1) GetFile_Password and (2) GetConfigInfo_Password operations, which allows remote attackers to obtain sensitive information via a crafted rtrlet/rtr request for the HandleMaintenanceCalls function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w6cp-9cff-68rv/GHSA-w6cp-9cff-68rv.json b/advisories/unreviewed/2022/05/GHSA-w6cp-9cff-68rv/GHSA-w6cp-9cff-68rv.json index dce7f02263f..218e13981a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6cp-9cff-68rv/GHSA-w6cp-9cff-68rv.json +++ b/advisories/unreviewed/2022/05/GHSA-w6cp-9cff-68rv/GHSA-w6cp-9cff-68rv.json @@ -7,12 +7,8 @@ "CVE-2012-5905" ], "details": "Buffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service (crash) via a long string in a FEAT command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w6p2-83wm-qwh2/GHSA-w6p2-83wm-qwh2.json b/advisories/unreviewed/2022/05/GHSA-w6p2-83wm-qwh2/GHSA-w6p2-83wm-qwh2.json index cd889b0a50d..cd3182d82ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6p2-83wm-qwh2/GHSA-w6p2-83wm-qwh2.json +++ b/advisories/unreviewed/2022/05/GHSA-w6p2-83wm-qwh2/GHSA-w6p2-83wm-qwh2.json @@ -7,12 +7,8 @@ "CVE-2012-4840" ], "details": "IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w6w8-5v83-vwjf/GHSA-w6w8-5v83-vwjf.json b/advisories/unreviewed/2022/05/GHSA-w6w8-5v83-vwjf/GHSA-w6w8-5v83-vwjf.json index 7086fee3f17..9205f29fc78 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6w8-5v83-vwjf/GHSA-w6w8-5v83-vwjf.json +++ b/advisories/unreviewed/2022/05/GHSA-w6w8-5v83-vwjf/GHSA-w6w8-5v83-vwjf.json @@ -7,12 +7,8 @@ "CVE-2012-4915" ], "details": "Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to libs/pdf.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w7g3-8fq6-h7f2/GHSA-w7g3-8fq6-h7f2.json b/advisories/unreviewed/2022/05/GHSA-w7g3-8fq6-h7f2/GHSA-w7g3-8fq6-h7f2.json index f45a1a800b8..bbd62fa65f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7g3-8fq6-h7f2/GHSA-w7g3-8fq6-h7f2.json +++ b/advisories/unreviewed/2022/05/GHSA-w7g3-8fq6-h7f2/GHSA-w7g3-8fq6-h7f2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc7v-583f-h8pv/GHSA-wc7v-583f-h8pv.json b/advisories/unreviewed/2022/05/GHSA-wc7v-583f-h8pv/GHSA-wc7v-583f-h8pv.json index eb391e31305..61e721a66d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc7v-583f-h8pv/GHSA-wc7v-583f-h8pv.json +++ b/advisories/unreviewed/2022/05/GHSA-wc7v-583f-h8pv/GHSA-wc7v-583f-h8pv.json @@ -7,12 +7,8 @@ "CVE-2012-5270" ], "details": "Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wcfh-9hh9-jc6j/GHSA-wcfh-9hh9-jc6j.json b/advisories/unreviewed/2022/05/GHSA-wcfh-9hh9-jc6j/GHSA-wcfh-9hh9-jc6j.json index 0cf341d8b72..eef4bd6a2e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcfh-9hh9-jc6j/GHSA-wcfh-9hh9-jc6j.json +++ b/advisories/unreviewed/2022/05/GHSA-wcfh-9hh9-jc6j/GHSA-wcfh-9hh9-jc6j.json @@ -7,12 +7,8 @@ "CVE-2013-1893" ], "details": "SQL injection vulnerability in addressbookprovider.php in ownCloud Server before 5.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to the contacts application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wcvg-3p6h-8pqh/GHSA-wcvg-3p6h-8pqh.json b/advisories/unreviewed/2022/05/GHSA-wcvg-3p6h-8pqh/GHSA-wcvg-3p6h-8pqh.json index c24a781c871..ecb9814b777 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcvg-3p6h-8pqh/GHSA-wcvg-3p6h-8pqh.json +++ b/advisories/unreviewed/2022/05/GHSA-wcvg-3p6h-8pqh/GHSA-wcvg-3p6h-8pqh.json @@ -7,12 +7,8 @@ "CVE-2012-5950" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to hijack the authentication of arbitrary users for requests that modify data records via vectors involving (1) the html/en/default/ directory or (2) sqa/html/en/default/process/comm/saveProps.jsp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfp4-9h57-4h4w/GHSA-wfp4-9h57-4h4w.json b/advisories/unreviewed/2022/05/GHSA-wfp4-9h57-4h4w/GHSA-wfp4-9h57-4h4w.json index 6b75828e52a..4e033d0d218 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfp4-9h57-4h4w/GHSA-wfp4-9h57-4h4w.json +++ b/advisories/unreviewed/2022/05/GHSA-wfp4-9h57-4h4w/GHSA-wfp4-9h57-4h4w.json @@ -7,12 +7,8 @@ "CVE-2012-5259" ], "details": "Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wg32-p6mg-39jj/GHSA-wg32-p6mg-39jj.json b/advisories/unreviewed/2022/05/GHSA-wg32-p6mg-39jj/GHSA-wg32-p6mg-39jj.json index 7c8d3d6c2ab..a46c9971a64 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg32-p6mg-39jj/GHSA-wg32-p6mg-39jj.json +++ b/advisories/unreviewed/2022/05/GHSA-wg32-p6mg-39jj/GHSA-wg32-p6mg-39jj.json @@ -7,12 +7,8 @@ "CVE-2012-5770" ], "details": "The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic via a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wg7c-4w5w-r4pv/GHSA-wg7c-4w5w-r4pv.json b/advisories/unreviewed/2022/05/GHSA-wg7c-4w5w-r4pv/GHSA-wg7c-4w5w-r4pv.json index 45d3fc98251..6f6bdb65614 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg7c-4w5w-r4pv/GHSA-wg7c-4w5w-r4pv.json +++ b/advisories/unreviewed/2022/05/GHSA-wg7c-4w5w-r4pv/GHSA-wg7c-4w5w-r4pv.json @@ -7,12 +7,8 @@ "CVE-2012-5687" ], "details": "Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to the help/ URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh2j-gcwg-637v/GHSA-wh2j-gcwg-637v.json b/advisories/unreviewed/2022/05/GHSA-wh2j-gcwg-637v/GHSA-wh2j-gcwg-637v.json index 0c6e8502b53..8fcdb0d906a 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh2j-gcwg-637v/GHSA-wh2j-gcwg-637v.json +++ b/advisories/unreviewed/2022/05/GHSA-wh2j-gcwg-637v/GHSA-wh2j-gcwg-637v.json @@ -7,12 +7,8 @@ "CVE-2012-5865" ], "details": "SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh6h-h7qw-43xw/GHSA-wh6h-h7qw-43xw.json b/advisories/unreviewed/2022/05/GHSA-wh6h-h7qw-43xw/GHSA-wh6h-h7qw-43xw.json index 4790de8fe45..6ba3032c34c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh6h-h7qw-43xw/GHSA-wh6h-h7qw-43xw.json +++ b/advisories/unreviewed/2022/05/GHSA-wh6h-h7qw-43xw/GHSA-wh6h-h7qw-43xw.json @@ -7,12 +7,8 @@ "CVE-2012-5120" ], "details": "Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to an array.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-whgj-f82x-p3xc/GHSA-whgj-f82x-p3xc.json b/advisories/unreviewed/2022/05/GHSA-whgj-f82x-p3xc/GHSA-whgj-f82x-p3xc.json index c02ab05e835..16384f05be4 100644 --- a/advisories/unreviewed/2022/05/GHSA-whgj-f82x-p3xc/GHSA-whgj-f82x-p3xc.json +++ b/advisories/unreviewed/2022/05/GHSA-whgj-f82x-p3xc/GHSA-whgj-f82x-p3xc.json @@ -7,12 +7,8 @@ "CVE-2009-2540" ], "details": "Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-whxq-f55p-gv8h/GHSA-whxq-f55p-gv8h.json b/advisories/unreviewed/2022/05/GHSA-whxq-f55p-gv8h/GHSA-whxq-f55p-gv8h.json index 5076177406e..c46578026c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-whxq-f55p-gv8h/GHSA-whxq-f55p-gv8h.json +++ b/advisories/unreviewed/2022/05/GHSA-whxq-f55p-gv8h/GHSA-whxq-f55p-gv8h.json @@ -7,12 +7,8 @@ "CVE-2012-5305" ], "details": "Cross-site scripting (XSS) vulnerability in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allows remote attackers to inject arbitrary web script or HTML via the domain parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wjjf-2f85-8256/GHSA-wjjf-2f85-8256.json b/advisories/unreviewed/2022/05/GHSA-wjjf-2f85-8256/GHSA-wjjf-2f85-8256.json index e232a3e0f34..baf1b8f9e62 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjjf-2f85-8256/GHSA-wjjf-2f85-8256.json +++ b/advisories/unreviewed/2022/05/GHSA-wjjf-2f85-8256/GHSA-wjjf-2f85-8256.json @@ -7,12 +7,8 @@ "CVE-2013-1776" ], "details": "sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wjpj-4vgp-2pvr/GHSA-wjpj-4vgp-2pvr.json b/advisories/unreviewed/2022/05/GHSA-wjpj-4vgp-2pvr/GHSA-wjpj-4vgp-2pvr.json index f4f332c302a..6c25aa11478 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjpj-4vgp-2pvr/GHSA-wjpj-4vgp-2pvr.json +++ b/advisories/unreviewed/2022/05/GHSA-wjpj-4vgp-2pvr/GHSA-wjpj-4vgp-2pvr.json @@ -7,12 +7,8 @@ "CVE-2012-5955" ], "details": "Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server (WAS) for z/OS allows remote attackers to execute arbitrary commands via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wpgc-hc8c-3fvw/GHSA-wpgc-hc8c-3fvw.json b/advisories/unreviewed/2022/05/GHSA-wpgc-hc8c-3fvw/GHSA-wpgc-hc8c-3fvw.json index f3f4460f6b3..0a09083586e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpgc-hc8c-3fvw/GHSA-wpgc-hc8c-3fvw.json +++ b/advisories/unreviewed/2022/05/GHSA-wpgc-hc8c-3fvw/GHSA-wpgc-hc8c-3fvw.json @@ -7,12 +7,8 @@ "CVE-2012-4994" ], "details": "SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqjr-cw4w-w7rx/GHSA-wqjr-cw4w-w7rx.json b/advisories/unreviewed/2022/05/GHSA-wqjr-cw4w-w7rx/GHSA-wqjr-cw4w-w7rx.json index 90f20aedfcb..1c78cd9fd04 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqjr-cw4w-w7rx/GHSA-wqjr-cw4w-w7rx.json +++ b/advisories/unreviewed/2022/05/GHSA-wqjr-cw4w-w7rx/GHSA-wqjr-cw4w-w7rx.json @@ -7,12 +7,8 @@ "CVE-2013-0577" ], "details": "The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or delete documents or scripts via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wrrw-3jqq-qcvc/GHSA-wrrw-3jqq-qcvc.json b/advisories/unreviewed/2022/05/GHSA-wrrw-3jqq-qcvc/GHSA-wrrw-3jqq-qcvc.json index 17039294391..c5c4572b7fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrrw-3jqq-qcvc/GHSA-wrrw-3jqq-qcvc.json +++ b/advisories/unreviewed/2022/05/GHSA-wrrw-3jqq-qcvc/GHSA-wrrw-3jqq-qcvc.json @@ -7,12 +7,8 @@ "CVE-2012-5525" ], "details": "The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wvmm-4rq2-x524/GHSA-wvmm-4rq2-x524.json b/advisories/unreviewed/2022/05/GHSA-wvmm-4rq2-x524/GHSA-wvmm-4rq2-x524.json index 2ebc06fb08a..d2a2d9d9787 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvmm-4rq2-x524/GHSA-wvmm-4rq2-x524.json +++ b/advisories/unreviewed/2022/05/GHSA-wvmm-4rq2-x524/GHSA-wvmm-4rq2-x524.json @@ -7,12 +7,8 @@ "CVE-2013-2962" ], "details": "Buffer overflow in the Launcher in IBM WebSphere Transformation Extender 8.4.x before 8.4.0.4 allows local users to cause a denial of service (process crash or Admin Console command-stream outage) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ww3r-35r8-mxqp/GHSA-ww3r-35r8-mxqp.json b/advisories/unreviewed/2022/05/GHSA-ww3r-35r8-mxqp/GHSA-ww3r-35r8-mxqp.json index 51c72505be3..056ed92013f 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww3r-35r8-mxqp/GHSA-ww3r-35r8-mxqp.json +++ b/advisories/unreviewed/2022/05/GHSA-ww3r-35r8-mxqp/GHSA-ww3r-35r8-mxqp.json @@ -7,12 +7,8 @@ "CVE-2012-4924" ], "details": "Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wx93-8gv6-wmq3/GHSA-wx93-8gv6-wmq3.json b/advisories/unreviewed/2022/05/GHSA-wx93-8gv6-wmq3/GHSA-wx93-8gv6-wmq3.json index 0ce0e4db9e8..e4c682e05c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-wx93-8gv6-wmq3/GHSA-wx93-8gv6-wmq3.json +++ b/advisories/unreviewed/2022/05/GHSA-wx93-8gv6-wmq3/GHSA-wx93-8gv6-wmq3.json @@ -7,12 +7,8 @@ "CVE-2012-6562" ], "details": "engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x235-7h97-9rjq/GHSA-x235-7h97-9rjq.json b/advisories/unreviewed/2022/05/GHSA-x235-7h97-9rjq/GHSA-x235-7h97-9rjq.json index fd68aa8e9f9..4a2a455038f 100644 --- a/advisories/unreviewed/2022/05/GHSA-x235-7h97-9rjq/GHSA-x235-7h97-9rjq.json +++ b/advisories/unreviewed/2022/05/GHSA-x235-7h97-9rjq/GHSA-x235-7h97-9rjq.json @@ -7,12 +7,8 @@ "CVE-2013-1454" ], "details": "Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to \"Coding errors.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x2c2-p9xj-wcjm/GHSA-x2c2-p9xj-wcjm.json b/advisories/unreviewed/2022/05/GHSA-x2c2-p9xj-wcjm/GHSA-x2c2-p9xj-wcjm.json index 658a28663d1..f3e74ca0e75 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2c2-p9xj-wcjm/GHSA-x2c2-p9xj-wcjm.json +++ b/advisories/unreviewed/2022/05/GHSA-x2c2-p9xj-wcjm/GHSA-x2c2-p9xj-wcjm.json @@ -7,12 +7,8 @@ "CVE-2012-5605" ], "details": "Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x39f-9gvv-9gr5/GHSA-x39f-9gvv-9gr5.json b/advisories/unreviewed/2022/05/GHSA-x39f-9gvv-9gr5/GHSA-x39f-9gvv-9gr5.json index f098fcee04a..1e49729c156 100644 --- a/advisories/unreviewed/2022/05/GHSA-x39f-9gvv-9gr5/GHSA-x39f-9gvv-9gr5.json +++ b/advisories/unreviewed/2022/05/GHSA-x39f-9gvv-9gr5/GHSA-x39f-9gvv-9gr5.json @@ -7,12 +7,8 @@ "CVE-2012-4743" ], "details": "Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the (1) ss, (2) sm, (3) align, or (4) category parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3wc-cq8w-x9q6/GHSA-x3wc-cq8w-x9q6.json b/advisories/unreviewed/2022/05/GHSA-x3wc-cq8w-x9q6/GHSA-x3wc-cq8w-x9q6.json index ec9bba04bec..bac73cf6125 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3wc-cq8w-x9q6/GHSA-x3wc-cq8w-x9q6.json +++ b/advisories/unreviewed/2022/05/GHSA-x3wc-cq8w-x9q6/GHSA-x3wc-cq8w-x9q6.json @@ -7,12 +7,8 @@ "CVE-2013-3040" ], "details": "IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x4r3-f427-2572/GHSA-x4r3-f427-2572.json b/advisories/unreviewed/2022/05/GHSA-x4r3-f427-2572/GHSA-x4r3-f427-2572.json index f5e192a8f85..52138454b28 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4r3-f427-2572/GHSA-x4r3-f427-2572.json +++ b/advisories/unreviewed/2022/05/GHSA-x4r3-f427-2572/GHSA-x4r3-f427-2572.json @@ -7,12 +7,8 @@ "CVE-2012-5227" ], "details": "SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x57j-xvfg-j6jc/GHSA-x57j-xvfg-j6jc.json b/advisories/unreviewed/2022/05/GHSA-x57j-xvfg-j6jc/GHSA-x57j-xvfg-j6jc.json index b354d66a60b..be1bbcfde31 100644 --- a/advisories/unreviewed/2022/05/GHSA-x57j-xvfg-j6jc/GHSA-x57j-xvfg-j6jc.json +++ b/advisories/unreviewed/2022/05/GHSA-x57j-xvfg-j6jc/GHSA-x57j-xvfg-j6jc.json @@ -7,12 +7,8 @@ "CVE-2012-4226" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Title, (2) Content, or (3) New category field to wordpress/ or (4) query string to wordpress/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6p5-v8jx-m428/GHSA-x6p5-v8jx-m428.json b/advisories/unreviewed/2022/05/GHSA-x6p5-v8jx-m428/GHSA-x6p5-v8jx-m428.json index dd88ff17131..7b97283c314 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6p5-v8jx-m428/GHSA-x6p5-v8jx-m428.json +++ b/advisories/unreviewed/2022/05/GHSA-x6p5-v8jx-m428/GHSA-x6p5-v8jx-m428.json @@ -7,12 +7,8 @@ "CVE-2012-6357" ], "details": "IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x78v-cc49-p862/GHSA-x78v-cc49-p862.json b/advisories/unreviewed/2022/05/GHSA-x78v-cc49-p862/GHSA-x78v-cc49-p862.json index 95e6ce1147b..563865b1556 100644 --- a/advisories/unreviewed/2022/05/GHSA-x78v-cc49-p862/GHSA-x78v-cc49-p862.json +++ b/advisories/unreviewed/2022/05/GHSA-x78v-cc49-p862/GHSA-x78v-cc49-p862.json @@ -7,12 +7,8 @@ "CVE-2013-3594" ], "details": "The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device reset) or possibly execute arbitrary code by sending many packets to TCP port 22.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x883-wq6q-rvfh/GHSA-x883-wq6q-rvfh.json b/advisories/unreviewed/2022/05/GHSA-x883-wq6q-rvfh/GHSA-x883-wq6q-rvfh.json index 0545932c061..3e845ccc7d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-x883-wq6q-rvfh/GHSA-x883-wq6q-rvfh.json +++ b/advisories/unreviewed/2022/05/GHSA-x883-wq6q-rvfh/GHSA-x883-wq6q-rvfh.json @@ -7,12 +7,8 @@ "CVE-2012-4858" ], "details": "IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x885-qhjh-5vg4/GHSA-x885-qhjh-5vg4.json b/advisories/unreviewed/2022/05/GHSA-x885-qhjh-5vg4/GHSA-x885-qhjh-5vg4.json index 9714f27417f..bdb6beb7311 100644 --- a/advisories/unreviewed/2022/05/GHSA-x885-qhjh-5vg4/GHSA-x885-qhjh-5vg4.json +++ b/advisories/unreviewed/2022/05/GHSA-x885-qhjh-5vg4/GHSA-x885-qhjh-5vg4.json @@ -7,12 +7,8 @@ "CVE-2013-2810" ], "details": "Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x8g4-86jf-hpqc/GHSA-x8g4-86jf-hpqc.json b/advisories/unreviewed/2022/05/GHSA-x8g4-86jf-hpqc/GHSA-x8g4-86jf-hpqc.json index 0a4a6ce3146..80736c18497 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8g4-86jf-hpqc/GHSA-x8g4-86jf-hpqc.json +++ b/advisories/unreviewed/2022/05/GHSA-x8g4-86jf-hpqc/GHSA-x8g4-86jf-hpqc.json @@ -7,12 +7,8 @@ "CVE-2012-5320" ], "details": "Cross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x8mp-93pp-v46f/GHSA-x8mp-93pp-v46f.json b/advisories/unreviewed/2022/05/GHSA-x8mp-93pp-v46f/GHSA-x8mp-93pp-v46f.json index 1cb879ff34e..0d114bba329 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8mp-93pp-v46f/GHSA-x8mp-93pp-v46f.json +++ b/advisories/unreviewed/2022/05/GHSA-x8mp-93pp-v46f/GHSA-x8mp-93pp-v46f.json @@ -7,12 +7,8 @@ "CVE-2013-2964" ], "details": "Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x94c-5pj5-2m6j/GHSA-x94c-5pj5-2m6j.json b/advisories/unreviewed/2022/05/GHSA-x94c-5pj5-2m6j/GHSA-x94c-5pj5-2m6j.json index dbe9dd718ee..b785d5efbef 100644 --- a/advisories/unreviewed/2022/05/GHSA-x94c-5pj5-2m6j/GHSA-x94c-5pj5-2m6j.json +++ b/advisories/unreviewed/2022/05/GHSA-x94c-5pj5-2m6j/GHSA-x94c-5pj5-2m6j.json @@ -7,12 +7,8 @@ "CVE-2012-5098" ], "details": "Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to rate.php, (2) cid parameter to view.php, or (3) t parameter to pop.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9cw-hr57-p634/GHSA-x9cw-hr57-p634.json b/advisories/unreviewed/2022/05/GHSA-x9cw-hr57-p634/GHSA-x9cw-hr57-p634.json index 12cd7582662..1f297c10043 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9cw-hr57-p634/GHSA-x9cw-hr57-p634.json +++ b/advisories/unreviewed/2022/05/GHSA-x9cw-hr57-p634/GHSA-x9cw-hr57-p634.json @@ -7,12 +7,8 @@ "CVE-2012-4591" ], "details": "About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xccj-6374-w6q9/GHSA-xccj-6374-w6q9.json b/advisories/unreviewed/2022/05/GHSA-xccj-6374-w6q9/GHSA-xccj-6374-w6q9.json index fa12178f2b1..d45a88e4977 100644 --- a/advisories/unreviewed/2022/05/GHSA-xccj-6374-w6q9/GHSA-xccj-6374-w6q9.json +++ b/advisories/unreviewed/2022/05/GHSA-xccj-6374-w6q9/GHSA-xccj-6374-w6q9.json @@ -7,12 +7,8 @@ "CVE-2012-6524" ], "details": "SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xchh-r483-j5m5/GHSA-xchh-r483-j5m5.json b/advisories/unreviewed/2022/05/GHSA-xchh-r483-j5m5/GHSA-xchh-r483-j5m5.json index e14670b003e..de575c7ada9 100644 --- a/advisories/unreviewed/2022/05/GHSA-xchh-r483-j5m5/GHSA-xchh-r483-j5m5.json +++ b/advisories/unreviewed/2022/05/GHSA-xchh-r483-j5m5/GHSA-xchh-r483-j5m5.json @@ -7,12 +7,8 @@ "CVE-2013-1952" ], "details": "Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device's interrupt remapping table entries for MSI interrupts, which allows local guest domains to cause a denial of service (interrupt injection) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xgcf-925j-mrg9/GHSA-xgcf-925j-mrg9.json b/advisories/unreviewed/2022/05/GHSA-xgcf-925j-mrg9/GHSA-xgcf-925j-mrg9.json index 7e68a0c6f75..8eee713193c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgcf-925j-mrg9/GHSA-xgcf-925j-mrg9.json +++ b/advisories/unreviewed/2022/05/GHSA-xgcf-925j-mrg9/GHSA-xgcf-925j-mrg9.json @@ -7,12 +7,8 @@ "CVE-2013-1920" ], "details": "Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running \"under memory pressure\" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xgg6-h359-rv3p/GHSA-xgg6-h359-rv3p.json b/advisories/unreviewed/2022/05/GHSA-xgg6-h359-rv3p/GHSA-xgg6-h359-rv3p.json index 18433bf8c8e..3e2fefede66 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgg6-h359-rv3p/GHSA-xgg6-h359-rv3p.json +++ b/advisories/unreviewed/2022/05/GHSA-xgg6-h359-rv3p/GHSA-xgg6-h359-rv3p.json @@ -7,12 +7,8 @@ "CVE-2012-6359" ], "details": "IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 do not check whether an OpenID attribute is signed in the (1) SREG (aka simple registration extension) and (2) AX (aka attribute exchange extension) cases, which allows man-in-the-middle attackers to spoof OpenID provider data by inserting unsigned attributes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xh64-7799-q5r8/GHSA-xh64-7799-q5r8.json b/advisories/unreviewed/2022/05/GHSA-xh64-7799-q5r8/GHSA-xh64-7799-q5r8.json index 0a0fb85be48..13d6db4dc9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh64-7799-q5r8/GHSA-xh64-7799-q5r8.json +++ b/advisories/unreviewed/2022/05/GHSA-xh64-7799-q5r8/GHSA-xh64-7799-q5r8.json @@ -7,12 +7,8 @@ "CVE-2012-4241" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Microcart 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO or (2) query string to _admin/index.php or (3) first_name, (4) last_name, (5) cc, (6) exp, (7) cvv, (8) address1, (9) address2, (10) city, (11) state, (12) zip, (13) phone, or (14) email parameter to checkout.php, which is not properly handled in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xh64-rg4w-vmpm/GHSA-xh64-rg4w-vmpm.json b/advisories/unreviewed/2022/05/GHSA-xh64-rg4w-vmpm/GHSA-xh64-rg4w-vmpm.json index 19f9614744f..465a89cfcc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh64-rg4w-vmpm/GHSA-xh64-rg4w-vmpm.json +++ b/advisories/unreviewed/2022/05/GHSA-xh64-rg4w-vmpm/GHSA-xh64-rg4w-vmpm.json @@ -7,12 +7,8 @@ "CVE-2012-5331" ], "details": "Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. (dot dot) in the page parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xh82-mjv6-hf5m/GHSA-xh82-mjv6-hf5m.json b/advisories/unreviewed/2022/05/GHSA-xh82-mjv6-hf5m/GHSA-xh82-mjv6-hf5m.json index 2bd453584a2..296de3427e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh82-mjv6-hf5m/GHSA-xh82-mjv6-hf5m.json +++ b/advisories/unreviewed/2022/05/GHSA-xh82-mjv6-hf5m/GHSA-xh82-mjv6-hf5m.json @@ -7,12 +7,8 @@ "CVE-2012-6641" ], "details": "Cross-site scripting (XSS) vulnerability in redirect.php in the Socolissimo module (modules/socolissimo/) in PrestaShop before 1.4.7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to \"parameter names and values.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhg6-f482-fr7w/GHSA-xhg6-f482-fr7w.json b/advisories/unreviewed/2022/05/GHSA-xhg6-f482-fr7w/GHSA-xhg6-f482-fr7w.json index 286538dcfb0..06b4d675615 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhg6-f482-fr7w/GHSA-xhg6-f482-fr7w.json +++ b/advisories/unreviewed/2022/05/GHSA-xhg6-f482-fr7w/GHSA-xhg6-f482-fr7w.json @@ -7,12 +7,8 @@ "CVE-2012-5818" ], "details": "ElephantDrive does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhr4-2jjv-2g88/GHSA-xhr4-2jjv-2g88.json b/advisories/unreviewed/2022/05/GHSA-xhr4-2jjv-2g88/GHSA-xhr4-2jjv-2g88.json index 3f51e724d4c..c01b872c2d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhr4-2jjv-2g88/GHSA-xhr4-2jjv-2g88.json +++ b/advisories/unreviewed/2022/05/GHSA-xhr4-2jjv-2g88/GHSA-xhr4-2jjv-2g88.json @@ -7,12 +7,8 @@ "CVE-2012-4178" ], "details": "SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmcm-4qr4-5mmq/GHSA-xmcm-4qr4-5mmq.json b/advisories/unreviewed/2022/05/GHSA-xmcm-4qr4-5mmq/GHSA-xmcm-4qr4-5mmq.json index dafda09c19b..9ed61fc880e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmcm-4qr4-5mmq/GHSA-xmcm-4qr4-5mmq.json +++ b/advisories/unreviewed/2022/05/GHSA-xmcm-4qr4-5mmq/GHSA-xmcm-4qr4-5mmq.json @@ -7,12 +7,8 @@ "CVE-2012-5100" ], "details": "Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a (1) ..%5c (dot dot encoded backslash) or (2) %2e%2e%5c (encoded dot dot backslash) in the PATH_INFO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xpj4-4xhh-w7g3/GHSA-xpj4-4xhh-w7g3.json b/advisories/unreviewed/2022/05/GHSA-xpj4-4xhh-w7g3/GHSA-xpj4-4xhh-w7g3.json index 8299d927047..156a20b2f2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpj4-4xhh-w7g3/GHSA-xpj4-4xhh-w7g3.json +++ b/advisories/unreviewed/2022/05/GHSA-xpj4-4xhh-w7g3/GHSA-xpj4-4xhh-w7g3.json @@ -7,12 +7,8 @@ "CVE-2013-3595" ], "details": "The OpenManage web application 2.5 build 1.19 on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote authenticated users to cause a denial of service (device reset) via a direct request to an unspecified OSPF URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq2x-8w8c-2hw4/GHSA-xq2x-8w8c-2hw4.json b/advisories/unreviewed/2022/05/GHSA-xq2x-8w8c-2hw4/GHSA-xq2x-8w8c-2hw4.json index c2a038cebf1..0cd54b50ac0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq2x-8w8c-2hw4/GHSA-xq2x-8w8c-2hw4.json +++ b/advisories/unreviewed/2022/05/GHSA-xq2x-8w8c-2hw4/GHSA-xq2x-8w8c-2hw4.json @@ -7,12 +7,8 @@ "CVE-2012-5683" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create new FTP users via a CreateFTP action in the ftp_management module to the default URI, (2) conduct cross-site scripting (XSS) attacks via the inFullname parameter in an UpdateAccountSettings action in the my_account module to zpanel/, or (3) conduct SQL injection attacks via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq59-rgx2-9m8c/GHSA-xq59-rgx2-9m8c.json b/advisories/unreviewed/2022/05/GHSA-xq59-rgx2-9m8c/GHSA-xq59-rgx2-9m8c.json index 903f3243d07..16413eb278a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq59-rgx2-9m8c/GHSA-xq59-rgx2-9m8c.json +++ b/advisories/unreviewed/2022/05/GHSA-xq59-rgx2-9m8c/GHSA-xq59-rgx2-9m8c.json @@ -7,12 +7,8 @@ "CVE-2012-4685" ], "details": "Cross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.6.0 before patch 1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xqm5-9jpg-h8q6/GHSA-xqm5-9jpg-h8q6.json b/advisories/unreviewed/2022/05/GHSA-xqm5-9jpg-h8q6/GHSA-xqm5-9jpg-h8q6.json index 85f327bf444..7507a045e60 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqm5-9jpg-h8q6/GHSA-xqm5-9jpg-h8q6.json +++ b/advisories/unreviewed/2022/05/GHSA-xqm5-9jpg-h8q6/GHSA-xqm5-9jpg-h8q6.json @@ -7,12 +7,8 @@ "CVE-2012-4844" ], "details": "Cross-site scripting (XSS) vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xqrw-qq76-h9pm/GHSA-xqrw-qq76-h9pm.json b/advisories/unreviewed/2022/05/GHSA-xqrw-qq76-h9pm/GHSA-xqrw-qq76-h9pm.json index d522d8eadb9..d59047c820e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqrw-qq76-h9pm/GHSA-xqrw-qq76-h9pm.json +++ b/advisories/unreviewed/2022/05/GHSA-xqrw-qq76-h9pm/GHSA-xqrw-qq76-h9pm.json @@ -7,12 +7,8 @@ "CVE-2012-5851" ], "details": "html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for remote attackers to bypass a cross-site scripting (XSS) protection mechanism via a crafted string, aka rdar problem 12019108.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xr88-75g2-cjj4/GHSA-xr88-75g2-cjj4.json b/advisories/unreviewed/2022/05/GHSA-xr88-75g2-cjj4/GHSA-xr88-75g2-cjj4.json index d23a252f64e..610fa7ccd44 100644 --- a/advisories/unreviewed/2022/05/GHSA-xr88-75g2-cjj4/GHSA-xr88-75g2-cjj4.json +++ b/advisories/unreviewed/2022/05/GHSA-xr88-75g2-cjj4/GHSA-xr88-75g2-cjj4.json @@ -7,12 +7,8 @@ "CVE-2013-1923" ], "details": "rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xrpf-jjp4-8pmh/GHSA-xrpf-jjp4-8pmh.json b/advisories/unreviewed/2022/05/GHSA-xrpf-jjp4-8pmh/GHSA-xrpf-jjp4-8pmh.json index 89e08954b65..7199657f228 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrpf-jjp4-8pmh/GHSA-xrpf-jjp4-8pmh.json +++ b/advisories/unreviewed/2022/05/GHSA-xrpf-jjp4-8pmh/GHSA-xrpf-jjp4-8pmh.json @@ -7,12 +7,8 @@ "CVE-2012-6143" ], "details": "Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xvc4-r5fw-47j4/GHSA-xvc4-r5fw-47j4.json b/advisories/unreviewed/2022/05/GHSA-xvc4-r5fw-47j4/GHSA-xvc4-r5fw-47j4.json index dfb421e6e58..2680b434956 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvc4-r5fw-47j4/GHSA-xvc4-r5fw-47j4.json +++ b/advisories/unreviewed/2022/05/GHSA-xvc4-r5fw-47j4/GHSA-xvc4-r5fw-47j4.json @@ -7,12 +7,8 @@ "CVE-2012-5573" ], "details": "The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xvgf-4x2w-f753/GHSA-xvgf-4x2w-f753.json b/advisories/unreviewed/2022/05/GHSA-xvgf-4x2w-f753/GHSA-xvgf-4x2w-f753.json index 4d988c387e3..ee6e498a77c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvgf-4x2w-f753/GHSA-xvgf-4x2w-f753.json +++ b/advisories/unreviewed/2022/05/GHSA-xvgf-4x2w-f753/GHSA-xvgf-4x2w-f753.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xvjx-r8gr-f7cg/GHSA-xvjx-r8gr-f7cg.json b/advisories/unreviewed/2022/05/GHSA-xvjx-r8gr-f7cg/GHSA-xvjx-r8gr-f7cg.json index 5f18c7eede3..315b58ec35c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvjx-r8gr-f7cg/GHSA-xvjx-r8gr-f7cg.json +++ b/advisories/unreviewed/2022/05/GHSA-xvjx-r8gr-f7cg/GHSA-xvjx-r8gr-f7cg.json @@ -7,12 +7,8 @@ "CVE-2012-4872" ], "details": "Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web script or HTML via certain vectors, possibly a crafted ticket description.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx57-rmwj-vwq3/GHSA-xx57-rmwj-vwq3.json b/advisories/unreviewed/2022/05/GHSA-xx57-rmwj-vwq3/GHSA-xx57-rmwj-vwq3.json index 331d931a524..e9c3fc3fd22 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx57-rmwj-vwq3/GHSA-xx57-rmwj-vwq3.json +++ b/advisories/unreviewed/2022/05/GHSA-xx57-rmwj-vwq3/GHSA-xx57-rmwj-vwq3.json @@ -7,12 +7,8 @@ "CVE-2012-5342" ], "details": "Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) special.php, (2) article.php, or (3) cat2.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx8v-9cvf-fc7h/GHSA-xx8v-9cvf-fc7h.json b/advisories/unreviewed/2022/05/GHSA-xx8v-9cvf-fc7h/GHSA-xx8v-9cvf-fc7h.json index 4557112ccd3..66681978745 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx8v-9cvf-fc7h/GHSA-xx8v-9cvf-fc7h.json +++ b/advisories/unreviewed/2022/05/GHSA-xx8v-9cvf-fc7h/GHSA-xx8v-9cvf-fc7h.json @@ -7,12 +7,8 @@ "CVE-2012-6064" ], "details": "Directory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) before 1.11.2.1 allows remote authenticated administrators to delete arbitrary files via a .. (dot dot) in the deld parameter. NOTE: this can be leveraged using CSRF (CVE-2012-5450) to allow remote attackers to delete arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/06/GHSA-99mv-pfx6-v678/GHSA-99mv-pfx6-v678.json b/advisories/unreviewed/2022/06/GHSA-99mv-pfx6-v678/GHSA-99mv-pfx6-v678.json index cf357f3870f..449d66b3aad 100644 --- a/advisories/unreviewed/2022/06/GHSA-99mv-pfx6-v678/GHSA-99mv-pfx6-v678.json +++ b/advisories/unreviewed/2022/06/GHSA-99mv-pfx6-v678/GHSA-99mv-pfx6-v678.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/06/GHSA-q837-53gv-8r7r/GHSA-q837-53gv-8r7r.json b/advisories/unreviewed/2022/06/GHSA-q837-53gv-8r7r/GHSA-q837-53gv-8r7r.json index 6ad77333823..6922673ae66 100644 --- a/advisories/unreviewed/2022/06/GHSA-q837-53gv-8r7r/GHSA-q837-53gv-8r7r.json +++ b/advisories/unreviewed/2022/06/GHSA-q837-53gv-8r7r/GHSA-q837-53gv-8r7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/06/GHSA-q9r7-jm84-gwh8/GHSA-q9r7-jm84-gwh8.json b/advisories/unreviewed/2022/06/GHSA-q9r7-jm84-gwh8/GHSA-q9r7-jm84-gwh8.json index 71014c5f18a..d4ca58496e6 100644 --- a/advisories/unreviewed/2022/06/GHSA-q9r7-jm84-gwh8/GHSA-q9r7-jm84-gwh8.json +++ b/advisories/unreviewed/2022/06/GHSA-q9r7-jm84-gwh8/GHSA-q9r7-jm84-gwh8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/06/GHSA-v8cv-ch4w-445w/GHSA-v8cv-ch4w-445w.json b/advisories/unreviewed/2022/06/GHSA-v8cv-ch4w-445w/GHSA-v8cv-ch4w-445w.json index 4ed46478be7..7f3d6928104 100644 --- a/advisories/unreviewed/2022/06/GHSA-v8cv-ch4w-445w/GHSA-v8cv-ch4w-445w.json +++ b/advisories/unreviewed/2022/06/GHSA-v8cv-ch4w-445w/GHSA-v8cv-ch4w-445w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/06/GHSA-xm2r-2g3f-xg38/GHSA-xm2r-2g3f-xg38.json b/advisories/unreviewed/2022/06/GHSA-xm2r-2g3f-xg38/GHSA-xm2r-2g3f-xg38.json index 588f2799c96..46b9d43c405 100644 --- a/advisories/unreviewed/2022/06/GHSA-xm2r-2g3f-xg38/GHSA-xm2r-2g3f-xg38.json +++ b/advisories/unreviewed/2022/06/GHSA-xm2r-2g3f-xg38/GHSA-xm2r-2g3f-xg38.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/06/GHSA-xm7p-h8qq-9g6j/GHSA-xm7p-h8qq-9g6j.json b/advisories/unreviewed/2022/06/GHSA-xm7p-h8qq-9g6j/GHSA-xm7p-h8qq-9g6j.json index a2cb72804db..1a9da68a69e 100644 --- a/advisories/unreviewed/2022/06/GHSA-xm7p-h8qq-9g6j/GHSA-xm7p-h8qq-9g6j.json +++ b/advisories/unreviewed/2022/06/GHSA-xm7p-h8qq-9g6j/GHSA-xm7p-h8qq-9g6j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/07/GHSA-4jqg-rxh9-h7mc/GHSA-4jqg-rxh9-h7mc.json b/advisories/unreviewed/2022/07/GHSA-4jqg-rxh9-h7mc/GHSA-4jqg-rxh9-h7mc.json index a902959c792..d9f2c15e30f 100644 --- a/advisories/unreviewed/2022/07/GHSA-4jqg-rxh9-h7mc/GHSA-4jqg-rxh9-h7mc.json +++ b/advisories/unreviewed/2022/07/GHSA-4jqg-rxh9-h7mc/GHSA-4jqg-rxh9-h7mc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-mg6f-mx33-mrj2/GHSA-mg6f-mx33-mrj2.json b/advisories/unreviewed/2022/08/GHSA-mg6f-mx33-mrj2/GHSA-mg6f-mx33-mrj2.json index 4d5e116faaf..408640f4e74 100644 --- a/advisories/unreviewed/2022/08/GHSA-mg6f-mx33-mrj2/GHSA-mg6f-mx33-mrj2.json +++ b/advisories/unreviewed/2022/08/GHSA-mg6f-mx33-mrj2/GHSA-mg6f-mx33-mrj2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-mp4f-pwv2-xxc8/GHSA-mp4f-pwv2-xxc8.json b/advisories/unreviewed/2022/08/GHSA-mp4f-pwv2-xxc8/GHSA-mp4f-pwv2-xxc8.json index e4cec1a6f9d..478ab5a4e8b 100644 --- a/advisories/unreviewed/2022/08/GHSA-mp4f-pwv2-xxc8/GHSA-mp4f-pwv2-xxc8.json +++ b/advisories/unreviewed/2022/08/GHSA-mp4f-pwv2-xxc8/GHSA-mp4f-pwv2-xxc8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-mjr5-h3w4-973v/GHSA-mjr5-h3w4-973v.json b/advisories/unreviewed/2022/11/GHSA-mjr5-h3w4-973v/GHSA-mjr5-h3w4-973v.json index dd5dde6d76d..81898e7f081 100644 --- a/advisories/unreviewed/2022/11/GHSA-mjr5-h3w4-973v/GHSA-mjr5-h3w4-973v.json +++ b/advisories/unreviewed/2022/11/GHSA-mjr5-h3w4-973v/GHSA-mjr5-h3w4-973v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-wxhj-ww34-v87f/GHSA-wxhj-ww34-v87f.json b/advisories/unreviewed/2023/01/GHSA-wxhj-ww34-v87f/GHSA-wxhj-ww34-v87f.json index fb8fafeefe8..7c9c6091b81 100644 --- a/advisories/unreviewed/2023/01/GHSA-wxhj-ww34-v87f/GHSA-wxhj-ww34-v87f.json +++ b/advisories/unreviewed/2023/01/GHSA-wxhj-ww34-v87f/GHSA-wxhj-ww34-v87f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/04/GHSA-wwx9-cp3m-5v66/GHSA-wwx9-cp3m-5v66.json b/advisories/unreviewed/2023/04/GHSA-wwx9-cp3m-5v66/GHSA-wwx9-cp3m-5v66.json index ae43e722dfd..b4a0679643d 100644 --- a/advisories/unreviewed/2023/04/GHSA-wwx9-cp3m-5v66/GHSA-wwx9-cp3m-5v66.json +++ b/advisories/unreviewed/2023/04/GHSA-wwx9-cp3m-5v66/GHSA-wwx9-cp3m-5v66.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/05/GHSA-p3mg-vvpg-fpvp/GHSA-p3mg-vvpg-fpvp.json b/advisories/unreviewed/2023/05/GHSA-p3mg-vvpg-fpvp/GHSA-p3mg-vvpg-fpvp.json index 373b078f943..22da9e38e3d 100644 --- a/advisories/unreviewed/2023/05/GHSA-p3mg-vvpg-fpvp/GHSA-p3mg-vvpg-fpvp.json +++ b/advisories/unreviewed/2023/05/GHSA-p3mg-vvpg-fpvp/GHSA-p3mg-vvpg-fpvp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-4hf4-mfv8-rpwm/GHSA-4hf4-mfv8-rpwm.json b/advisories/unreviewed/2023/07/GHSA-4hf4-mfv8-rpwm/GHSA-4hf4-mfv8-rpwm.json index e0d6b6602ca..cadcd9f1159 100644 --- a/advisories/unreviewed/2023/07/GHSA-4hf4-mfv8-rpwm/GHSA-4hf4-mfv8-rpwm.json +++ b/advisories/unreviewed/2023/07/GHSA-4hf4-mfv8-rpwm/GHSA-4hf4-mfv8-rpwm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-vcc9-8549-687w/GHSA-vcc9-8549-687w.json b/advisories/unreviewed/2023/07/GHSA-vcc9-8549-687w/GHSA-vcc9-8549-687w.json index e48c5499c36..6d0f3b51862 100644 --- a/advisories/unreviewed/2023/07/GHSA-vcc9-8549-687w/GHSA-vcc9-8549-687w.json +++ b/advisories/unreviewed/2023/07/GHSA-vcc9-8549-687w/GHSA-vcc9-8549-687w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-46j9-q72c-3w95/GHSA-46j9-q72c-3w95.json b/advisories/unreviewed/2023/10/GHSA-46j9-q72c-3w95/GHSA-46j9-q72c-3w95.json index a39200e686c..0608a5a4d80 100644 --- a/advisories/unreviewed/2023/10/GHSA-46j9-q72c-3w95/GHSA-46j9-q72c-3w95.json +++ b/advisories/unreviewed/2023/10/GHSA-46j9-q72c-3w95/GHSA-46j9-q72c-3w95.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-ff7w-85x3-gg32/GHSA-ff7w-85x3-gg32.json b/advisories/unreviewed/2023/10/GHSA-ff7w-85x3-gg32/GHSA-ff7w-85x3-gg32.json index 5c657fdd90e..b553e411782 100644 --- a/advisories/unreviewed/2023/10/GHSA-ff7w-85x3-gg32/GHSA-ff7w-85x3-gg32.json +++ b/advisories/unreviewed/2023/10/GHSA-ff7w-85x3-gg32/GHSA-ff7w-85x3-gg32.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-fq8g-55cp-756j/GHSA-fq8g-55cp-756j.json b/advisories/unreviewed/2023/11/GHSA-fq8g-55cp-756j/GHSA-fq8g-55cp-756j.json index 12e841161e5..93c388cf657 100644 --- a/advisories/unreviewed/2023/11/GHSA-fq8g-55cp-756j/GHSA-fq8g-55cp-756j.json +++ b/advisories/unreviewed/2023/11/GHSA-fq8g-55cp-756j/GHSA-fq8g-55cp-756j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-cc57-8992-87q8/GHSA-cc57-8992-87q8.json b/advisories/unreviewed/2023/12/GHSA-cc57-8992-87q8/GHSA-cc57-8992-87q8.json index 2952800702d..dad2d5cdd20 100644 --- a/advisories/unreviewed/2023/12/GHSA-cc57-8992-87q8/GHSA-cc57-8992-87q8.json +++ b/advisories/unreviewed/2023/12/GHSA-cc57-8992-87q8/GHSA-cc57-8992-87q8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-qjp2-m2mf-m72r/GHSA-qjp2-m2mf-m72r.json b/advisories/unreviewed/2023/12/GHSA-qjp2-m2mf-m72r/GHSA-qjp2-m2mf-m72r.json index 73a08670430..8bc60dd9e6e 100644 --- a/advisories/unreviewed/2023/12/GHSA-qjp2-m2mf-m72r/GHSA-qjp2-m2mf-m72r.json +++ b/advisories/unreviewed/2023/12/GHSA-qjp2-m2mf-m72r/GHSA-qjp2-m2mf-m72r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-wmh6-wh26-4mj9/GHSA-wmh6-wh26-4mj9.json b/advisories/unreviewed/2023/12/GHSA-wmh6-wh26-4mj9/GHSA-wmh6-wh26-4mj9.json index 5c14a8f185c..96a493c5ac1 100644 --- a/advisories/unreviewed/2023/12/GHSA-wmh6-wh26-4mj9/GHSA-wmh6-wh26-4mj9.json +++ b/advisories/unreviewed/2023/12/GHSA-wmh6-wh26-4mj9/GHSA-wmh6-wh26-4mj9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-rcj8-jx65-7c4r/GHSA-rcj8-jx65-7c4r.json b/advisories/unreviewed/2024/01/GHSA-rcj8-jx65-7c4r/GHSA-rcj8-jx65-7c4r.json index f76e6042ea3..f1f840a8ac4 100644 --- a/advisories/unreviewed/2024/01/GHSA-rcj8-jx65-7c4r/GHSA-rcj8-jx65-7c4r.json +++ b/advisories/unreviewed/2024/01/GHSA-rcj8-jx65-7c4r/GHSA-rcj8-jx65-7c4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-xvh3-qgp6-m4r6/GHSA-xvh3-qgp6-m4r6.json b/advisories/unreviewed/2024/01/GHSA-xvh3-qgp6-m4r6/GHSA-xvh3-qgp6-m4r6.json index 71cb54ff3e6..738b79b9527 100644 --- a/advisories/unreviewed/2024/01/GHSA-xvh3-qgp6-m4r6/GHSA-xvh3-qgp6-m4r6.json +++ b/advisories/unreviewed/2024/01/GHSA-xvh3-qgp6-m4r6/GHSA-xvh3-qgp6-m4r6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-2x93-8973-5mgq/GHSA-2x93-8973-5mgq.json b/advisories/unreviewed/2024/02/GHSA-2x93-8973-5mgq/GHSA-2x93-8973-5mgq.json index ad407660872..27eedb66339 100644 --- a/advisories/unreviewed/2024/02/GHSA-2x93-8973-5mgq/GHSA-2x93-8973-5mgq.json +++ b/advisories/unreviewed/2024/02/GHSA-2x93-8973-5mgq/GHSA-2x93-8973-5mgq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-32cf-6454-vhqx/GHSA-32cf-6454-vhqx.json b/advisories/unreviewed/2024/02/GHSA-32cf-6454-vhqx/GHSA-32cf-6454-vhqx.json index 61fcb9f9366..bfa4a0980c0 100644 --- a/advisories/unreviewed/2024/02/GHSA-32cf-6454-vhqx/GHSA-32cf-6454-vhqx.json +++ b/advisories/unreviewed/2024/02/GHSA-32cf-6454-vhqx/GHSA-32cf-6454-vhqx.json @@ -7,12 +7,8 @@ "CVE-2020-36786" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: [next] staging: media: atomisp: fix memory leak of object flash\n\nIn the case where the call to lm3554_platform_data_func returns an\nerror there is a memory leak on the error return path of object\nflash. Fix this by adding an error return path that will free\nflash and rename labels fail2 to fail3 and fail1 to fail2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-3qrv-r8v8-pmw7/GHSA-3qrv-r8v8-pmw7.json b/advisories/unreviewed/2024/02/GHSA-3qrv-r8v8-pmw7/GHSA-3qrv-r8v8-pmw7.json index 408d0aa03d7..08273c34f84 100644 --- a/advisories/unreviewed/2024/02/GHSA-3qrv-r8v8-pmw7/GHSA-3qrv-r8v8-pmw7.json +++ b/advisories/unreviewed/2024/02/GHSA-3qrv-r8v8-pmw7/GHSA-3qrv-r8v8-pmw7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-43jg-wxfj-4rf7/GHSA-43jg-wxfj-4rf7.json b/advisories/unreviewed/2024/02/GHSA-43jg-wxfj-4rf7/GHSA-43jg-wxfj-4rf7.json index 2600468a629..77c01190a16 100644 --- a/advisories/unreviewed/2024/02/GHSA-43jg-wxfj-4rf7/GHSA-43jg-wxfj-4rf7.json +++ b/advisories/unreviewed/2024/02/GHSA-43jg-wxfj-4rf7/GHSA-43jg-wxfj-4rf7.json @@ -7,12 +7,8 @@ "CVE-2021-47005" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: endpoint: Fix NULL pointer dereference for ->get_features()\n\nget_features ops of pci_epc_ops may return NULL, causing NULL pointer\ndereference in pci_epf_test_alloc_space function. Let us add a check for\npci_epc_feature pointer in pci_epf_test_bind before we access it to avoid\nany such NULL pointer dereference and return -ENOTSUPP in case\npci_epc_feature is not found.\n\nWhen the patch is not applied and EPC features is not implemented in the\nplatform driver, we see the following dump due to kernel NULL pointer\ndereference.\n\nCall trace:\n pci_epf_test_bind+0xf4/0x388\n pci_epf_bind+0x3c/0x80\n pci_epc_epf_link+0xa8/0xcc\n configfs_symlink+0x1a4/0x48c\n vfs_symlink+0x104/0x184\n do_symlinkat+0x80/0xd4\n __arm64_sys_symlinkat+0x1c/0x24\n el0_svc_common.constprop.3+0xb8/0x170\n el0_svc_handler+0x70/0x88\n el0_svc+0x8/0x640\nCode: d2800581 b9403ab9 f9404ebb 8b394f60 (f9400400)\n---[ end trace a438e3c5a24f9df0 ]---", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-44mr-328w-2q72/GHSA-44mr-328w-2q72.json b/advisories/unreviewed/2024/02/GHSA-44mr-328w-2q72/GHSA-44mr-328w-2q72.json index 81f8a198975..073c1ef9331 100644 --- a/advisories/unreviewed/2024/02/GHSA-44mr-328w-2q72/GHSA-44mr-328w-2q72.json +++ b/advisories/unreviewed/2024/02/GHSA-44mr-328w-2q72/GHSA-44mr-328w-2q72.json @@ -7,12 +7,8 @@ "CVE-2021-46946" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix check to prevent false positive report of incorrect used inodes\n\nCommit <50122847007> (\"ext4: fix check to prevent initializing reserved\ninodes\") check the block group zero and prevent initializing reserved\ninodes. But in some special cases, the reserved inode may not all belong\nto the group zero, it may exist into the second group if we format\nfilesystem below.\n\n mkfs.ext4 -b 4096 -g 8192 -N 1024 -I 4096 /dev/sda\n\nSo, it will end up triggering a false positive report of a corrupted\nfile system. This patch fix it by avoid check reserved inodes if no free\ninode blocks will be zeroed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-46v4-9j9w-fv79/GHSA-46v4-9j9w-fv79.json b/advisories/unreviewed/2024/02/GHSA-46v4-9j9w-fv79/GHSA-46v4-9j9w-fv79.json index 77319cd199c..9c4b2c8acac 100644 --- a/advisories/unreviewed/2024/02/GHSA-46v4-9j9w-fv79/GHSA-46v4-9j9w-fv79.json +++ b/advisories/unreviewed/2024/02/GHSA-46v4-9j9w-fv79/GHSA-46v4-9j9w-fv79.json @@ -7,12 +7,8 @@ "CVE-2024-27913" ], "details": "ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted access to a missing attribute field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-4hg3-pc9r-pp32/GHSA-4hg3-pc9r-pp32.json b/advisories/unreviewed/2024/02/GHSA-4hg3-pc9r-pp32/GHSA-4hg3-pc9r-pp32.json index fa89d0e0e92..1a03779bf3a 100644 --- a/advisories/unreviewed/2024/02/GHSA-4hg3-pc9r-pp32/GHSA-4hg3-pc9r-pp32.json +++ b/advisories/unreviewed/2024/02/GHSA-4hg3-pc9r-pp32/GHSA-4hg3-pc9r-pp32.json @@ -7,12 +7,8 @@ "CVE-2021-46992" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nftables: avoid overflows in nft_hash_buckets()\n\nNumber of buckets being stored in 32bit variables, we have to\nensure that no overflows occur in nft_hash_buckets()\n\nsyzbot injected a size == 0x40000000 and reported:\n\nUBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13\nshift exponent 64 is too large for 64-bit type 'long unsigned int'\nCPU: 1 PID: 29539 Comm: syz-executor.4 Not tainted 5.12.0-rc7-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:79 [inline]\n dump_stack+0x141/0x1d7 lib/dump_stack.c:120\n ubsan_epilogue+0xb/0x5a lib/ubsan.c:148\n __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:327\n __roundup_pow_of_two include/linux/log2.h:57 [inline]\n nft_hash_buckets net/netfilter/nft_set_hash.c:411 [inline]\n nft_hash_estimate.cold+0x19/0x1e net/netfilter/nft_set_hash.c:652\n nft_select_set_ops net/netfilter/nf_tables_api.c:3586 [inline]\n nf_tables_newset+0xe62/0x3110 net/netfilter/nf_tables_api.c:4322\n nfnetlink_rcv_batch+0xa09/0x24b0 net/netfilter/nfnetlink.c:488\n nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:612 [inline]\n nfnetlink_rcv+0x3af/0x420 net/netfilter/nfnetlink.c:630\n netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline]\n netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1338\n netlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1927\n sock_sendmsg_nosec net/socket.c:654 [inline]\n sock_sendmsg+0xcf/0x120 net/socket.c:674\n ____sys_sendmsg+0x6e8/0x810 net/socket.c:2350\n ___sys_sendmsg+0xf3/0x170 net/socket.c:2404\n __sys_sendmsg+0xe5/0x1b0 net/socket.c:2433\n do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-4q6w-gxhv-h434/GHSA-4q6w-gxhv-h434.json b/advisories/unreviewed/2024/02/GHSA-4q6w-gxhv-h434/GHSA-4q6w-gxhv-h434.json index 70c412be73f..63677b4cd46 100644 --- a/advisories/unreviewed/2024/02/GHSA-4q6w-gxhv-h434/GHSA-4q6w-gxhv-h434.json +++ b/advisories/unreviewed/2024/02/GHSA-4q6w-gxhv-h434/GHSA-4q6w-gxhv-h434.json @@ -7,12 +7,8 @@ "CVE-2021-46996" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nftables: Fix a memleak from userdata error path in new objects\n\nRelease object name if userdata allocation fails.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-52j8-6rx5-297x/GHSA-52j8-6rx5-297x.json b/advisories/unreviewed/2024/02/GHSA-52j8-6rx5-297x/GHSA-52j8-6rx5-297x.json index cb2fc57298f..3ba4ee8d88c 100644 --- a/advisories/unreviewed/2024/02/GHSA-52j8-6rx5-297x/GHSA-52j8-6rx5-297x.json +++ b/advisories/unreviewed/2024/02/GHSA-52j8-6rx5-297x/GHSA-52j8-6rx5-297x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-5cmr-7rv7-358p/GHSA-5cmr-7rv7-358p.json b/advisories/unreviewed/2024/02/GHSA-5cmr-7rv7-358p/GHSA-5cmr-7rv7-358p.json index 2bc7f78b5e8..e54b06cdcaf 100644 --- a/advisories/unreviewed/2024/02/GHSA-5cmr-7rv7-358p/GHSA-5cmr-7rv7-358p.json +++ b/advisories/unreviewed/2024/02/GHSA-5cmr-7rv7-358p/GHSA-5cmr-7rv7-358p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-5fm6-5hv6-6fjv/GHSA-5fm6-5hv6-6fjv.json b/advisories/unreviewed/2024/02/GHSA-5fm6-5hv6-6fjv/GHSA-5fm6-5hv6-6fjv.json index cbcef2a3276..b8a998796d5 100644 --- a/advisories/unreviewed/2024/02/GHSA-5fm6-5hv6-6fjv/GHSA-5fm6-5hv6-6fjv.json +++ b/advisories/unreviewed/2024/02/GHSA-5fm6-5hv6-6fjv/GHSA-5fm6-5hv6-6fjv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-5frx-8vj6-294f/GHSA-5frx-8vj6-294f.json b/advisories/unreviewed/2024/02/GHSA-5frx-8vj6-294f/GHSA-5frx-8vj6-294f.json index 5b48b74de25..94c25e89e09 100644 --- a/advisories/unreviewed/2024/02/GHSA-5frx-8vj6-294f/GHSA-5frx-8vj6-294f.json +++ b/advisories/unreviewed/2024/02/GHSA-5frx-8vj6-294f/GHSA-5frx-8vj6-294f.json @@ -7,12 +7,8 @@ "CVE-2024-23749" ], "details": "KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitization and validation, failure to escape special characters, and insecure system calls (at lines 2369-2390). This allows an attacker to add inputs inside the filename variable, leading to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-5jrc-78c2-4pq8/GHSA-5jrc-78c2-4pq8.json b/advisories/unreviewed/2024/02/GHSA-5jrc-78c2-4pq8/GHSA-5jrc-78c2-4pq8.json index e553c9ea8c8..85d27a3ae23 100644 --- a/advisories/unreviewed/2024/02/GHSA-5jrc-78c2-4pq8/GHSA-5jrc-78c2-4pq8.json +++ b/advisories/unreviewed/2024/02/GHSA-5jrc-78c2-4pq8/GHSA-5jrc-78c2-4pq8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-5vm6-785f-3cj3/GHSA-5vm6-785f-3cj3.json b/advisories/unreviewed/2024/02/GHSA-5vm6-785f-3cj3/GHSA-5vm6-785f-3cj3.json index 7aaf6e52a57..0cb976c1aa4 100644 --- a/advisories/unreviewed/2024/02/GHSA-5vm6-785f-3cj3/GHSA-5vm6-785f-3cj3.json +++ b/advisories/unreviewed/2024/02/GHSA-5vm6-785f-3cj3/GHSA-5vm6-785f-3cj3.json @@ -7,12 +7,8 @@ "CVE-2021-46995" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe\n\nWhen we converted this code to use dev_err_probe() we accidentally\nremoved a return. It means that if devm_clk_get() it will lead to an\nOops when we call clk_get_rate() on the next line.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-63q7-72w2-qvvv/GHSA-63q7-72w2-qvvv.json b/advisories/unreviewed/2024/02/GHSA-63q7-72w2-qvvv/GHSA-63q7-72w2-qvvv.json index 78099c95e5d..fd9cea3a19f 100644 --- a/advisories/unreviewed/2024/02/GHSA-63q7-72w2-qvvv/GHSA-63q7-72w2-qvvv.json +++ b/advisories/unreviewed/2024/02/GHSA-63q7-72w2-qvvv/GHSA-63q7-72w2-qvvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-65rc-w4m4-m762/GHSA-65rc-w4m4-m762.json b/advisories/unreviewed/2024/02/GHSA-65rc-w4m4-m762/GHSA-65rc-w4m4-m762.json index e1d37e36c8d..e37b6f4a463 100644 --- a/advisories/unreviewed/2024/02/GHSA-65rc-w4m4-m762/GHSA-65rc-w4m4-m762.json +++ b/advisories/unreviewed/2024/02/GHSA-65rc-w4m4-m762/GHSA-65rc-w4m4-m762.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-6hmr-48fm-wfhx/GHSA-6hmr-48fm-wfhx.json b/advisories/unreviewed/2024/02/GHSA-6hmr-48fm-wfhx/GHSA-6hmr-48fm-wfhx.json index a579185a24d..84f84ec82d8 100644 --- a/advisories/unreviewed/2024/02/GHSA-6hmr-48fm-wfhx/GHSA-6hmr-48fm-wfhx.json +++ b/advisories/unreviewed/2024/02/GHSA-6hmr-48fm-wfhx/GHSA-6hmr-48fm-wfhx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-73pj-jqmg-pmr5/GHSA-73pj-jqmg-pmr5.json b/advisories/unreviewed/2024/02/GHSA-73pj-jqmg-pmr5/GHSA-73pj-jqmg-pmr5.json index 5571e70c2de..5feb0635e53 100644 --- a/advisories/unreviewed/2024/02/GHSA-73pj-jqmg-pmr5/GHSA-73pj-jqmg-pmr5.json +++ b/advisories/unreviewed/2024/02/GHSA-73pj-jqmg-pmr5/GHSA-73pj-jqmg-pmr5.json @@ -7,12 +7,8 @@ "CVE-2021-46991" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix use-after-free in i40e_client_subtask()\n\nCurrently the call to i40e_client_del_instance frees the object\npf->cinst, however pf->cinst->lan_info is being accessed after\nthe free. Fix this by adding the missing return.\n\nAddresses-Coverity: (\"Read from pointer after free\")", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-7896-9859-h9rc/GHSA-7896-9859-h9rc.json b/advisories/unreviewed/2024/02/GHSA-7896-9859-h9rc/GHSA-7896-9859-h9rc.json index 23504a3e0fd..3922d0f3613 100644 --- a/advisories/unreviewed/2024/02/GHSA-7896-9859-h9rc/GHSA-7896-9859-h9rc.json +++ b/advisories/unreviewed/2024/02/GHSA-7896-9859-h9rc/GHSA-7896-9859-h9rc.json @@ -7,12 +7,8 @@ "CVE-2021-46985" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: scan: Fix a memory leak in an error handling path\n\nIf 'acpi_device_set_name()' fails, we must free\n'acpi_device_bus_id->bus_id' or there is a (potential) memory leak.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-7ww5-chp8-5mwj/GHSA-7ww5-chp8-5mwj.json b/advisories/unreviewed/2024/02/GHSA-7ww5-chp8-5mwj/GHSA-7ww5-chp8-5mwj.json index f8939d55ead..43387b1aed5 100644 --- a/advisories/unreviewed/2024/02/GHSA-7ww5-chp8-5mwj/GHSA-7ww5-chp8-5mwj.json +++ b/advisories/unreviewed/2024/02/GHSA-7ww5-chp8-5mwj/GHSA-7ww5-chp8-5mwj.json @@ -7,12 +7,8 @@ "CVE-2020-36785" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()\n\nThe \"s3a_buf\" is freed along with all the other items on the\n\"asd->s3a_stats\" list. It leads to a double free and a use after free.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-83ff-cpf7-ghwf/GHSA-83ff-cpf7-ghwf.json b/advisories/unreviewed/2024/02/GHSA-83ff-cpf7-ghwf/GHSA-83ff-cpf7-ghwf.json index 3f30e71c82d..c6f55c59612 100644 --- a/advisories/unreviewed/2024/02/GHSA-83ff-cpf7-ghwf/GHSA-83ff-cpf7-ghwf.json +++ b/advisories/unreviewed/2024/02/GHSA-83ff-cpf7-ghwf/GHSA-83ff-cpf7-ghwf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-848p-qh88-8hw6/GHSA-848p-qh88-8hw6.json b/advisories/unreviewed/2024/02/GHSA-848p-qh88-8hw6/GHSA-848p-qh88-8hw6.json index 4b5c6d267f2..d8e714230a0 100644 --- a/advisories/unreviewed/2024/02/GHSA-848p-qh88-8hw6/GHSA-848p-qh88-8hw6.json +++ b/advisories/unreviewed/2024/02/GHSA-848p-qh88-8hw6/GHSA-848p-qh88-8hw6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-8xwq-c7xw-64cv/GHSA-8xwq-c7xw-64cv.json b/advisories/unreviewed/2024/02/GHSA-8xwq-c7xw-64cv/GHSA-8xwq-c7xw-64cv.json index f964aaf0c43..2cf7848d775 100644 --- a/advisories/unreviewed/2024/02/GHSA-8xwq-c7xw-64cv/GHSA-8xwq-c7xw-64cv.json +++ b/advisories/unreviewed/2024/02/GHSA-8xwq-c7xw-64cv/GHSA-8xwq-c7xw-64cv.json @@ -7,12 +7,8 @@ "CVE-2020-36779" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: stm32f7: fix reference leak when pm_runtime_get_sync fails\n\nThe PM reference count is not expected to be incremented on\nreturn in these stm32f7_i2c_xx serious functions.\n\nHowever, pm_runtime_get_sync will increment the PM reference\ncount even failed. Forgetting to putting operation will result\nin a reference leak here.\n\nReplace it with pm_runtime_resume_and_get to keep usage\ncounter balanced.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-98fx-x879-qp6f/GHSA-98fx-x879-qp6f.json b/advisories/unreviewed/2024/02/GHSA-98fx-x879-qp6f/GHSA-98fx-x879-qp6f.json index 8fcc3487e32..86af3f50a7e 100644 --- a/advisories/unreviewed/2024/02/GHSA-98fx-x879-qp6f/GHSA-98fx-x879-qp6f.json +++ b/advisories/unreviewed/2024/02/GHSA-98fx-x879-qp6f/GHSA-98fx-x879-qp6f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-9g2q-6jw7-cqfm/GHSA-9g2q-6jw7-cqfm.json b/advisories/unreviewed/2024/02/GHSA-9g2q-6jw7-cqfm/GHSA-9g2q-6jw7-cqfm.json index 299754ad484..78e8e9e55ef 100644 --- a/advisories/unreviewed/2024/02/GHSA-9g2q-6jw7-cqfm/GHSA-9g2q-6jw7-cqfm.json +++ b/advisories/unreviewed/2024/02/GHSA-9g2q-6jw7-cqfm/GHSA-9g2q-6jw7-cqfm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-9h3w-jq64-m799/GHSA-9h3w-jq64-m799.json b/advisories/unreviewed/2024/02/GHSA-9h3w-jq64-m799/GHSA-9h3w-jq64-m799.json index c3449d189e2..557ee5d0d71 100644 --- a/advisories/unreviewed/2024/02/GHSA-9h3w-jq64-m799/GHSA-9h3w-jq64-m799.json +++ b/advisories/unreviewed/2024/02/GHSA-9h3w-jq64-m799/GHSA-9h3w-jq64-m799.json @@ -7,12 +7,8 @@ "CVE-2021-46994" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: mcp251x: fix resume from sleep before interface was brought up\n\nSince 8ce8c0abcba3 the driver queues work via priv->restart_work when\nresuming after suspend, even when the interface was not previously\nenabled. This causes a null dereference error as the workqueue is only\nallocated and initialized in mcp251x_open().\n\nTo fix this we move the workqueue init to mcp251x_can_probe() as there\nis no reason to do it later and repeat it whenever mcp251x_open() is\ncalled.\n\n[mkl: fix error handling in mcp251x_stop()]", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-9rj9-v7hh-cg8q/GHSA-9rj9-v7hh-cg8q.json b/advisories/unreviewed/2024/02/GHSA-9rj9-v7hh-cg8q/GHSA-9rj9-v7hh-cg8q.json index f2433e3ef06..e72f03bb79c 100644 --- a/advisories/unreviewed/2024/02/GHSA-9rj9-v7hh-cg8q/GHSA-9rj9-v7hh-cg8q.json +++ b/advisories/unreviewed/2024/02/GHSA-9rj9-v7hh-cg8q/GHSA-9rj9-v7hh-cg8q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-f3hc-4jf7-hp4h/GHSA-f3hc-4jf7-hp4h.json b/advisories/unreviewed/2024/02/GHSA-f3hc-4jf7-hp4h/GHSA-f3hc-4jf7-hp4h.json index d22f6db2148..b4c0d969057 100644 --- a/advisories/unreviewed/2024/02/GHSA-f3hc-4jf7-hp4h/GHSA-f3hc-4jf7-hp4h.json +++ b/advisories/unreviewed/2024/02/GHSA-f3hc-4jf7-hp4h/GHSA-f3hc-4jf7-hp4h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-f66f-jmx2-2jjm/GHSA-f66f-jmx2-2jjm.json b/advisories/unreviewed/2024/02/GHSA-f66f-jmx2-2jjm/GHSA-f66f-jmx2-2jjm.json index 20f2d131c7e..7b8380d54d8 100644 --- a/advisories/unreviewed/2024/02/GHSA-f66f-jmx2-2jjm/GHSA-f66f-jmx2-2jjm.json +++ b/advisories/unreviewed/2024/02/GHSA-f66f-jmx2-2jjm/GHSA-f66f-jmx2-2jjm.json @@ -7,12 +7,8 @@ "CVE-2020-36778" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: xiic: fix reference leak when pm_runtime_get_sync fails\n\nThe PM reference count is not expected to be incremented on\nreturn in xiic_xfer and xiic_i2c_remove.\n\nHowever, pm_runtime_get_sync will increment the PM reference\ncount even failed. Forgetting to putting operation will result\nin a reference leak here.\n\nReplace it with pm_runtime_resume_and_get to keep usage\ncounter balanced.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-f949-cfvp-v3rg/GHSA-f949-cfvp-v3rg.json b/advisories/unreviewed/2024/02/GHSA-f949-cfvp-v3rg/GHSA-f949-cfvp-v3rg.json index bb409a93b22..c4c5196f7c8 100644 --- a/advisories/unreviewed/2024/02/GHSA-f949-cfvp-v3rg/GHSA-f949-cfvp-v3rg.json +++ b/advisories/unreviewed/2024/02/GHSA-f949-cfvp-v3rg/GHSA-f949-cfvp-v3rg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-gwvc-g8fg-56vx/GHSA-gwvc-g8fg-56vx.json b/advisories/unreviewed/2024/02/GHSA-gwvc-g8fg-56vx/GHSA-gwvc-g8fg-56vx.json index 82f46f96c7a..fa756813583 100644 --- a/advisories/unreviewed/2024/02/GHSA-gwvc-g8fg-56vx/GHSA-gwvc-g8fg-56vx.json +++ b/advisories/unreviewed/2024/02/GHSA-gwvc-g8fg-56vx/GHSA-gwvc-g8fg-56vx.json @@ -7,12 +7,8 @@ "CVE-2021-46993" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched: Fix out-of-bound access in uclamp\n\nUtil-clamp places tasks in different buckets based on their clamp values\nfor performance reasons. However, the size of buckets is currently\ncomputed using a rounding division, which can lead to an off-by-one\nerror in some configurations.\n\nFor instance, with 20 buckets, the bucket size will be 1024/20=51. A\ntask with a clamp of 1024 will be mapped to bucket id 1024/51=20. Sadly,\ncorrect indexes are in range [0,19], hence leading to an out of bound\nmemory access.\n\nClamp the bucket id to fix the issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-gxfv-72fg-9mpc/GHSA-gxfv-72fg-9mpc.json b/advisories/unreviewed/2024/02/GHSA-gxfv-72fg-9mpc/GHSA-gxfv-72fg-9mpc.json index f135056bcea..7ce04c767bf 100644 --- a/advisories/unreviewed/2024/02/GHSA-gxfv-72fg-9mpc/GHSA-gxfv-72fg-9mpc.json +++ b/advisories/unreviewed/2024/02/GHSA-gxfv-72fg-9mpc/GHSA-gxfv-72fg-9mpc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-h63h-pmj2-4jvv/GHSA-h63h-pmj2-4jvv.json b/advisories/unreviewed/2024/02/GHSA-h63h-pmj2-4jvv/GHSA-h63h-pmj2-4jvv.json index 22fd97228ef..caf69f6f2c1 100644 --- a/advisories/unreviewed/2024/02/GHSA-h63h-pmj2-4jvv/GHSA-h63h-pmj2-4jvv.json +++ b/advisories/unreviewed/2024/02/GHSA-h63h-pmj2-4jvv/GHSA-h63h-pmj2-4jvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-hqx2-pqrp-v2ph/GHSA-hqx2-pqrp-v2ph.json b/advisories/unreviewed/2024/02/GHSA-hqx2-pqrp-v2ph/GHSA-hqx2-pqrp-v2ph.json index bfc561555c4..d0f0b5fb503 100644 --- a/advisories/unreviewed/2024/02/GHSA-hqx2-pqrp-v2ph/GHSA-hqx2-pqrp-v2ph.json +++ b/advisories/unreviewed/2024/02/GHSA-hqx2-pqrp-v2ph/GHSA-hqx2-pqrp-v2ph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-hxq4-c5cr-fpxw/GHSA-hxq4-c5cr-fpxw.json b/advisories/unreviewed/2024/02/GHSA-hxq4-c5cr-fpxw/GHSA-hxq4-c5cr-fpxw.json index 03124ad323b..f9f1f4dbc89 100644 --- a/advisories/unreviewed/2024/02/GHSA-hxq4-c5cr-fpxw/GHSA-hxq4-c5cr-fpxw.json +++ b/advisories/unreviewed/2024/02/GHSA-hxq4-c5cr-fpxw/GHSA-hxq4-c5cr-fpxw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-j4r6-g8mv-35vf/GHSA-j4r6-g8mv-35vf.json b/advisories/unreviewed/2024/02/GHSA-j4r6-g8mv-35vf/GHSA-j4r6-g8mv-35vf.json index e92e2acb586..973293211ab 100644 --- a/advisories/unreviewed/2024/02/GHSA-j4r6-g8mv-35vf/GHSA-j4r6-g8mv-35vf.json +++ b/advisories/unreviewed/2024/02/GHSA-j4r6-g8mv-35vf/GHSA-j4r6-g8mv-35vf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-j5gc-9h38-mfq7/GHSA-j5gc-9h38-mfq7.json b/advisories/unreviewed/2024/02/GHSA-j5gc-9h38-mfq7/GHSA-j5gc-9h38-mfq7.json index 8d2f5d2b12d..32068d7b381 100644 --- a/advisories/unreviewed/2024/02/GHSA-j5gc-9h38-mfq7/GHSA-j5gc-9h38-mfq7.json +++ b/advisories/unreviewed/2024/02/GHSA-j5gc-9h38-mfq7/GHSA-j5gc-9h38-mfq7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-j6c9-6p46-r4qr/GHSA-j6c9-6p46-r4qr.json b/advisories/unreviewed/2024/02/GHSA-j6c9-6p46-r4qr/GHSA-j6c9-6p46-r4qr.json index 82b5d8476cb..0dc5556c909 100644 --- a/advisories/unreviewed/2024/02/GHSA-j6c9-6p46-r4qr/GHSA-j6c9-6p46-r4qr.json +++ b/advisories/unreviewed/2024/02/GHSA-j6c9-6p46-r4qr/GHSA-j6c9-6p46-r4qr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-j6gr-4vx9-gj76/GHSA-j6gr-4vx9-gj76.json b/advisories/unreviewed/2024/02/GHSA-j6gr-4vx9-gj76/GHSA-j6gr-4vx9-gj76.json index d4b6dc2a01a..cc09f791da0 100644 --- a/advisories/unreviewed/2024/02/GHSA-j6gr-4vx9-gj76/GHSA-j6gr-4vx9-gj76.json +++ b/advisories/unreviewed/2024/02/GHSA-j6gr-4vx9-gj76/GHSA-j6gr-4vx9-gj76.json @@ -7,12 +7,8 @@ "CVE-2020-36782" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails\n\nThe PM reference count is not expected to be incremented on\nreturn in lpi2c_imx_master_enable.\n\nHowever, pm_runtime_get_sync will increment the PM reference\ncount even failed. Forgetting to putting operation will result\nin a reference leak here.\n\nReplace it with pm_runtime_resume_and_get to keep usage\ncounter balanced.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-jm6x-683j-pm4v/GHSA-jm6x-683j-pm4v.json b/advisories/unreviewed/2024/02/GHSA-jm6x-683j-pm4v/GHSA-jm6x-683j-pm4v.json index a8135495ea5..4ff47f7ed79 100644 --- a/advisories/unreviewed/2024/02/GHSA-jm6x-683j-pm4v/GHSA-jm6x-683j-pm4v.json +++ b/advisories/unreviewed/2024/02/GHSA-jm6x-683j-pm4v/GHSA-jm6x-683j-pm4v.json @@ -7,12 +7,8 @@ "CVE-2020-36781" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: imx: fix reference leak when pm_runtime_get_sync fails\n\nIn i2c_imx_xfer() and i2c_imx_remove(), the pm reference count\nis not expected to be incremented on return.\n\nHowever, pm_runtime_get_sync will increment pm reference count\neven failed. Forgetting to putting operation will result in a\nreference leak here.\n\nReplace it with pm_runtime_resume_and_get to keep usage\ncounter balanced.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-jq5v-68r8-42wc/GHSA-jq5v-68r8-42wc.json b/advisories/unreviewed/2024/02/GHSA-jq5v-68r8-42wc/GHSA-jq5v-68r8-42wc.json index 481ba3aa24e..37bb9d03bc1 100644 --- a/advisories/unreviewed/2024/02/GHSA-jq5v-68r8-42wc/GHSA-jq5v-68r8-42wc.json +++ b/advisories/unreviewed/2024/02/GHSA-jq5v-68r8-42wc/GHSA-jq5v-68r8-42wc.json @@ -7,12 +7,8 @@ "CVE-2020-36784" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: cadence: fix reference leak when pm_runtime_get_sync fails\n\nThe PM reference count is not expected to be incremented on\nreturn in functions cdns_i2c_master_xfer and cdns_reg_slave.\n\nHowever, pm_runtime_get_sync will increment pm usage counter\neven failed. Forgetting to putting operation will result in a\nreference leak here.\n\nReplace it with pm_runtime_resume_and_get to keep usage\ncounter balanced.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-m8jx-hpg8-g7ww/GHSA-m8jx-hpg8-g7ww.json b/advisories/unreviewed/2024/02/GHSA-m8jx-hpg8-g7ww/GHSA-m8jx-hpg8-g7ww.json index 56be0ea1086..d94f2f0bc63 100644 --- a/advisories/unreviewed/2024/02/GHSA-m8jx-hpg8-g7ww/GHSA-m8jx-hpg8-g7ww.json +++ b/advisories/unreviewed/2024/02/GHSA-m8jx-hpg8-g7ww/GHSA-m8jx-hpg8-g7ww.json @@ -7,12 +7,8 @@ "CVE-2021-47027" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7921: fix kernel crash when the firmware fails to download\n\nFix kernel crash when the firmware is missing or fails to download.\n\n[ 9.444758] kernel BUG at drivers/pci/msi.c:375!\n[ 9.449363] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP\n[ 9.501033] pstate: a0400009 (NzCv daif +PAN -UAO)\n[ 9.505814] pc : free_msi_irqs+0x180/0x184\n[ 9.509897] lr : free_msi_irqs+0x40/0x184\n[ 9.513893] sp : ffffffc015193870\n[ 9.517194] x29: ffffffc015193870 x28: 00000000f0e94fa2\n[ 9.522492] x27: 0000000000000acd x26: 000000000000009a\n[ 9.527790] x25: ffffffc0152cee58 x24: ffffffdbb383e0d8\n[ 9.533087] x23: ffffffdbb38628d0 x22: 0000000000040200\n[ 9.538384] x21: ffffff8cf7de7318 x20: ffffff8cd65a2480\n[ 9.543681] x19: ffffff8cf7de7000 x18: 0000000000000000\n[ 9.548979] x17: ffffff8cf9ca03b4 x16: ffffffdc13ad9a34\n[ 9.554277] x15: 0000000000000000 x14: 0000000000080800\n[ 9.559575] x13: ffffff8cd65a2980 x12: 0000000000000000\n[ 9.564873] x11: ffffff8cfa45d820 x10: ffffff8cfa45d6d0\n[ 9.570171] x9 : 0000000000000040 x8 : ffffff8ccef1b780\n[ 9.575469] x7 : aaaaaaaaaaaaaaaa x6 : 0000000000000000\n[ 9.580766] x5 : ffffffdc13824900 x4 : ffffff8ccefe0000\n[ 9.586063] x3 : 0000000000000000 x2 : 0000000000000000\n[ 9.591362] x1 : 0000000000000125 x0 : ffffff8ccefe0000\n[ 9.596660] Call trace:\n[ 9.599095] free_msi_irqs+0x180/0x184\n[ 9.602831] pci_disable_msi+0x100/0x130\n[ 9.606740] pci_free_irq_vectors+0x24/0x30\n[ 9.610915] mt7921_pci_probe+0xbc/0x250 [mt7921e]\n[ 9.615693] pci_device_probe+0xd4/0x14c\n[ 9.619604] really_probe+0x134/0x2ec\n[ 9.623252] driver_probe_device+0x64/0xfc\n[ 9.627335] device_driver_attach+0x4c/0x6c\n[ 9.631506] __driver_attach+0xac/0xc0\n[ 9.635243] bus_for_each_dev+0x8c/0xd4\n[ 9.639066] driver_attach+0x2c/0x38\n[ 9.642628] bus_add_driver+0xfc/0x1d0\n[ 9.646365] driver_register+0x64/0xf8\n[ 9.650101] __pci_register_driver+0x6c/0x7c\n[ 9.654360] init_module+0x28/0xfdc [mt7921e]\n[ 9.658704] do_one_initcall+0x13c/0x2d0\n[ 9.662615] do_init_module+0x58/0x1e8\n[ 9.666351] load_module+0xd80/0xeb4\n[ 9.669912] __arm64_sys_finit_module+0xa8/0xe0\n[ 9.674430] el0_svc_common+0xa4/0x16c\n[ 9.678168] el0_svc_compat_handler+0x2c/0x40\n[ 9.682511] el0_svc_compat+0x8/0x10\n[ 9.686076] Code: a94257f6 f9400bf7 a8c47bfd d65f03c0 (d4210000)\n[ 9.692155] ---[ end trace 7621f966afbf0a29 ]---\n[ 9.697385] Kernel panic - not syncing: Fatal exception\n[ 9.702599] SMP: stopping secondary CPUs\n[ 9.706549] Kernel Offset: 0x1c03600000 from 0xffffffc010000000\n[ 9.712456] PHYS_OFFSET: 0xfffffff440000000\n[ 9.716625] CPU features: 0x080026,2a80aa18\n[ 9.720795] Memory Limit: none", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-mvp9-h26x-x7q3/GHSA-mvp9-h26x-x7q3.json b/advisories/unreviewed/2024/02/GHSA-mvp9-h26x-x7q3/GHSA-mvp9-h26x-x7q3.json index 0276a360fe0..9922c3dccfa 100644 --- a/advisories/unreviewed/2024/02/GHSA-mvp9-h26x-x7q3/GHSA-mvp9-h26x-x7q3.json +++ b/advisories/unreviewed/2024/02/GHSA-mvp9-h26x-x7q3/GHSA-mvp9-h26x-x7q3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-pf5w-4v9j-2h6f/GHSA-pf5w-4v9j-2h6f.json b/advisories/unreviewed/2024/02/GHSA-pf5w-4v9j-2h6f/GHSA-pf5w-4v9j-2h6f.json index 2274364daee..be591237016 100644 --- a/advisories/unreviewed/2024/02/GHSA-pf5w-4v9j-2h6f/GHSA-pf5w-4v9j-2h6f.json +++ b/advisories/unreviewed/2024/02/GHSA-pf5w-4v9j-2h6f/GHSA-pf5w-4v9j-2h6f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-qg29-4gg5-8r2w/GHSA-qg29-4gg5-8r2w.json b/advisories/unreviewed/2024/02/GHSA-qg29-4gg5-8r2w/GHSA-qg29-4gg5-8r2w.json index 396054a8128..af759201819 100644 --- a/advisories/unreviewed/2024/02/GHSA-qg29-4gg5-8r2w/GHSA-qg29-4gg5-8r2w.json +++ b/advisories/unreviewed/2024/02/GHSA-qg29-4gg5-8r2w/GHSA-qg29-4gg5-8r2w.json @@ -7,12 +7,8 @@ "CVE-2021-46990" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/64s: Fix crashes when toggling entry flush barrier\n\nThe entry flush mitigation can be enabled/disabled at runtime via a\ndebugfs file (entry_flush), which causes the kernel to patch itself to\nenable/disable the relevant mitigations.\n\nHowever depending on which mitigation we're using, it may not be safe to\ndo that patching while other CPUs are active. For example the following\ncrash:\n\n sleeper[15639]: segfault (11) at c000000000004c20 nip c000000000004c20 lr c000000000004c20\n\nShows that we returned to userspace with a corrupted LR that points into\nthe kernel, due to executing the partially patched call to the fallback\nentry flush (ie. we missed the LR restore).\n\nFix it by doing the patching under stop machine. The CPUs that aren't\ndoing the patching will be spinning in the core of the stop machine\nlogic. That is currently sufficient for our purposes, because none of\nthe patching we do is to that code or anywhere in the vicinity.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-rwv8-w229-vr4v/GHSA-rwv8-w229-vr4v.json b/advisories/unreviewed/2024/02/GHSA-rwv8-w229-vr4v/GHSA-rwv8-w229-vr4v.json index 6de6655f9f5..2969f2ae3ae 100644 --- a/advisories/unreviewed/2024/02/GHSA-rwv8-w229-vr4v/GHSA-rwv8-w229-vr4v.json +++ b/advisories/unreviewed/2024/02/GHSA-rwv8-w229-vr4v/GHSA-rwv8-w229-vr4v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-v4hq-m4wr-6pmj/GHSA-v4hq-m4wr-6pmj.json b/advisories/unreviewed/2024/02/GHSA-v4hq-m4wr-6pmj/GHSA-v4hq-m4wr-6pmj.json index 2569ab49269..389ad518f3c 100644 --- a/advisories/unreviewed/2024/02/GHSA-v4hq-m4wr-6pmj/GHSA-v4hq-m4wr-6pmj.json +++ b/advisories/unreviewed/2024/02/GHSA-v4hq-m4wr-6pmj/GHSA-v4hq-m4wr-6pmj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-v8xr-j3gp-fmxj/GHSA-v8xr-j3gp-fmxj.json b/advisories/unreviewed/2024/02/GHSA-v8xr-j3gp-fmxj/GHSA-v8xr-j3gp-fmxj.json index 66611a98d75..4e0c0fb5beb 100644 --- a/advisories/unreviewed/2024/02/GHSA-v8xr-j3gp-fmxj/GHSA-v8xr-j3gp-fmxj.json +++ b/advisories/unreviewed/2024/02/GHSA-v8xr-j3gp-fmxj/GHSA-v8xr-j3gp-fmxj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-vq79-hxjc-77c4/GHSA-vq79-hxjc-77c4.json b/advisories/unreviewed/2024/02/GHSA-vq79-hxjc-77c4/GHSA-vq79-hxjc-77c4.json index b563d22d0c5..510c7848358 100644 --- a/advisories/unreviewed/2024/02/GHSA-vq79-hxjc-77c4/GHSA-vq79-hxjc-77c4.json +++ b/advisories/unreviewed/2024/02/GHSA-vq79-hxjc-77c4/GHSA-vq79-hxjc-77c4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-vx8g-76pm-2x2x/GHSA-vx8g-76pm-2x2x.json b/advisories/unreviewed/2024/02/GHSA-vx8g-76pm-2x2x/GHSA-vx8g-76pm-2x2x.json index d78b49c6337..30cc100a1b7 100644 --- a/advisories/unreviewed/2024/02/GHSA-vx8g-76pm-2x2x/GHSA-vx8g-76pm-2x2x.json +++ b/advisories/unreviewed/2024/02/GHSA-vx8g-76pm-2x2x/GHSA-vx8g-76pm-2x2x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-w2wj-hmmg-5q2c/GHSA-w2wj-hmmg-5q2c.json b/advisories/unreviewed/2024/02/GHSA-w2wj-hmmg-5q2c/GHSA-w2wj-hmmg-5q2c.json index b8131ef2bb1..b808c72d7ec 100644 --- a/advisories/unreviewed/2024/02/GHSA-w2wj-hmmg-5q2c/GHSA-w2wj-hmmg-5q2c.json +++ b/advisories/unreviewed/2024/02/GHSA-w2wj-hmmg-5q2c/GHSA-w2wj-hmmg-5q2c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-whfc-7h32-gf82/GHSA-whfc-7h32-gf82.json b/advisories/unreviewed/2024/02/GHSA-whfc-7h32-gf82/GHSA-whfc-7h32-gf82.json index 379613d16cf..6a51f8ffecd 100644 --- a/advisories/unreviewed/2024/02/GHSA-whfc-7h32-gf82/GHSA-whfc-7h32-gf82.json +++ b/advisories/unreviewed/2024/02/GHSA-whfc-7h32-gf82/GHSA-whfc-7h32-gf82.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-wj52-rfj4-xjcm/GHSA-wj52-rfj4-xjcm.json b/advisories/unreviewed/2024/02/GHSA-wj52-rfj4-xjcm/GHSA-wj52-rfj4-xjcm.json index 025de3bbe76..7dce2ac8cb1 100644 --- a/advisories/unreviewed/2024/02/GHSA-wj52-rfj4-xjcm/GHSA-wj52-rfj4-xjcm.json +++ b/advisories/unreviewed/2024/02/GHSA-wj52-rfj4-xjcm/GHSA-wj52-rfj4-xjcm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-wj7c-h9x2-w8cg/GHSA-wj7c-h9x2-w8cg.json b/advisories/unreviewed/2024/02/GHSA-wj7c-h9x2-w8cg/GHSA-wj7c-h9x2-w8cg.json index 8082767d9e9..6159f570859 100644 --- a/advisories/unreviewed/2024/02/GHSA-wj7c-h9x2-w8cg/GHSA-wj7c-h9x2-w8cg.json +++ b/advisories/unreviewed/2024/02/GHSA-wj7c-h9x2-w8cg/GHSA-wj7c-h9x2-w8cg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-wp72-v8x4-g8h9/GHSA-wp72-v8x4-g8h9.json b/advisories/unreviewed/2024/02/GHSA-wp72-v8x4-g8h9/GHSA-wp72-v8x4-g8h9.json index 64bb3b0599d..726a0134a97 100644 --- a/advisories/unreviewed/2024/02/GHSA-wp72-v8x4-g8h9/GHSA-wp72-v8x4-g8h9.json +++ b/advisories/unreviewed/2024/02/GHSA-wp72-v8x4-g8h9/GHSA-wp72-v8x4-g8h9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-wq4q-4vw5-q8j3/GHSA-wq4q-4vw5-q8j3.json b/advisories/unreviewed/2024/02/GHSA-wq4q-4vw5-q8j3/GHSA-wq4q-4vw5-q8j3.json index 06af44a8639..56b0e137c8e 100644 --- a/advisories/unreviewed/2024/02/GHSA-wq4q-4vw5-q8j3/GHSA-wq4q-4vw5-q8j3.json +++ b/advisories/unreviewed/2024/02/GHSA-wq4q-4vw5-q8j3/GHSA-wq4q-4vw5-q8j3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-xrvh-c235-ph9w/GHSA-xrvh-c235-ph9w.json b/advisories/unreviewed/2024/02/GHSA-xrvh-c235-ph9w/GHSA-xrvh-c235-ph9w.json index b6eac6afe9f..735a5606a58 100644 --- a/advisories/unreviewed/2024/02/GHSA-xrvh-c235-ph9w/GHSA-xrvh-c235-ph9w.json +++ b/advisories/unreviewed/2024/02/GHSA-xrvh-c235-ph9w/GHSA-xrvh-c235-ph9w.json @@ -7,12 +7,8 @@ "CVE-2020-36783" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: img-scb: fix reference leak when pm_runtime_get_sync fails\n\nThe PM reference count is not expected to be incremented on\nreturn in functions img_i2c_xfer and img_i2c_init.\n\nHowever, pm_runtime_get_sync will increment the PM reference\ncount even failed. Forgetting to putting operation will result\nin a reference leak here.\n\nReplace it with pm_runtime_resume_and_get to keep usage\ncounter balanced.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-xw3g-x45j-xxhh/GHSA-xw3g-x45j-xxhh.json b/advisories/unreviewed/2024/02/GHSA-xw3g-x45j-xxhh/GHSA-xw3g-x45j-xxhh.json index d6d8c863f4d..bbb0494a019 100644 --- a/advisories/unreviewed/2024/02/GHSA-xw3g-x45j-xxhh/GHSA-xw3g-x45j-xxhh.json +++ b/advisories/unreviewed/2024/02/GHSA-xw3g-x45j-xxhh/GHSA-xw3g-x45j-xxhh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-2c59-9ffj-f3h3/GHSA-2c59-9ffj-f3h3.json b/advisories/unreviewed/2024/03/GHSA-2c59-9ffj-f3h3/GHSA-2c59-9ffj-f3h3.json index b9a0a651249..fa91dd2924d 100644 --- a/advisories/unreviewed/2024/03/GHSA-2c59-9ffj-f3h3/GHSA-2c59-9ffj-f3h3.json +++ b/advisories/unreviewed/2024/03/GHSA-2c59-9ffj-f3h3/GHSA-2c59-9ffj-f3h3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-2cj9-wjmr-5w57/GHSA-2cj9-wjmr-5w57.json b/advisories/unreviewed/2024/03/GHSA-2cj9-wjmr-5w57/GHSA-2cj9-wjmr-5w57.json index 96a2633b8cc..3a077d2cf97 100644 --- a/advisories/unreviewed/2024/03/GHSA-2cj9-wjmr-5w57/GHSA-2cj9-wjmr-5w57.json +++ b/advisories/unreviewed/2024/03/GHSA-2cj9-wjmr-5w57/GHSA-2cj9-wjmr-5w57.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-2g3f-73vr-7c76/GHSA-2g3f-73vr-7c76.json b/advisories/unreviewed/2024/03/GHSA-2g3f-73vr-7c76/GHSA-2g3f-73vr-7c76.json index 3ca029996fb..754f8469b1d 100644 --- a/advisories/unreviewed/2024/03/GHSA-2g3f-73vr-7c76/GHSA-2g3f-73vr-7c76.json +++ b/advisories/unreviewed/2024/03/GHSA-2g3f-73vr-7c76/GHSA-2g3f-73vr-7c76.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-2j89-jv64-pjgc/GHSA-2j89-jv64-pjgc.json b/advisories/unreviewed/2024/03/GHSA-2j89-jv64-pjgc/GHSA-2j89-jv64-pjgc.json index 95535644fa0..5d8399522aa 100644 --- a/advisories/unreviewed/2024/03/GHSA-2j89-jv64-pjgc/GHSA-2j89-jv64-pjgc.json +++ b/advisories/unreviewed/2024/03/GHSA-2j89-jv64-pjgc/GHSA-2j89-jv64-pjgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-2wh2-rrfv-xm6m/GHSA-2wh2-rrfv-xm6m.json b/advisories/unreviewed/2024/03/GHSA-2wh2-rrfv-xm6m/GHSA-2wh2-rrfv-xm6m.json index 7d0ec88aaf2..4ee17fa33e9 100644 --- a/advisories/unreviewed/2024/03/GHSA-2wh2-rrfv-xm6m/GHSA-2wh2-rrfv-xm6m.json +++ b/advisories/unreviewed/2024/03/GHSA-2wh2-rrfv-xm6m/GHSA-2wh2-rrfv-xm6m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-32cw-gjpg-49hh/GHSA-32cw-gjpg-49hh.json b/advisories/unreviewed/2024/03/GHSA-32cw-gjpg-49hh/GHSA-32cw-gjpg-49hh.json index 4d6d81330e0..8f4bdb11f94 100644 --- a/advisories/unreviewed/2024/03/GHSA-32cw-gjpg-49hh/GHSA-32cw-gjpg-49hh.json +++ b/advisories/unreviewed/2024/03/GHSA-32cw-gjpg-49hh/GHSA-32cw-gjpg-49hh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-395r-v34f-5jmw/GHSA-395r-v34f-5jmw.json b/advisories/unreviewed/2024/03/GHSA-395r-v34f-5jmw/GHSA-395r-v34f-5jmw.json index f6a67db12f6..10e3438d10d 100644 --- a/advisories/unreviewed/2024/03/GHSA-395r-v34f-5jmw/GHSA-395r-v34f-5jmw.json +++ b/advisories/unreviewed/2024/03/GHSA-395r-v34f-5jmw/GHSA-395r-v34f-5jmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-3f88-vcg8-m5ph/GHSA-3f88-vcg8-m5ph.json b/advisories/unreviewed/2024/03/GHSA-3f88-vcg8-m5ph/GHSA-3f88-vcg8-m5ph.json index b820cddf22d..f0c582c67ec 100644 --- a/advisories/unreviewed/2024/03/GHSA-3f88-vcg8-m5ph/GHSA-3f88-vcg8-m5ph.json +++ b/advisories/unreviewed/2024/03/GHSA-3f88-vcg8-m5ph/GHSA-3f88-vcg8-m5ph.json @@ -7,12 +7,8 @@ "CVE-2023-39223" ], "details": "Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-3rxx-hfrv-77fv/GHSA-3rxx-hfrv-77fv.json b/advisories/unreviewed/2024/03/GHSA-3rxx-hfrv-77fv/GHSA-3rxx-hfrv-77fv.json index dc0f0d3457d..33a844d552c 100644 --- a/advisories/unreviewed/2024/03/GHSA-3rxx-hfrv-77fv/GHSA-3rxx-hfrv-77fv.json +++ b/advisories/unreviewed/2024/03/GHSA-3rxx-hfrv-77fv/GHSA-3rxx-hfrv-77fv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-3vxh-vh2q-2r6g/GHSA-3vxh-vh2q-2r6g.json b/advisories/unreviewed/2024/03/GHSA-3vxh-vh2q-2r6g/GHSA-3vxh-vh2q-2r6g.json index 4f0296cfe4d..65ce534329f 100644 --- a/advisories/unreviewed/2024/03/GHSA-3vxh-vh2q-2r6g/GHSA-3vxh-vh2q-2r6g.json +++ b/advisories/unreviewed/2024/03/GHSA-3vxh-vh2q-2r6g/GHSA-3vxh-vh2q-2r6g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-435f-c6p4-58h8/GHSA-435f-c6p4-58h8.json b/advisories/unreviewed/2024/03/GHSA-435f-c6p4-58h8/GHSA-435f-c6p4-58h8.json index 2763461b6fb..e184e151f78 100644 --- a/advisories/unreviewed/2024/03/GHSA-435f-c6p4-58h8/GHSA-435f-c6p4-58h8.json +++ b/advisories/unreviewed/2024/03/GHSA-435f-c6p4-58h8/GHSA-435f-c6p4-58h8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-4gc8-g785-gxxw/GHSA-4gc8-g785-gxxw.json b/advisories/unreviewed/2024/03/GHSA-4gc8-g785-gxxw/GHSA-4gc8-g785-gxxw.json index 1d445880e6f..6fe8172026f 100644 --- a/advisories/unreviewed/2024/03/GHSA-4gc8-g785-gxxw/GHSA-4gc8-g785-gxxw.json +++ b/advisories/unreviewed/2024/03/GHSA-4gc8-g785-gxxw/GHSA-4gc8-g785-gxxw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-4p64-mr2w-44cv/GHSA-4p64-mr2w-44cv.json b/advisories/unreviewed/2024/03/GHSA-4p64-mr2w-44cv/GHSA-4p64-mr2w-44cv.json index ec522dc1510..b182af23374 100644 --- a/advisories/unreviewed/2024/03/GHSA-4p64-mr2w-44cv/GHSA-4p64-mr2w-44cv.json +++ b/advisories/unreviewed/2024/03/GHSA-4p64-mr2w-44cv/GHSA-4p64-mr2w-44cv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-52gr-wg7p-r98m/GHSA-52gr-wg7p-r98m.json b/advisories/unreviewed/2024/03/GHSA-52gr-wg7p-r98m/GHSA-52gr-wg7p-r98m.json index 301c561dea2..b25d6868aad 100644 --- a/advisories/unreviewed/2024/03/GHSA-52gr-wg7p-r98m/GHSA-52gr-wg7p-r98m.json +++ b/advisories/unreviewed/2024/03/GHSA-52gr-wg7p-r98m/GHSA-52gr-wg7p-r98m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-5494-m8hp-j85p/GHSA-5494-m8hp-j85p.json b/advisories/unreviewed/2024/03/GHSA-5494-m8hp-j85p/GHSA-5494-m8hp-j85p.json index 0a3084eccb7..01441435700 100644 --- a/advisories/unreviewed/2024/03/GHSA-5494-m8hp-j85p/GHSA-5494-m8hp-j85p.json +++ b/advisories/unreviewed/2024/03/GHSA-5494-m8hp-j85p/GHSA-5494-m8hp-j85p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-56v4-wqpf-wcwp/GHSA-56v4-wqpf-wcwp.json b/advisories/unreviewed/2024/03/GHSA-56v4-wqpf-wcwp/GHSA-56v4-wqpf-wcwp.json index 58eb8b5f40a..eaff8374d39 100644 --- a/advisories/unreviewed/2024/03/GHSA-56v4-wqpf-wcwp/GHSA-56v4-wqpf-wcwp.json +++ b/advisories/unreviewed/2024/03/GHSA-56v4-wqpf-wcwp/GHSA-56v4-wqpf-wcwp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-5r7f-qp73-wrxq/GHSA-5r7f-qp73-wrxq.json b/advisories/unreviewed/2024/03/GHSA-5r7f-qp73-wrxq/GHSA-5r7f-qp73-wrxq.json index c04d0bf2704..65094c0dd00 100644 --- a/advisories/unreviewed/2024/03/GHSA-5r7f-qp73-wrxq/GHSA-5r7f-qp73-wrxq.json +++ b/advisories/unreviewed/2024/03/GHSA-5r7f-qp73-wrxq/GHSA-5r7f-qp73-wrxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-67vv-3f58-75qw/GHSA-67vv-3f58-75qw.json b/advisories/unreviewed/2024/03/GHSA-67vv-3f58-75qw/GHSA-67vv-3f58-75qw.json index c5f7a099deb..2694c14812a 100644 --- a/advisories/unreviewed/2024/03/GHSA-67vv-3f58-75qw/GHSA-67vv-3f58-75qw.json +++ b/advisories/unreviewed/2024/03/GHSA-67vv-3f58-75qw/GHSA-67vv-3f58-75qw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-6cr3-7r4p-pwrg/GHSA-6cr3-7r4p-pwrg.json b/advisories/unreviewed/2024/03/GHSA-6cr3-7r4p-pwrg/GHSA-6cr3-7r4p-pwrg.json index df1cc3b13db..9692c56cb0a 100644 --- a/advisories/unreviewed/2024/03/GHSA-6cr3-7r4p-pwrg/GHSA-6cr3-7r4p-pwrg.json +++ b/advisories/unreviewed/2024/03/GHSA-6cr3-7r4p-pwrg/GHSA-6cr3-7r4p-pwrg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-6g38-mx63-ggcj/GHSA-6g38-mx63-ggcj.json b/advisories/unreviewed/2024/03/GHSA-6g38-mx63-ggcj/GHSA-6g38-mx63-ggcj.json index fa06607449c..2c04b9ad52a 100644 --- a/advisories/unreviewed/2024/03/GHSA-6g38-mx63-ggcj/GHSA-6g38-mx63-ggcj.json +++ b/advisories/unreviewed/2024/03/GHSA-6g38-mx63-ggcj/GHSA-6g38-mx63-ggcj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-6phc-g34x-m7xx/GHSA-6phc-g34x-m7xx.json b/advisories/unreviewed/2024/03/GHSA-6phc-g34x-m7xx/GHSA-6phc-g34x-m7xx.json index a5e75f0e7be..a3a9410ab8d 100644 --- a/advisories/unreviewed/2024/03/GHSA-6phc-g34x-m7xx/GHSA-6phc-g34x-m7xx.json +++ b/advisories/unreviewed/2024/03/GHSA-6phc-g34x-m7xx/GHSA-6phc-g34x-m7xx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-6qvp-94gp-vvvv/GHSA-6qvp-94gp-vvvv.json b/advisories/unreviewed/2024/03/GHSA-6qvp-94gp-vvvv/GHSA-6qvp-94gp-vvvv.json index ade1c71e744..f4c6cbf60cd 100644 --- a/advisories/unreviewed/2024/03/GHSA-6qvp-94gp-vvvv/GHSA-6qvp-94gp-vvvv.json +++ b/advisories/unreviewed/2024/03/GHSA-6qvp-94gp-vvvv/GHSA-6qvp-94gp-vvvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-7497-c5pf-w9rv/GHSA-7497-c5pf-w9rv.json b/advisories/unreviewed/2024/03/GHSA-7497-c5pf-w9rv/GHSA-7497-c5pf-w9rv.json index ebde2fca359..4413f5618bd 100644 --- a/advisories/unreviewed/2024/03/GHSA-7497-c5pf-w9rv/GHSA-7497-c5pf-w9rv.json +++ b/advisories/unreviewed/2024/03/GHSA-7497-c5pf-w9rv/GHSA-7497-c5pf-w9rv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-76cc-cvrf-qfw3/GHSA-76cc-cvrf-qfw3.json b/advisories/unreviewed/2024/03/GHSA-76cc-cvrf-qfw3/GHSA-76cc-cvrf-qfw3.json index 7f00b13128f..2cde425d93c 100644 --- a/advisories/unreviewed/2024/03/GHSA-76cc-cvrf-qfw3/GHSA-76cc-cvrf-qfw3.json +++ b/advisories/unreviewed/2024/03/GHSA-76cc-cvrf-qfw3/GHSA-76cc-cvrf-qfw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-7chf-chrh-74q7/GHSA-7chf-chrh-74q7.json b/advisories/unreviewed/2024/03/GHSA-7chf-chrh-74q7/GHSA-7chf-chrh-74q7.json index ee97b15fba2..9aa25830618 100644 --- a/advisories/unreviewed/2024/03/GHSA-7chf-chrh-74q7/GHSA-7chf-chrh-74q7.json +++ b/advisories/unreviewed/2024/03/GHSA-7chf-chrh-74q7/GHSA-7chf-chrh-74q7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-7jw9-f5fj-6h24/GHSA-7jw9-f5fj-6h24.json b/advisories/unreviewed/2024/03/GHSA-7jw9-f5fj-6h24/GHSA-7jw9-f5fj-6h24.json index 07ff6dd3634..06c6d784502 100644 --- a/advisories/unreviewed/2024/03/GHSA-7jw9-f5fj-6h24/GHSA-7jw9-f5fj-6h24.json +++ b/advisories/unreviewed/2024/03/GHSA-7jw9-f5fj-6h24/GHSA-7jw9-f5fj-6h24.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-7mhp-79q4-v3j9/GHSA-7mhp-79q4-v3j9.json b/advisories/unreviewed/2024/03/GHSA-7mhp-79q4-v3j9/GHSA-7mhp-79q4-v3j9.json index 124ad627d94..fae20959684 100644 --- a/advisories/unreviewed/2024/03/GHSA-7mhp-79q4-v3j9/GHSA-7mhp-79q4-v3j9.json +++ b/advisories/unreviewed/2024/03/GHSA-7mhp-79q4-v3j9/GHSA-7mhp-79q4-v3j9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-7pfr-rxmf-5m47/GHSA-7pfr-rxmf-5m47.json b/advisories/unreviewed/2024/03/GHSA-7pfr-rxmf-5m47/GHSA-7pfr-rxmf-5m47.json index 6eff24c40fe..3c3017ed3c4 100644 --- a/advisories/unreviewed/2024/03/GHSA-7pfr-rxmf-5m47/GHSA-7pfr-rxmf-5m47.json +++ b/advisories/unreviewed/2024/03/GHSA-7pfr-rxmf-5m47/GHSA-7pfr-rxmf-5m47.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-7x8p-3pr3-73hp/GHSA-7x8p-3pr3-73hp.json b/advisories/unreviewed/2024/03/GHSA-7x8p-3pr3-73hp/GHSA-7x8p-3pr3-73hp.json index 6c4b716f852..a06da66257e 100644 --- a/advisories/unreviewed/2024/03/GHSA-7x8p-3pr3-73hp/GHSA-7x8p-3pr3-73hp.json +++ b/advisories/unreviewed/2024/03/GHSA-7x8p-3pr3-73hp/GHSA-7x8p-3pr3-73hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-872h-rcj8-64mr/GHSA-872h-rcj8-64mr.json b/advisories/unreviewed/2024/03/GHSA-872h-rcj8-64mr/GHSA-872h-rcj8-64mr.json index 5e84fdb7b87..810c1dd0ab9 100644 --- a/advisories/unreviewed/2024/03/GHSA-872h-rcj8-64mr/GHSA-872h-rcj8-64mr.json +++ b/advisories/unreviewed/2024/03/GHSA-872h-rcj8-64mr/GHSA-872h-rcj8-64mr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-8857-m4qp-w9m7/GHSA-8857-m4qp-w9m7.json b/advisories/unreviewed/2024/03/GHSA-8857-m4qp-w9m7/GHSA-8857-m4qp-w9m7.json index 9c00887e32d..a5b0e357d8b 100644 --- a/advisories/unreviewed/2024/03/GHSA-8857-m4qp-w9m7/GHSA-8857-m4qp-w9m7.json +++ b/advisories/unreviewed/2024/03/GHSA-8857-m4qp-w9m7/GHSA-8857-m4qp-w9m7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-89j2-4p5x-93v7/GHSA-89j2-4p5x-93v7.json b/advisories/unreviewed/2024/03/GHSA-89j2-4p5x-93v7/GHSA-89j2-4p5x-93v7.json index 2411ffa8d7a..8d20d6de36e 100644 --- a/advisories/unreviewed/2024/03/GHSA-89j2-4p5x-93v7/GHSA-89j2-4p5x-93v7.json +++ b/advisories/unreviewed/2024/03/GHSA-89j2-4p5x-93v7/GHSA-89j2-4p5x-93v7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-8g82-8886-q7xh/GHSA-8g82-8886-q7xh.json b/advisories/unreviewed/2024/03/GHSA-8g82-8886-q7xh/GHSA-8g82-8886-q7xh.json index c42285ccac6..e6f374aeea8 100644 --- a/advisories/unreviewed/2024/03/GHSA-8g82-8886-q7xh/GHSA-8g82-8886-q7xh.json +++ b/advisories/unreviewed/2024/03/GHSA-8g82-8886-q7xh/GHSA-8g82-8886-q7xh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-8p64-f589-46g5/GHSA-8p64-f589-46g5.json b/advisories/unreviewed/2024/03/GHSA-8p64-f589-46g5/GHSA-8p64-f589-46g5.json index a070f65b3da..eb0be158b45 100644 --- a/advisories/unreviewed/2024/03/GHSA-8p64-f589-46g5/GHSA-8p64-f589-46g5.json +++ b/advisories/unreviewed/2024/03/GHSA-8p64-f589-46g5/GHSA-8p64-f589-46g5.json @@ -7,12 +7,8 @@ "CVE-2021-36759" ], "details": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-35342. Reason: This candidate is a reservation duplicate of CVE-2021-35342. Notes: All CVE users should reference CVE-2021-35342 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-8rr6-29c9-2mpq/GHSA-8rr6-29c9-2mpq.json b/advisories/unreviewed/2024/03/GHSA-8rr6-29c9-2mpq/GHSA-8rr6-29c9-2mpq.json index 58236b27f01..21465b7724a 100644 --- a/advisories/unreviewed/2024/03/GHSA-8rr6-29c9-2mpq/GHSA-8rr6-29c9-2mpq.json +++ b/advisories/unreviewed/2024/03/GHSA-8rr6-29c9-2mpq/GHSA-8rr6-29c9-2mpq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-8v7g-v34f-jv8p/GHSA-8v7g-v34f-jv8p.json b/advisories/unreviewed/2024/03/GHSA-8v7g-v34f-jv8p/GHSA-8v7g-v34f-jv8p.json index 6bba21ab825..77b2c5b0caa 100644 --- a/advisories/unreviewed/2024/03/GHSA-8v7g-v34f-jv8p/GHSA-8v7g-v34f-jv8p.json +++ b/advisories/unreviewed/2024/03/GHSA-8v7g-v34f-jv8p/GHSA-8v7g-v34f-jv8p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-9369-2hvw-xcf5/GHSA-9369-2hvw-xcf5.json b/advisories/unreviewed/2024/03/GHSA-9369-2hvw-xcf5/GHSA-9369-2hvw-xcf5.json index c4e88dd41ea..f461b92e4a3 100644 --- a/advisories/unreviewed/2024/03/GHSA-9369-2hvw-xcf5/GHSA-9369-2hvw-xcf5.json +++ b/advisories/unreviewed/2024/03/GHSA-9369-2hvw-xcf5/GHSA-9369-2hvw-xcf5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-98fg-qw7m-42fj/GHSA-98fg-qw7m-42fj.json b/advisories/unreviewed/2024/03/GHSA-98fg-qw7m-42fj/GHSA-98fg-qw7m-42fj.json index 731039ac21c..702aa4c919d 100644 --- a/advisories/unreviewed/2024/03/GHSA-98fg-qw7m-42fj/GHSA-98fg-qw7m-42fj.json +++ b/advisories/unreviewed/2024/03/GHSA-98fg-qw7m-42fj/GHSA-98fg-qw7m-42fj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-9c85-2fpf-3529/GHSA-9c85-2fpf-3529.json b/advisories/unreviewed/2024/03/GHSA-9c85-2fpf-3529/GHSA-9c85-2fpf-3529.json index 8c9c74d7530..1d5c08ca9af 100644 --- a/advisories/unreviewed/2024/03/GHSA-9c85-2fpf-3529/GHSA-9c85-2fpf-3529.json +++ b/advisories/unreviewed/2024/03/GHSA-9c85-2fpf-3529/GHSA-9c85-2fpf-3529.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-9q9g-6mgq-4cf7/GHSA-9q9g-6mgq-4cf7.json b/advisories/unreviewed/2024/03/GHSA-9q9g-6mgq-4cf7/GHSA-9q9g-6mgq-4cf7.json index 31b4be4531f..6a4aa2f4d9e 100644 --- a/advisories/unreviewed/2024/03/GHSA-9q9g-6mgq-4cf7/GHSA-9q9g-6mgq-4cf7.json +++ b/advisories/unreviewed/2024/03/GHSA-9q9g-6mgq-4cf7/GHSA-9q9g-6mgq-4cf7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-c8h5-49j5-398q/GHSA-c8h5-49j5-398q.json b/advisories/unreviewed/2024/03/GHSA-c8h5-49j5-398q/GHSA-c8h5-49j5-398q.json index c5811b14412..d915b29d702 100644 --- a/advisories/unreviewed/2024/03/GHSA-c8h5-49j5-398q/GHSA-c8h5-49j5-398q.json +++ b/advisories/unreviewed/2024/03/GHSA-c8h5-49j5-398q/GHSA-c8h5-49j5-398q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-c97h-q9gp-6xq2/GHSA-c97h-q9gp-6xq2.json b/advisories/unreviewed/2024/03/GHSA-c97h-q9gp-6xq2/GHSA-c97h-q9gp-6xq2.json index f96343b7282..acf867a718c 100644 --- a/advisories/unreviewed/2024/03/GHSA-c97h-q9gp-6xq2/GHSA-c97h-q9gp-6xq2.json +++ b/advisories/unreviewed/2024/03/GHSA-c97h-q9gp-6xq2/GHSA-c97h-q9gp-6xq2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-cpvw-pm4w-xwgm/GHSA-cpvw-pm4w-xwgm.json b/advisories/unreviewed/2024/03/GHSA-cpvw-pm4w-xwgm/GHSA-cpvw-pm4w-xwgm.json index f68358dd6a3..88a5b2c6e11 100644 --- a/advisories/unreviewed/2024/03/GHSA-cpvw-pm4w-xwgm/GHSA-cpvw-pm4w-xwgm.json +++ b/advisories/unreviewed/2024/03/GHSA-cpvw-pm4w-xwgm/GHSA-cpvw-pm4w-xwgm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-cww5-x7rh-q7fp/GHSA-cww5-x7rh-q7fp.json b/advisories/unreviewed/2024/03/GHSA-cww5-x7rh-q7fp/GHSA-cww5-x7rh-q7fp.json index 3254600ccec..8d038af508c 100644 --- a/advisories/unreviewed/2024/03/GHSA-cww5-x7rh-q7fp/GHSA-cww5-x7rh-q7fp.json +++ b/advisories/unreviewed/2024/03/GHSA-cww5-x7rh-q7fp/GHSA-cww5-x7rh-q7fp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-f3qg-4gp2-rr72/GHSA-f3qg-4gp2-rr72.json b/advisories/unreviewed/2024/03/GHSA-f3qg-4gp2-rr72/GHSA-f3qg-4gp2-rr72.json index 3652bf92bc1..f457afe0eee 100644 --- a/advisories/unreviewed/2024/03/GHSA-f3qg-4gp2-rr72/GHSA-f3qg-4gp2-rr72.json +++ b/advisories/unreviewed/2024/03/GHSA-f3qg-4gp2-rr72/GHSA-f3qg-4gp2-rr72.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-f5gv-m2h2-fpc6/GHSA-f5gv-m2h2-fpc6.json b/advisories/unreviewed/2024/03/GHSA-f5gv-m2h2-fpc6/GHSA-f5gv-m2h2-fpc6.json index ed33e147bf8..75db8f7aa10 100644 --- a/advisories/unreviewed/2024/03/GHSA-f5gv-m2h2-fpc6/GHSA-f5gv-m2h2-fpc6.json +++ b/advisories/unreviewed/2024/03/GHSA-f5gv-m2h2-fpc6/GHSA-f5gv-m2h2-fpc6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-f86g-qrx4-c3h8/GHSA-f86g-qrx4-c3h8.json b/advisories/unreviewed/2024/03/GHSA-f86g-qrx4-c3h8/GHSA-f86g-qrx4-c3h8.json index 7ae89a1b0cd..21f5f137ce2 100644 --- a/advisories/unreviewed/2024/03/GHSA-f86g-qrx4-c3h8/GHSA-f86g-qrx4-c3h8.json +++ b/advisories/unreviewed/2024/03/GHSA-f86g-qrx4-c3h8/GHSA-f86g-qrx4-c3h8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-fg4p-3qhr-755g/GHSA-fg4p-3qhr-755g.json b/advisories/unreviewed/2024/03/GHSA-fg4p-3qhr-755g/GHSA-fg4p-3qhr-755g.json index e2c08560f6c..459102ddbe1 100644 --- a/advisories/unreviewed/2024/03/GHSA-fg4p-3qhr-755g/GHSA-fg4p-3qhr-755g.json +++ b/advisories/unreviewed/2024/03/GHSA-fg4p-3qhr-755g/GHSA-fg4p-3qhr-755g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-fw86-52fv-6jpx/GHSA-fw86-52fv-6jpx.json b/advisories/unreviewed/2024/03/GHSA-fw86-52fv-6jpx/GHSA-fw86-52fv-6jpx.json index 22b35fe15d2..0237bf6d930 100644 --- a/advisories/unreviewed/2024/03/GHSA-fw86-52fv-6jpx/GHSA-fw86-52fv-6jpx.json +++ b/advisories/unreviewed/2024/03/GHSA-fw86-52fv-6jpx/GHSA-fw86-52fv-6jpx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-g7q8-mh4r-mmx4/GHSA-g7q8-mh4r-mmx4.json b/advisories/unreviewed/2024/03/GHSA-g7q8-mh4r-mmx4/GHSA-g7q8-mh4r-mmx4.json index 4bf3d41cf82..58d7ed050bc 100644 --- a/advisories/unreviewed/2024/03/GHSA-g7q8-mh4r-mmx4/GHSA-g7q8-mh4r-mmx4.json +++ b/advisories/unreviewed/2024/03/GHSA-g7q8-mh4r-mmx4/GHSA-g7q8-mh4r-mmx4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-gf86-95fv-cjgf/GHSA-gf86-95fv-cjgf.json b/advisories/unreviewed/2024/03/GHSA-gf86-95fv-cjgf/GHSA-gf86-95fv-cjgf.json index e3bf94e684f..5b09fe9d7be 100644 --- a/advisories/unreviewed/2024/03/GHSA-gf86-95fv-cjgf/GHSA-gf86-95fv-cjgf.json +++ b/advisories/unreviewed/2024/03/GHSA-gf86-95fv-cjgf/GHSA-gf86-95fv-cjgf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-gvrx-mcwr-87pv/GHSA-gvrx-mcwr-87pv.json b/advisories/unreviewed/2024/03/GHSA-gvrx-mcwr-87pv/GHSA-gvrx-mcwr-87pv.json index fb245f0894e..dda693e4881 100644 --- a/advisories/unreviewed/2024/03/GHSA-gvrx-mcwr-87pv/GHSA-gvrx-mcwr-87pv.json +++ b/advisories/unreviewed/2024/03/GHSA-gvrx-mcwr-87pv/GHSA-gvrx-mcwr-87pv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-h8xw-5hw5-pq2g/GHSA-h8xw-5hw5-pq2g.json b/advisories/unreviewed/2024/03/GHSA-h8xw-5hw5-pq2g/GHSA-h8xw-5hw5-pq2g.json index eee827c1000..9b928b215d9 100644 --- a/advisories/unreviewed/2024/03/GHSA-h8xw-5hw5-pq2g/GHSA-h8xw-5hw5-pq2g.json +++ b/advisories/unreviewed/2024/03/GHSA-h8xw-5hw5-pq2g/GHSA-h8xw-5hw5-pq2g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-h9fq-4hj4-g596/GHSA-h9fq-4hj4-g596.json b/advisories/unreviewed/2024/03/GHSA-h9fq-4hj4-g596/GHSA-h9fq-4hj4-g596.json index 199f566a2a7..3e0f4e89d11 100644 --- a/advisories/unreviewed/2024/03/GHSA-h9fq-4hj4-g596/GHSA-h9fq-4hj4-g596.json +++ b/advisories/unreviewed/2024/03/GHSA-h9fq-4hj4-g596/GHSA-h9fq-4hj4-g596.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-hcq9-8j5c-v9xw/GHSA-hcq9-8j5c-v9xw.json b/advisories/unreviewed/2024/03/GHSA-hcq9-8j5c-v9xw/GHSA-hcq9-8j5c-v9xw.json index 666acf35c5a..fb7619ff653 100644 --- a/advisories/unreviewed/2024/03/GHSA-hcq9-8j5c-v9xw/GHSA-hcq9-8j5c-v9xw.json +++ b/advisories/unreviewed/2024/03/GHSA-hcq9-8j5c-v9xw/GHSA-hcq9-8j5c-v9xw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-hfmf-jm9p-89hg/GHSA-hfmf-jm9p-89hg.json b/advisories/unreviewed/2024/03/GHSA-hfmf-jm9p-89hg/GHSA-hfmf-jm9p-89hg.json index 35b370d5218..4458c73df02 100644 --- a/advisories/unreviewed/2024/03/GHSA-hfmf-jm9p-89hg/GHSA-hfmf-jm9p-89hg.json +++ b/advisories/unreviewed/2024/03/GHSA-hfmf-jm9p-89hg/GHSA-hfmf-jm9p-89hg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-hm28-v8c8-qx5x/GHSA-hm28-v8c8-qx5x.json b/advisories/unreviewed/2024/03/GHSA-hm28-v8c8-qx5x/GHSA-hm28-v8c8-qx5x.json index 474bf1a87c6..ce7d882c243 100644 --- a/advisories/unreviewed/2024/03/GHSA-hm28-v8c8-qx5x/GHSA-hm28-v8c8-qx5x.json +++ b/advisories/unreviewed/2024/03/GHSA-hm28-v8c8-qx5x/GHSA-hm28-v8c8-qx5x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-hqfx-hf4r-r274/GHSA-hqfx-hf4r-r274.json b/advisories/unreviewed/2024/03/GHSA-hqfx-hf4r-r274/GHSA-hqfx-hf4r-r274.json index 81131c8f68b..c0ea57749e1 100644 --- a/advisories/unreviewed/2024/03/GHSA-hqfx-hf4r-r274/GHSA-hqfx-hf4r-r274.json +++ b/advisories/unreviewed/2024/03/GHSA-hqfx-hf4r-r274/GHSA-hqfx-hf4r-r274.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-hwq9-6hwc-8v7g/GHSA-hwq9-6hwc-8v7g.json b/advisories/unreviewed/2024/03/GHSA-hwq9-6hwc-8v7g/GHSA-hwq9-6hwc-8v7g.json index 4e77602f938..204d73a244f 100644 --- a/advisories/unreviewed/2024/03/GHSA-hwq9-6hwc-8v7g/GHSA-hwq9-6hwc-8v7g.json +++ b/advisories/unreviewed/2024/03/GHSA-hwq9-6hwc-8v7g/GHSA-hwq9-6hwc-8v7g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-j4mm-f543-fj92/GHSA-j4mm-f543-fj92.json b/advisories/unreviewed/2024/03/GHSA-j4mm-f543-fj92/GHSA-j4mm-f543-fj92.json index 9a952d1f850..87eb0c80cd3 100644 --- a/advisories/unreviewed/2024/03/GHSA-j4mm-f543-fj92/GHSA-j4mm-f543-fj92.json +++ b/advisories/unreviewed/2024/03/GHSA-j4mm-f543-fj92/GHSA-j4mm-f543-fj92.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-jcqm-fhp5-5j5j/GHSA-jcqm-fhp5-5j5j.json b/advisories/unreviewed/2024/03/GHSA-jcqm-fhp5-5j5j/GHSA-jcqm-fhp5-5j5j.json index 02131eff591..91e5745ffca 100644 --- a/advisories/unreviewed/2024/03/GHSA-jcqm-fhp5-5j5j/GHSA-jcqm-fhp5-5j5j.json +++ b/advisories/unreviewed/2024/03/GHSA-jcqm-fhp5-5j5j/GHSA-jcqm-fhp5-5j5j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-jh55-qq58-48ph/GHSA-jh55-qq58-48ph.json b/advisories/unreviewed/2024/03/GHSA-jh55-qq58-48ph/GHSA-jh55-qq58-48ph.json index 0eb7d65eeae..044aa0dbc7b 100644 --- a/advisories/unreviewed/2024/03/GHSA-jh55-qq58-48ph/GHSA-jh55-qq58-48ph.json +++ b/advisories/unreviewed/2024/03/GHSA-jh55-qq58-48ph/GHSA-jh55-qq58-48ph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-jvwm-5xhx-5mqp/GHSA-jvwm-5xhx-5mqp.json b/advisories/unreviewed/2024/03/GHSA-jvwm-5xhx-5mqp/GHSA-jvwm-5xhx-5mqp.json index 75a4ed934df..a388de8f41e 100644 --- a/advisories/unreviewed/2024/03/GHSA-jvwm-5xhx-5mqp/GHSA-jvwm-5xhx-5mqp.json +++ b/advisories/unreviewed/2024/03/GHSA-jvwm-5xhx-5mqp/GHSA-jvwm-5xhx-5mqp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-m22v-j3fw-2m27/GHSA-m22v-j3fw-2m27.json b/advisories/unreviewed/2024/03/GHSA-m22v-j3fw-2m27/GHSA-m22v-j3fw-2m27.json index 2d6c7dd3b74..cb74929b451 100644 --- a/advisories/unreviewed/2024/03/GHSA-m22v-j3fw-2m27/GHSA-m22v-j3fw-2m27.json +++ b/advisories/unreviewed/2024/03/GHSA-m22v-j3fw-2m27/GHSA-m22v-j3fw-2m27.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-m2m2-984j-c7rx/GHSA-m2m2-984j-c7rx.json b/advisories/unreviewed/2024/03/GHSA-m2m2-984j-c7rx/GHSA-m2m2-984j-c7rx.json index cb315a2fc68..d6d3ee6aef6 100644 --- a/advisories/unreviewed/2024/03/GHSA-m2m2-984j-c7rx/GHSA-m2m2-984j-c7rx.json +++ b/advisories/unreviewed/2024/03/GHSA-m2m2-984j-c7rx/GHSA-m2m2-984j-c7rx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-m6hg-jwrh-92jj/GHSA-m6hg-jwrh-92jj.json b/advisories/unreviewed/2024/03/GHSA-m6hg-jwrh-92jj/GHSA-m6hg-jwrh-92jj.json index 73b9d9353b0..7c815efef78 100644 --- a/advisories/unreviewed/2024/03/GHSA-m6hg-jwrh-92jj/GHSA-m6hg-jwrh-92jj.json +++ b/advisories/unreviewed/2024/03/GHSA-m6hg-jwrh-92jj/GHSA-m6hg-jwrh-92jj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-m8x6-hrv6-g3cv/GHSA-m8x6-hrv6-g3cv.json b/advisories/unreviewed/2024/03/GHSA-m8x6-hrv6-g3cv/GHSA-m8x6-hrv6-g3cv.json index a29cb7d5139..e6a17a8ac74 100644 --- a/advisories/unreviewed/2024/03/GHSA-m8x6-hrv6-g3cv/GHSA-m8x6-hrv6-g3cv.json +++ b/advisories/unreviewed/2024/03/GHSA-m8x6-hrv6-g3cv/GHSA-m8x6-hrv6-g3cv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-m94j-rfcg-99c7/GHSA-m94j-rfcg-99c7.json b/advisories/unreviewed/2024/03/GHSA-m94j-rfcg-99c7/GHSA-m94j-rfcg-99c7.json index 4c63ab26d88..7923ba99cae 100644 --- a/advisories/unreviewed/2024/03/GHSA-m94j-rfcg-99c7/GHSA-m94j-rfcg-99c7.json +++ b/advisories/unreviewed/2024/03/GHSA-m94j-rfcg-99c7/GHSA-m94j-rfcg-99c7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-mfxp-38jc-24qj/GHSA-mfxp-38jc-24qj.json b/advisories/unreviewed/2024/03/GHSA-mfxp-38jc-24qj/GHSA-mfxp-38jc-24qj.json index 9796a9561c3..d3f572e94a4 100644 --- a/advisories/unreviewed/2024/03/GHSA-mfxp-38jc-24qj/GHSA-mfxp-38jc-24qj.json +++ b/advisories/unreviewed/2024/03/GHSA-mfxp-38jc-24qj/GHSA-mfxp-38jc-24qj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-mmch-m456-f59q/GHSA-mmch-m456-f59q.json b/advisories/unreviewed/2024/03/GHSA-mmch-m456-f59q/GHSA-mmch-m456-f59q.json index 984575c6f26..ca6d1174eb1 100644 --- a/advisories/unreviewed/2024/03/GHSA-mmch-m456-f59q/GHSA-mmch-m456-f59q.json +++ b/advisories/unreviewed/2024/03/GHSA-mmch-m456-f59q/GHSA-mmch-m456-f59q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-mv6p-j6vw-wcr4/GHSA-mv6p-j6vw-wcr4.json b/advisories/unreviewed/2024/03/GHSA-mv6p-j6vw-wcr4/GHSA-mv6p-j6vw-wcr4.json index c2a09491ddd..b698f492b91 100644 --- a/advisories/unreviewed/2024/03/GHSA-mv6p-j6vw-wcr4/GHSA-mv6p-j6vw-wcr4.json +++ b/advisories/unreviewed/2024/03/GHSA-mv6p-j6vw-wcr4/GHSA-mv6p-j6vw-wcr4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-p29f-v46f-qrx3/GHSA-p29f-v46f-qrx3.json b/advisories/unreviewed/2024/03/GHSA-p29f-v46f-qrx3/GHSA-p29f-v46f-qrx3.json index e036423db44..d66f765f7ec 100644 --- a/advisories/unreviewed/2024/03/GHSA-p29f-v46f-qrx3/GHSA-p29f-v46f-qrx3.json +++ b/advisories/unreviewed/2024/03/GHSA-p29f-v46f-qrx3/GHSA-p29f-v46f-qrx3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-p2c2-qg2f-h65h/GHSA-p2c2-qg2f-h65h.json b/advisories/unreviewed/2024/03/GHSA-p2c2-qg2f-h65h/GHSA-p2c2-qg2f-h65h.json index aad4eadd0e4..c69b59fcdcf 100644 --- a/advisories/unreviewed/2024/03/GHSA-p2c2-qg2f-h65h/GHSA-p2c2-qg2f-h65h.json +++ b/advisories/unreviewed/2024/03/GHSA-p2c2-qg2f-h65h/GHSA-p2c2-qg2f-h65h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-p5cq-xwvp-26vf/GHSA-p5cq-xwvp-26vf.json b/advisories/unreviewed/2024/03/GHSA-p5cq-xwvp-26vf/GHSA-p5cq-xwvp-26vf.json index 7115c16e08c..f11115ebc49 100644 --- a/advisories/unreviewed/2024/03/GHSA-p5cq-xwvp-26vf/GHSA-p5cq-xwvp-26vf.json +++ b/advisories/unreviewed/2024/03/GHSA-p5cq-xwvp-26vf/GHSA-p5cq-xwvp-26vf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-p67c-35g3-9pqc/GHSA-p67c-35g3-9pqc.json b/advisories/unreviewed/2024/03/GHSA-p67c-35g3-9pqc/GHSA-p67c-35g3-9pqc.json index b514dce6b76..6a58928ca84 100644 --- a/advisories/unreviewed/2024/03/GHSA-p67c-35g3-9pqc/GHSA-p67c-35g3-9pqc.json +++ b/advisories/unreviewed/2024/03/GHSA-p67c-35g3-9pqc/GHSA-p67c-35g3-9pqc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-pcmw-8m79-4286/GHSA-pcmw-8m79-4286.json b/advisories/unreviewed/2024/03/GHSA-pcmw-8m79-4286/GHSA-pcmw-8m79-4286.json index 4a79ac1dc73..e0da7c048ad 100644 --- a/advisories/unreviewed/2024/03/GHSA-pcmw-8m79-4286/GHSA-pcmw-8m79-4286.json +++ b/advisories/unreviewed/2024/03/GHSA-pcmw-8m79-4286/GHSA-pcmw-8m79-4286.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-pg9x-738h-qgq2/GHSA-pg9x-738h-qgq2.json b/advisories/unreviewed/2024/03/GHSA-pg9x-738h-qgq2/GHSA-pg9x-738h-qgq2.json index ce198f1eaeb..6c4e9240387 100644 --- a/advisories/unreviewed/2024/03/GHSA-pg9x-738h-qgq2/GHSA-pg9x-738h-qgq2.json +++ b/advisories/unreviewed/2024/03/GHSA-pg9x-738h-qgq2/GHSA-pg9x-738h-qgq2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-phwp-8rqx-x9g5/GHSA-phwp-8rqx-x9g5.json b/advisories/unreviewed/2024/03/GHSA-phwp-8rqx-x9g5/GHSA-phwp-8rqx-x9g5.json index a827694baac..7860007a33b 100644 --- a/advisories/unreviewed/2024/03/GHSA-phwp-8rqx-x9g5/GHSA-phwp-8rqx-x9g5.json +++ b/advisories/unreviewed/2024/03/GHSA-phwp-8rqx-x9g5/GHSA-phwp-8rqx-x9g5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-pm9f-6xv8-j2xf/GHSA-pm9f-6xv8-j2xf.json b/advisories/unreviewed/2024/03/GHSA-pm9f-6xv8-j2xf/GHSA-pm9f-6xv8-j2xf.json index a2cfe2b6b9d..2e1d48ab356 100644 --- a/advisories/unreviewed/2024/03/GHSA-pm9f-6xv8-j2xf/GHSA-pm9f-6xv8-j2xf.json +++ b/advisories/unreviewed/2024/03/GHSA-pm9f-6xv8-j2xf/GHSA-pm9f-6xv8-j2xf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-pw27-mh42-723p/GHSA-pw27-mh42-723p.json b/advisories/unreviewed/2024/03/GHSA-pw27-mh42-723p/GHSA-pw27-mh42-723p.json index e73cd3fef02..0a1a075bef0 100644 --- a/advisories/unreviewed/2024/03/GHSA-pw27-mh42-723p/GHSA-pw27-mh42-723p.json +++ b/advisories/unreviewed/2024/03/GHSA-pw27-mh42-723p/GHSA-pw27-mh42-723p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-q77j-868w-97cc/GHSA-q77j-868w-97cc.json b/advisories/unreviewed/2024/03/GHSA-q77j-868w-97cc/GHSA-q77j-868w-97cc.json index 6f1eb40f3c4..19993acb72c 100644 --- a/advisories/unreviewed/2024/03/GHSA-q77j-868w-97cc/GHSA-q77j-868w-97cc.json +++ b/advisories/unreviewed/2024/03/GHSA-q77j-868w-97cc/GHSA-q77j-868w-97cc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-q7g9-6pv9-v3vp/GHSA-q7g9-6pv9-v3vp.json b/advisories/unreviewed/2024/03/GHSA-q7g9-6pv9-v3vp/GHSA-q7g9-6pv9-v3vp.json index ff1751779d8..cee3e87bfa8 100644 --- a/advisories/unreviewed/2024/03/GHSA-q7g9-6pv9-v3vp/GHSA-q7g9-6pv9-v3vp.json +++ b/advisories/unreviewed/2024/03/GHSA-q7g9-6pv9-v3vp/GHSA-q7g9-6pv9-v3vp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-qp3h-5pr9-v3f3/GHSA-qp3h-5pr9-v3f3.json b/advisories/unreviewed/2024/03/GHSA-qp3h-5pr9-v3f3/GHSA-qp3h-5pr9-v3f3.json index c1edd6580d1..4597a85b4a9 100644 --- a/advisories/unreviewed/2024/03/GHSA-qp3h-5pr9-v3f3/GHSA-qp3h-5pr9-v3f3.json +++ b/advisories/unreviewed/2024/03/GHSA-qp3h-5pr9-v3f3/GHSA-qp3h-5pr9-v3f3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-r5m2-89jg-5848/GHSA-r5m2-89jg-5848.json b/advisories/unreviewed/2024/03/GHSA-r5m2-89jg-5848/GHSA-r5m2-89jg-5848.json index d7b24c8b1d1..aa6e7feedd2 100644 --- a/advisories/unreviewed/2024/03/GHSA-r5m2-89jg-5848/GHSA-r5m2-89jg-5848.json +++ b/advisories/unreviewed/2024/03/GHSA-r5m2-89jg-5848/GHSA-r5m2-89jg-5848.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-r99f-79rc-6fjj/GHSA-r99f-79rc-6fjj.json b/advisories/unreviewed/2024/03/GHSA-r99f-79rc-6fjj/GHSA-r99f-79rc-6fjj.json index 879b52e4389..803ea2a70a3 100644 --- a/advisories/unreviewed/2024/03/GHSA-r99f-79rc-6fjj/GHSA-r99f-79rc-6fjj.json +++ b/advisories/unreviewed/2024/03/GHSA-r99f-79rc-6fjj/GHSA-r99f-79rc-6fjj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-rjx9-ww7j-9fvr/GHSA-rjx9-ww7j-9fvr.json b/advisories/unreviewed/2024/03/GHSA-rjx9-ww7j-9fvr/GHSA-rjx9-ww7j-9fvr.json index cdd436fdb72..04011ee140a 100644 --- a/advisories/unreviewed/2024/03/GHSA-rjx9-ww7j-9fvr/GHSA-rjx9-ww7j-9fvr.json +++ b/advisories/unreviewed/2024/03/GHSA-rjx9-ww7j-9fvr/GHSA-rjx9-ww7j-9fvr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-rrgv-fvj4-fw5p/GHSA-rrgv-fvj4-fw5p.json b/advisories/unreviewed/2024/03/GHSA-rrgv-fvj4-fw5p/GHSA-rrgv-fvj4-fw5p.json index 6c18dcae5e2..d2fd0dfc354 100644 --- a/advisories/unreviewed/2024/03/GHSA-rrgv-fvj4-fw5p/GHSA-rrgv-fvj4-fw5p.json +++ b/advisories/unreviewed/2024/03/GHSA-rrgv-fvj4-fw5p/GHSA-rrgv-fvj4-fw5p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-rv26-9qp5-5mh3/GHSA-rv26-9qp5-5mh3.json b/advisories/unreviewed/2024/03/GHSA-rv26-9qp5-5mh3/GHSA-rv26-9qp5-5mh3.json index 13178aad697..d902930a1f0 100644 --- a/advisories/unreviewed/2024/03/GHSA-rv26-9qp5-5mh3/GHSA-rv26-9qp5-5mh3.json +++ b/advisories/unreviewed/2024/03/GHSA-rv26-9qp5-5mh3/GHSA-rv26-9qp5-5mh3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-vp22-34fw-hj88/GHSA-vp22-34fw-hj88.json b/advisories/unreviewed/2024/03/GHSA-vp22-34fw-hj88/GHSA-vp22-34fw-hj88.json index 2128a7bd254..00d27c82c47 100644 --- a/advisories/unreviewed/2024/03/GHSA-vp22-34fw-hj88/GHSA-vp22-34fw-hj88.json +++ b/advisories/unreviewed/2024/03/GHSA-vp22-34fw-hj88/GHSA-vp22-34fw-hj88.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-vr6f-h6rm-4w3m/GHSA-vr6f-h6rm-4w3m.json b/advisories/unreviewed/2024/03/GHSA-vr6f-h6rm-4w3m/GHSA-vr6f-h6rm-4w3m.json index ca5f947c59b..cbf92e54e88 100644 --- a/advisories/unreviewed/2024/03/GHSA-vr6f-h6rm-4w3m/GHSA-vr6f-h6rm-4w3m.json +++ b/advisories/unreviewed/2024/03/GHSA-vr6f-h6rm-4w3m/GHSA-vr6f-h6rm-4w3m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-vrwg-q62p-8qvc/GHSA-vrwg-q62p-8qvc.json b/advisories/unreviewed/2024/03/GHSA-vrwg-q62p-8qvc/GHSA-vrwg-q62p-8qvc.json index dd8eeec95fa..16bb00b0aa9 100644 --- a/advisories/unreviewed/2024/03/GHSA-vrwg-q62p-8qvc/GHSA-vrwg-q62p-8qvc.json +++ b/advisories/unreviewed/2024/03/GHSA-vrwg-q62p-8qvc/GHSA-vrwg-q62p-8qvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-vwvv-5f5j-x28v/GHSA-vwvv-5f5j-x28v.json b/advisories/unreviewed/2024/03/GHSA-vwvv-5f5j-x28v/GHSA-vwvv-5f5j-x28v.json index a99d27c65d8..cb5c303fb6d 100644 --- a/advisories/unreviewed/2024/03/GHSA-vwvv-5f5j-x28v/GHSA-vwvv-5f5j-x28v.json +++ b/advisories/unreviewed/2024/03/GHSA-vwvv-5f5j-x28v/GHSA-vwvv-5f5j-x28v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-wrg4-577q-37rc/GHSA-wrg4-577q-37rc.json b/advisories/unreviewed/2024/03/GHSA-wrg4-577q-37rc/GHSA-wrg4-577q-37rc.json index 123fc47be4b..fb5af499e9d 100644 --- a/advisories/unreviewed/2024/03/GHSA-wrg4-577q-37rc/GHSA-wrg4-577q-37rc.json +++ b/advisories/unreviewed/2024/03/GHSA-wrg4-577q-37rc/GHSA-wrg4-577q-37rc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-wv7r-fv5q-hwhf/GHSA-wv7r-fv5q-hwhf.json b/advisories/unreviewed/2024/03/GHSA-wv7r-fv5q-hwhf/GHSA-wv7r-fv5q-hwhf.json index bdfd307ec04..6afa166e3b0 100644 --- a/advisories/unreviewed/2024/03/GHSA-wv7r-fv5q-hwhf/GHSA-wv7r-fv5q-hwhf.json +++ b/advisories/unreviewed/2024/03/GHSA-wv7r-fv5q-hwhf/GHSA-wv7r-fv5q-hwhf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-ww9g-2qxc-wgxx/GHSA-ww9g-2qxc-wgxx.json b/advisories/unreviewed/2024/03/GHSA-ww9g-2qxc-wgxx/GHSA-ww9g-2qxc-wgxx.json index 79c3c17fe1b..35401aecc07 100644 --- a/advisories/unreviewed/2024/03/GHSA-ww9g-2qxc-wgxx/GHSA-ww9g-2qxc-wgxx.json +++ b/advisories/unreviewed/2024/03/GHSA-ww9g-2qxc-wgxx/GHSA-ww9g-2qxc-wgxx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-wwrv-f6v4-m66r/GHSA-wwrv-f6v4-m66r.json b/advisories/unreviewed/2024/03/GHSA-wwrv-f6v4-m66r/GHSA-wwrv-f6v4-m66r.json index 927ce5ef936..b6e2690d59c 100644 --- a/advisories/unreviewed/2024/03/GHSA-wwrv-f6v4-m66r/GHSA-wwrv-f6v4-m66r.json +++ b/advisories/unreviewed/2024/03/GHSA-wwrv-f6v4-m66r/GHSA-wwrv-f6v4-m66r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-x25j-vg36-qv82/GHSA-x25j-vg36-qv82.json b/advisories/unreviewed/2024/03/GHSA-x25j-vg36-qv82/GHSA-x25j-vg36-qv82.json index 58b161cddba..66d2b5a059e 100644 --- a/advisories/unreviewed/2024/03/GHSA-x25j-vg36-qv82/GHSA-x25j-vg36-qv82.json +++ b/advisories/unreviewed/2024/03/GHSA-x25j-vg36-qv82/GHSA-x25j-vg36-qv82.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-xqqx-3g3g-99gr/GHSA-xqqx-3g3g-99gr.json b/advisories/unreviewed/2024/03/GHSA-xqqx-3g3g-99gr/GHSA-xqqx-3g3g-99gr.json index 782d890c2a2..3bf99b4b185 100644 --- a/advisories/unreviewed/2024/03/GHSA-xqqx-3g3g-99gr/GHSA-xqqx-3g3g-99gr.json +++ b/advisories/unreviewed/2024/03/GHSA-xqqx-3g3g-99gr/GHSA-xqqx-3g3g-99gr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-xvvp-cjh4-8phq/GHSA-xvvp-cjh4-8phq.json b/advisories/unreviewed/2024/03/GHSA-xvvp-cjh4-8phq/GHSA-xvvp-cjh4-8phq.json index 775f2669d7e..06910f9e626 100644 --- a/advisories/unreviewed/2024/03/GHSA-xvvp-cjh4-8phq/GHSA-xvvp-cjh4-8phq.json +++ b/advisories/unreviewed/2024/03/GHSA-xvvp-cjh4-8phq/GHSA-xvvp-cjh4-8phq.json @@ -7,12 +7,8 @@ "CVE-2023-41696" ], "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-xwx2-w5q7-pgf8/GHSA-xwx2-w5q7-pgf8.json b/advisories/unreviewed/2024/03/GHSA-xwx2-w5q7-pgf8/GHSA-xwx2-w5q7-pgf8.json index 4b42e5bff0f..af74b84eb29 100644 --- a/advisories/unreviewed/2024/03/GHSA-xwx2-w5q7-pgf8/GHSA-xwx2-w5q7-pgf8.json +++ b/advisories/unreviewed/2024/03/GHSA-xwx2-w5q7-pgf8/GHSA-xwx2-w5q7-pgf8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3mcq-j4r6-r645/GHSA-3mcq-j4r6-r645.json b/advisories/unreviewed/2024/05/GHSA-3mcq-j4r6-r645/GHSA-3mcq-j4r6-r645.json index 224cb72ca3e..24e753e6d11 100644 --- a/advisories/unreviewed/2024/05/GHSA-3mcq-j4r6-r645/GHSA-3mcq-j4r6-r645.json +++ b/advisories/unreviewed/2024/05/GHSA-3mcq-j4r6-r645/GHSA-3mcq-j4r6-r645.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-6fj9-cq25-9x7h/GHSA-6fj9-cq25-9x7h.json b/advisories/unreviewed/2024/05/GHSA-6fj9-cq25-9x7h/GHSA-6fj9-cq25-9x7h.json index c38be4ea086..1d9d6187e76 100644 --- a/advisories/unreviewed/2024/05/GHSA-6fj9-cq25-9x7h/GHSA-6fj9-cq25-9x7h.json +++ b/advisories/unreviewed/2024/05/GHSA-6fj9-cq25-9x7h/GHSA-6fj9-cq25-9x7h.json @@ -7,12 +7,8 @@ "CVE-2024-4061" ], "details": "The Survey Maker WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-jcv3-h4xr-539v/GHSA-jcv3-h4xr-539v.json b/advisories/unreviewed/2024/05/GHSA-jcv3-h4xr-539v/GHSA-jcv3-h4xr-539v.json index 3a7018023cc..24d076af4d1 100644 --- a/advisories/unreviewed/2024/05/GHSA-jcv3-h4xr-539v/GHSA-jcv3-h4xr-539v.json +++ b/advisories/unreviewed/2024/05/GHSA-jcv3-h4xr-539v/GHSA-jcv3-h4xr-539v.json @@ -7,12 +7,8 @@ "CVE-2023-52665" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2\n\nCommit 8c5fa3b5c4df (\"powerpc/64: Make ELFv2 the default for big-endian\nbuilds\"), merged in Linux-6.5-rc1 changes the calling ABI in a way\nthat is incompatible with the current code for the PS3's LV1 hypervisor\ncalls.\n\nThis change just adds the line '# CONFIG_PPC64_BIG_ENDIAN_ELF_ABI_V2 is not set'\nto the ps3_defconfig file so that the PPC64_ELF_ABI_V1 is used.\n\nFixes run time errors like these:\n\n BUG: Kernel NULL pointer dereference at 0x00000000\n Faulting instruction address: 0xc000000000047cf0\n Oops: Kernel access of bad area, sig: 11 [#1]\n Call Trace:\n [c0000000023039e0] [c00000000100ebfc] ps3_create_spu+0xc4/0x2b0 (unreliable)\n [c000000002303ab0] [c00000000100d4c4] create_spu+0xcc/0x3c4\n [c000000002303b40] [c00000000100eae4] ps3_enumerate_spus+0xa4/0xf8", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-mqv8-r98f-v6vp/GHSA-mqv8-r98f-v6vp.json b/advisories/unreviewed/2024/05/GHSA-mqv8-r98f-v6vp/GHSA-mqv8-r98f-v6vp.json index 5453ef31de5..1fee7b7233c 100644 --- a/advisories/unreviewed/2024/05/GHSA-mqv8-r98f-v6vp/GHSA-mqv8-r98f-v6vp.json +++ b/advisories/unreviewed/2024/05/GHSA-mqv8-r98f-v6vp/GHSA-mqv8-r98f-v6vp.json @@ -7,12 +7,8 @@ "CVE-2024-4289" ], "details": "The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-vw93-wqr3-x7vr/GHSA-vw93-wqr3-x7vr.json b/advisories/unreviewed/2024/05/GHSA-vw93-wqr3-x7vr/GHSA-vw93-wqr3-x7vr.json index 0bc6fdc98a4..438b444831c 100644 --- a/advisories/unreviewed/2024/05/GHSA-vw93-wqr3-x7vr/GHSA-vw93-wqr3-x7vr.json +++ b/advisories/unreviewed/2024/05/GHSA-vw93-wqr3-x7vr/GHSA-vw93-wqr3-x7vr.json @@ -7,12 +7,8 @@ "CVE-2024-4372" ], "details": "The Carousel Slider WordPress plugin before 2.2.11 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-6wr6-43m8-4jr8/GHSA-6wr6-43m8-4jr8.json b/advisories/unreviewed/2024/08/GHSA-6wr6-43m8-4jr8/GHSA-6wr6-43m8-4jr8.json index fa2dee09514..72ef017e906 100644 --- a/advisories/unreviewed/2024/08/GHSA-6wr6-43m8-4jr8/GHSA-6wr6-43m8-4jr8.json +++ b/advisories/unreviewed/2024/08/GHSA-6wr6-43m8-4jr8/GHSA-6wr6-43m8-4jr8.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qq6c-5c4q-rj7p/GHSA-qq6c-5c4q-rj7p.json b/advisories/unreviewed/2024/08/GHSA-qq6c-5c4q-rj7p/GHSA-qq6c-5c4q-rj7p.json index a447fb38ad6..43a2faad947 100644 --- a/advisories/unreviewed/2024/08/GHSA-qq6c-5c4q-rj7p/GHSA-qq6c-5c4q-rj7p.json +++ b/advisories/unreviewed/2024/08/GHSA-qq6c-5c4q-rj7p/GHSA-qq6c-5c4q-rj7p.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-2745-8q5m-h58w/GHSA-2745-8q5m-h58w.json b/advisories/unreviewed/2024/09/GHSA-2745-8q5m-h58w/GHSA-2745-8q5m-h58w.json index 67309ae59e0..f45cac77abc 100644 --- a/advisories/unreviewed/2024/09/GHSA-2745-8q5m-h58w/GHSA-2745-8q5m-h58w.json +++ b/advisories/unreviewed/2024/09/GHSA-2745-8q5m-h58w/GHSA-2745-8q5m-h58w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-36g3-797x-r29x/GHSA-36g3-797x-r29x.json b/advisories/unreviewed/2024/09/GHSA-36g3-797x-r29x/GHSA-36g3-797x-r29x.json index c39e3d12d8d..4cc2ef65d76 100644 --- a/advisories/unreviewed/2024/09/GHSA-36g3-797x-r29x/GHSA-36g3-797x-r29x.json +++ b/advisories/unreviewed/2024/09/GHSA-36g3-797x-r29x/GHSA-36g3-797x-r29x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-39jm-vmh3-fp62/GHSA-39jm-vmh3-fp62.json b/advisories/unreviewed/2024/09/GHSA-39jm-vmh3-fp62/GHSA-39jm-vmh3-fp62.json index ad87077edff..2fe28965d4a 100644 --- a/advisories/unreviewed/2024/09/GHSA-39jm-vmh3-fp62/GHSA-39jm-vmh3-fp62.json +++ b/advisories/unreviewed/2024/09/GHSA-39jm-vmh3-fp62/GHSA-39jm-vmh3-fp62.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-3gj6-5jx3-784r/GHSA-3gj6-5jx3-784r.json b/advisories/unreviewed/2024/09/GHSA-3gj6-5jx3-784r/GHSA-3gj6-5jx3-784r.json index 1c945c9677b..d2cda99fd6e 100644 --- a/advisories/unreviewed/2024/09/GHSA-3gj6-5jx3-784r/GHSA-3gj6-5jx3-784r.json +++ b/advisories/unreviewed/2024/09/GHSA-3gj6-5jx3-784r/GHSA-3gj6-5jx3-784r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-53h8-xwj9-3x92/GHSA-53h8-xwj9-3x92.json b/advisories/unreviewed/2024/09/GHSA-53h8-xwj9-3x92/GHSA-53h8-xwj9-3x92.json index 63278575054..931b914208d 100644 --- a/advisories/unreviewed/2024/09/GHSA-53h8-xwj9-3x92/GHSA-53h8-xwj9-3x92.json +++ b/advisories/unreviewed/2024/09/GHSA-53h8-xwj9-3x92/GHSA-53h8-xwj9-3x92.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-6f6m-whqx-gc66/GHSA-6f6m-whqx-gc66.json b/advisories/unreviewed/2024/09/GHSA-6f6m-whqx-gc66/GHSA-6f6m-whqx-gc66.json index b7bb7a5f1f0..2eba8fbdea0 100644 --- a/advisories/unreviewed/2024/09/GHSA-6f6m-whqx-gc66/GHSA-6f6m-whqx-gc66.json +++ b/advisories/unreviewed/2024/09/GHSA-6f6m-whqx-gc66/GHSA-6f6m-whqx-gc66.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-7466-qh58-434w/GHSA-7466-qh58-434w.json b/advisories/unreviewed/2024/09/GHSA-7466-qh58-434w/GHSA-7466-qh58-434w.json index 82eda55d69e..0a1b2425256 100644 --- a/advisories/unreviewed/2024/09/GHSA-7466-qh58-434w/GHSA-7466-qh58-434w.json +++ b/advisories/unreviewed/2024/09/GHSA-7466-qh58-434w/GHSA-7466-qh58-434w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-76gg-8948-jhg8/GHSA-76gg-8948-jhg8.json b/advisories/unreviewed/2024/09/GHSA-76gg-8948-jhg8/GHSA-76gg-8948-jhg8.json index 82c12e193ca..a40dedd1308 100644 --- a/advisories/unreviewed/2024/09/GHSA-76gg-8948-jhg8/GHSA-76gg-8948-jhg8.json +++ b/advisories/unreviewed/2024/09/GHSA-76gg-8948-jhg8/GHSA-76gg-8948-jhg8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-7cvv-34h5-xg2q/GHSA-7cvv-34h5-xg2q.json b/advisories/unreviewed/2024/09/GHSA-7cvv-34h5-xg2q/GHSA-7cvv-34h5-xg2q.json index bc93c39ba5b..ea0ec0715bf 100644 --- a/advisories/unreviewed/2024/09/GHSA-7cvv-34h5-xg2q/GHSA-7cvv-34h5-xg2q.json +++ b/advisories/unreviewed/2024/09/GHSA-7cvv-34h5-xg2q/GHSA-7cvv-34h5-xg2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-7w7h-f9x3-q4v4/GHSA-7w7h-f9x3-q4v4.json b/advisories/unreviewed/2024/09/GHSA-7w7h-f9x3-q4v4/GHSA-7w7h-f9x3-q4v4.json index 6ead9bffb3e..5bf501d2bee 100644 --- a/advisories/unreviewed/2024/09/GHSA-7w7h-f9x3-q4v4/GHSA-7w7h-f9x3-q4v4.json +++ b/advisories/unreviewed/2024/09/GHSA-7w7h-f9x3-q4v4/GHSA-7w7h-f9x3-q4v4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-83mg-99rf-x665/GHSA-83mg-99rf-x665.json b/advisories/unreviewed/2024/09/GHSA-83mg-99rf-x665/GHSA-83mg-99rf-x665.json index bae2ed5ba0a..6bdc6170b63 100644 --- a/advisories/unreviewed/2024/09/GHSA-83mg-99rf-x665/GHSA-83mg-99rf-x665.json +++ b/advisories/unreviewed/2024/09/GHSA-83mg-99rf-x665/GHSA-83mg-99rf-x665.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-9478-fw83-f763/GHSA-9478-fw83-f763.json b/advisories/unreviewed/2024/09/GHSA-9478-fw83-f763/GHSA-9478-fw83-f763.json index 70587d92574..d46379a277d 100644 --- a/advisories/unreviewed/2024/09/GHSA-9478-fw83-f763/GHSA-9478-fw83-f763.json +++ b/advisories/unreviewed/2024/09/GHSA-9478-fw83-f763/GHSA-9478-fw83-f763.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-987f-mx6v-8j5v/GHSA-987f-mx6v-8j5v.json b/advisories/unreviewed/2024/09/GHSA-987f-mx6v-8j5v/GHSA-987f-mx6v-8j5v.json index 87f6a417657..21bc6a7f4b2 100644 --- a/advisories/unreviewed/2024/09/GHSA-987f-mx6v-8j5v/GHSA-987f-mx6v-8j5v.json +++ b/advisories/unreviewed/2024/09/GHSA-987f-mx6v-8j5v/GHSA-987f-mx6v-8j5v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-cfrv-fc2j-cx52/GHSA-cfrv-fc2j-cx52.json b/advisories/unreviewed/2024/09/GHSA-cfrv-fc2j-cx52/GHSA-cfrv-fc2j-cx52.json index 51e7b7e751f..bf1539ec165 100644 --- a/advisories/unreviewed/2024/09/GHSA-cfrv-fc2j-cx52/GHSA-cfrv-fc2j-cx52.json +++ b/advisories/unreviewed/2024/09/GHSA-cfrv-fc2j-cx52/GHSA-cfrv-fc2j-cx52.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-cpvq-fvgw-wq2f/GHSA-cpvq-fvgw-wq2f.json b/advisories/unreviewed/2024/09/GHSA-cpvq-fvgw-wq2f/GHSA-cpvq-fvgw-wq2f.json index c88dfdfba40..29a1dbd7ecf 100644 --- a/advisories/unreviewed/2024/09/GHSA-cpvq-fvgw-wq2f/GHSA-cpvq-fvgw-wq2f.json +++ b/advisories/unreviewed/2024/09/GHSA-cpvq-fvgw-wq2f/GHSA-cpvq-fvgw-wq2f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-cw97-95mg-vh8c/GHSA-cw97-95mg-vh8c.json b/advisories/unreviewed/2024/09/GHSA-cw97-95mg-vh8c/GHSA-cw97-95mg-vh8c.json index 3ae645c52c3..6c5fdc8a65b 100644 --- a/advisories/unreviewed/2024/09/GHSA-cw97-95mg-vh8c/GHSA-cw97-95mg-vh8c.json +++ b/advisories/unreviewed/2024/09/GHSA-cw97-95mg-vh8c/GHSA-cw97-95mg-vh8c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-f327-jh4g-35fg/GHSA-f327-jh4g-35fg.json b/advisories/unreviewed/2024/09/GHSA-f327-jh4g-35fg/GHSA-f327-jh4g-35fg.json index 84c5952eb29..39efea0fdb8 100644 --- a/advisories/unreviewed/2024/09/GHSA-f327-jh4g-35fg/GHSA-f327-jh4g-35fg.json +++ b/advisories/unreviewed/2024/09/GHSA-f327-jh4g-35fg/GHSA-f327-jh4g-35fg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-g3gh-jc9x-f7g5/GHSA-g3gh-jc9x-f7g5.json b/advisories/unreviewed/2024/09/GHSA-g3gh-jc9x-f7g5/GHSA-g3gh-jc9x-f7g5.json index d6e85c11eb5..df6ecb2d5ec 100644 --- a/advisories/unreviewed/2024/09/GHSA-g3gh-jc9x-f7g5/GHSA-g3gh-jc9x-f7g5.json +++ b/advisories/unreviewed/2024/09/GHSA-g3gh-jc9x-f7g5/GHSA-g3gh-jc9x-f7g5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-gwr3-5wf2-xmf8/GHSA-gwr3-5wf2-xmf8.json b/advisories/unreviewed/2024/09/GHSA-gwr3-5wf2-xmf8/GHSA-gwr3-5wf2-xmf8.json index 6c8843c3aa4..08ebc00dc23 100644 --- a/advisories/unreviewed/2024/09/GHSA-gwr3-5wf2-xmf8/GHSA-gwr3-5wf2-xmf8.json +++ b/advisories/unreviewed/2024/09/GHSA-gwr3-5wf2-xmf8/GHSA-gwr3-5wf2-xmf8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-h3f9-j6v8-7wfm/GHSA-h3f9-j6v8-7wfm.json b/advisories/unreviewed/2024/09/GHSA-h3f9-j6v8-7wfm/GHSA-h3f9-j6v8-7wfm.json index 6f8fa7a795b..99db439d12b 100644 --- a/advisories/unreviewed/2024/09/GHSA-h3f9-j6v8-7wfm/GHSA-h3f9-j6v8-7wfm.json +++ b/advisories/unreviewed/2024/09/GHSA-h3f9-j6v8-7wfm/GHSA-h3f9-j6v8-7wfm.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-h796-x389-c3xp/GHSA-h796-x389-c3xp.json b/advisories/unreviewed/2024/09/GHSA-h796-x389-c3xp/GHSA-h796-x389-c3xp.json index 8e5579aa80e..3a7b6153464 100644 --- a/advisories/unreviewed/2024/09/GHSA-h796-x389-c3xp/GHSA-h796-x389-c3xp.json +++ b/advisories/unreviewed/2024/09/GHSA-h796-x389-c3xp/GHSA-h796-x389-c3xp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-hvhq-mcxw-w38r/GHSA-hvhq-mcxw-w38r.json b/advisories/unreviewed/2024/09/GHSA-hvhq-mcxw-w38r/GHSA-hvhq-mcxw-w38r.json index 2ebffea6df2..ff449e06749 100644 --- a/advisories/unreviewed/2024/09/GHSA-hvhq-mcxw-w38r/GHSA-hvhq-mcxw-w38r.json +++ b/advisories/unreviewed/2024/09/GHSA-hvhq-mcxw-w38r/GHSA-hvhq-mcxw-w38r.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-j558-547g-jpj8/GHSA-j558-547g-jpj8.json b/advisories/unreviewed/2024/09/GHSA-j558-547g-jpj8/GHSA-j558-547g-jpj8.json index e639b46d36e..f1f8f4d73aa 100644 --- a/advisories/unreviewed/2024/09/GHSA-j558-547g-jpj8/GHSA-j558-547g-jpj8.json +++ b/advisories/unreviewed/2024/09/GHSA-j558-547g-jpj8/GHSA-j558-547g-jpj8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-jm78-w78g-6wh2/GHSA-jm78-w78g-6wh2.json b/advisories/unreviewed/2024/09/GHSA-jm78-w78g-6wh2/GHSA-jm78-w78g-6wh2.json index 496d22f7c82..2286e3e4728 100644 --- a/advisories/unreviewed/2024/09/GHSA-jm78-w78g-6wh2/GHSA-jm78-w78g-6wh2.json +++ b/advisories/unreviewed/2024/09/GHSA-jm78-w78g-6wh2/GHSA-jm78-w78g-6wh2.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-m258-frwv-27f2/GHSA-m258-frwv-27f2.json b/advisories/unreviewed/2024/09/GHSA-m258-frwv-27f2/GHSA-m258-frwv-27f2.json index 0f224d9ecbf..2352b302400 100644 --- a/advisories/unreviewed/2024/09/GHSA-m258-frwv-27f2/GHSA-m258-frwv-27f2.json +++ b/advisories/unreviewed/2024/09/GHSA-m258-frwv-27f2/GHSA-m258-frwv-27f2.json @@ -7,12 +7,8 @@ "CVE-2024-7821" ], "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/09/GHSA-mcwc-jfpx-gq94/GHSA-mcwc-jfpx-gq94.json b/advisories/unreviewed/2024/09/GHSA-mcwc-jfpx-gq94/GHSA-mcwc-jfpx-gq94.json index eaef779883e..77db1ea3983 100644 --- a/advisories/unreviewed/2024/09/GHSA-mcwc-jfpx-gq94/GHSA-mcwc-jfpx-gq94.json +++ b/advisories/unreviewed/2024/09/GHSA-mcwc-jfpx-gq94/GHSA-mcwc-jfpx-gq94.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-pfvx-h79p-j2mp/GHSA-pfvx-h79p-j2mp.json b/advisories/unreviewed/2024/09/GHSA-pfvx-h79p-j2mp/GHSA-pfvx-h79p-j2mp.json index fb0849ddf77..6f54f17cba1 100644 --- a/advisories/unreviewed/2024/09/GHSA-pfvx-h79p-j2mp/GHSA-pfvx-h79p-j2mp.json +++ b/advisories/unreviewed/2024/09/GHSA-pfvx-h79p-j2mp/GHSA-pfvx-h79p-j2mp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-pphm-768w-qjh3/GHSA-pphm-768w-qjh3.json b/advisories/unreviewed/2024/09/GHSA-pphm-768w-qjh3/GHSA-pphm-768w-qjh3.json index d7c0036213b..e4a93097baf 100644 --- a/advisories/unreviewed/2024/09/GHSA-pphm-768w-qjh3/GHSA-pphm-768w-qjh3.json +++ b/advisories/unreviewed/2024/09/GHSA-pphm-768w-qjh3/GHSA-pphm-768w-qjh3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-q4cc-q982-86m8/GHSA-q4cc-q982-86m8.json b/advisories/unreviewed/2024/09/GHSA-q4cc-q982-86m8/GHSA-q4cc-q982-86m8.json index 1ccf9e9ce37..36418b5de67 100644 --- a/advisories/unreviewed/2024/09/GHSA-q4cc-q982-86m8/GHSA-q4cc-q982-86m8.json +++ b/advisories/unreviewed/2024/09/GHSA-q4cc-q982-86m8/GHSA-q4cc-q982-86m8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-r5wp-3hxw-g22v/GHSA-r5wp-3hxw-g22v.json b/advisories/unreviewed/2024/09/GHSA-r5wp-3hxw-g22v/GHSA-r5wp-3hxw-g22v.json index 61652397e47..d2e245cd37f 100644 --- a/advisories/unreviewed/2024/09/GHSA-r5wp-3hxw-g22v/GHSA-r5wp-3hxw-g22v.json +++ b/advisories/unreviewed/2024/09/GHSA-r5wp-3hxw-g22v/GHSA-r5wp-3hxw-g22v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-v5p2-949x-45f5/GHSA-v5p2-949x-45f5.json b/advisories/unreviewed/2024/09/GHSA-v5p2-949x-45f5/GHSA-v5p2-949x-45f5.json index 44048e56cf8..e3727bbe3c1 100644 --- a/advisories/unreviewed/2024/09/GHSA-v5p2-949x-45f5/GHSA-v5p2-949x-45f5.json +++ b/advisories/unreviewed/2024/09/GHSA-v5p2-949x-45f5/GHSA-v5p2-949x-45f5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-vghc-48hc-4pr8/GHSA-vghc-48hc-4pr8.json b/advisories/unreviewed/2024/09/GHSA-vghc-48hc-4pr8/GHSA-vghc-48hc-4pr8.json index 7d677656fb9..b0a45384dfb 100644 --- a/advisories/unreviewed/2024/09/GHSA-vghc-48hc-4pr8/GHSA-vghc-48hc-4pr8.json +++ b/advisories/unreviewed/2024/09/GHSA-vghc-48hc-4pr8/GHSA-vghc-48hc-4pr8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-xgw2-5rm5-vvmq/GHSA-xgw2-5rm5-vvmq.json b/advisories/unreviewed/2024/09/GHSA-xgw2-5rm5-vvmq/GHSA-xgw2-5rm5-vvmq.json index fcc49915916..7f7be7352d5 100644 --- a/advisories/unreviewed/2024/09/GHSA-xgw2-5rm5-vvmq/GHSA-xgw2-5rm5-vvmq.json +++ b/advisories/unreviewed/2024/09/GHSA-xgw2-5rm5-vvmq/GHSA-xgw2-5rm5-vvmq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-xr2r-hj4r-gw3q/GHSA-xr2r-hj4r-gw3q.json b/advisories/unreviewed/2024/09/GHSA-xr2r-hj4r-gw3q/GHSA-xr2r-hj4r-gw3q.json index 465858e6931..38348484e1c 100644 --- a/advisories/unreviewed/2024/09/GHSA-xr2r-hj4r-gw3q/GHSA-xr2r-hj4r-gw3q.json +++ b/advisories/unreviewed/2024/09/GHSA-xr2r-hj4r-gw3q/GHSA-xr2r-hj4r-gw3q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",