diff --git a/advisories/unreviewed/2024/08/GHSA-7c7g-wccp-rrhj/GHSA-7c7g-wccp-rrhj.json b/advisories/unreviewed/2024/08/GHSA-7c7g-wccp-rrhj/GHSA-7c7g-wccp-rrhj.json index e7d2481eec4..0f8e17e31e8 100644 --- a/advisories/unreviewed/2024/08/GHSA-7c7g-wccp-rrhj/GHSA-7c7g-wccp-rrhj.json +++ b/advisories/unreviewed/2024/08/GHSA-7c7g-wccp-rrhj/GHSA-7c7g-wccp-rrhj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7c7g-wccp-rrhj", - "modified": "2024-09-25T18:31:19Z", + "modified": "2024-10-01T06:30:47Z", "published": "2024-08-05T15:30:53Z", "aliases": [ "CVE-2024-7409" @@ -33,6 +33,10 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:6964" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:7408" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-7409" diff --git a/advisories/unreviewed/2024/09/GHSA-9q6m-vr5h-rqq5/GHSA-9q6m-vr5h-rqq5.json b/advisories/unreviewed/2024/09/GHSA-9q6m-vr5h-rqq5/GHSA-9q6m-vr5h-rqq5.json index f06a6fcb26f..46322d210c0 100644 --- a/advisories/unreviewed/2024/09/GHSA-9q6m-vr5h-rqq5/GHSA-9q6m-vr5h-rqq5.json +++ b/advisories/unreviewed/2024/09/GHSA-9q6m-vr5h-rqq5/GHSA-9q6m-vr5h-rqq5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9q6m-vr5h-rqq5", - "modified": "2024-09-05T15:33:37Z", + "modified": "2024-10-01T06:30:47Z", "published": "2024-09-05T15:33:37Z", "aliases": [ "CVE-2024-8445" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8445" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:7434" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-8445" diff --git a/advisories/unreviewed/2024/10/GHSA-24pj-f32f-p9j2/GHSA-24pj-f32f-p9j2.json b/advisories/unreviewed/2024/10/GHSA-24pj-f32f-p9j2/GHSA-24pj-f32f-p9j2.json new file mode 100644 index 00000000000..0cd428b8099 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-24pj-f32f-p9j2/GHSA-24pj-f32f-p9j2.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-24pj-f32f-p9j2", + "modified": "2024-10-01T06:30:47Z", + "published": "2024-10-01T06:30:47Z", + "aliases": [ + "CVE-2024-8421" + ], + "details": "This CVE has been rejected.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8421" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:6755" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2024-8421" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2309710" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T06:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-34q8-jcq6-mc37/GHSA-34q8-jcq6-mc37.json b/advisories/unreviewed/2024/10/GHSA-34q8-jcq6-mc37/GHSA-34q8-jcq6-mc37.json new file mode 100644 index 00000000000..bb82d88188f --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-34q8-jcq6-mc37/GHSA-34q8-jcq6-mc37.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-34q8-jcq6-mc37", + "modified": "2024-10-01T06:30:47Z", + "published": "2024-10-01T06:30:47Z", + "aliases": [ + "CVE-2024-21489" + ], + "details": "Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21489" + }, + { + "type": "WEB", + "url": "https://github.com/leeoniya/uPlot/commit/5756e3e9b91270b303157e14bd0174311047d983" + }, + { + "type": "WEB", + "url": "https://github.com/leeoniya/uPlot/blob/c52e5001c1d959a99ac495a53e4deca5c44464d2/src/utils.js%23L437-L452" + }, + { + "type": "WEB", + "url": "https://security.snyk.io/vuln/SNYK-JS-UPLOT-6209224" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-1321" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T05:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-cp7p-92pj-7g7p/GHSA-cp7p-92pj-7g7p.json b/advisories/unreviewed/2024/10/GHSA-cp7p-92pj-7g7p/GHSA-cp7p-92pj-7g7p.json new file mode 100644 index 00000000000..61a94c8db7b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-cp7p-92pj-7g7p/GHSA-cp7p-92pj-7g7p.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cp7p-92pj-7g7p", + "modified": "2024-10-01T06:30:47Z", + "published": "2024-10-01T06:30:47Z", + "aliases": [ + "CVE-2024-0116" + ], + "details": "NVIDIA Triton Inference Server contains a vulnerability where a user may cause an out-of-bounds read issue by releasing a shared memory region while it is in use. A successful exploit of this vulnerability may lead to denial of service.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0116" + }, + { + "type": "WEB", + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5565" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-125" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T05:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-qwrq-vxvw-537r/GHSA-qwrq-vxvw-537r.json b/advisories/unreviewed/2024/10/GHSA-qwrq-vxvw-537r/GHSA-qwrq-vxvw-537r.json new file mode 100644 index 00000000000..6a0e4b96679 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-qwrq-vxvw-537r/GHSA-qwrq-vxvw-537r.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qwrq-vxvw-537r", + "modified": "2024-10-01T06:30:47Z", + "published": "2024-10-01T06:30:47Z", + "aliases": [ + "CVE-2024-21531" + ], + "details": "All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21531" + }, + { + "type": "WEB", + "url": "https://github.com/10uei011/git-shallow-clone/blob/master/index.js%23L27" + }, + { + "type": "WEB", + "url": "https://security.snyk.io/vuln/SNYK-JS-GITSHALLOWCLONE-3253853" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T05:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-x2wv-q3cc-vc36/GHSA-x2wv-q3cc-vc36.json b/advisories/unreviewed/2024/10/GHSA-x2wv-q3cc-vc36/GHSA-x2wv-q3cc-vc36.json new file mode 100644 index 00000000000..c983639103a --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-x2wv-q3cc-vc36/GHSA-x2wv-q3cc-vc36.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x2wv-q3cc-vc36", + "modified": "2024-10-01T06:30:47Z", + "published": "2024-10-01T06:30:47Z", + "aliases": [ + "CVE-2024-47295" + ], + "details": "Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47295" + }, + { + "type": "WEB", + "url": "https://jvn.jp/en/vu/JVNVU95133448" + }, + { + "type": "WEB", + "url": "https://www.epson.jp/support/misc_t/240930_03_oshirase.htm" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-1188" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T04:15:18Z" + } +} \ No newline at end of file