Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2024-10-17 15:32:36 +00:00
parent cfc14e56df
commit ebe179ff83
95 changed files with 1568 additions and 77 deletions
@@ -28,7 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-284"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-r7j5-v5jg-987g",
-  "modified": "2022-05-24T17:34:31Z",
+  "modified": "2024-10-17T15:31:05Z",
  "published": "2022-05-24T17:34:31Z",
  "aliases": [
    "CVE-2020-28129"
  ],
  "details": "Stored Cross-site scripting (XSS) vulnerability in SourceCodester Gym Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php?page=packages via vulnerable fields 'Package Name' and 'Description'.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
  ],
  "affected": [

@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rf6r-8jqg-grhq",
-  "modified": "2022-05-24T17:35:16Z",
+  "modified": "2024-10-17T15:31:05Z",
  "published": "2022-05-24T17:35:16Z",
  "aliases": [
    "CVE-2020-29288"
  ],
  "details": "An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vulnerable.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-vwrr-q8r4-3hgf",
-  "modified": "2022-05-14T01:35:48Z",
+  "modified": "2024-10-17T15:31:05Z",
  "published": "2022-05-14T01:35:48Z",
  "aliases": [
    "CVE-2017-18356"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-frc9-g2r4-48w5",
-  "modified": "2024-04-04T05:01:28Z",
+  "modified": "2024-10-17T15:31:06Z",
  "published": "2023-06-22T21:30:48Z",
  "aliases": [
    "CVE-2023-28799"
@@ -48,6 +48,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1287",
      "CWE-20",
      "CWE-601"
    ],
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-284"
+      "CWE-284",
+      "CWE-863"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-284"
+      "CWE-284",
+      "CWE-863"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-347"
+      "CWE-347",
+      "CWE-94"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-787"
+      "CWE-787",
+      "CWE-94"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -36,6 +36,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-79",
      "CWE-94"
    ],
    "severity": "CRITICAL",
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-cvwm-qh2r-q68h",
-  "modified": "2024-02-13T18:38:23Z",
+  "modified": "2024-10-17T15:31:06Z",
  "published": "2024-02-13T18:38:23Z",
  "aliases": [
    "CVE-2023-20570"
  ],
  "details": "Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
  ],
  "affected": [

@@ -25,9 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-345"
    ],
-    "severity": null,
+    "severity": "LOW",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-02-13T18:15:47Z"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-jr25-xhw2-xwv9",
-  "modified": "2024-02-13T15:31:12Z",
+  "modified": "2024-10-17T15:31:06Z",
  "published": "2024-02-13T15:31:12Z",
  "aliases": [
    "CVE-2024-23440"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-xvvw-m6mf-m9hw",
-  "modified": "2024-02-13T18:38:23Z",
+  "modified": "2024-10-17T15:31:06Z",
  "published": "2024-02-13T18:38:23Z",
  "aliases": [
    "CVE-2023-48432"
  ],
  "details": "An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. XSS, with resultant session stealing, can occur via JavaScript code in a link (for a webmail redirection endpoint) within en email message, e.g., if a victim clicks on that link within Zimbra webmail.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
  ],
  "affected": [

@@ -33,9 +36,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-79"
    ],
-    "severity": null,
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-02-13T16:15:08Z"
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-59"
+      "CWE-59",
+      "CWE-61"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4vg2-58j7-gmw7",
-  "modified": "2024-04-18T12:30:29Z",
+  "modified": "2024-10-17T15:31:07Z",
  "published": "2024-04-18T12:30:29Z",
  "aliases": [
    "CVE-2024-26921"
@@ -22,10 +22,18 @@
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/18685451fc4e546fc0e718580d32df3c0e5c8272"
    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/4318608dc28ef184158b4045896740716bea23f0"
+    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7d0567842b78390dd9b60f00f1d8f838d540e325"
    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/9705f447bf9a6cd088300ad2c407b5e1c6591091"
+    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e09cbe017311508c21e0739e97198a8388b98981"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5rcv-qpv8-9248",
-  "modified": "2024-06-26T00:31:37Z",
+  "modified": "2024-10-17T15:31:07Z",
  "published": "2024-04-17T12:32:05Z",
  "aliases": [
    "CVE-2024-26885"
@@ -37,6 +37,10 @@
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/281d464a34f540de166cee74b723e97ac2515ec3"
    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/4b81a9f92b3676cb74b907a7a209b3d15bd9a7f9"
+    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c826502bed93970f2fd488918a7b8d5f1d30e2e3"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-cx5c-hrvr-85gj",
-  "modified": "2024-10-10T12:31:11Z",
+  "modified": "2024-10-17T15:31:07Z",
  "published": "2024-05-01T15:30:36Z",
  "aliases": [
    "CVE-2024-27072"
@@ -22,10 +22,22 @@
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2"
    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9"
+    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895"
    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/bdd82c47b22a8befd617b723098b2a41b77373c7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/d5ed208d04acf06781d63d30f9fa991e8d609ebd"
+    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-g582-9mpv-vv22",
-  "modified": "2024-05-21T18:31:20Z",
+  "modified": "2024-10-17T15:31:07Z",
  "published": "2024-05-21T18:31:20Z",
  "aliases": [
    "CVE-2023-52759"
@@ -42,6 +42,10 @@
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4c6a08125f2249531ec01783a5f4317d7342add5"
    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/50e33567bc4a1c4ed79a1d289fe93c9a26491848"
+    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/53fc16c1ad84f5467ec24341670b63aa759335d3"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qhh4-wrfh-w5pg",
-  "modified": "2024-09-30T15:30:43Z",
+  "modified": "2024-10-17T15:31:07Z",
  "published": "2024-05-01T06:31:43Z",
  "aliases": [
    "CVE-2024-27017"
@@ -33,10 +33,18 @@
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/721715655c72640567e8742567520c99801148ed"
    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ce9fef54c5ec9912a0c9a47bac3195cc41b14679"
+    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f24d8abc2bb8cbf31ec713336e402eafa8f42f60"
    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ff89db14c63a827066446460e39226c0688ef786"
+    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qv2f-765q-7wrf",
-  "modified": "2024-10-10T12:31:11Z",
+  "modified": "2024-10-17T15:31:07Z",
  "published": "2024-05-20T12:30:28Z",
  "aliases": [
    "CVE-2024-35963"
@@ -26,6 +26,10 @@
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2"
    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/781f3a97a38a338bc893b6db7f9f9670bf1a9e37"
+    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46"
--- a/Show More
+++ b/Show More