Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-02-04 18:31:48 +00:00
parent 3c1cb5eeea
commit ec41ee5a06
134 changed files with 770 additions and 242 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-26v4-3ghx-vmrv",
-  "modified": "2022-05-17T00:20:54Z",
+  "modified": "2025-02-04T18:30:36Z",
  "published": "2022-05-17T00:20:54Z",
  "aliases": [
    "CVE-2017-16568"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3vmp-cf5x-w457",
-  "modified": "2022-05-13T01:21:15Z",
+  "modified": "2025-02-04T18:30:37Z",
  "published": "2022-05-13T01:21:15Z",
  "aliases": [
    "CVE-2019-0543"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-cjqq-8xv6-575p",
-  "modified": "2022-05-13T01:10:53Z",
+  "modified": "2025-02-04T18:30:37Z",
  "published": "2022-05-13T01:10:53Z",
  "aliases": [
    "CVE-2018-9276"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-g6xh-vmjv-c9qj",
-  "modified": "2022-05-17T00:20:54Z",
+  "modified": "2025-02-04T18:30:36Z",
  "published": "2022-05-17T00:20:54Z",
  "aliases": [
    "CVE-2017-16567"
@@ -27,7 +27,8 @@
  "database_specific": {
    "cwe_ids": [
      "CWE-119",
-      "CWE-681"
+      "CWE-681",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,19 +1,28 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-hj5r-2q87-qf8g",
-  "modified": "2022-05-24T17:34:50Z",
+  "modified": "2025-02-04T18:30:37Z",
  "published": "2022-05-24T17:34:50Z",
  "aliases": [
    "CVE-2020-4006"
  ],
  "details": "VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-4006"
    },
+    {
+      "type": "WEB",
+      "url": "https://www.kb.cert.org/vuls/id/724367"
+    },
    {
      "type": "WEB",
      "url": "https://www.vmware.com/security/advisories/VMSA-2020-0027.html"
@@ -21,7 +30,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-77"
+      "CWE-77",
+      "CWE-78"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-pm93-g4gf-j42f",
-  "modified": "2022-05-13T01:50:52Z",
+  "modified": "2025-02-04T18:30:37Z",
  "published": "2022-05-13T01:50:52Z",
  "aliases": [
    "CVE-2018-19410"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5vr9-7945-27pf",
-  "modified": "2022-11-10T12:01:04Z",
+  "modified": "2025-02-04T18:30:38Z",
  "published": "2022-11-10T12:01:04Z",
  "aliases": [
    "CVE-2022-41125"
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2rx2-wvh6-wg6m",
-  "modified": "2024-04-04T03:40:09Z",
+  "modified": "2025-02-04T18:30:40Z",
  "published": "2023-04-24T21:30:30Z",
  "aliases": [
    "CVE-2023-2257"
  ],
-  "details": "Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub \nBusiness space without being prompted to enter the password via an \nunimplemented \"Force Login\" security feature.\n\nThis vulnerability occurs only if \"Force Login\" feature is enabled on the Hub Business instance and that an attacker has access to a locked Workspace desktop application configured with a Hub Business space.\n",
+  "details": "Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub \nBusiness space without being prompted to enter the password via an \nunimplemented \"Force Login\" security feature.\n\nThis vulnerability occurs only if \"Force Login\" feature is enabled on the Hub Business instance and that an attacker has access to a locked Workspace desktop application configured with a Hub Business space.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -42,7 +42,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-312"
+      "CWE-312",
+      "CWE-521"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-863"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-203"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -30,6 +30,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-209",
      "CWE-755"
    ],
    "severity": "HIGH",
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-770"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -42,6 +42,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-120",
      "CWE-122",
      "CWE-787"
    ],
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-787"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-hfm4-r5j9-2q25",
-  "modified": "2024-03-27T12:30:42Z",
+  "modified": "2025-02-04T18:30:41Z",
  "published": "2024-03-27T12:30:42Z",
  "aliases": [
    "CVE-2024-30186"
  ],
-  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1.\n\n",
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-22",
      "CWE-23"
    ],
    "severity": "MODERATE",
--- a/Show More
+++ b/Show More