netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-43pr-r6xw-f56v
GHSA-jf4r-vjvc-pj36
GHSA-jpgp-pmqh-538w
GHSA-v66p-q797-c8vm
GHSA-w7wj-5p2p-g7p7
GHSA-22q6-7m3g-6r77
GHSA-35pg-8ph2-rp9c
GHSA-c4q5-vjmp-xrgv
GHSA-f53w-fw63-qjpw
GHSA-g7wm-3q7g-g3q2
GHSA-m2jf-3295-7fpm
GHSA-mrr5-8hm7-42xh
GHSA-pcxj-w6pv-x9c5
GHSA-qfx3-m2xp-3pcp
GHSA-v7mj-q2hh-7r72
GHSA-w8hf-8rpm-xjp2
GHSA-wfg8-6fh4-8fp9
GHSA-x4fw-fhfj-vm7c
This commit is contained in:
advisory-database[bot]
2024-09-13 00:32:14 +00:00
parent 461a907dc3
commit ed55c3bb46
18 changed files with 89 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/10/GHSA-43pr-r6xw-f56v/GHSA-43pr-r6xw-f56v.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2023/10/GHSA-jf4r-vjvc-pj36/GHSA-jf4r-vjvc-pj36.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/10/GHSA-jpgp-pmqh-538w/GHSA-jpgp-pmqh-538w.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/08/GHSA-v66p-q797-c8vm/GHSA-v66p-q797-c8vm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v66p-q797-c8vm",
"modified": "2024-08-28T06:30:31Z",
"modified": "2024-09-13T00:30:47Z",
"published": "2024-08-28T06:30:31Z",
"aliases": [
"CVE-2024-39771"
],
"details": "QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-28T06:15:06Z"
advisories/unreviewed/2024/08/GHSA-w7wj-5p2p-g7p7/GHSA-w7wj-5p2p-g7p7.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w7wj-5p2p-g7p7",
"modified": "2024-08-27T09:30:44Z",
"modified": "2024-09-13T00:30:46Z",
"published": "2024-08-27T09:30:44Z",
"aliases": [
"CVE-2024-7304"
advisories/unreviewed/2024/09/GHSA-22q6-7m3g-6r77/GHSA-22q6-7m3g-6r77.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-35pg-8ph2-rp9c/GHSA-35pg-8ph2-rp9c.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-c4q5-vjmp-xrgv/GHSA-c4q5-vjmp-xrgv.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c4q5-vjmp-xrgv",
"modified": "2024-09-12T21:32:02Z",
"modified": "2024-09-13T00:30:48Z",
"published": "2024-09-12T21:32:02Z",
"aliases": [
"CVE-2024-34335"
],
"details": "ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-12T19:15:03Z"
advisories/unreviewed/2024/09/GHSA-f53w-fw63-qjpw/GHSA-f53w-fw63-qjpw.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-g7wm-3q7g-g3q2/GHSA-g7wm-3q7g-g3q2.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-m2jf-3295-7fpm/GHSA-m2jf-3295-7fpm.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m2jf-3295-7fpm",
"modified": "2024-09-13T00:30:48Z",
"published": "2024-09-13T00:30:48Z",
"aliases": [
"CVE-2024-8751"
],
"details": "A vulnerability in the MSC800 allows an unauthenticated attacker to modify the product’s IP\naddress over Sopas ET. \nThis can lead to Denial of Service. \nUsers are recommended to upgrade both\nMSC800 and MSC800 LFT to version V4.26 and S2.93.20 respectively which fixes this issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8751"
},
{
"type": "WEB",
"url": "https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF"
},
{
"type": "WEB",
"url": "https://sick.com/psirt"
},
{
"type": "WEB",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"type": "WEB",
"url": "https://www.first.org/cvss/calculator/3.1"
},
{
"type": "WEB",
"url": "https://www.sick.com/.well-known/csaf/white/2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-306"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-12T22:15:02Z"
}
}
advisories/unreviewed/2024/09/GHSA-mrr5-8hm7-42xh/GHSA-mrr5-8hm7-42xh.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mrr5-8hm7-42xh",
"modified": "2024-09-12T21:32:02Z",
"modified": "2024-09-13T00:30:48Z",
"published": "2024-09-12T21:32:02Z",
"aliases": [
"CVE-2024-34334"
],
"details": "ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-12T19:15:03Z"
advisories/unreviewed/2024/09/GHSA-pcxj-w6pv-x9c5/GHSA-pcxj-w6pv-x9c5.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-qfx3-m2xp-3pcp/GHSA-qfx3-m2xp-3pcp.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-v7mj-q2hh-7r72/GHSA-v7mj-q2hh-7r72.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-w8hf-8rpm-xjp2/GHSA-w8hf-8rpm-xjp2.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-wfg8-6fh4-8fp9/GHSA-wfg8-6fh4-8fp9.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-x4fw-fhfj-vm7c/GHSA-x4fw-fhfj-vm7c.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,