netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-09-04 18:32:13 +00:00
parent b6a4a7adfe
commit ed69b7c815
72 changed files with 1169 additions and 110 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/11/GHSA-52gq-6r3g-qrmr/GHSA-52gq-6r3g-qrmr.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2023/11/GHSA-6gr5-f9v8-mmjp/GHSA-6gr5-f9v8-mmjp.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6gr5-f9v8-mmjp",
"modified": "2023-11-15T18:30:21Z",
"modified": "2024-09-04T18:30:47Z",
"published": "2023-11-08T12:30:33Z",
"aliases": [
"CVE-2023-46764"
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-15"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2023/11/GHSA-gvr7-26fw-gx28/GHSA-gvr7-26fw-gx28.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gvr7-26fw-gx28",
"modified": "2023-11-15T18:30:21Z",
"modified": "2024-09-04T18:30:48Z",
"published": "2023-11-08T12:30:33Z",
"aliases": [
"CVE-2023-46757"
advisories/unreviewed/2023/11/GHSA-gx9g-7w8c-qc7m/GHSA-gx9g-7w8c-qc7m.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gx9g-7w8c-qc7m",
"modified": "2023-11-15T18:30:21Z",
"modified": "2024-09-04T18:30:47Z",
"published": "2023-11-08T12:30:33Z",
"aliases": [
"CVE-2023-46756"
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2023/11/GHSA-hw72-pm43-7c85/GHSA-hw72-pm43-7c85.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hw72-pm43-7c85",
"modified": "2023-11-15T18:30:21Z",
"modified": "2024-09-04T18:30:48Z",
"published": "2023-11-08T12:30:33Z",
"aliases": [
"CVE-2023-46759"
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/11/GHSA-jvfm-76h2-rwxq/GHSA-jvfm-76h2-rwxq.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jvfm-76h2-rwxq",
"modified": "2023-11-15T18:30:21Z",
"modified": "2024-09-04T18:30:47Z",
"published": "2023-11-08T12:30:33Z",
"aliases": [
"CVE-2023-46763"
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2023/11/GHSA-w6v8-c5v8-cqhh/GHSA-w6v8-c5v8-cqhh.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w6v8-c5v8-cqhh",
"modified": "2023-11-15T18:30:21Z",
"modified": "2024-09-04T18:30:48Z",
"published": "2023-11-08T12:30:33Z",
"aliases": [
"CVE-2023-46758"
advisories/unreviewed/2024/02/GHSA-8p8h-w59q-xf45/GHSA-8p8h-w59q-xf45.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8p8h-w59q-xf45",
"modified": "2024-02-21T00:31:31Z",
"modified": "2024-09-04T18:30:48Z",
"published": "2024-02-21T00:31:31Z",
"aliases": [
"CVE-2024-23758"
],
"details": "An issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information via the Enterprise ManagementInstaller_msi.log file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-532"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-20T23:15:07Z"
advisories/unreviewed/2024/02/GHSA-j9jp-j2w9-gw9c/GHSA-j9jp-j2w9-gw9c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j9jp-j2w9-gw9c",
"modified": "2024-02-19T03:30:24Z",
"modified": "2024-09-04T18:30:48Z",
"published": "2024-02-19T03:30:24Z",
"aliases": [
"CVE-2020-36774"
],
"details": "plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-664"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-19T02:15:47Z"
advisories/unreviewed/2024/03/GHSA-3cp6-m65f-qhcw/GHSA-3cp6-m65f-qhcw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3cp6-m65f-qhcw",
"modified": "2024-03-29T15:30:32Z",
"modified": "2024-09-04T18:30:49Z",
"published": "2024-03-29T15:30:32Z",
"aliases": [
"CVE-2024-27619"
],
"details": "Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up than root of usb flash directory. During upload ram is getting filled and causing system resource exhaustion (no free memory) which causes system to crash and reboot.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T15:15:11Z"
advisories/unreviewed/2024/03/GHSA-4gxp-6chj-c99r/GHSA-4gxp-6chj-c99r.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4gxp-6chj-c99r",
"modified": "2024-03-27T06:30:31Z",
"modified": "2024-09-04T18:30:48Z",
"published": "2024-03-27T06:30:31Z",
"aliases": [
"CVE-2023-45931"
],
"details": "Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-27T04:15:11Z"
advisories/unreviewed/2024/03/GHSA-gmxf-67jf-rrf4/GHSA-gmxf-67jf-rrf4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gmxf-67jf-rrf4",
"modified": "2024-07-26T21:31:15Z",
"modified": "2024-09-04T18:30:48Z",
"published": "2024-03-26T12:31:28Z",
"aliases": [
"CVE-2024-28093"
],
"details": "The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1392"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-26T12:15:50Z"
advisories/unreviewed/2024/03/GHSA-jjf4-959w-f545/GHSA-jjf4-959w-f545.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jjf4-959w-f545",
"modified": "2024-03-28T00:31:37Z",
"modified": "2024-09-04T18:30:48Z",
"published": "2024-03-28T00:31:37Z",
"aliases": [
"CVE-2023-47438"
],
"details": "SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-27T22:15:07Z"
advisories/unreviewed/2024/04/GHSA-3p62-2p5c-mgqj/GHSA-3p62-2p5c-mgqj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3p62-2p5c-mgqj",
"modified": "2024-04-02T18:31:18Z",
"modified": "2024-09-04T18:30:49Z",
"published": "2024-04-02T18:31:18Z",
"aliases": [
"CVE-2024-30806"
],
"details": "An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42aac.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-02T18:15:12Z"
advisories/unreviewed/2024/04/GHSA-mxqc-99q2-7w6p/GHSA-mxqc-99q2-7w6p.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mxqc-99q2-7w6p",
"modified": "2024-04-01T21:30:47Z",
"modified": "2024-09-04T18:30:49Z",
"published": "2024-04-01T21:30:47Z",
"aliases": [
"CVE-2024-29433"
],
"details": "A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-01T20:15:14Z"
advisories/unreviewed/2024/04/GHSA-wq73-4j39-6948/GHSA-wq73-4j39-6948.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wq73-4j39-6948",
"modified": "2024-04-02T15:30:37Z",
"modified": "2024-09-04T18:30:49Z",
"published": "2024-04-02T15:30:37Z",
"aliases": [
"CVE-2024-30965"
],
"details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-02T14:15:08Z"
advisories/unreviewed/2024/08/GHSA-3g7g-8ghp-wcmp/GHSA-3g7g-8ghp-wcmp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3g7g-8ghp-wcmp",
"modified": "2024-08-31T00:31:04Z",
"modified": "2024-09-04T18:30:50Z",
"published": "2024-08-31T00:31:04Z",
"aliases": [
"CVE-2024-44682"
],
"details": "ShopXO 6.2 is vulnerable to Cross Site Scripting (XSS) in the backend that allows attackers to execute code by changing POST parameters.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-30T22:15:06Z"
advisories/unreviewed/2024/08/GHSA-9v3w-2474-chq6/GHSA-9v3w-2474-chq6.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9v3w-2474-chq6",
"modified": "2024-08-29T21:31:04Z",
"modified": "2024-09-04T18:30:50Z",
"published": "2024-08-29T21:31:04Z",
"aliases": [
"CVE-2024-41349"
],
"details": "unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-29T21:15:10Z"
advisories/unreviewed/2024/08/GHSA-cq7c-c9r8-c439/GHSA-cq7c-c9r8-c439.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cq7c-c9r8-c439",
"modified": "2024-08-31T00:31:05Z",
"modified": "2024-09-04T18:30:50Z",
"published": "2024-08-31T00:31:05Z",
"aliases": [
"CVE-2024-44683"
],
"details": "Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-30T22:15:06Z"
advisories/unreviewed/2024/08/GHSA-hmvm-6w7r-q9wr/GHSA-hmvm-6w7r-q9wr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hmvm-6w7r-q9wr",
"modified": "2024-08-29T21:31:03Z",
"modified": "2024-09-04T18:30:49Z",
"published": "2024-08-29T21:31:03Z",
"aliases": [
"CVE-2024-41358"
],
"details": "phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\\admin\\import-export\\import-load-data.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-29T20:15:08Z"

Some files were not shown because too many files have changed in this diff Show More