diff --git a/advisories/github-reviewed/2018/07/GHSA-j3wh-5m26-2pf7/GHSA-j3wh-5m26-2pf7.json b/advisories/github-reviewed/2018/07/GHSA-j3wh-5m26-2pf7/GHSA-j3wh-5m26-2pf7.json index 8797375f946..0a402fdfcbd 100644 --- a/advisories/github-reviewed/2018/07/GHSA-j3wh-5m26-2pf7/GHSA-j3wh-5m26-2pf7.json +++ b/advisories/github-reviewed/2018/07/GHSA-j3wh-5m26-2pf7/GHSA-j3wh-5m26-2pf7.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in mystem-fix", "details": "Affected versions of `mystem-fix` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `mystem-fix`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/07/GHSA-jcw8-r9xm-32c6/GHSA-jcw8-r9xm-32c6.json b/advisories/github-reviewed/2018/07/GHSA-jcw8-r9xm-32c6/GHSA-jcw8-r9xm-32c6.json index 9b253d31bba..fcde45973d1 100644 --- a/advisories/github-reviewed/2018/07/GHSA-jcw8-r9xm-32c6/GHSA-jcw8-r9xm-32c6.json +++ b/advisories/github-reviewed/2018/07/GHSA-jcw8-r9xm-32c6/GHSA-jcw8-r9xm-32c6.json @@ -8,9 +8,7 @@ ], "summary": "Command Injection in dns-sync", "details": "Affected versions of `dns-sync` have an arbitrary command execution vulnerability in the `resolve()` method. \n\n\n\n## Recommendation\n\n- Use an alternative dns resolver\n- Do not allow untrusted input into `dns-sync.resolve()`", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/07/GHSA-jxqq-cqm6-pfq9/GHSA-jxqq-cqm6-pfq9.json b/advisories/github-reviewed/2018/07/GHSA-jxqq-cqm6-pfq9/GHSA-jxqq-cqm6-pfq9.json index 7d79477aa2f..089bd5070ff 100644 --- a/advisories/github-reviewed/2018/07/GHSA-jxqq-cqm6-pfq9/GHSA-jxqq-cqm6-pfq9.json +++ b/advisories/github-reviewed/2018/07/GHSA-jxqq-cqm6-pfq9/GHSA-jxqq-cqm6-pfq9.json @@ -8,9 +8,7 @@ ], "summary": "Regular Expression Denial of Service in slug", "details": "Affected versions of `slug` are vulnerable to a regular expression denial of service when parsing untrusted user input.\n\nThe issue is low severity, as it takes 50,000 characters to cause the event loop to block for 2 seconds,\n\nAbout 50k characters can block the event loop for 2 seconds.\n\n\n## Recommendation\n\nUpdate to version 0.9.2 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/07/GHSA-m5h6-hr3q-22h5/GHSA-m5h6-hr3q-22h5.json b/advisories/github-reviewed/2018/07/GHSA-m5h6-hr3q-22h5/GHSA-m5h6-hr3q-22h5.json index ee22f0be2b2..da289ce85e4 100644 --- a/advisories/github-reviewed/2018/07/GHSA-m5h6-hr3q-22h5/GHSA-m5h6-hr3q-22h5.json +++ b/advisories/github-reviewed/2018/07/GHSA-m5h6-hr3q-22h5/GHSA-m5h6-hr3q-22h5.json @@ -8,9 +8,7 @@ ], "summary": "npm Token Leak in npm", "details": "Affected versions of the `npm` package include the bearer token of the logged in user in every request made by the CLI, even if the request is not directed towards the user's active registry. \n\nAn attacker could create an HTTP server to collect tokens, and by various means including but not limited to install scripts, cause the npm CLI to make a request to that server, which would compromise the user's token.\n\nThis compromised token could be used to do anything that the user could do, including publishing new packages.\n\n\n\n\n## Recommendation\n\n1. Update npm with `npm install npm@latest -g`\n2. [Revoke your Tokens](https://www.npmjs.com/settings/tokens)\n3. Enable [Two-Factor Authentication](https://docs.npmjs.com/getting-started/using-two-factor-authentication)", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/07/GHSA-pmg9-p9r2-6q87/GHSA-pmg9-p9r2-6q87.json b/advisories/github-reviewed/2018/07/GHSA-pmg9-p9r2-6q87/GHSA-pmg9-p9r2-6q87.json index a46c94b9e55..fc02242d5f9 100644 --- a/advisories/github-reviewed/2018/07/GHSA-pmg9-p9r2-6q87/GHSA-pmg9-p9r2-6q87.json +++ b/advisories/github-reviewed/2018/07/GHSA-pmg9-p9r2-6q87/GHSA-pmg9-p9r2-6q87.json @@ -8,9 +8,7 @@ ], "summary": "ReDoS via long UserAgent header in ua-parser", "details": "Affected versions of `ua-parser` are vulnerable to regular expression denial of service when given a specially crafted `User-Agent` header.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different, functionally equivalent package such as [useragent](https://www.npmjs.com/package/useragent).", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/07/GHSA-pq3x-96c3-xgjg/GHSA-pq3x-96c3-xgjg.json b/advisories/github-reviewed/2018/07/GHSA-pq3x-96c3-xgjg/GHSA-pq3x-96c3-xgjg.json index d3a9f27dad6..059d7a47ea3 100644 --- a/advisories/github-reviewed/2018/07/GHSA-pq3x-96c3-xgjg/GHSA-pq3x-96c3-xgjg.json +++ b/advisories/github-reviewed/2018/07/GHSA-pq3x-96c3-xgjg/GHSA-pq3x-96c3-xgjg.json @@ -8,9 +8,7 @@ ], "summary": "Moderate severity vulnerability that affects Products.PlonePAS", "details": "The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/07/GHSA-q75g-2496-mxpp/GHSA-q75g-2496-mxpp.json b/advisories/github-reviewed/2018/07/GHSA-q75g-2496-mxpp/GHSA-q75g-2496-mxpp.json index 89125d23bbb..5cb83fcc980 100644 --- a/advisories/github-reviewed/2018/07/GHSA-q75g-2496-mxpp/GHSA-q75g-2496-mxpp.json +++ b/advisories/github-reviewed/2018/07/GHSA-q75g-2496-mxpp/GHSA-q75g-2496-mxpp.json @@ -8,9 +8,7 @@ ], "summary": "Regular Expression Denial of Service in parsejson", "details": "Affected versions of `parsejson` are vulnerable to a regular expression denial of service when parsing untrusted user input.\n\n\n## Recommendation\n\nThe `parsejson` package has not been functionally updated since it was initially released.\n\nAdditionally, it provides functionality which is natively included in Node.js, and therefore the native `JSON.parse()` should be used, for both performance and security reasons.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/08/GHSA-m8h6-m9p5-p2f8/GHSA-m8h6-m9p5-p2f8.json b/advisories/github-reviewed/2018/08/GHSA-m8h6-m9p5-p2f8/GHSA-m8h6-m9p5-p2f8.json index 73b5bba4eff..69d90bf87c2 100644 --- a/advisories/github-reviewed/2018/08/GHSA-m8h6-m9p5-p2f8/GHSA-m8h6-m9p5-p2f8.json +++ b/advisories/github-reviewed/2018/08/GHSA-m8h6-m9p5-p2f8/GHSA-m8h6-m9p5-p2f8.json @@ -4,14 +4,10 @@ "modified": "2021-12-02T23:15:03Z", "published": "2018-08-13T20:49:01Z", "withdrawn": "2020-06-16T21:45:29Z", - "aliases": [ - - ], + "aliases": [], "summary": "Moderate severity vulnerability that affects activerecord", "details": "Withdrawn, accidental duplicate publish.\n\nActive Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain \"[nil]\" values, a related issue to CVE-2012-2660, CVE-2012-2694, and CVE-2013-0155.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:45:29Z", diff --git a/advisories/github-reviewed/2018/08/GHSA-p65h-233c-jxvm/GHSA-p65h-233c-jxvm.json b/advisories/github-reviewed/2018/08/GHSA-p65h-233c-jxvm/GHSA-p65h-233c-jxvm.json index a0b43d352e3..34aa53e2914 100644 --- a/advisories/github-reviewed/2018/08/GHSA-p65h-233c-jxvm/GHSA-p65h-233c-jxvm.json +++ b/advisories/github-reviewed/2018/08/GHSA-p65h-233c-jxvm/GHSA-p65h-233c-jxvm.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in resourcehacker", "details": "Affected versions of `resourcehacker` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `resourcehacker`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/08/GHSA-ph8p-2g97-9654/GHSA-ph8p-2g97-9654.json b/advisories/github-reviewed/2018/08/GHSA-ph8p-2g97-9654/GHSA-ph8p-2g97-9654.json index fc22ed5bd2a..fd1e832d757 100644 --- a/advisories/github-reviewed/2018/08/GHSA-ph8p-2g97-9654/GHSA-ph8p-2g97-9654.json +++ b/advisories/github-reviewed/2018/08/GHSA-ph8p-2g97-9654/GHSA-ph8p-2g97-9654.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in jstestdriver", "details": "Affected versions of `jstestdriver` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `jstestdriver`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability, and the package has not seen an update since 2011.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/08/GHSA-qj73-v688-wqxf/GHSA-qj73-v688-wqxf.json b/advisories/github-reviewed/2018/08/GHSA-qj73-v688-wqxf/GHSA-qj73-v688-wqxf.json index 3a984056ad6..f461f1c06c3 100644 --- a/advisories/github-reviewed/2018/08/GHSA-qj73-v688-wqxf/GHSA-qj73-v688-wqxf.json +++ b/advisories/github-reviewed/2018/08/GHSA-qj73-v688-wqxf/GHSA-qj73-v688-wqxf.json @@ -8,9 +8,7 @@ ], "summary": "Hijacked Environment Variables in proxy.js", "details": "The `proxy.js` package is a piece of malware that steals environment variables and sends them to attacker controlled locations. \n\nAll versions have been unpublished from the npm registry.\n\n\n## Recommendation\n\n\nAs this package is malware, if you find it installed in your environment, the real security concern is determining how it got there. \n\nIf you have found this installed in your environment, you should:\n1. Delete the package\n2. Clear your npm cache\n3. Ensure it is not present in any other package.json files on your system\n4. Regenerate your registry credentials, tokens, and any other sensitive credentials that may have been present in your environment variables. \n\nAdditionally, any service which may have been exposed via credentials in your environment variables, such as a database, should be reviewed for indicators of compromise as well.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/09/GHSA-mrhj-2g4v-39qx/GHSA-mrhj-2g4v-39qx.json b/advisories/github-reviewed/2018/09/GHSA-mrhj-2g4v-39qx/GHSA-mrhj-2g4v-39qx.json index b2546737c3a..0d590085270 100644 --- a/advisories/github-reviewed/2018/09/GHSA-mrhj-2g4v-39qx/GHSA-mrhj-2g4v-39qx.json +++ b/advisories/github-reviewed/2018/09/GHSA-mrhj-2g4v-39qx/GHSA-mrhj-2g4v-39qx.json @@ -4,14 +4,10 @@ "modified": "2020-06-16T21:54:12Z", "published": "2018-09-17T21:58:19Z", "withdrawn": "2020-06-16T21:47:07Z", - "aliases": [ - - ], + "aliases": [], "summary": "Moderate severity vulnerability that affects rails-html-sanitizer", "details": "Withdrawn, accidental duplicate publish.\n\nCross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via an HTML entity that is mishandled by the Rails::Html::FullSanitizer class.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:47:07Z", diff --git a/advisories/github-reviewed/2018/10/GHSA-gr4c-5rq6-cgh3/GHSA-gr4c-5rq6-cgh3.json b/advisories/github-reviewed/2018/10/GHSA-gr4c-5rq6-cgh3/GHSA-gr4c-5rq6-cgh3.json index 6c7516a8213..b747d146185 100644 --- a/advisories/github-reviewed/2018/10/GHSA-gr4c-5rq6-cgh3/GHSA-gr4c-5rq6-cgh3.json +++ b/advisories/github-reviewed/2018/10/GHSA-gr4c-5rq6-cgh3/GHSA-gr4c-5rq6-cgh3.json @@ -69,9 +69,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:38:00Z", diff --git a/advisories/github-reviewed/2018/10/GHSA-pgv6-jrvv-75jp/GHSA-pgv6-jrvv-75jp.json b/advisories/github-reviewed/2018/10/GHSA-pgv6-jrvv-75jp/GHSA-pgv6-jrvv-75jp.json index 10bb479fc64..09110e89123 100644 --- a/advisories/github-reviewed/2018/10/GHSA-pgv6-jrvv-75jp/GHSA-pgv6-jrvv-75jp.json +++ b/advisories/github-reviewed/2018/10/GHSA-pgv6-jrvv-75jp/GHSA-pgv6-jrvv-75jp.json @@ -4,14 +4,10 @@ "modified": "2020-06-16T22:04:41Z", "published": "2018-10-09T00:34:30Z", "withdrawn": "2020-06-16T21:49:08Z", - "aliases": [ - - ], + "aliases": [], "summary": "Moderate severity vulnerability that affects send", "details": "Withdrawn, accidental duplicate publish.\n\nvisionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using \"public-restricted\" under a \"public\" directory.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:49:08Z", diff --git a/advisories/github-reviewed/2018/10/GHSA-qgm9-232x-hwpx/GHSA-qgm9-232x-hwpx.json b/advisories/github-reviewed/2018/10/GHSA-qgm9-232x-hwpx/GHSA-qgm9-232x-hwpx.json index b395540597a..f01d4dc5ef4 100644 --- a/advisories/github-reviewed/2018/10/GHSA-qgm9-232x-hwpx/GHSA-qgm9-232x-hwpx.json +++ b/advisories/github-reviewed/2018/10/GHSA-qgm9-232x-hwpx/GHSA-qgm9-232x-hwpx.json @@ -9,9 +9,7 @@ ], "summary": "Moderate severity vulnerability that affects org.keycloak:keycloak-core", "details": "Withdrawn: Duplicate of CVE-2017-12161 / GHSA-959q-32g8-vvp7", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -44,9 +42,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:51:52Z", diff --git a/advisories/github-reviewed/2018/10/GHSA-qpwj-mvv7-v3m9/GHSA-qpwj-mvv7-v3m9.json b/advisories/github-reviewed/2018/10/GHSA-qpwj-mvv7-v3m9/GHSA-qpwj-mvv7-v3m9.json index e44e0bfc898..d7fc3bacc7d 100644 --- a/advisories/github-reviewed/2018/10/GHSA-qpwj-mvv7-v3m9/GHSA-qpwj-mvv7-v3m9.json +++ b/advisories/github-reviewed/2018/10/GHSA-qpwj-mvv7-v3m9/GHSA-qpwj-mvv7-v3m9.json @@ -8,9 +8,7 @@ ], "summary": "High severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2", "details": "The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers to have bypass intended restrictions and have unspecified other impact via a crafted SAML token with a trusted signature.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/11/GHSA-phg2-9c5g-m4q7/GHSA-phg2-9c5g-m4q7.json b/advisories/github-reviewed/2018/11/GHSA-phg2-9c5g-m4q7/GHSA-phg2-9c5g-m4q7.json index 91f515e9970..c2682fe57a7 100644 --- a/advisories/github-reviewed/2018/11/GHSA-phg2-9c5g-m4q7/GHSA-phg2-9c5g-m4q7.json +++ b/advisories/github-reviewed/2018/11/GHSA-phg2-9c5g-m4q7/GHSA-phg2-9c5g-m4q7.json @@ -75,9 +75,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:49:15Z", diff --git a/advisories/github-reviewed/2019/02/GHSA-g3xp-v2ff-x5c3/GHSA-g3xp-v2ff-x5c3.json b/advisories/github-reviewed/2019/02/GHSA-g3xp-v2ff-x5c3/GHSA-g3xp-v2ff-x5c3.json index 45e817e9c64..5a36ab37bb4 100644 --- a/advisories/github-reviewed/2019/02/GHSA-g3xp-v2ff-x5c3/GHSA-g3xp-v2ff-x5c3.json +++ b/advisories/github-reviewed/2019/02/GHSA-g3xp-v2ff-x5c3/GHSA-g3xp-v2ff-x5c3.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in go-ipfs-dep", "details": "Affected versions of `go-ipfs-deps` insecurely download resources over HTTP. \n\nIn scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of the package itself, it ranges from being able to read sensitive information all the way up to and including remote code execution.\n\n\n## Recommendation\n\nUpdate to version 0.4.4 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-g785-775g-f2g8/GHSA-g785-775g-f2g8.json b/advisories/github-reviewed/2019/02/GHSA-g785-775g-f2g8/GHSA-g785-775g-f2g8.json index 4818d76908d..6ec6eda7531 100644 --- a/advisories/github-reviewed/2019/02/GHSA-g785-775g-f2g8/GHSA-g785-775g-f2g8.json +++ b/advisories/github-reviewed/2019/02/GHSA-g785-775g-f2g8/GHSA-g785-775g-f2g8.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in haxe", "details": "Affected versions of `haxe` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `haxe`.\n\n\n## Recommendation\n\nUpdate to version 5.0.10 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-g7w9-vm5m-48q8/GHSA-g7w9-vm5m-48q8.json b/advisories/github-reviewed/2019/02/GHSA-g7w9-vm5m-48q8/GHSA-g7w9-vm5m-48q8.json index e8450396974..344386baebf 100644 --- a/advisories/github-reviewed/2019/02/GHSA-g7w9-vm5m-48q8/GHSA-g7w9-vm5m-48q8.json +++ b/advisories/github-reviewed/2019/02/GHSA-g7w9-vm5m-48q8/GHSA-g7w9-vm5m-48q8.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in arcanist", "details": "Affected versions of `arcanist` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `arcanist`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-g84j-95x2-7g67/GHSA-g84j-95x2-7g67.json b/advisories/github-reviewed/2019/02/GHSA-g84j-95x2-7g67/GHSA-g84j-95x2-7g67.json index 901f94c485c..b4549f03aef 100644 --- a/advisories/github-reviewed/2019/02/GHSA-g84j-95x2-7g67/GHSA-g84j-95x2-7g67.json +++ b/advisories/github-reviewed/2019/02/GHSA-g84j-95x2-7g67/GHSA-g84j-95x2-7g67.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in tomita", "details": "Affected versions of `tomita` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `tomita`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-gc6c-5v9w-xmhw/GHSA-gc6c-5v9w-xmhw.json b/advisories/github-reviewed/2019/02/GHSA-gc6c-5v9w-xmhw/GHSA-gc6c-5v9w-xmhw.json index e3a80c4afc5..8e2381050ba 100644 --- a/advisories/github-reviewed/2019/02/GHSA-gc6c-5v9w-xmhw/GHSA-gc6c-5v9w-xmhw.json +++ b/advisories/github-reviewed/2019/02/GHSA-gc6c-5v9w-xmhw/GHSA-gc6c-5v9w-xmhw.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in nodewebkit", "details": "Affected versions of `nodewebkit` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `nodewebkit`.\n\n\n## Recommendation\n\nNo patch is currently available, and the package author has deprecated this package. \n\nThe best path forward in mitigating this vulnerability is to use the [official installer](https://www.npmjs.com/nw) instead of this package, as per the package author's instructions.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-h2r4-4xgf-3865/GHSA-h2r4-4xgf-3865.json b/advisories/github-reviewed/2019/02/GHSA-h2r4-4xgf-3865/GHSA-h2r4-4xgf-3865.json index 4e38dbc0271..fbe629021f4 100644 --- a/advisories/github-reviewed/2019/02/GHSA-h2r4-4xgf-3865/GHSA-h2r4-4xgf-3865.json +++ b/advisories/github-reviewed/2019/02/GHSA-h2r4-4xgf-3865/GHSA-h2r4-4xgf-3865.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in product-monitor", "details": "Affected versions of `product-monitor` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `product-monitor`.\n\n\n## Recommendation\n\nUpdate to versions 2.2.5 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-h7pc-85cg-wmch/GHSA-h7pc-85cg-wmch.json b/advisories/github-reviewed/2019/02/GHSA-h7pc-85cg-wmch/GHSA-h7pc-85cg-wmch.json index f9867f247db..986d5e12201 100644 --- a/advisories/github-reviewed/2019/02/GHSA-h7pc-85cg-wmch/GHSA-h7pc-85cg-wmch.json +++ b/advisories/github-reviewed/2019/02/GHSA-h7pc-85cg-wmch/GHSA-h7pc-85cg-wmch.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in kindlegen", "details": "Affected versions of `kindlegen` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `kindlegen`.\n\n\n## Recommendation\n\nUpdate to version 1.1.0 or greater.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-hhxm-4f85-rgr8/GHSA-hhxm-4f85-rgr8.json b/advisories/github-reviewed/2019/02/GHSA-hhxm-4f85-rgr8/GHSA-hhxm-4f85-rgr8.json index 05025b1c2e0..259ee433c6e 100644 --- a/advisories/github-reviewed/2019/02/GHSA-hhxm-4f85-rgr8/GHSA-hhxm-4f85-rgr8.json +++ b/advisories/github-reviewed/2019/02/GHSA-hhxm-4f85-rgr8/GHSA-hhxm-4f85-rgr8.json @@ -4,14 +4,10 @@ "modified": "2020-06-16T21:40:22Z", "published": "2019-02-05T16:25:34Z", "withdrawn": "2020-06-16T21:40:22Z", - "aliases": [ - - ], + "aliases": [], "summary": "High severity vulnerability that affects many_versioned_gem", "details": "### Logs password in plaintext\n\n### Impact\n\nLogs the password used in plaintext. The password should masked in logs to prevent it leaking.\n\n### Patches\nHas the problem been patched? What versions should users upgrade to?\n\n### Workarounds\nnone\n\n### See also\nAre there any links users can visit to find out more information?\n\n\n#### Package Ecosystem\nRubyGems\n\n#### Package Name\nmany_versioned_gem\n\n#### Affected Versions\n< 0.2.2\n\n#### Patches\n0.2.3", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:40:22Z", diff --git a/advisories/github-reviewed/2019/02/GHSA-hjhr-r3gq-qvp6/GHSA-hjhr-r3gq-qvp6.json b/advisories/github-reviewed/2019/02/GHSA-hjhr-r3gq-qvp6/GHSA-hjhr-r3gq-qvp6.json index 660b3d6ae55..287a3ced4ac 100644 --- a/advisories/github-reviewed/2019/02/GHSA-hjhr-r3gq-qvp6/GHSA-hjhr-r3gq-qvp6.json +++ b/advisories/github-reviewed/2019/02/GHSA-hjhr-r3gq-qvp6/GHSA-hjhr-r3gq-qvp6.json @@ -8,9 +8,7 @@ ], "summary": "Timing Attack in csrf-lite", "details": "Affected versions of `csrf-lite` are vulnerable to timing attacks as a result of testing CSRF tokens via a fail-early comparison instead of a constant-time comparison. \n\nTiming attacks remove the exponential increase in entropy gained from increased secret length, by providing per-character feedback on the correctness of a guess via miniscule timing differences.\n\nUnder favorable network conditions, an attacker can exploit this to guess the secret in no more than (16*18)288 guesses, instead of the 16^18 guesses required were the timing attack not present. \n\n\n## Recommendation\n\nUpdate to version 0.1.2 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-hw4r-xr38-hm8j/GHSA-hw4r-xr38-hm8j.json b/advisories/github-reviewed/2019/02/GHSA-hw4r-xr38-hm8j/GHSA-hw4r-xr38-hm8j.json index 7f2edcdc14a..fe4d18fb764 100644 --- a/advisories/github-reviewed/2019/02/GHSA-hw4r-xr38-hm8j/GHSA-hw4r-xr38-hm8j.json +++ b/advisories/github-reviewed/2019/02/GHSA-hw4r-xr38-hm8j/GHSA-hw4r-xr38-hm8j.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in unicode-json", "details": "Affected versions of `unicode-json` insecurely downloads resources over HTTP. \n\nIn scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of the package itself, it ranges from being able to read sensitive information all the way up to and including remote code execution.\n\n\n## Recommendation\n\nInstall version 2.0.0 or greater.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-j336-34q7-cgj3/GHSA-j336-34q7-cgj3.json b/advisories/github-reviewed/2019/02/GHSA-j336-34q7-cgj3/GHSA-j336-34q7-cgj3.json index aa397763f08..2951d493591 100644 --- a/advisories/github-reviewed/2019/02/GHSA-j336-34q7-cgj3/GHSA-j336-34q7-cgj3.json +++ b/advisories/github-reviewed/2019/02/GHSA-j336-34q7-cgj3/GHSA-j336-34q7-cgj3.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in healthcenter", "details": "Affected versions of `healthcenter` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `healthcenter`.\n\n\n## Recommendation\n\nThis package has been deprecated, and moved to a new package on npm: [`appmetrics`](https://npmjs.com/package/appmetrics).\n\nIn order to mitigate this vulnerability, please install the `appmetrics` package in place of `healthcenter` via the following commands:\n```\nnpm uninstall healthcenter -s\nnpm install appmetrics -s\n```", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-j3cr-j9jx-mf4p/GHSA-j3cr-j9jx-mf4p.json b/advisories/github-reviewed/2019/02/GHSA-j3cr-j9jx-mf4p/GHSA-j3cr-j9jx-mf4p.json index 0baa73cbf01..a23d1b59f1a 100644 --- a/advisories/github-reviewed/2019/02/GHSA-j3cr-j9jx-mf4p/GHSA-j3cr-j9jx-mf4p.json +++ b/advisories/github-reviewed/2019/02/GHSA-j3cr-j9jx-mf4p/GHSA-j3cr-j9jx-mf4p.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in redis-srvr", "details": "Affected versions of `redis-srvr` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `redis-srvr`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability, and the package has not seen an update since 2014.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-jfgq-g48x-jq83/GHSA-jfgq-g48x-jq83.json b/advisories/github-reviewed/2019/02/GHSA-jfgq-g48x-jq83/GHSA-jfgq-g48x-jq83.json index afa54841596..651b1bc637b 100644 --- a/advisories/github-reviewed/2019/02/GHSA-jfgq-g48x-jq83/GHSA-jfgq-g48x-jq83.json +++ b/advisories/github-reviewed/2019/02/GHSA-jfgq-g48x-jq83/GHSA-jfgq-g48x-jq83.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in iedriver", "details": "Affected versions of `iedriver` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `iedriver`.\n\n\n## Recommendation\n\nUpdate to iedriver version 3.0.0 or greater.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-jh5w-6964-x5cf/GHSA-jh5w-6964-x5cf.json b/advisories/github-reviewed/2019/02/GHSA-jh5w-6964-x5cf/GHSA-jh5w-6964-x5cf.json index b5f5c9ba737..f46de637e63 100644 --- a/advisories/github-reviewed/2019/02/GHSA-jh5w-6964-x5cf/GHSA-jh5w-6964-x5cf.json +++ b/advisories/github-reviewed/2019/02/GHSA-jh5w-6964-x5cf/GHSA-jh5w-6964-x5cf.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in chromedriver", "details": "Affected versions of `chromedriver` insecurely download resources over HTTP. \n\nIn scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This may result in arbitrary code execution if an attacker intercepts and modifies the downloaded binary file, replacing it with a malicious one. \n\n\n\n## Recommendation\n\nUpdate to version 2.26.1 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-m2w9-rm58-mhm9/GHSA-m2w9-rm58-mhm9.json b/advisories/github-reviewed/2019/02/GHSA-m2w9-rm58-mhm9/GHSA-m2w9-rm58-mhm9.json index 7c2a2a0d663..117d741c314 100644 --- a/advisories/github-reviewed/2019/02/GHSA-m2w9-rm58-mhm9/GHSA-m2w9-rm58-mhm9.json +++ b/advisories/github-reviewed/2019/02/GHSA-m2w9-rm58-mhm9/GHSA-m2w9-rm58-mhm9.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in node-thulac", "details": "Affected versions of `node-thulac` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `node-thulac`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-mgr2-3mpv-43gc/GHSA-mgr2-3mpv-43gc.json b/advisories/github-reviewed/2019/02/GHSA-mgr2-3mpv-43gc/GHSA-mgr2-3mpv-43gc.json index 68ac9ee6822..0fc50812952 100644 --- a/advisories/github-reviewed/2019/02/GHSA-mgr2-3mpv-43gc/GHSA-mgr2-3mpv-43gc.json +++ b/advisories/github-reviewed/2019/02/GHSA-mgr2-3mpv-43gc/GHSA-mgr2-3mpv-43gc.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in openframe-image", "details": "Affected versions of `openframe-image` insecurely downloads resources over HTTP. \n\nIn scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of the package itself, it ranges from being able to read sensitive information all the way up to and including remote code execution.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-mm7h-323r-9p4g/GHSA-mm7h-323r-9p4g.json b/advisories/github-reviewed/2019/02/GHSA-mm7h-323r-9p4g/GHSA-mm7h-323r-9p4g.json index b03c544fad2..7efda9b3ce2 100644 --- a/advisories/github-reviewed/2019/02/GHSA-mm7h-323r-9p4g/GHSA-mm7h-323r-9p4g.json +++ b/advisories/github-reviewed/2019/02/GHSA-mm7h-323r-9p4g/GHSA-mm7h-323r-9p4g.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in imageoptim", "details": "imageoptim is a Node.js wrapper for some images compression algorithms.\n\nimageoptim downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested tarball with an attacker controlled tarball if the attacker is on the network or positioned in between the user and the remote server.\n\n\n## Recommendation\n\nNo fix is currently available for this vulnerability.\n\nIt is our recommendation to not install or use this module at this time.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-mpww-j7xj-cj35/GHSA-mpww-j7xj-cj35.json b/advisories/github-reviewed/2019/02/GHSA-mpww-j7xj-cj35/GHSA-mpww-j7xj-cj35.json index b1e1b5fd80b..9a95c187904 100644 --- a/advisories/github-reviewed/2019/02/GHSA-mpww-j7xj-cj35/GHSA-mpww-j7xj-cj35.json +++ b/advisories/github-reviewed/2019/02/GHSA-mpww-j7xj-cj35/GHSA-mpww-j7xj-cj35.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in native-opencv", "details": "Affected versions of `native-opencv` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `native-opencv`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability, and the package has not seen an update since 2015.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-mq7g-6rv4-pj95/GHSA-mq7g-6rv4-pj95.json b/advisories/github-reviewed/2019/02/GHSA-mq7g-6rv4-pj95/GHSA-mq7g-6rv4-pj95.json index fc851627f17..5563bc828cc 100644 --- a/advisories/github-reviewed/2019/02/GHSA-mq7g-6rv4-pj95/GHSA-mq7g-6rv4-pj95.json +++ b/advisories/github-reviewed/2019/02/GHSA-mq7g-6rv4-pj95/GHSA-mq7g-6rv4-pj95.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in embedza", "details": "Affected versions of `embedza` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `embedza`.\n\n\n## Recommendation\n\nUpdate to version 1.2.4 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-p2hm-8725-c8x8/GHSA-p2hm-8725-c8x8.json b/advisories/github-reviewed/2019/02/GHSA-p2hm-8725-c8x8/GHSA-p2hm-8725-c8x8.json index 0d50ba629b1..a91070d561d 100644 --- a/advisories/github-reviewed/2019/02/GHSA-p2hm-8725-c8x8/GHSA-p2hm-8725-c8x8.json +++ b/advisories/github-reviewed/2019/02/GHSA-p2hm-8725-c8x8/GHSA-p2hm-8725-c8x8.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in cue-sdk-node", "details": "Affected versions of `cue-sdk-node` insecurely download an executable over an unencrypted HTTP connection. \nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `cue-sdk-node`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-p9pm-55vp-2jqw/GHSA-p9pm-55vp-2jqw.json b/advisories/github-reviewed/2019/02/GHSA-p9pm-55vp-2jqw/GHSA-p9pm-55vp-2jqw.json index 4f6d1f14399..fa30fb3c16b 100644 --- a/advisories/github-reviewed/2019/02/GHSA-p9pm-55vp-2jqw/GHSA-p9pm-55vp-2jqw.json +++ b/advisories/github-reviewed/2019/02/GHSA-p9pm-55vp-2jqw/GHSA-p9pm-55vp-2jqw.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in soci", "details": "Affected versions of `soci` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `soci`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-q43m-ffwr-rpcc/GHSA-q43m-ffwr-rpcc.json b/advisories/github-reviewed/2019/02/GHSA-q43m-ffwr-rpcc/GHSA-q43m-ffwr-rpcc.json index 10762143273..dc1f5fb9c61 100644 --- a/advisories/github-reviewed/2019/02/GHSA-q43m-ffwr-rpcc/GHSA-q43m-ffwr-rpcc.json +++ b/advisories/github-reviewed/2019/02/GHSA-q43m-ffwr-rpcc/GHSA-q43m-ffwr-rpcc.json @@ -8,9 +8,7 @@ ], "summary": "SSL Validation Defaults to False in electron-packager", "details": "Affected versions of `electron-packager` configure the generated application to disable SSL certificate verification by default. \n\nThis could allow an attacker with a privileged network position to launch a Man In The Middle (MITM) attack on the install process, intercepting the step where electron-packager downloads Electron for supported target platforms and architectures, and replacing the valid download with a tampered malicious one.\n\nThis only affects users using the electron-packager CLI. The strict-ssl option defaults to true for the node.js API.\n\n\n## Recommendation\n\n1. Update to version 7.0.0 or later.\n2. Delete the `electron-download` cache folder, which is by default located at `~/.electron`.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-qhm8-m2c4-9mw7/GHSA-qhm8-m2c4-9mw7.json b/advisories/github-reviewed/2019/02/GHSA-qhm8-m2c4-9mw7/GHSA-qhm8-m2c4-9mw7.json index ba32e360cc5..7e60f662e06 100644 --- a/advisories/github-reviewed/2019/02/GHSA-qhm8-m2c4-9mw7/GHSA-qhm8-m2c4-9mw7.json +++ b/advisories/github-reviewed/2019/02/GHSA-qhm8-m2c4-9mw7/GHSA-qhm8-m2c4-9mw7.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in qbs", "details": "Affected versions of `qbs` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `qbs`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-qjf4-7642-c57p/GHSA-qjf4-7642-c57p.json b/advisories/github-reviewed/2019/02/GHSA-qjf4-7642-c57p/GHSA-qjf4-7642-c57p.json index b116915824f..73c1b44357d 100644 --- a/advisories/github-reviewed/2019/02/GHSA-qjf4-7642-c57p/GHSA-qjf4-7642-c57p.json +++ b/advisories/github-reviewed/2019/02/GHSA-qjf4-7642-c57p/GHSA-qjf4-7642-c57p.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in unicode", "details": "Affected versions of `unicode` insecurely download resources over HTTP. \n\nIn scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of the package itself, it ranges from being able to read sensitive information all the way up to and including remote code execution.\n\n\n## Recommendation\n\nUpdate to version 9.0.0 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-qjvf-rmwg-64fr/GHSA-qjvf-rmwg-64fr.json b/advisories/github-reviewed/2019/02/GHSA-qjvf-rmwg-64fr/GHSA-qjvf-rmwg-64fr.json index ae361815dc5..af051703307 100644 --- a/advisories/github-reviewed/2019/02/GHSA-qjvf-rmwg-64fr/GHSA-qjvf-rmwg-64fr.json +++ b/advisories/github-reviewed/2019/02/GHSA-qjvf-rmwg-64fr/GHSA-qjvf-rmwg-64fr.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in install-g-test", "details": "Affected versions of `install-g-test` insecurely download resources over HTTP. \n\nIn scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of the package itself, it ranges from being able to read sensitive information all the way up to and including remote code execution.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-qrmc-fj45-qfc2/GHSA-qrmc-fj45-qfc2.json b/advisories/github-reviewed/2019/02/GHSA-qrmc-fj45-qfc2/GHSA-qrmc-fj45-qfc2.json index fa6cc1df9d3..06e1279a155 100644 --- a/advisories/github-reviewed/2019/02/GHSA-qrmc-fj45-qfc2/GHSA-qrmc-fj45-qfc2.json +++ b/advisories/github-reviewed/2019/02/GHSA-qrmc-fj45-qfc2/GHSA-qrmc-fj45-qfc2.json @@ -8,9 +8,7 @@ ], "summary": "Prototype Pollution in extend", "details": "Versions of `extend` prior to 3.0.2 (for 3.x) and 2.0.2 (for 2.x) are vulnerable to Prototype Pollution. The `extend()` function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects.\n\n\n\n\n## Recommendation\n\nIf you're using `extend` 3.x upgrade to 3.0.2 or later.\nIf you're using `extend` 2.x upgrade to 2.0.2 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-qx9m-27wh-7fjg/GHSA-qx9m-27wh-7fjg.json b/advisories/github-reviewed/2019/02/GHSA-qx9m-27wh-7fjg/GHSA-qx9m-27wh-7fjg.json index 6a327d630a8..99a09d8ab94 100644 --- a/advisories/github-reviewed/2019/02/GHSA-qx9m-27wh-7fjg/GHSA-qx9m-27wh-7fjg.json +++ b/advisories/github-reviewed/2019/02/GHSA-qx9m-27wh-7fjg/GHSA-qx9m-27wh-7fjg.json @@ -8,9 +8,7 @@ ], "summary": "Downloads Resources over HTTP in jvminstall", "details": "Affected versions of `jvminstall` insecurely download an executable over an unencrypted HTTP connection. \n\nIn scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `jvminstall`.\n\n\n## Recommendation\n\nNo patch is currently available for this vulnerability.\n\nThe best mitigation is currently to avoid using this package, using a different package if available. \n\nAlternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/04/GHSA-gm29-35c7-8cfw/GHSA-gm29-35c7-8cfw.json b/advisories/github-reviewed/2019/04/GHSA-gm29-35c7-8cfw/GHSA-gm29-35c7-8cfw.json index 1aa18c76065..ab7718eff44 100644 --- a/advisories/github-reviewed/2019/04/GHSA-gm29-35c7-8cfw/GHSA-gm29-35c7-8cfw.json +++ b/advisories/github-reviewed/2019/04/GHSA-gm29-35c7-8cfw/GHSA-gm29-35c7-8cfw.json @@ -8,9 +8,7 @@ ], "summary": "Cross-Site Scripting in buttle", "details": "All versions of `buttle` are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code.\n\n\n## Recommendation\n\nNo fix is currently available. Consider using an alternative package until a fix is made available.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/09/GHSA-mc84-xr9p-938r/GHSA-mc84-xr9p-938r.json b/advisories/github-reviewed/2019/09/GHSA-mc84-xr9p-938r/GHSA-mc84-xr9p-938r.json index 5fcbc297a0e..df20ea7ef4e 100644 --- a/advisories/github-reviewed/2019/09/GHSA-mc84-xr9p-938r/GHSA-mc84-xr9p-938r.json +++ b/advisories/github-reviewed/2019/09/GHSA-mc84-xr9p-938r/GHSA-mc84-xr9p-938r.json @@ -3,9 +3,7 @@ "id": "GHSA-mc84-xr9p-938r", "modified": "2021-09-15T18:50:22Z", "published": "2019-09-23T18:31:05Z", - "aliases": [ - - ], + "aliases": [], "summary": "High severity vulnerability that affects generator-jhipster", "details": "## Generated code uses repository configuration that downloads over HTTP instead of HTTPS\n\n### Impact\nGradle users were using the http://repo.spring.io/plugins-release repositories in plain HTTP, and not HTTPS, so a man-in-the-middle attack was possible at build time.\n\n### Patches\n\nMaven users should at least upgrade to 6.3.0 while Gradle users should update to 6.3.1.\nIf you are not able to upgrade make sure not to use a Maven repository via `http` in your build file.\n\n### Workarounds\n\nReplace all custom repository definitions in `build.gradle` or `pom.xml` with their `https` version.\n\ne.g.\n\n```xml\n \n oss.sonatype.org-snapshot\n https://oss.sonatype.org/content/repositories/snapshots // <-- must be httpS\n \n false\n \n \n true\n \n\n```\n\n```gradle\nmaven { url \"https://repo.spring.io/plugins-release\" } // <-- must be httpS\n```\n\n### References\n* https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\n* https://max.computer/blog/how-to-take-over-the-computer-of-any-java-or-clojure-or-scala-developer/\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [https://github.com/jhipster/generator-jhipster/issues](https://github.com/jhipster/generator-jhipster/issues)\n\n", "severity": [ diff --git a/advisories/github-reviewed/2019/09/GHSA-mwp6-j9wf-968c/GHSA-mwp6-j9wf-968c.json b/advisories/github-reviewed/2019/09/GHSA-mwp6-j9wf-968c/GHSA-mwp6-j9wf-968c.json index bdbe40c91df..41c55a0d951 100644 --- a/advisories/github-reviewed/2019/09/GHSA-mwp6-j9wf-968c/GHSA-mwp6-j9wf-968c.json +++ b/advisories/github-reviewed/2019/09/GHSA-mwp6-j9wf-968c/GHSA-mwp6-j9wf-968c.json @@ -4,9 +4,7 @@ "modified": "2021-10-11T21:10:33Z", "published": "2019-09-13T21:33:25Z", "withdrawn": "2020-06-26T16:40:47Z", - "aliases": [ - - ], + "aliases": [], "summary": "Critical severity vulnerability that affects generator-jhipster", "details": "Account takeover and privilege escalation is possible in applications generated by generator-jhipster before 6.3.0. This is due to a vulnerability in the generated java classes: CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)\n\nGenerated applications must be manually patched, following instructions in the release notes: https://www.jhipster.tech/2019/09/13/jhipster-release-6.3.0.html\n", "severity": [ diff --git a/advisories/github-reviewed/2019/10/GHSA-mgv2-57vj-99xc/GHSA-mgv2-57vj-99xc.json b/advisories/github-reviewed/2019/10/GHSA-mgv2-57vj-99xc/GHSA-mgv2-57vj-99xc.json index f8093f6c499..3a6ba5ba41b 100644 --- a/advisories/github-reviewed/2019/10/GHSA-mgv2-57vj-99xc/GHSA-mgv2-57vj-99xc.json +++ b/advisories/github-reviewed/2019/10/GHSA-mgv2-57vj-99xc/GHSA-mgv2-57vj-99xc.json @@ -3,14 +3,10 @@ "id": "GHSA-mgv2-57vj-99xc", "modified": "2021-12-03T14:39:45Z", "published": "2019-10-07T16:54:24Z", - "aliases": [ - - ], + "aliases": [], "summary": "Low severity vulnerability that affects eye.js", "details": "## Test breaking\n\n### Impact\nIn v1.2.0, tests are broken: all tests are always succeeding. If tests are looking for security vulnerabilities, these were compromised.\n\n### Patches\nUsers should upgrade to `v1.2.1`\n\n### Workarounds\nUsers who don't use eye.js for looking for vulnerabilities are safe. Upgrading will just fix some bugs.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [EyeJS](https://github.com/arguiot/EyeJS)\n* Email us at [arguiot@gmail.com](mailto:arguiot@gmail.com)\n\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -50,9 +46,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:46:09Z", diff --git a/advisories/unreviewed/2022/03/GHSA-4225-xq9f-4ww3/GHSA-4225-xq9f-4ww3.json b/advisories/unreviewed/2022/03/GHSA-4225-xq9f-4ww3/GHSA-4225-xq9f-4ww3.json index 76ea33b796e..9c62c37f6bb 100644 --- a/advisories/unreviewed/2022/03/GHSA-4225-xq9f-4ww3/GHSA-4225-xq9f-4ww3.json +++ b/advisories/unreviewed/2022/03/GHSA-4225-xq9f-4ww3/GHSA-4225-xq9f-4ww3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-4r2g-j5rc-7wqf/GHSA-4r2g-j5rc-7wqf.json b/advisories/unreviewed/2022/03/GHSA-4r2g-j5rc-7wqf/GHSA-4r2g-j5rc-7wqf.json index da4d4beee49..29383622e49 100644 --- a/advisories/unreviewed/2022/03/GHSA-4r2g-j5rc-7wqf/GHSA-4r2g-j5rc-7wqf.json +++ b/advisories/unreviewed/2022/03/GHSA-4r2g-j5rc-7wqf/GHSA-4r2g-j5rc-7wqf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-hh52-g3xv-6xxc/GHSA-hh52-g3xv-6xxc.json b/advisories/unreviewed/2022/03/GHSA-hh52-g3xv-6xxc/GHSA-hh52-g3xv-6xxc.json index c07a8f86b88..7d6b370db6f 100644 --- a/advisories/unreviewed/2022/03/GHSA-hh52-g3xv-6xxc/GHSA-hh52-g3xv-6xxc.json +++ b/advisories/unreviewed/2022/03/GHSA-hh52-g3xv-6xxc/GHSA-hh52-g3xv-6xxc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-q27q-h2jw-qq6c/GHSA-q27q-h2jw-qq6c.json b/advisories/unreviewed/2022/03/GHSA-q27q-h2jw-qq6c/GHSA-q27q-h2jw-qq6c.json index 0def898aa1f..a44ee22e397 100644 --- a/advisories/unreviewed/2022/03/GHSA-q27q-h2jw-qq6c/GHSA-q27q-h2jw-qq6c.json +++ b/advisories/unreviewed/2022/03/GHSA-q27q-h2jw-qq6c/GHSA-q27q-h2jw-qq6c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-232f-8fc5-f649/GHSA-232f-8fc5-f649.json b/advisories/unreviewed/2022/05/GHSA-232f-8fc5-f649/GHSA-232f-8fc5-f649.json index b593deb2ee7..8e7b413e8c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-232f-8fc5-f649/GHSA-232f-8fc5-f649.json +++ b/advisories/unreviewed/2022/05/GHSA-232f-8fc5-f649/GHSA-232f-8fc5-f649.json @@ -7,12 +7,8 @@ "CVE-2007-4112" ], "details": "Multiple SQL injection vulnerabilities in Advanced Webhost Billing System (AWBS) before 2.6.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be leveraged for XSS attacks that \"bypass AWBS's anti-XSS input validation.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2426-54cq-9f9c/GHSA-2426-54cq-9f9c.json b/advisories/unreviewed/2022/05/GHSA-2426-54cq-9f9c/GHSA-2426-54cq-9f9c.json index b9272768b97..04bf72e7829 100644 --- a/advisories/unreviewed/2022/05/GHSA-2426-54cq-9f9c/GHSA-2426-54cq-9f9c.json +++ b/advisories/unreviewed/2022/05/GHSA-2426-54cq-9f9c/GHSA-2426-54cq-9f9c.json @@ -7,12 +7,8 @@ "CVE-2007-4449" ], "details": "The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (application hang) via a command without an LF character, as demonstrated by a SAY command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-24fp-3vjc-ghg3/GHSA-24fp-3vjc-ghg3.json b/advisories/unreviewed/2022/05/GHSA-24fp-3vjc-ghg3/GHSA-24fp-3vjc-ghg3.json index 6f799b8f285..34dd999adb0 100644 --- a/advisories/unreviewed/2022/05/GHSA-24fp-3vjc-ghg3/GHSA-24fp-3vjc-ghg3.json +++ b/advisories/unreviewed/2022/05/GHSA-24fp-3vjc-ghg3/GHSA-24fp-3vjc-ghg3.json @@ -7,12 +7,8 @@ "CVE-2007-4480" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-24jh-rrw8-fr8w/GHSA-24jh-rrw8-fr8w.json b/advisories/unreviewed/2022/05/GHSA-24jh-rrw8-fr8w/GHSA-24jh-rrw8-fr8w.json index 03bb0d20657..ad90f10d472 100644 --- a/advisories/unreviewed/2022/05/GHSA-24jh-rrw8-fr8w/GHSA-24jh-rrw8-fr8w.json +++ b/advisories/unreviewed/2022/05/GHSA-24jh-rrw8-fr8w/GHSA-24jh-rrw8-fr8w.json @@ -7,12 +7,8 @@ "CVE-2007-4097" ], "details": "Tor before 0.1.2.15 sends \"destroy cells\" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2576-m45c-p3gg/GHSA-2576-m45c-p3gg.json b/advisories/unreviewed/2022/05/GHSA-2576-m45c-p3gg/GHSA-2576-m45c-p3gg.json index 65d245960db..4ddf2290659 100644 --- a/advisories/unreviewed/2022/05/GHSA-2576-m45c-p3gg/GHSA-2576-m45c-p3gg.json +++ b/advisories/unreviewed/2022/05/GHSA-2576-m45c-p3gg/GHSA-2576-m45c-p3gg.json @@ -7,12 +7,8 @@ "CVE-2007-4477" ], "details": "The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service (administration interface outage) via an HTTP request without a Host header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-257r-jw25-2cvh/GHSA-257r-jw25-2cvh.json b/advisories/unreviewed/2022/05/GHSA-257r-jw25-2cvh/GHSA-257r-jw25-2cvh.json index 6f6158546c2..f0ab166e546 100644 --- a/advisories/unreviewed/2022/05/GHSA-257r-jw25-2cvh/GHSA-257r-jw25-2cvh.json +++ b/advisories/unreviewed/2022/05/GHSA-257r-jw25-2cvh/GHSA-257r-jw25-2cvh.json @@ -7,12 +7,8 @@ "CVE-2007-4388" ], "details": "2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-265x-54h3-3643/GHSA-265x-54h3-3643.json b/advisories/unreviewed/2022/05/GHSA-265x-54h3-3643/GHSA-265x-54h3-3643.json index a841ed0203f..de53b758e44 100644 --- a/advisories/unreviewed/2022/05/GHSA-265x-54h3-3643/GHSA-265x-54h3-3643.json +++ b/advisories/unreviewed/2022/05/GHSA-265x-54h3-3643/GHSA-265x-54h3-3643.json @@ -7,12 +7,8 @@ "CVE-2007-4381" ], "details": "Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-26h8-5m63-2p8j/GHSA-26h8-5m63-2p8j.json b/advisories/unreviewed/2022/05/GHSA-26h8-5m63-2p8j/GHSA-26h8-5m63-2p8j.json index 61cab670f71..77fa42e10b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-26h8-5m63-2p8j/GHSA-26h8-5m63-2p8j.json +++ b/advisories/unreviewed/2022/05/GHSA-26h8-5m63-2p8j/GHSA-26h8-5m63-2p8j.json @@ -7,12 +7,8 @@ "CVE-2007-4419" ], "details": "Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27m8-q4mw-5g3g/GHSA-27m8-q4mw-5g3g.json b/advisories/unreviewed/2022/05/GHSA-27m8-q4mw-5g3g/GHSA-27m8-q4mw-5g3g.json index dedb904eac4..358283d9b8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-27m8-q4mw-5g3g/GHSA-27m8-q4mw-5g3g.json +++ b/advisories/unreviewed/2022/05/GHSA-27m8-q4mw-5g3g/GHSA-27m8-q4mw-5g3g.json @@ -7,12 +7,8 @@ "CVE-2007-3902" ], "details": "Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of \"Uninitialized Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29g7-g95p-w4ww/GHSA-29g7-g95p-w4ww.json b/advisories/unreviewed/2022/05/GHSA-29g7-g95p-w4ww/GHSA-29g7-g95p-w4ww.json index 228b35367a2..432e90a0dff 100644 --- a/advisories/unreviewed/2022/05/GHSA-29g7-g95p-w4ww/GHSA-29g7-g95p-w4ww.json +++ b/advisories/unreviewed/2022/05/GHSA-29g7-g95p-w4ww/GHSA-29g7-g95p-w4ww.json @@ -7,12 +7,8 @@ "CVE-2007-3838" ], "details": "Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 11-10-05-BETA-SF1:111005 and earlier allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the avatar parameter. NOTE: this may be related to the tracker program in the Janitor package. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29rp-63rm-r6fr/GHSA-29rp-63rm-r6fr.json b/advisories/unreviewed/2022/05/GHSA-29rp-63rm-r6fr/GHSA-29rp-63rm-r6fr.json index a2f8c151ec2..8fc2126d38e 100644 --- a/advisories/unreviewed/2022/05/GHSA-29rp-63rm-r6fr/GHSA-29rp-63rm-r6fr.json +++ b/advisories/unreviewed/2022/05/GHSA-29rp-63rm-r6fr/GHSA-29rp-63rm-r6fr.json @@ -7,12 +7,8 @@ "CVE-2007-4241" ], "details": "Buffer overflow in ldcconn in Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute arbitrary code via a long string to TCP port 17781.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2fgq-wq42-4xxq/GHSA-2fgq-wq42-4xxq.json b/advisories/unreviewed/2022/05/GHSA-2fgq-wq42-4xxq/GHSA-2fgq-wq42-4xxq.json index 4f850512ec4..1489b65a86f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fgq-wq42-4xxq/GHSA-2fgq-wq42-4xxq.json +++ b/advisories/unreviewed/2022/05/GHSA-2fgq-wq42-4xxq/GHSA-2fgq-wq42-4xxq.json @@ -7,12 +7,8 @@ "CVE-2007-4245" ], "details": "Cross-site scripting (XSS) vulnerability in Search.php in DiMeMa CONTENTdm (CDM) allows remote attackers to inject arbitrary web script or HTML via a search, probably related to the CISOBOX1 parameter to results.php in CDM 4.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2g4x-3mj5-gvj6/GHSA-2g4x-3mj5-gvj6.json b/advisories/unreviewed/2022/05/GHSA-2g4x-3mj5-gvj6/GHSA-2g4x-3mj5-gvj6.json index 0f221170f12..2f18c61b54e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2g4x-3mj5-gvj6/GHSA-2g4x-3mj5-gvj6.json +++ b/advisories/unreviewed/2022/05/GHSA-2g4x-3mj5-gvj6/GHSA-2g4x-3mj5-gvj6.json @@ -7,12 +7,8 @@ "CVE-2007-4472" ], "details": "Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gj7-v6cw-hpq6/GHSA-2gj7-v6cw-hpq6.json b/advisories/unreviewed/2022/05/GHSA-2gj7-v6cw-hpq6/GHSA-2gj7-v6cw-hpq6.json index 40fd8087928..b367e9571e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gj7-v6cw-hpq6/GHSA-2gj7-v6cw-hpq6.json +++ b/advisories/unreviewed/2022/05/GHSA-2gj7-v6cw-hpq6/GHSA-2gj7-v6cw-hpq6.json @@ -7,12 +7,8 @@ "CVE-2007-4022" ], "details": "Cross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers to inject arbitrary web script or HTML via the resname parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2hmm-6xx6-32fx/GHSA-2hmm-6xx6-32fx.json b/advisories/unreviewed/2022/05/GHSA-2hmm-6xx6-32fx/GHSA-2hmm-6xx6-32fx.json index 2630f1db479..2b52281da2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hmm-6xx6-32fx/GHSA-2hmm-6xx6-32fx.json +++ b/advisories/unreviewed/2022/05/GHSA-2hmm-6xx6-32fx/GHSA-2hmm-6xx6-32fx.json @@ -7,12 +7,8 @@ "CVE-2007-4080" ], "details": "Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the p_id parameter in a people_card action. NOTE: this might overlap CVE-2006-2564.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2hpp-qjhq-6j6p/GHSA-2hpp-qjhq-6j6p.json b/advisories/unreviewed/2022/05/GHSA-2hpp-qjhq-6j6p/GHSA-2hpp-qjhq-6j6p.json index 775f315762e..99f20a1b08a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hpp-qjhq-6j6p/GHSA-2hpp-qjhq-6j6p.json +++ b/advisories/unreviewed/2022/05/GHSA-2hpp-qjhq-6j6p/GHSA-2hpp-qjhq-6j6p.json @@ -7,12 +7,8 @@ "CVE-2007-4247" ], "details": "Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service (NULL dereference and persistent application crash) via a malformed ICS file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2m9g-2gcv-g547/GHSA-2m9g-2gcv-g547.json b/advisories/unreviewed/2022/05/GHSA-2m9g-2gcv-g547/GHSA-2m9g-2gcv-g547.json index 2586b79b996..71aef00e8be 100644 --- a/advisories/unreviewed/2022/05/GHSA-2m9g-2gcv-g547/GHSA-2m9g-2gcv-g547.json +++ b/advisories/unreviewed/2022/05/GHSA-2m9g-2gcv-g547/GHSA-2m9g-2gcv-g547.json @@ -7,12 +7,8 @@ "CVE-2007-4479" ], "details": "Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2mgm-7frw-wmjm/GHSA-2mgm-7frw-wmjm.json b/advisories/unreviewed/2022/05/GHSA-2mgm-7frw-wmjm/GHSA-2mgm-7frw-wmjm.json index 57c13233006..739ce601dd9 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mgm-7frw-wmjm/GHSA-2mgm-7frw-wmjm.json +++ b/advisories/unreviewed/2022/05/GHSA-2mgm-7frw-wmjm/GHSA-2mgm-7frw-wmjm.json @@ -7,12 +7,8 @@ "CVE-2007-4040" ], "details": "Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p26-9483-vh42/GHSA-2p26-9483-vh42.json b/advisories/unreviewed/2022/05/GHSA-2p26-9483-vh42/GHSA-2p26-9483-vh42.json index 85f9fbaf578..612db1d3d65 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p26-9483-vh42/GHSA-2p26-9483-vh42.json +++ b/advisories/unreviewed/2022/05/GHSA-2p26-9483-vh42/GHSA-2p26-9483-vh42.json @@ -7,12 +7,8 @@ "CVE-2007-3827" ], "details": "Mozilla Firefox allows for cookies to be set with a null domain (aka \"domainless cookies\"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2r4p-p25w-cvpv/GHSA-2r4p-p25w-cvpv.json b/advisories/unreviewed/2022/05/GHSA-2r4p-p25w-cvpv/GHSA-2r4p-p25w-cvpv.json index 834c7735448..b346b32822c 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r4p-p25w-cvpv/GHSA-2r4p-p25w-cvpv.json +++ b/advisories/unreviewed/2022/05/GHSA-2r4p-p25w-cvpv/GHSA-2r4p-p25w-cvpv.json @@ -7,12 +7,8 @@ "CVE-2007-4143" ], "details": "user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPal transactions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2rmp-82h5-59gg/GHSA-2rmp-82h5-59gg.json b/advisories/unreviewed/2022/05/GHSA-2rmp-82h5-59gg/GHSA-2rmp-82h5-59gg.json index 96f44a3bd8e..e8d887b7b42 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rmp-82h5-59gg/GHSA-2rmp-82h5-59gg.json +++ b/advisories/unreviewed/2022/05/GHSA-2rmp-82h5-59gg/GHSA-2rmp-82h5-59gg.json @@ -7,12 +7,8 @@ "CVE-2007-4493" ], "details": "eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2v44-f984-3xpw/GHSA-2v44-f984-3xpw.json b/advisories/unreviewed/2022/05/GHSA-2v44-f984-3xpw/GHSA-2v44-f984-3xpw.json index 70e1fd32be0..be04d657946 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v44-f984-3xpw/GHSA-2v44-f984-3xpw.json +++ b/advisories/unreviewed/2022/05/GHSA-2v44-f984-3xpw/GHSA-2v44-f984-3xpw.json @@ -7,12 +7,8 @@ "CVE-2007-4306" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the (1) unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php; the (4) session_max_rows or (5) pos parameter to (b) sql.php; the (6) username parameter to (c) server_privileges.php; or the (7) sql_query parameter to (d) main.php. NOTE: vector 5 might be a regression or incomplete fix for CVE-2006-6942.7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vh3-v4c9-q7c6/GHSA-2vh3-v4c9-q7c6.json b/advisories/unreviewed/2022/05/GHSA-2vh3-v4c9-q7c6/GHSA-2vh3-v4c9-q7c6.json index 3983de36ac1..09c82afc617 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vh3-v4c9-q7c6/GHSA-2vh3-v4c9-q7c6.json +++ b/advisories/unreviewed/2022/05/GHSA-2vh3-v4c9-q7c6/GHSA-2vh3-v4c9-q7c6.json @@ -7,12 +7,8 @@ "CVE-2007-4071" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) login parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vpq-rpjx-r98w/GHSA-2vpq-rpjx-r98w.json b/advisories/unreviewed/2022/05/GHSA-2vpq-rpjx-r98w/GHSA-2vpq-rpjx-r98w.json index 352c76d9c08..551f821bce2 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vpq-rpjx-r98w/GHSA-2vpq-rpjx-r98w.json +++ b/advisories/unreviewed/2022/05/GHSA-2vpq-rpjx-r98w/GHSA-2vpq-rpjx-r98w.json @@ -7,12 +7,8 @@ "CVE-2007-4514" ], "details": "Unspecified vulnerability in HP ProCurve Manager and HP ProCurve Manager Plus 2.3 and earlier allows remote attackers to obtain sensitive information from the ProCurve Manager server via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2vvq-r7r7-rh56/GHSA-2vvq-r7r7-rh56.json b/advisories/unreviewed/2022/05/GHSA-2vvq-r7r7-rh56/GHSA-2vvq-r7r7-rh56.json index 9d1ef154d54..bda4bf8d129 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vvq-r7r7-rh56/GHSA-2vvq-r7r7-rh56.json +++ b/advisories/unreviewed/2022/05/GHSA-2vvq-r7r7-rh56/GHSA-2vvq-r7r7-rh56.json @@ -7,12 +7,8 @@ "CVE-2007-3973" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, or the (2) search parameter or (3) theme cookie to (b) recherche.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2w57-2598-v3qf/GHSA-2w57-2598-v3qf.json b/advisories/unreviewed/2022/05/GHSA-2w57-2598-v3qf/GHSA-2w57-2598-v3qf.json index 0ff5b17f88e..9080f43e041 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w57-2598-v3qf/GHSA-2w57-2598-v3qf.json +++ b/advisories/unreviewed/2022/05/GHSA-2w57-2598-v3qf/GHSA-2w57-2598-v3qf.json @@ -7,12 +7,8 @@ "CVE-2007-4332" ], "details": "SQL injection vulnerability in article.php in Article Dashboard, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2w5g-v7f6-76vp/GHSA-2w5g-v7f6-76vp.json b/advisories/unreviewed/2022/05/GHSA-2w5g-v7f6-76vp/GHSA-2w5g-v7f6-76vp.json index 8c37304cabc..f963f557e29 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w5g-v7f6-76vp/GHSA-2w5g-v7f6-76vp.json +++ b/advisories/unreviewed/2022/05/GHSA-2w5g-v7f6-76vp/GHSA-2w5g-v7f6-76vp.json @@ -7,12 +7,8 @@ "CVE-2007-3831" ], "details": "PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3273-p572-3fr8/GHSA-3273-p572-3fr8.json b/advisories/unreviewed/2022/05/GHSA-3273-p572-3fr8/GHSA-3273-p572-3fr8.json index 3fa08b9c4e7..4d0aad6d4da 100644 --- a/advisories/unreviewed/2022/05/GHSA-3273-p572-3fr8/GHSA-3273-p572-3fr8.json +++ b/advisories/unreviewed/2022/05/GHSA-3273-p572-3fr8/GHSA-3273-p572-3fr8.json @@ -7,12 +7,8 @@ "CVE-2007-4379" ], "details": "Babo Violent 2 2.08.00 and earlier allows remote attackers to cause a denial of service (application crash) via (1) a value greater than 0x27 for the (a) 0xca, (b) 0xcb, (c) 0xcc, (d) 0xce, (e) 0xcf, or (f) 0xd0 data ID; (2) a nonexistent map name; or (3) a UDP packet that specifies a large data size.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3276-fvr9-5ggh/GHSA-3276-fvr9-5ggh.json b/advisories/unreviewed/2022/05/GHSA-3276-fvr9-5ggh/GHSA-3276-fvr9-5ggh.json index 4eeb7d4f03e..8482e17144b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3276-fvr9-5ggh/GHSA-3276-fvr9-5ggh.json +++ b/advisories/unreviewed/2022/05/GHSA-3276-fvr9-5ggh/GHSA-3276-fvr9-5ggh.json @@ -7,12 +7,8 @@ "CVE-2019-2123" ], "details": "In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a memory overwrite. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-32rj-jrg6-x2qj/GHSA-32rj-jrg6-x2qj.json b/advisories/unreviewed/2022/05/GHSA-32rj-jrg6-x2qj/GHSA-32rj-jrg6-x2qj.json index 6a4f969231b..cb56d50c5fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-32rj-jrg6-x2qj/GHSA-32rj-jrg6-x2qj.json +++ b/advisories/unreviewed/2022/05/GHSA-32rj-jrg6-x2qj/GHSA-32rj-jrg6-x2qj.json @@ -7,12 +7,8 @@ "CVE-2007-4078" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) r parameter to (a) forgot_uid.php, the (2) query or (3) sk parameter to (b) search_results.php, or (4) the pageId parameter to (c) website_page.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-34j4-qq2w-hcmw/GHSA-34j4-qq2w-hcmw.json b/advisories/unreviewed/2022/05/GHSA-34j4-qq2w-hcmw/GHSA-34j4-qq2w-hcmw.json index a282c88b5cb..f789f9f5775 100644 --- a/advisories/unreviewed/2022/05/GHSA-34j4-qq2w-hcmw/GHSA-34j4-qq2w-hcmw.json +++ b/advisories/unreviewed/2022/05/GHSA-34j4-qq2w-hcmw/GHSA-34j4-qq2w-hcmw.json @@ -7,12 +7,8 @@ "CVE-2007-4011" ], "details": "Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (traffic amplification or ARP storm) via a crafted unicast ARP request that (1) has a destination MAC address unknown to the Layer-2 infrastructure, aka CSCsj69233; or (2) occurs during Layer-3 roaming across IP subnets, aka CSCsj70841.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-359p-85h2-2793/GHSA-359p-85h2-2793.json b/advisories/unreviewed/2022/05/GHSA-359p-85h2-2793/GHSA-359p-85h2-2793.json index 9111628b1e9..8d78dc307a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-359p-85h2-2793/GHSA-359p-85h2-2793.json +++ b/advisories/unreviewed/2022/05/GHSA-359p-85h2-2793/GHSA-359p-85h2-2793.json @@ -7,12 +7,8 @@ "CVE-2007-4291" ], "details": "Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via (1) a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by (2) CSCsi60004 with Proxy Unregistration and (3) CSCsg70474; and a malformed Real-time Transport Protocol (RTP) packet, which causes a device crash, as identified by (4) CSCse68138, related to VOIP RTP Lib, and (5) CSCse05642, related to I/O memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-35rp-m2pf-5xvg/GHSA-35rp-m2pf-5xvg.json b/advisories/unreviewed/2022/05/GHSA-35rp-m2pf-5xvg/GHSA-35rp-m2pf-5xvg.json index b6076795b92..f3ff0aeabb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-35rp-m2pf-5xvg/GHSA-35rp-m2pf-5xvg.json +++ b/advisories/unreviewed/2022/05/GHSA-35rp-m2pf-5xvg/GHSA-35rp-m2pf-5xvg.json @@ -7,12 +7,8 @@ "CVE-2007-4087" ], "details": "AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category parameter to view_video.php, or (2) an XSS sequence in the UID parameter to (a) uprofile.php, (b) channel_detail.php, (c) uvideos.php, (d) groups_home.php, or (e) ufriends.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-36gf-p6rh-cj9x/GHSA-36gf-p6rh-cj9x.json b/advisories/unreviewed/2022/05/GHSA-36gf-p6rh-cj9x/GHSA-36gf-p6rh-cj9x.json index a4cf6bd1352..d59707605f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-36gf-p6rh-cj9x/GHSA-36gf-p6rh-cj9x.json +++ b/advisories/unreviewed/2022/05/GHSA-36gf-p6rh-cj9x/GHSA-36gf-p6rh-cj9x.json @@ -7,12 +7,8 @@ "CVE-2007-4121" ], "details": "Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the (1) EmailAdd (Username) and (2) Pass (password) parameters. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-36hc-97p3-9m65/GHSA-36hc-97p3-9m65.json b/advisories/unreviewed/2022/05/GHSA-36hc-97p3-9m65/GHSA-36hc-97p3-9m65.json index 5bc79720d3a..2fd57b949a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-36hc-97p3-9m65/GHSA-36hc-97p3-9m65.json +++ b/advisories/unreviewed/2022/05/GHSA-36hc-97p3-9m65/GHSA-36hc-97p3-9m65.json @@ -7,12 +7,8 @@ "CVE-2007-3989" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the (1) Adiniz and (2) Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-36wg-7fr8-q7vj/GHSA-36wg-7fr8-q7vj.json b/advisories/unreviewed/2022/05/GHSA-36wg-7fr8-q7vj/GHSA-36wg-7fr8-q7vj.json index 585a165c4c9..1d7ea7e222a 100644 --- a/advisories/unreviewed/2022/05/GHSA-36wg-7fr8-q7vj/GHSA-36wg-7fr8-q7vj.json +++ b/advisories/unreviewed/2022/05/GHSA-36wg-7fr8-q7vj/GHSA-36wg-7fr8-q7vj.json @@ -7,12 +7,8 @@ "CVE-2007-4192" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so, then this issue should not be included in CVE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3855-mpq3-qh22/GHSA-3855-mpq3-qh22.json b/advisories/unreviewed/2022/05/GHSA-3855-mpq3-qh22/GHSA-3855-mpq3-qh22.json index e2d8fcbf4d4..b92715d4964 100644 --- a/advisories/unreviewed/2022/05/GHSA-3855-mpq3-qh22/GHSA-3855-mpq3-qh22.json +++ b/advisories/unreviewed/2022/05/GHSA-3855-mpq3-qh22/GHSA-3855-mpq3-qh22.json @@ -7,12 +7,8 @@ "CVE-2007-4293" ], "details": "Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device crash) via (1) \"abnormal\" MGCP messages, aka CSCsd81407; and (2) a large facsimile packet, aka CSCej20505.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-386q-5vfw-9f3x/GHSA-386q-5vfw-9f3x.json b/advisories/unreviewed/2022/05/GHSA-386q-5vfw-9f3x/GHSA-386q-5vfw-9f3x.json index a7d43773f00..9ffb5557c23 100644 --- a/advisories/unreviewed/2022/05/GHSA-386q-5vfw-9f3x/GHSA-386q-5vfw-9f3x.json +++ b/advisories/unreviewed/2022/05/GHSA-386q-5vfw-9f3x/GHSA-386q-5vfw-9f3x.json @@ -7,12 +7,8 @@ "CVE-2007-4363" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal Content Construction Kit (CCK) before 4.7.x-1.6, and 5.x before 5.x-1.6 ,allow remote attackers to inject arbitrary web script or HTML via nodereference fields, when using (1) the plain formatter or (2) the autocomplete text field widget without Views.module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3966-q7xr-5r3x/GHSA-3966-q7xr-5r3x.json b/advisories/unreviewed/2022/05/GHSA-3966-q7xr-5r3x/GHSA-3966-q7xr-5r3x.json index 1c0ce327213..b3a43330894 100644 --- a/advisories/unreviewed/2022/05/GHSA-3966-q7xr-5r3x/GHSA-3966-q7xr-5r3x.json +++ b/advisories/unreviewed/2022/05/GHSA-3966-q7xr-5r3x/GHSA-3966-q7xr-5r3x.json @@ -7,12 +7,8 @@ "CVE-2007-4128" ], "details": "SQL injection vulnerability in index.php in the Firestorm Technologies GMaps (com_gmaps) 1.00 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mapId parameter in a viewmap action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3c5g-76vf-7h85/GHSA-3c5g-76vf-7h85.json b/advisories/unreviewed/2022/05/GHSA-3c5g-76vf-7h85/GHSA-3c5g-76vf-7h85.json index 6a92bab12a2..a3c9ff7a69d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3c5g-76vf-7h85/GHSA-3c5g-76vf-7h85.json +++ b/advisories/unreviewed/2022/05/GHSA-3c5g-76vf-7h85/GHSA-3c5g-76vf-7h85.json @@ -7,12 +7,8 @@ "CVE-2007-3823" ], "details": "The Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 allows remote attackers to cause a denial of service (daemon crash) by sending a crafted packet containing a long string to port 5151/udp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3c7q-4gwj-vc33/GHSA-3c7q-4gwj-vc33.json b/advisories/unreviewed/2022/05/GHSA-3c7q-4gwj-vc33/GHSA-3c7q-4gwj-vc33.json index ab8148a2308..a2286128637 100644 --- a/advisories/unreviewed/2022/05/GHSA-3c7q-4gwj-vc33/GHSA-3c7q-4gwj-vc33.json +++ b/advisories/unreviewed/2022/05/GHSA-3c7q-4gwj-vc33/GHSA-3c7q-4gwj-vc33.json @@ -7,12 +7,8 @@ "CVE-2007-4109" ], "details": "SQL injection vulnerability in sign_in.aspx in WebStore (Online Store Application Template) allows remote attackers to execute arbitrary SQL commands via the Password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3fh7-p98p-pg63/GHSA-3fh7-p98p-pg63.json b/advisories/unreviewed/2022/05/GHSA-3fh7-p98p-pg63/GHSA-3fh7-p98p-pg63.json index 21b9bda97c3..ef2b8e65832 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fh7-p98p-pg63/GHSA-3fh7-p98p-pg63.json +++ b/advisories/unreviewed/2022/05/GHSA-3fh7-p98p-pg63/GHSA-3fh7-p98p-pg63.json @@ -7,12 +7,8 @@ "CVE-2019-1010169" ], "details": "Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexer_getchar (jsiLexer.c:9). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3g83-whg6-2g8h/GHSA-3g83-whg6-2g8h.json b/advisories/unreviewed/2022/05/GHSA-3g83-whg6-2g8h/GHSA-3g83-whg6-2g8h.json index 70a2a525efd..6f42fb4e111 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g83-whg6-2g8h/GHSA-3g83-whg6-2g8h.json +++ b/advisories/unreviewed/2022/05/GHSA-3g83-whg6-2g8h/GHSA-3g83-whg6-2g8h.json @@ -7,12 +7,8 @@ "CVE-2007-3986" ], "details": "file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to bypass authentication via a name parameter that specifies the eventcache directory and a non-GIF file, which causes the $dontvalidate variable to be set to true. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3g8v-5492-gcv4/GHSA-3g8v-5492-gcv4.json b/advisories/unreviewed/2022/05/GHSA-3g8v-5492-gcv4/GHSA-3g8v-5492-gcv4.json index 811c8a734c1..65958a80d96 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g8v-5492-gcv4/GHSA-3g8v-5492-gcv4.json +++ b/advisories/unreviewed/2022/05/GHSA-3g8v-5492-gcv4/GHSA-3g8v-5492-gcv4.json @@ -7,12 +7,8 @@ "CVE-2007-4119" ], "details": "Multiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) Pass fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3gxp-2xhv-2q79/GHSA-3gxp-2xhv-2q79.json b/advisories/unreviewed/2022/05/GHSA-3gxp-2xhv-2q79/GHSA-3gxp-2xhv-2q79.json index 36a2ffb888d..9232e18a73f 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gxp-2xhv-2q79/GHSA-3gxp-2xhv-2q79.json +++ b/advisories/unreviewed/2022/05/GHSA-3gxp-2xhv-2q79/GHSA-3gxp-2xhv-2q79.json @@ -7,12 +7,8 @@ "CVE-2007-4008" ], "details": "Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagename parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3h62-xc6m-rwqv/GHSA-3h62-xc6m-rwqv.json b/advisories/unreviewed/2022/05/GHSA-3h62-xc6m-rwqv/GHSA-3h62-xc6m-rwqv.json index b97cc3bddc9..e259cf09522 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h62-xc6m-rwqv/GHSA-3h62-xc6m-rwqv.json +++ b/advisories/unreviewed/2022/05/GHSA-3h62-xc6m-rwqv/GHSA-3h62-xc6m-rwqv.json @@ -7,12 +7,8 @@ "CVE-2007-3901" ], "details": "Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3h7w-437r-53qp/GHSA-3h7w-437r-53qp.json b/advisories/unreviewed/2022/05/GHSA-3h7w-437r-53qp/GHSA-3h7w-437r-53qp.json index 5698d187733..cb175b0b182 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h7w-437r-53qp/GHSA-3h7w-437r-53qp.json +++ b/advisories/unreviewed/2022/05/GHSA-3h7w-437r-53qp/GHSA-3h7w-437r-53qp.json @@ -7,12 +7,8 @@ "CVE-2007-4082" ], "details": "Cross-site scripting (XSS) vulnerability in contact_author.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3jfw-7g32-85w8/GHSA-3jfw-7g32-85w8.json b/advisories/unreviewed/2022/05/GHSA-3jfw-7g32-85w8/GHSA-3jfw-7g32-85w8.json index 140bd6f41c2..4c3394031fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jfw-7g32-85w8/GHSA-3jfw-7g32-85w8.json +++ b/advisories/unreviewed/2022/05/GHSA-3jfw-7g32-85w8/GHSA-3jfw-7g32-85w8.json @@ -7,12 +7,8 @@ "CVE-2016-10909" ], "details": "The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3jjg-rmhv-pfxw/GHSA-3jjg-rmhv-pfxw.json b/advisories/unreviewed/2022/05/GHSA-3jjg-rmhv-pfxw/GHSA-3jjg-rmhv-pfxw.json index 30dddc99311..a901c0a84e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jjg-rmhv-pfxw/GHSA-3jjg-rmhv-pfxw.json +++ b/advisories/unreviewed/2022/05/GHSA-3jjg-rmhv-pfxw/GHSA-3jjg-rmhv-pfxw.json @@ -7,12 +7,8 @@ "CVE-2007-4101" ], "details": "Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3mg7-6jfw-73pw/GHSA-3mg7-6jfw-73pw.json b/advisories/unreviewed/2022/05/GHSA-3mg7-6jfw-73pw/GHSA-3mg7-6jfw-73pw.json index ac8e7a40606..d5462864419 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mg7-6jfw-73pw/GHSA-3mg7-6jfw-73pw.json +++ b/advisories/unreviewed/2022/05/GHSA-3mg7-6jfw-73pw/GHSA-3mg7-6jfw-73pw.json @@ -7,12 +7,8 @@ "CVE-2007-4372" ], "details": "Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3p5p-863p-q64f/GHSA-3p5p-863p-q64f.json b/advisories/unreviewed/2022/05/GHSA-3p5p-863p-q64f/GHSA-3p5p-863p-q64f.json index 5b580d5b23a..a4e48e60d18 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p5p-863p-q64f/GHSA-3p5p-863p-q64f.json +++ b/advisories/unreviewed/2022/05/GHSA-3p5p-863p-q64f/GHSA-3p5p-863p-q64f.json @@ -7,12 +7,8 @@ "CVE-2007-4280" ], "details": "The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3phw-vqfc-p5mc/GHSA-3phw-vqfc-p5mc.json b/advisories/unreviewed/2022/05/GHSA-3phw-vqfc-p5mc/GHSA-3phw-vqfc-p5mc.json index 919dbc410a2..a1fc1ae98da 100644 --- a/advisories/unreviewed/2022/05/GHSA-3phw-vqfc-p5mc/GHSA-3phw-vqfc-p5mc.json +++ b/advisories/unreviewed/2022/05/GHSA-3phw-vqfc-p5mc/GHSA-3phw-vqfc-p5mc.json @@ -7,12 +7,8 @@ "CVE-2007-4061" ], "details": "Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll. NOTE: this can be leveraged for code execution by writing to a Startup folder.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3q4q-4m2v-g7gj/GHSA-3q4q-4m2v-g7gj.json b/advisories/unreviewed/2022/05/GHSA-3q4q-4m2v-g7gj/GHSA-3q4q-4m2v-g7gj.json index b2d522e41ca..6d47fae64ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q4q-4m2v-g7gj/GHSA-3q4q-4m2v-g7gj.json +++ b/advisories/unreviewed/2022/05/GHSA-3q4q-4m2v-g7gj/GHSA-3q4q-4m2v-g7gj.json @@ -7,12 +7,8 @@ "CVE-2007-4094" ], "details": "PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the login_form parameter, a different vector than CVE-2006-3776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3qfc-fvg8-cwx9/GHSA-3qfc-fvg8-cwx9.json b/advisories/unreviewed/2022/05/GHSA-3qfc-fvg8-cwx9/GHSA-3qfc-fvg8-cwx9.json index 7eb553a7081..25f55393b2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qfc-fvg8-cwx9/GHSA-3qfc-fvg8-cwx9.json +++ b/advisories/unreviewed/2022/05/GHSA-3qfc-fvg8-cwx9/GHSA-3qfc-fvg8-cwx9.json @@ -7,12 +7,8 @@ "CVE-2007-4069" ], "details": "SQL injection vulnerability in show_cat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3r52-vc36-mfv6/GHSA-3r52-vc36-mfv6.json b/advisories/unreviewed/2022/05/GHSA-3r52-vc36-mfv6/GHSA-3r52-vc36-mfv6.json index 54c345fb7c6..fffbc90c1ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r52-vc36-mfv6/GHSA-3r52-vc36-mfv6.json +++ b/advisories/unreviewed/2022/05/GHSA-3r52-vc36-mfv6/GHSA-3r52-vc36-mfv6.json @@ -7,12 +7,8 @@ "CVE-2007-4265" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) projectIssueId parameter in EditProjectIssue.do, the (2) projectId parameter in ProjectSelected.do, the (3) folderId parameter in ProjectDocuments.do and the (4) sortField parameter in ProjectIssues.do.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3r6g-vgfw-328v/GHSA-3r6g-vgfw-328v.json b/advisories/unreviewed/2022/05/GHSA-3r6g-vgfw-328v/GHSA-3r6g-vgfw-328v.json index 068d2d98164..f40680d0f62 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r6g-vgfw-328v/GHSA-3r6g-vgfw-328v.json +++ b/advisories/unreviewed/2022/05/GHSA-3r6g-vgfw-328v/GHSA-3r6g-vgfw-328v.json @@ -7,12 +7,8 @@ "CVE-2007-4038" ], "details": "Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are inserted into the command line that is created when invoking Thunderbird.exe, a similar issue to CVE-2007-3670.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r73-959g-g38r/GHSA-3r73-959g-g38r.json b/advisories/unreviewed/2022/05/GHSA-3r73-959g-g38r/GHSA-3r73-959g-g38r.json index a3782be0134..064dfafdeef 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r73-959g-g38r/GHSA-3r73-959g-g38r.json +++ b/advisories/unreviewed/2022/05/GHSA-3r73-959g-g38r/GHSA-3r73-959g-g38r.json @@ -7,12 +7,8 @@ "CVE-2007-4056" ], "details": "SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. NOTE: the original report indicated that this was the \"photo\" SourceForge project (aka Maan Bsat Photo Collection), but that was incorrect.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3rpr-jfwv-ch87/GHSA-3rpr-jfwv-ch87.json b/advisories/unreviewed/2022/05/GHSA-3rpr-jfwv-ch87/GHSA-3rpr-jfwv-ch87.json index 2236eefb1f6..a4decf53dff 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rpr-jfwv-ch87/GHSA-3rpr-jfwv-ch87.json +++ b/advisories/unreviewed/2022/05/GHSA-3rpr-jfwv-ch87/GHSA-3rpr-jfwv-ch87.json @@ -7,12 +7,8 @@ "CVE-2007-4667" ], "details": "Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3v7g-82fr-x624/GHSA-3v7g-82fr-x624.json b/advisories/unreviewed/2022/05/GHSA-3v7g-82fr-x624/GHSA-3v7g-82fr-x624.json index cf7a4cae084..f2a5c6509f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3v7g-82fr-x624/GHSA-3v7g-82fr-x624.json +++ b/advisories/unreviewed/2022/05/GHSA-3v7g-82fr-x624/GHSA-3v7g-82fr-x624.json @@ -7,12 +7,8 @@ "CVE-2007-4281" ], "details": "Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3vw3-g8hp-j327/GHSA-3vw3-g8hp-j327.json b/advisories/unreviewed/2022/05/GHSA-3vw3-g8hp-j327/GHSA-3vw3-g8hp-j327.json index 2c02da56564..631fd458158 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vw3-g8hp-j327/GHSA-3vw3-g8hp-j327.json +++ b/advisories/unreviewed/2022/05/GHSA-3vw3-g8hp-j327/GHSA-3vw3-g8hp-j327.json @@ -7,12 +7,8 @@ "CVE-2007-4305" ], "details": "Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3wmm-94p8-9h9p/GHSA-3wmm-94p8-9h9p.json b/advisories/unreviewed/2022/05/GHSA-3wmm-94p8-9h9p/GHSA-3wmm-94p8-9h9p.json index 0069370ec16..cddfee4fdfa 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wmm-94p8-9h9p/GHSA-3wmm-94p8-9h9p.json +++ b/advisories/unreviewed/2022/05/GHSA-3wmm-94p8-9h9p/GHSA-3wmm-94p8-9h9p.json @@ -7,12 +7,8 @@ "CVE-2007-4665" ], "details": "Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xjc-mrjc-p932/GHSA-3xjc-mrjc-p932.json b/advisories/unreviewed/2022/05/GHSA-3xjc-mrjc-p932/GHSA-3xjc-mrjc-p932.json index f85605aae90..fe236904b92 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xjc-mrjc-p932/GHSA-3xjc-mrjc-p932.json +++ b/advisories/unreviewed/2022/05/GHSA-3xjc-mrjc-p932/GHSA-3xjc-mrjc-p932.json @@ -7,12 +7,8 @@ "CVE-2007-4377" ], "details": "Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3xwc-q38w-355f/GHSA-3xwc-q38w-355f.json b/advisories/unreviewed/2022/05/GHSA-3xwc-q38w-355f/GHSA-3xwc-q38w-355f.json index c7e4a00923a..839039ef5b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xwc-q38w-355f/GHSA-3xwc-q38w-355f.json +++ b/advisories/unreviewed/2022/05/GHSA-3xwc-q38w-355f/GHSA-3xwc-q38w-355f.json @@ -7,12 +7,8 @@ "CVE-2007-4051" ], "details": "Heap-based buffer overflow in the FindFiles function in UltraDefrag 1.0.3 allows local users to gain privileges via a file with a long pathname. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-423v-6jmc-4fwg/GHSA-423v-6jmc-4fwg.json b/advisories/unreviewed/2022/05/GHSA-423v-6jmc-4fwg/GHSA-423v-6jmc-4fwg.json index 7b55ddf7f44..60333edcc30 100644 --- a/advisories/unreviewed/2022/05/GHSA-423v-6jmc-4fwg/GHSA-423v-6jmc-4fwg.json +++ b/advisories/unreviewed/2022/05/GHSA-423v-6jmc-4fwg/GHSA-423v-6jmc-4fwg.json @@ -7,12 +7,8 @@ "CVE-2007-4337" ], "details": "Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbitrary code via long (1) Location and (2) Server HTTP headers, a different vulnerability than CVE-2006-3124.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4332-wp3g-6j7g/GHSA-4332-wp3g-6j7g.json b/advisories/unreviewed/2022/05/GHSA-4332-wp3g-6j7g/GHSA-4332-wp3g-6j7g.json index 6d995c03463..9a324faf7d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4332-wp3g-6j7g/GHSA-4332-wp3g-6j7g.json +++ b/advisories/unreviewed/2022/05/GHSA-4332-wp3g-6j7g/GHSA-4332-wp3g-6j7g.json @@ -7,12 +7,8 @@ "CVE-2007-3992" ], "details": "SQL injection vulnerability in vir_login.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the Username parameter is covered by CVE-2006-6029. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43c7-2hjm-369m/GHSA-43c7-2hjm-369m.json b/advisories/unreviewed/2022/05/GHSA-43c7-2hjm-369m/GHSA-43c7-2hjm-369m.json index 60ccb5fba5f..650b8eb6760 100644 --- a/advisories/unreviewed/2022/05/GHSA-43c7-2hjm-369m/GHSA-43c7-2hjm-369m.json +++ b/advisories/unreviewed/2022/05/GHSA-43c7-2hjm-369m/GHSA-43c7-2hjm-369m.json @@ -7,12 +7,8 @@ "CVE-2007-4333" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the (1) f_emailaddress, (2) f_reemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43mj-gp6m-66mv/GHSA-43mj-gp6m-66mv.json b/advisories/unreviewed/2022/05/GHSA-43mj-gp6m-66mv/GHSA-43mj-gp6m-66mv.json index 6e6de8dd1ec..3acee6e4b89 100644 --- a/advisories/unreviewed/2022/05/GHSA-43mj-gp6m-66mv/GHSA-43mj-gp6m-66mv.json +++ b/advisories/unreviewed/2022/05/GHSA-43mj-gp6m-66mv/GHSA-43mj-gp6m-66mv.json @@ -7,12 +7,8 @@ "CVE-2007-4451" ], "details": "The server in Toribash 2.71 and earlier on Windows allows remote attackers to cause a denial of service (continuous beep and server hang) via certain commands that contain many 0x07 or other invalid characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43w6-q9mv-9cwf/GHSA-43w6-q9mv-9cwf.json b/advisories/unreviewed/2022/05/GHSA-43w6-q9mv-9cwf/GHSA-43w6-q9mv-9cwf.json index 35d1cc19dd2..c60ed3630c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-43w6-q9mv-9cwf/GHSA-43w6-q9mv-9cwf.json +++ b/advisories/unreviewed/2022/05/GHSA-43w6-q9mv-9cwf/GHSA-43w6-q9mv-9cwf.json @@ -7,12 +7,8 @@ "CVE-2007-4131" ], "details": "Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -172,9 +168,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-447c-2gc5-77jh/GHSA-447c-2gc5-77jh.json b/advisories/unreviewed/2022/05/GHSA-447c-2gc5-77jh/GHSA-447c-2gc5-77jh.json index dd283e9d149..19544d95702 100644 --- a/advisories/unreviewed/2022/05/GHSA-447c-2gc5-77jh/GHSA-447c-2gc5-77jh.json +++ b/advisories/unreviewed/2022/05/GHSA-447c-2gc5-77jh/GHSA-447c-2gc5-77jh.json @@ -7,12 +7,8 @@ "CVE-2007-3910" ], "details": "Cross-site scripting (XSS) vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-44m2-r3xf-24f5/GHSA-44m2-r3xf-24f5.json b/advisories/unreviewed/2022/05/GHSA-44m2-r3xf-24f5/GHSA-44m2-r3xf-24f5.json index 521b21fcf99..660d662b35c 100644 --- a/advisories/unreviewed/2022/05/GHSA-44m2-r3xf-24f5/GHSA-44m2-r3xf-24f5.json +++ b/advisories/unreviewed/2022/05/GHSA-44m2-r3xf-24f5/GHSA-44m2-r3xf-24f5.json @@ -7,12 +7,8 @@ "CVE-2007-4334" ], "details": "Cross-site scripting (XSS) vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-454x-wfc9-v689/GHSA-454x-wfc9-v689.json b/advisories/unreviewed/2022/05/GHSA-454x-wfc9-v689/GHSA-454x-wfc9-v689.json index e4e8062a06a..e3c37500447 100644 --- a/advisories/unreviewed/2022/05/GHSA-454x-wfc9-v689/GHSA-454x-wfc9-v689.json +++ b/advisories/unreviewed/2022/05/GHSA-454x-wfc9-v689/GHSA-454x-wfc9-v689.json @@ -7,12 +7,8 @@ "CVE-2007-3890" ], "details": "Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-46f6-qh9q-h493/GHSA-46f6-qh9q-h493.json b/advisories/unreviewed/2022/05/GHSA-46f6-qh9q-h493/GHSA-46f6-qh9q-h493.json index cbca05059c9..c579aad368d 100644 --- a/advisories/unreviewed/2022/05/GHSA-46f6-qh9q-h493/GHSA-46f6-qh9q-h493.json +++ b/advisories/unreviewed/2022/05/GHSA-46f6-qh9q-h493/GHSA-46f6-qh9q-h493.json @@ -7,12 +7,8 @@ "CVE-2007-4509" ], "details": "SQL injection vulnerability in index.php in the EventList component (com_eventlist) 0.8 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the did parameter in a details action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-46fx-rm5j-9627/GHSA-46fx-rm5j-9627.json b/advisories/unreviewed/2022/05/GHSA-46fx-rm5j-9627/GHSA-46fx-rm5j-9627.json index cb780bacf2e..51636fce842 100644 --- a/advisories/unreviewed/2022/05/GHSA-46fx-rm5j-9627/GHSA-46fx-rm5j-9627.json +++ b/advisories/unreviewed/2022/05/GHSA-46fx-rm5j-9627/GHSA-46fx-rm5j-9627.json @@ -7,12 +7,8 @@ "CVE-2007-4446" ], "details": "Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-46q9-h97r-xfjw/GHSA-46q9-h97r-xfjw.json b/advisories/unreviewed/2022/05/GHSA-46q9-h97r-xfjw/GHSA-46q9-h97r-xfjw.json index d593ce926b9..6638166828f 100644 --- a/advisories/unreviewed/2022/05/GHSA-46q9-h97r-xfjw/GHSA-46q9-h97r-xfjw.json +++ b/advisories/unreviewed/2022/05/GHSA-46q9-h97r-xfjw/GHSA-46q9-h97r-xfjw.json @@ -7,12 +7,8 @@ "CVE-2007-4155" ], "details": "Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the (1) CreateProcess or (2) CreateProcessEx method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4754-4495-xmhp/GHSA-4754-4495-xmhp.json b/advisories/unreviewed/2022/05/GHSA-4754-4495-xmhp/GHSA-4754-4495-xmhp.json index 9235710eec9..7d3d4070ba9 100644 --- a/advisories/unreviewed/2022/05/GHSA-4754-4495-xmhp/GHSA-4754-4495-xmhp.json +++ b/advisories/unreviewed/2022/05/GHSA-4754-4495-xmhp/GHSA-4754-4495-xmhp.json @@ -7,12 +7,8 @@ "CVE-2007-4123" ], "details": "The Groupmax Scheduler_Facilities management tool in Hitachi Groupmax Groupware Server 07-00-/F through 07-32-/A before 20070731 does not properly manage schedule server configuration data, which might allow attackers to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-47p6-9mfm-8c7j/GHSA-47p6-9mfm-8c7j.json b/advisories/unreviewed/2022/05/GHSA-47p6-9mfm-8c7j/GHSA-47p6-9mfm-8c7j.json index 62aaa24c611..85b9c201a7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-47p6-9mfm-8c7j/GHSA-47p6-9mfm-8c7j.json +++ b/advisories/unreviewed/2022/05/GHSA-47p6-9mfm-8c7j/GHSA-47p6-9mfm-8c7j.json @@ -7,12 +7,8 @@ "CVE-2007-3854" ], "details": "Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-47vf-v97x-8r38/GHSA-47vf-v97x-8r38.json b/advisories/unreviewed/2022/05/GHSA-47vf-v97x-8r38/GHSA-47vf-v97x-8r38.json index 855ef958d0f..0754a80e703 100644 --- a/advisories/unreviewed/2022/05/GHSA-47vf-v97x-8r38/GHSA-47vf-v97x-8r38.json +++ b/advisories/unreviewed/2022/05/GHSA-47vf-v97x-8r38/GHSA-47vf-v97x-8r38.json @@ -7,12 +7,8 @@ "CVE-2007-4209" ], "details": "SQL injection vulnerability in Recherche.php in Aceboard forum allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4868-5x3w-95q3/GHSA-4868-5x3w-95q3.json b/advisories/unreviewed/2022/05/GHSA-4868-5x3w-95q3/GHSA-4868-5x3w-95q3.json index af969ce6a90..8edbfa77963 100644 --- a/advisories/unreviewed/2022/05/GHSA-4868-5x3w-95q3/GHSA-4868-5x3w-95q3.json +++ b/advisories/unreviewed/2022/05/GHSA-4868-5x3w-95q3/GHSA-4868-5x3w-95q3.json @@ -7,12 +7,8 @@ "CVE-2007-4339" ], "details": "Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter in (1) poll.php and (2) pollarchive.php. NOTE: a reliable third party states that this issue is resultant from a variable extraction error in functions.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4883-cvpp-v36g/GHSA-4883-cvpp-v36g.json b/advisories/unreviewed/2022/05/GHSA-4883-cvpp-v36g/GHSA-4883-cvpp-v36g.json index 5f22e262370..a56eb3625c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-4883-cvpp-v36g/GHSA-4883-cvpp-v36g.json +++ b/advisories/unreviewed/2022/05/GHSA-4883-cvpp-v36g/GHSA-4883-cvpp-v36g.json @@ -7,12 +7,8 @@ "CVE-2007-4188" ], "details": "Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49pf-qpc2-r5hr/GHSA-49pf-qpc2-r5hr.json b/advisories/unreviewed/2022/05/GHSA-49pf-qpc2-r5hr/GHSA-49pf-qpc2-r5hr.json index 050f2cf1ef0..c5f4229e6b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-49pf-qpc2-r5hr/GHSA-49pf-qpc2-r5hr.json +++ b/advisories/unreviewed/2022/05/GHSA-49pf-qpc2-r5hr/GHSA-49pf-qpc2-r5hr.json @@ -7,12 +7,8 @@ "CVE-2007-4433" ], "details": "Cross-site scripting (XSS) vulnerability in textfilesearch.aspx in the Text File Search ASP.NET edition allows remote attackers to inject arbitrary web script or HTML via the search field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-49rq-rc9q-m764/GHSA-49rq-rc9q-m764.json b/advisories/unreviewed/2022/05/GHSA-49rq-rc9q-m764/GHSA-49rq-rc9q-m764.json index 79697a0b0cb..e72ccd6cf67 100644 --- a/advisories/unreviewed/2022/05/GHSA-49rq-rc9q-m764/GHSA-49rq-rc9q-m764.json +++ b/advisories/unreviewed/2022/05/GHSA-49rq-rc9q-m764/GHSA-49rq-rc9q-m764.json @@ -7,12 +7,8 @@ "CVE-2007-3833" ], "details": "The AOL Instant Messenger (AIM) protocol handler in Cerulean Studios Trillian allows remote attackers to create files with arbitrary contents via certain aim: URIs, as demonstrated by a URI that begins with the \"aim: &c:\\\" substring and contains a full pathname in the ini field. NOTE: this can be leveraged for code execution by writing to a Startup folder.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4cx2-4xxw-gpfv/GHSA-4cx2-4xxw-gpfv.json b/advisories/unreviewed/2022/05/GHSA-4cx2-4xxw-gpfv/GHSA-4cx2-4xxw-gpfv.json index 0766f5cd278..8358d72332f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4cx2-4xxw-gpfv/GHSA-4cx2-4xxw-gpfv.json +++ b/advisories/unreviewed/2022/05/GHSA-4cx2-4xxw-gpfv/GHSA-4cx2-4xxw-gpfv.json @@ -7,12 +7,8 @@ "CVE-2019-15848" ], "details": "JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4fwj-v7f6-pq59/GHSA-4fwj-v7f6-pq59.json b/advisories/unreviewed/2022/05/GHSA-4fwj-v7f6-pq59/GHSA-4fwj-v7f6-pq59.json index 2bfa42cbe4c..15df9409a59 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fwj-v7f6-pq59/GHSA-4fwj-v7f6-pq59.json +++ b/advisories/unreviewed/2022/05/GHSA-4fwj-v7f6-pq59/GHSA-4fwj-v7f6-pq59.json @@ -7,12 +7,8 @@ "CVE-2007-4187" ], "details": "Multiple eval injection vulnerabilities in the com_search component in Joomla! 1.5 beta before RC1 (aka Mapya) allow remote attackers to execute arbitrary PHP code via PHP sequences in the searchword parameter, related to default_results.php in (1) components/com_search/views/search/tmpl/ and (2) templates/beez/html/com_search/search/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jfr-659g-5hvr/GHSA-4jfr-659g-5hvr.json b/advisories/unreviewed/2022/05/GHSA-4jfr-659g-5hvr/GHSA-4jfr-659g-5hvr.json index 9dc057445ab..6a7cd18a32e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jfr-659g-5hvr/GHSA-4jfr-659g-5hvr.json +++ b/advisories/unreviewed/2022/05/GHSA-4jfr-659g-5hvr/GHSA-4jfr-659g-5hvr.json @@ -7,12 +7,8 @@ "CVE-2007-4171" ], "details": "SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4mg5-92j9-x9r9/GHSA-4mg5-92j9-x9r9.json b/advisories/unreviewed/2022/05/GHSA-4mg5-92j9-x9r9/GHSA-4mg5-92j9-x9r9.json index 303eda79926..fe49c992369 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mg5-92j9-x9r9/GHSA-4mg5-92j9-x9r9.json +++ b/advisories/unreviewed/2022/05/GHSA-4mg5-92j9-x9r9/GHSA-4mg5-92j9-x9r9.json @@ -7,12 +7,8 @@ "CVE-2007-4203" ], "details": "Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4mmf-p75m-47f5/GHSA-4mmf-p75m-47f5.json b/advisories/unreviewed/2022/05/GHSA-4mmf-p75m-47f5/GHSA-4mmf-p75m-47f5.json index ef68262b269..6603e05ccb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mmf-p75m-47f5/GHSA-4mmf-p75m-47f5.json +++ b/advisories/unreviewed/2022/05/GHSA-4mmf-p75m-47f5/GHSA-4mmf-p75m-47f5.json @@ -7,12 +7,8 @@ "CVE-2007-4076" ], "details": "Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the (1) product_id or (2) cat_id parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4mp4-68c9-472p/GHSA-4mp4-68c9-472p.json b/advisories/unreviewed/2022/05/GHSA-4mp4-68c9-472p/GHSA-4mp4-68c9-472p.json index 737a250a784..cc43ffa438d 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mp4-68c9-472p/GHSA-4mp4-68c9-472p.json +++ b/advisories/unreviewed/2022/05/GHSA-4mp4-68c9-472p/GHSA-4mp4-68c9-472p.json @@ -7,12 +7,8 @@ "CVE-2007-4498" ], "details": "The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service (blocked call reception) via a certain SIP INVITE message followed by a certain \"SIP/2.0 183 Session Progress\" message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4p46-xc95-5wqj/GHSA-4p46-xc95-5wqj.json b/advisories/unreviewed/2022/05/GHSA-4p46-xc95-5wqj/GHSA-4p46-xc95-5wqj.json index 8bbd67e4fb8..18e75505f93 100644 --- a/advisories/unreviewed/2022/05/GHSA-4p46-xc95-5wqj/GHSA-4p46-xc95-5wqj.json +++ b/advisories/unreviewed/2022/05/GHSA-4p46-xc95-5wqj/GHSA-4p46-xc95-5wqj.json @@ -7,12 +7,8 @@ "CVE-2007-4250" ], "details": "The isChecked function in Toolbar.DLL in Advanced Searchbar before 3.33 allows remote attackers to cause a denial of service (NULL dereference and browser crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4pc6-hw3m-wcr4/GHSA-4pc6-hw3m-wcr4.json b/advisories/unreviewed/2022/05/GHSA-4pc6-hw3m-wcr4/GHSA-4pc6-hw3m-wcr4.json index b7d070050db..d0d61d65282 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pc6-hw3m-wcr4/GHSA-4pc6-hw3m-wcr4.json +++ b/advisories/unreviewed/2022/05/GHSA-4pc6-hw3m-wcr4/GHSA-4pc6-hw3m-wcr4.json @@ -7,12 +7,8 @@ "CVE-2007-4440" ], "details": "Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4ph9-c9g2-q29q/GHSA-4ph9-c9g2-q29q.json b/advisories/unreviewed/2022/05/GHSA-4ph9-c9g2-q29q/GHSA-4ph9-c9g2-q29q.json index 73066735b5d..3acd383e6a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4ph9-c9g2-q29q/GHSA-4ph9-c9g2-q29q.json +++ b/advisories/unreviewed/2022/05/GHSA-4ph9-c9g2-q29q/GHSA-4ph9-c9g2-q29q.json @@ -7,12 +7,8 @@ "CVE-2007-4092" ], "details": "Directory traversal vulnerability in index.php in iFoto 1.0.1 and earlier allows remote attackers to list arbitrary directories, and possibly download arbitrary photos, via a .. (dot dot) in the dir parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4pr8-585w-4c5c/GHSA-4pr8-585w-4c5c.json b/advisories/unreviewed/2022/05/GHSA-4pr8-585w-4c5c/GHSA-4pr8-585w-4c5c.json index f19d0c3a85d..9c16ca74244 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pr8-585w-4c5c/GHSA-4pr8-585w-4c5c.json +++ b/advisories/unreviewed/2022/05/GHSA-4pr8-585w-4c5c/GHSA-4pr8-585w-4c5c.json @@ -7,12 +7,8 @@ "CVE-2007-4175" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenRat CMS 0.8-beta1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subaction and (2) action parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4qw4-h59m-w45h/GHSA-4qw4-h59m-w45h.json b/advisories/unreviewed/2022/05/GHSA-4qw4-h59m-w45h/GHSA-4qw4-h59m-w45h.json index 4eaf8cef7ab..cdaf7d0b308 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qw4-h59m-w45h/GHSA-4qw4-h59m-w45h.json +++ b/advisories/unreviewed/2022/05/GHSA-4qw4-h59m-w45h/GHSA-4qw4-h59m-w45h.json @@ -7,12 +7,8 @@ "CVE-2007-3936" ], "details": "Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4wmj-ffw4-4q8h/GHSA-4wmj-ffw4-4q8h.json b/advisories/unreviewed/2022/05/GHSA-4wmj-ffw4-4q8h/GHSA-4wmj-ffw4-4q8h.json index 789acfbf140..f3c829afb38 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wmj-ffw4-4q8h/GHSA-4wmj-ffw4-4q8h.json +++ b/advisories/unreviewed/2022/05/GHSA-4wmj-ffw4-4q8h/GHSA-4wmj-ffw4-4q8h.json @@ -7,12 +7,8 @@ "CVE-2007-4393" ], "details": "The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4x48-mfm4-j87r/GHSA-4x48-mfm4-j87r.json b/advisories/unreviewed/2022/05/GHSA-4x48-mfm4-j87r/GHSA-4x48-mfm4-j87r.json index 9d642ed5e7b..4f5b7098621 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x48-mfm4-j87r/GHSA-4x48-mfm4-j87r.json +++ b/advisories/unreviewed/2022/05/GHSA-4x48-mfm4-j87r/GHSA-4x48-mfm4-j87r.json @@ -7,12 +7,8 @@ "CVE-2007-3871" ], "details": "Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4x9v-v5pj-g8rv/GHSA-4x9v-v5pj-g8rv.json b/advisories/unreviewed/2022/05/GHSA-4x9v-v5pj-g8rv/GHSA-4x9v-v5pj-g8rv.json index 77247371a0e..872d27d2639 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x9v-v5pj-g8rv/GHSA-4x9v-v5pj-g8rv.json +++ b/advisories/unreviewed/2022/05/GHSA-4x9v-v5pj-g8rv/GHSA-4x9v-v5pj-g8rv.json @@ -7,12 +7,8 @@ "CVE-2007-4483" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4xq7-8qg7-4xjf/GHSA-4xq7-8qg7-4xjf.json b/advisories/unreviewed/2022/05/GHSA-4xq7-8qg7-4xjf/GHSA-4xq7-8qg7-4xjf.json index 9ef75e83c09..2b75c662c8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xq7-8qg7-4xjf/GHSA-4xq7-8qg7-4xjf.json +++ b/advisories/unreviewed/2022/05/GHSA-4xq7-8qg7-4xjf/GHSA-4xq7-8qg7-4xjf.json @@ -7,12 +7,8 @@ "CVE-2007-3795" ], "details": "Unspecified vulnerability in Hitachi TP1/Server Base before 03-05-/P, 05-00-x before 05-00-/G, 05-01-x before 05-01-/A, and 05-02-x before 05-02-/C on HP-UX 11.0 through 11i v3 allows attackers to cause a denial of service by sending certain data to a port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4xx2-mrcw-w2xx/GHSA-4xx2-mrcw-w2xx.json b/advisories/unreviewed/2022/05/GHSA-4xx2-mrcw-w2xx/GHSA-4xx2-mrcw-w2xx.json index 9c3cb948843..8d41825739b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xx2-mrcw-w2xx/GHSA-4xx2-mrcw-w2xx.json +++ b/advisories/unreviewed/2022/05/GHSA-4xx2-mrcw-w2xx/GHSA-4xx2-mrcw-w2xx.json @@ -7,12 +7,8 @@ "CVE-2007-4286" ], "details": "Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a crafted NHRP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-542j-f8v7-ww99/GHSA-542j-f8v7-ww99.json b/advisories/unreviewed/2022/05/GHSA-542j-f8v7-ww99/GHSA-542j-f8v7-ww99.json index e3e99278441..d4759cb06a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-542j-f8v7-ww99/GHSA-542j-f8v7-ww99.json +++ b/advisories/unreviewed/2022/05/GHSA-542j-f8v7-ww99/GHSA-542j-f8v7-ww99.json @@ -7,12 +7,8 @@ "CVE-2007-4271" ], "details": "Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to \"/tmp/\" and used as a log file. NOTE: this issue might be related to symlink following.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5456-4qxw-qgvg/GHSA-5456-4qxw-qgvg.json b/advisories/unreviewed/2022/05/GHSA-5456-4qxw-qgvg/GHSA-5456-4qxw-qgvg.json index f135d007d6a..4e890a8ceb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5456-4qxw-qgvg/GHSA-5456-4qxw-qgvg.json +++ b/advisories/unreviewed/2022/05/GHSA-5456-4qxw-qgvg/GHSA-5456-4qxw-qgvg.json @@ -7,12 +7,8 @@ "CVE-2007-4226" ], "details": "Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.2.8) allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. (dot dot) in a pathname. NOTE: this can be leveraged for administrative access by overwriting /etc/shadow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5457-v8jm-4679/GHSA-5457-v8jm-4679.json b/advisories/unreviewed/2022/05/GHSA-5457-v8jm-4679/GHSA-5457-v8jm-4679.json index 643069902f1..2cb643bfbc2 100644 --- a/advisories/unreviewed/2022/05/GHSA-5457-v8jm-4679/GHSA-5457-v8jm-4679.json +++ b/advisories/unreviewed/2022/05/GHSA-5457-v8jm-4679/GHSA-5457-v8jm-4679.json @@ -7,12 +7,8 @@ "CVE-2007-4042" ], "details": "Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5497-w594-j5r2/GHSA-5497-w594-j5r2.json b/advisories/unreviewed/2022/05/GHSA-5497-w594-j5r2/GHSA-5497-w594-j5r2.json index ed2d17489aa..160fb5e1430 100644 --- a/advisories/unreviewed/2022/05/GHSA-5497-w594-j5r2/GHSA-5497-w594-j5r2.json +++ b/advisories/unreviewed/2022/05/GHSA-5497-w594-j5r2/GHSA-5497-w594-j5r2.json @@ -7,12 +7,8 @@ "CVE-2007-4212" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing \"<\" instead of a \">\" in (1) the onerror attribute of an IMG element, (2) the onload attribute of an IFRAME element, or (3) redirect users to other sites via the META tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-54qh-hfxq-4cjr/GHSA-54qh-hfxq-4cjr.json b/advisories/unreviewed/2022/05/GHSA-54qh-hfxq-4cjr/GHSA-54qh-hfxq-4cjr.json index 624f1cf55af..1d9d3bc57f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-54qh-hfxq-4cjr/GHSA-54qh-hfxq-4cjr.json +++ b/advisories/unreviewed/2022/05/GHSA-54qh-hfxq-4cjr/GHSA-54qh-hfxq-4cjr.json @@ -7,12 +7,8 @@ "CVE-2007-4199" ], "details": "Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image that triggers (1) dereference of a certain integer value by ntfs_dent.c in fls, or (2) dereference of a certain other integer value by ntfs.c in fsstat.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-55j6-jhwq-3vff/GHSA-55j6-jhwq-3vff.json b/advisories/unreviewed/2022/05/GHSA-55j6-jhwq-3vff/GHSA-55j6-jhwq-3vff.json index 6bd327426ee..9ec9f2ef1b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-55j6-jhwq-3vff/GHSA-55j6-jhwq-3vff.json +++ b/advisories/unreviewed/2022/05/GHSA-55j6-jhwq-3vff/GHSA-55j6-jhwq-3vff.json @@ -7,12 +7,8 @@ "CVE-2007-4161" ], "details": "rvd in TIBCO Rendezvous (RV) 7.5.2, when -no-lead-wc is omitted, might allow remote attackers to cause a denial of service (network instability) via a subject name with a leading (1) '*' (asterisk) or (2) '>' (greater than) wildcard character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5824-f6f2-29r8/GHSA-5824-f6f2-29r8.json b/advisories/unreviewed/2022/05/GHSA-5824-f6f2-29r8/GHSA-5824-f6f2-29r8.json index 679a5f47996..a4dacf30d1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5824-f6f2-29r8/GHSA-5824-f6f2-29r8.json +++ b/advisories/unreviewed/2022/05/GHSA-5824-f6f2-29r8/GHSA-5824-f6f2-29r8.json @@ -7,12 +7,8 @@ "CVE-2007-4179" ], "details": "Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors. NOTE: this is probably different from CVE-2007-0916, but this is not certain due to lack of vendor details.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58cp-3pw7-4vrf/GHSA-58cp-3pw7-4vrf.json b/advisories/unreviewed/2022/05/GHSA-58cp-3pw7-4vrf/GHSA-58cp-3pw7-4vrf.json index 00671a65a53..e944e4f16dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-58cp-3pw7-4vrf/GHSA-58cp-3pw7-4vrf.json +++ b/advisories/unreviewed/2022/05/GHSA-58cp-3pw7-4vrf/GHSA-58cp-3pw7-4vrf.json @@ -7,12 +7,8 @@ "CVE-2007-4392" ], "details": "Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58hm-gq89-vx32/GHSA-58hm-gq89-vx32.json b/advisories/unreviewed/2022/05/GHSA-58hm-gq89-vx32/GHSA-58hm-gq89-vx32.json index fd39748f7dd..589b352cea8 100644 --- a/advisories/unreviewed/2022/05/GHSA-58hm-gq89-vx32/GHSA-58hm-gq89-vx32.json +++ b/advisories/unreviewed/2022/05/GHSA-58hm-gq89-vx32/GHSA-58hm-gq89-vx32.json @@ -7,12 +7,8 @@ "CVE-2007-4077" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) msg, (2) page, (3) viewkey, or (4) viewtype parameter to (a) view_video.php; the (5) next parameter to (b) signup.php; the (6) search_id parameter to (c) search_result.php; the (7) category or (8) page parameter to (d) video.php; the (9) receiver parameter to (e) compose.php; the (10) catgy parameter to (f) groups.php; the (11) channelname parameter to (g) siteadmin/channels.php; or the (12) uname parameter to (h) siteadmin/muser.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58pj-63x8-xf6w/GHSA-58pj-63x8-xf6w.json b/advisories/unreviewed/2022/05/GHSA-58pj-63x8-xf6w/GHSA-58pj-63x8-xf6w.json index d40ada38bb6..c4b3e4c1fac 100644 --- a/advisories/unreviewed/2022/05/GHSA-58pj-63x8-xf6w/GHSA-58pj-63x8-xf6w.json +++ b/advisories/unreviewed/2022/05/GHSA-58pj-63x8-xf6w/GHSA-58pj-63x8-xf6w.json @@ -7,12 +7,8 @@ "CVE-2007-3887" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in mesaj_formu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Isim, (2) Mesajiniz, and (3) E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-58rf-9xjg-2wv7/GHSA-58rf-9xjg-2wv7.json b/advisories/unreviewed/2022/05/GHSA-58rf-9xjg-2wv7/GHSA-58rf-9xjg-2wv7.json index 4a3a906d96e..42c52b8f686 100644 --- a/advisories/unreviewed/2022/05/GHSA-58rf-9xjg-2wv7/GHSA-58rf-9xjg-2wv7.json +++ b/advisories/unreviewed/2022/05/GHSA-58rf-9xjg-2wv7/GHSA-58rf-9xjg-2wv7.json @@ -7,12 +7,8 @@ "CVE-2007-4521" ], "details": "Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an \"invalid/corrupted\" MIME body, which triggers a crash when the recipient listens to voicemail.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58rp-v7h4-rg94/GHSA-58rp-v7h4-rg94.json b/advisories/unreviewed/2022/05/GHSA-58rp-v7h4-rg94/GHSA-58rp-v7h4-rg94.json index 12d947c1754..ccad14bd9ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-58rp-v7h4-rg94/GHSA-58rp-v7h4-rg94.json +++ b/advisories/unreviewed/2022/05/GHSA-58rp-v7h4-rg94/GHSA-58rp-v7h4-rg94.json @@ -7,12 +7,8 @@ "CVE-2007-4397" ], "details": "Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-59x7-qh7q-fgv8/GHSA-59x7-qh7q-fgv8.json b/advisories/unreviewed/2022/05/GHSA-59x7-qh7q-fgv8/GHSA-59x7-qh7q-fgv8.json index 26a746cfaed..717ee1e3989 100644 --- a/advisories/unreviewed/2022/05/GHSA-59x7-qh7q-fgv8/GHSA-59x7-qh7q-fgv8.json +++ b/advisories/unreviewed/2022/05/GHSA-59x7-qh7q-fgv8/GHSA-59x7-qh7q-fgv8.json @@ -7,12 +7,8 @@ "CVE-2007-4256" ], "details": "Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5f7j-5fjm-rvh7/GHSA-5f7j-5fjm-rvh7.json b/advisories/unreviewed/2022/05/GHSA-5f7j-5fjm-rvh7/GHSA-5f7j-5fjm-rvh7.json index 4011e13b2a8..dc85cb73d5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5f7j-5fjm-rvh7/GHSA-5f7j-5fjm-rvh7.json +++ b/advisories/unreviewed/2022/05/GHSA-5f7j-5fjm-rvh7/GHSA-5f7j-5fjm-rvh7.json @@ -7,12 +7,8 @@ "CVE-2007-4389" ], "details": "Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5gq7-5xj7-p4w2/GHSA-5gq7-5xj7-p4w2.json b/advisories/unreviewed/2022/05/GHSA-5gq7-5xj7-p4w2/GHSA-5gq7-5xj7-p4w2.json index ec60fc341a1..8d2b0b1b0db 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gq7-5xj7-p4w2/GHSA-5gq7-5xj7-p4w2.json +++ b/advisories/unreviewed/2022/05/GHSA-5gq7-5xj7-p4w2/GHSA-5gq7-5xj7-p4w2.json @@ -7,12 +7,8 @@ "CVE-2007-4024" ], "details": "Cross-site scripting (XSS) vulnerability in W1L3D4_aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5hrh-8wcf-9v58/GHSA-5hrh-8wcf-9v58.json b/advisories/unreviewed/2022/05/GHSA-5hrh-8wcf-9v58/GHSA-5hrh-8wcf-9v58.json index 4fb1c42ec72..e081a8c2879 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hrh-8wcf-9v58/GHSA-5hrh-8wcf-9v58.json +++ b/advisories/unreviewed/2022/05/GHSA-5hrh-8wcf-9v58/GHSA-5hrh-8wcf-9v58.json @@ -7,12 +7,8 @@ "CVE-2007-4441" ], "details": "Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long string in the filename argument to the win_browse_file function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5j7j-rv74-pjjv/GHSA-5j7j-rv74-pjjv.json b/advisories/unreviewed/2022/05/GHSA-5j7j-rv74-pjjv/GHSA-5j7j-rv74-pjjv.json index a70f89b3897..aed3c97b78c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j7j-rv74-pjjv/GHSA-5j7j-rv74-pjjv.json +++ b/advisories/unreviewed/2022/05/GHSA-5j7j-rv74-pjjv/GHSA-5j7j-rv74-pjjv.json @@ -7,12 +7,8 @@ "CVE-2007-4436" ], "details": "The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module before 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions, which allows remote attackers to (1) obtain sensitive via the Tracker Module and the Recent posts page; (2) obtain project names via unspecified vectors; (3) obtain sensitive information via the statistics pages; and (4) read CVS project activity.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jfx-9p58-q8pj/GHSA-5jfx-9p58-q8pj.json b/advisories/unreviewed/2022/05/GHSA-5jfx-9p58-q8pj/GHSA-5jfx-9p58-q8pj.json index e276c8c8fc7..4fd00313177 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jfx-9p58-q8pj/GHSA-5jfx-9p58-q8pj.json +++ b/advisories/unreviewed/2022/05/GHSA-5jfx-9p58-q8pj/GHSA-5jfx-9p58-q8pj.json @@ -7,12 +7,8 @@ "CVE-2007-4321" ], "details": "fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol version identification containing an IP address string, a different vector than CVE-2006-6302.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jpr-wwhm-9cpj/GHSA-5jpr-wwhm-9cpj.json b/advisories/unreviewed/2022/05/GHSA-5jpr-wwhm-9cpj/GHSA-5jpr-wwhm-9cpj.json index d88086480ca..aa931f546f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jpr-wwhm-9cpj/GHSA-5jpr-wwhm-9cpj.json +++ b/advisories/unreviewed/2022/05/GHSA-5jpr-wwhm-9cpj/GHSA-5jpr-wwhm-9cpj.json @@ -7,12 +7,8 @@ "CVE-2017-18597" ], "details": "The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5m49-9cvp-c8jj/GHSA-5m49-9cvp-c8jj.json b/advisories/unreviewed/2022/05/GHSA-5m49-9cvp-c8jj/GHSA-5m49-9cvp-c8jj.json index 16b247a9799..14cd841fc06 100644 --- a/advisories/unreviewed/2022/05/GHSA-5m49-9cvp-c8jj/GHSA-5m49-9cvp-c8jj.json +++ b/advisories/unreviewed/2022/05/GHSA-5m49-9cvp-c8jj/GHSA-5m49-9cvp-c8jj.json @@ -7,12 +7,8 @@ "CVE-2007-3898" ], "details": "The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5m9g-cf78-fhvj/GHSA-5m9g-cf78-fhvj.json b/advisories/unreviewed/2022/05/GHSA-5m9g-cf78-fhvj/GHSA-5m9g-cf78-fhvj.json index 9c9ab1d9616..26c225b1e34 100644 --- a/advisories/unreviewed/2022/05/GHSA-5m9g-cf78-fhvj/GHSA-5m9g-cf78-fhvj.json +++ b/advisories/unreviewed/2022/05/GHSA-5m9g-cf78-fhvj/GHSA-5m9g-cf78-fhvj.json @@ -7,12 +7,8 @@ "CVE-2007-3899" ], "details": "Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka \"Word Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5m9x-f92j-rmxc/GHSA-5m9x-f92j-rmxc.json b/advisories/unreviewed/2022/05/GHSA-5m9x-f92j-rmxc/GHSA-5m9x-f92j-rmxc.json index 62956e6f8f7..56a450239af 100644 --- a/advisories/unreviewed/2022/05/GHSA-5m9x-f92j-rmxc/GHSA-5m9x-f92j-rmxc.json +++ b/advisories/unreviewed/2022/05/GHSA-5m9x-f92j-rmxc/GHSA-5m9x-f92j-rmxc.json @@ -7,12 +7,8 @@ "CVE-2007-4258" ], "details": "SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5mh5-64vr-5j5w/GHSA-5mh5-64vr-5j5w.json b/advisories/unreviewed/2022/05/GHSA-5mh5-64vr-5j5w/GHSA-5mh5-64vr-5j5w.json index cf0887fa8d0..c152cff5bb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mh5-64vr-5j5w/GHSA-5mh5-64vr-5j5w.json +++ b/advisories/unreviewed/2022/05/GHSA-5mh5-64vr-5j5w/GHSA-5mh5-64vr-5j5w.json @@ -7,12 +7,8 @@ "CVE-2007-4122" ], "details": "Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer (HV) 06-00 through 06-71-/B allows remote attackers to cause a denial of service (application stop and web interface outage) via certain \"unexpected data.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5p4c-h4w7-4mj2/GHSA-5p4c-h4w7-4mj2.json b/advisories/unreviewed/2022/05/GHSA-5p4c-h4w7-4mj2/GHSA-5p4c-h4w7-4mj2.json index 24f27c5f3b8..6fccc69dbcd 100644 --- a/advisories/unreviewed/2022/05/GHSA-5p4c-h4w7-4mj2/GHSA-5p4c-h4w7-4mj2.json +++ b/advisories/unreviewed/2022/05/GHSA-5p4c-h4w7-4mj2/GHSA-5p4c-h4w7-4mj2.json @@ -7,12 +7,8 @@ "CVE-2007-3828" ], "details": "Unspecified vulnerability in mDNSResponder in Apple Mac OS X allows remote attackers to execute arbitrary code via unspecified vectors, a related issue to CVE-2007-2386.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5qf6-qg6x-q4h6/GHSA-5qf6-qg6x-q4h6.json b/advisories/unreviewed/2022/05/GHSA-5qf6-qg6x-q4h6/GHSA-5qf6-qg6x-q4h6.json index 1041323c28e..1db4e7b2122 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qf6-qg6x-q4h6/GHSA-5qf6-qg6x-q4h6.json +++ b/advisories/unreviewed/2022/05/GHSA-5qf6-qg6x-q4h6/GHSA-5qf6-qg6x-q4h6.json @@ -7,12 +7,8 @@ "CVE-2007-4026" ], "details": "epesi framework before 0.8.6 does not properly verify file extensions, which allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving the gallery images upload feature. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5qg2-6cq9-52q8/GHSA-5qg2-6cq9-52q8.json b/advisories/unreviewed/2022/05/GHSA-5qg2-6cq9-52q8/GHSA-5qg2-6cq9-52q8.json index 199b0b960af..320a9c92430 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qg2-6cq9-52q8/GHSA-5qg2-6cq9-52q8.json +++ b/advisories/unreviewed/2022/05/GHSA-5qg2-6cq9-52q8/GHSA-5qg2-6cq9-52q8.json @@ -7,12 +7,8 @@ "CVE-2007-3895" ], "details": "Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5qrv-2vjc-xwcq/GHSA-5qrv-2vjc-xwcq.json b/advisories/unreviewed/2022/05/GHSA-5qrv-2vjc-xwcq/GHSA-5qrv-2vjc-xwcq.json index bdf6d7a5f2b..fd77ac7cda5 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qrv-2vjc-xwcq/GHSA-5qrv-2vjc-xwcq.json +++ b/advisories/unreviewed/2022/05/GHSA-5qrv-2vjc-xwcq/GHSA-5qrv-2vjc-xwcq.json @@ -7,12 +7,8 @@ "CVE-2007-4039" ], "details": "Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5rfq-cm4h-mwv3/GHSA-5rfq-cm4h-mwv3.json b/advisories/unreviewed/2022/05/GHSA-5rfq-cm4h-mwv3/GHSA-5rfq-cm4h-mwv3.json index aeffd582064..662dbb635af 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rfq-cm4h-mwv3/GHSA-5rfq-cm4h-mwv3.json +++ b/advisories/unreviewed/2022/05/GHSA-5rfq-cm4h-mwv3/GHSA-5rfq-cm4h-mwv3.json @@ -7,12 +7,8 @@ "CVE-2007-4407" ], "details": "ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel (zannel), which allows remote attackers to (1) set or remove certain channel modes via a \"netriding\" attack or (2) take over a channel by joining an unlinked server with the A/Upass and then setting a new Apass.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5vjf-7425-428p/GHSA-5vjf-7425-428p.json b/advisories/unreviewed/2022/05/GHSA-5vjf-7425-428p/GHSA-5vjf-7425-428p.json index 31132a6563a..abccdc10b0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vjf-7425-428p/GHSA-5vjf-7425-428p.json +++ b/advisories/unreviewed/2022/05/GHSA-5vjf-7425-428p/GHSA-5vjf-7425-428p.json @@ -7,12 +7,8 @@ "CVE-2007-4033" ], "details": "Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5vw5-h24c-cr8j/GHSA-5vw5-h24c-cr8j.json b/advisories/unreviewed/2022/05/GHSA-5vw5-h24c-cr8j/GHSA-5vw5-h24c-cr8j.json index 6e9402173b7..ec07b1dad2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vw5-h24c-cr8j/GHSA-5vw5-h24c-cr8j.json +++ b/advisories/unreviewed/2022/05/GHSA-5vw5-h24c-cr8j/GHSA-5vw5-h24c-cr8j.json @@ -7,12 +7,8 @@ "CVE-2007-3981" ], "details": "SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5wgc-m4gw-p8m3/GHSA-5wgc-m4gw-p8m3.json b/advisories/unreviewed/2022/05/GHSA-5wgc-m4gw-p8m3/GHSA-5wgc-m4gw-p8m3.json index 92f2c3afe52..efe3fb94e96 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wgc-m4gw-p8m3/GHSA-5wgc-m4gw-p8m3.json +++ b/advisories/unreviewed/2022/05/GHSA-5wgc-m4gw-p8m3/GHSA-5wgc-m4gw-p8m3.json @@ -7,12 +7,8 @@ "CVE-2007-4195" ], "details": "Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain ext2fs files via a malformed ext2fs image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5xfc-jpjx-f864/GHSA-5xfc-jpjx-f864.json b/advisories/unreviewed/2022/05/GHSA-5xfc-jpjx-f864/GHSA-5xfc-jpjx-f864.json index 8d30aee0feb..c99665f2880 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xfc-jpjx-f864/GHSA-5xfc-jpjx-f864.json +++ b/advisories/unreviewed/2022/05/GHSA-5xfc-jpjx-f864/GHSA-5xfc-jpjx-f864.json @@ -7,12 +7,8 @@ "CVE-2007-4497" ], "details": "Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows users with login access to a guest operating system to cause a denial of service (guest outage and host process crash or hang) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5xfw-3664-6rwg/GHSA-5xfw-3664-6rwg.json b/advisories/unreviewed/2022/05/GHSA-5xfw-3664-6rwg/GHSA-5xfw-3664-6rwg.json index 985b3a89f34..dede5fe5b67 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xfw-3664-6rwg/GHSA-5xfw-3664-6rwg.json +++ b/advisories/unreviewed/2022/05/GHSA-5xfw-3664-6rwg/GHSA-5xfw-3664-6rwg.json @@ -7,12 +7,8 @@ "CVE-2007-4362" ], "details": "SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5xmm-mwpf-x748/GHSA-5xmm-mwpf-x748.json b/advisories/unreviewed/2022/05/GHSA-5xmm-mwpf-x748/GHSA-5xmm-mwpf-x748.json index a9e282c0d9d..7a5a5f85be8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xmm-mwpf-x748/GHSA-5xmm-mwpf-x748.json +++ b/advisories/unreviewed/2022/05/GHSA-5xmm-mwpf-x748/GHSA-5xmm-mwpf-x748.json @@ -7,12 +7,8 @@ "CVE-2007-4386" ], "details": "SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands via the query parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6263-577f-x76p/GHSA-6263-577f-x76p.json b/advisories/unreviewed/2022/05/GHSA-6263-577f-x76p/GHSA-6263-577f-x76p.json index b6eb7fe5b10..e1412f4b976 100644 --- a/advisories/unreviewed/2022/05/GHSA-6263-577f-x76p/GHSA-6263-577f-x76p.json +++ b/advisories/unreviewed/2022/05/GHSA-6263-577f-x76p/GHSA-6263-577f-x76p.json @@ -7,12 +7,8 @@ "CVE-2007-4462" ], "details": "lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-62c7-vxrm-g6m9/GHSA-62c7-vxrm-g6m9.json b/advisories/unreviewed/2022/05/GHSA-62c7-vxrm-g6m9/GHSA-62c7-vxrm-g6m9.json index 032e19ed0dd..435d0acb8bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-62c7-vxrm-g6m9/GHSA-62c7-vxrm-g6m9.json +++ b/advisories/unreviewed/2022/05/GHSA-62c7-vxrm-g6m9/GHSA-62c7-vxrm-g6m9.json @@ -7,12 +7,8 @@ "CVE-2007-3990" ], "details": "SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-62qg-wq9p-p6p2/GHSA-62qg-wq9p-p6p2.json b/advisories/unreviewed/2022/05/GHSA-62qg-wq9p-p6p2/GHSA-62qg-wq9p-p6p2.json index fce927df8d3..27c1f2a62e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-62qg-wq9p-p6p2/GHSA-62qg-wq9p-p6p2.json +++ b/advisories/unreviewed/2022/05/GHSA-62qg-wq9p-p6p2/GHSA-62qg-wq9p-p6p2.json @@ -7,12 +7,8 @@ "CVE-2007-3999" ], "details": "Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62wr-2p42-ccr4/GHSA-62wr-2p42-ccr4.json b/advisories/unreviewed/2022/05/GHSA-62wr-2p42-ccr4/GHSA-62wr-2p42-ccr4.json index e079fabb2ed..97297cac7cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-62wr-2p42-ccr4/GHSA-62wr-2p42-ccr4.json +++ b/advisories/unreviewed/2022/05/GHSA-62wr-2p42-ccr4/GHSA-62wr-2p42-ccr4.json @@ -7,12 +7,8 @@ "CVE-2007-4422" ], "details": "The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-63jc-fcpm-hjjw/GHSA-63jc-fcpm-hjjw.json b/advisories/unreviewed/2022/05/GHSA-63jc-fcpm-hjjw/GHSA-63jc-fcpm-hjjw.json index b087ae93129..ce464590264 100644 --- a/advisories/unreviewed/2022/05/GHSA-63jc-fcpm-hjjw/GHSA-63jc-fcpm-hjjw.json +++ b/advisories/unreviewed/2022/05/GHSA-63jc-fcpm-hjjw/GHSA-63jc-fcpm-hjjw.json @@ -7,12 +7,8 @@ "CVE-2019-14222" ], "details": "An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker could exploit this vulnerability by using the extracted private key and bundling it into a PKCS12. A successful exploit could allow the attacker to gain information about the target system (e.g., OS type, system file locations, Java version, Solr version, etc.) as well as the ability to launch further attacks by leveraging the access to Alfresco's Solr Web Admin Interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-644p-hwjm-4qjx/GHSA-644p-hwjm-4qjx.json b/advisories/unreviewed/2022/05/GHSA-644p-hwjm-4qjx/GHSA-644p-hwjm-4qjx.json index 752c71adbaf..d469a68bf4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-644p-hwjm-4qjx/GHSA-644p-hwjm-4qjx.json +++ b/advisories/unreviewed/2022/05/GHSA-644p-hwjm-4qjx/GHSA-644p-hwjm-4qjx.json @@ -7,12 +7,8 @@ "CVE-2007-4341" ], "details": "PHP remote file inclusion vulnerability in adm/my_statistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-64qv-v869-f8j2/GHSA-64qv-v869-f8j2.json b/advisories/unreviewed/2022/05/GHSA-64qv-v869-f8j2/GHSA-64qv-v869-f8j2.json index 54fbaeb2572..10ec3455959 100644 --- a/advisories/unreviewed/2022/05/GHSA-64qv-v869-f8j2/GHSA-64qv-v869-f8j2.json +++ b/advisories/unreviewed/2022/05/GHSA-64qv-v869-f8j2/GHSA-64qv-v869-f8j2.json @@ -7,12 +7,8 @@ "CVE-2007-3841" ], "details": "Unspecified vulnerability in Pidgin (formerly Gaim) 2.0.2 for Linux allows remote authenticated users, who are listed in a users list, to execute certain commands via unspecified vectors, aka ZD-00000035. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-65w6-c8qp-c68q/GHSA-65w6-c8qp-c68q.json b/advisories/unreviewed/2022/05/GHSA-65w6-c8qp-c68q/GHSA-65w6-c8qp-c68q.json index 8ac088dcb2f..01007feaeb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-65w6-c8qp-c68q/GHSA-65w6-c8qp-c68q.json +++ b/advisories/unreviewed/2022/05/GHSA-65w6-c8qp-c68q/GHSA-65w6-c8qp-c68q.json @@ -7,12 +7,8 @@ "CVE-2007-4447" ], "details": "Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF character; and allow remote Toribash servers to execute arbitrary code via (3) a long game command and (4) a long SAY command that omits a required LF character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-66cg-284q-vjh6/GHSA-66cg-284q-vjh6.json b/advisories/unreviewed/2022/05/GHSA-66cg-284q-vjh6/GHSA-66cg-284q-vjh6.json index ce6fa405496..401dcbbcac2 100644 --- a/advisories/unreviewed/2022/05/GHSA-66cg-284q-vjh6/GHSA-66cg-284q-vjh6.json +++ b/advisories/unreviewed/2022/05/GHSA-66cg-284q-vjh6/GHSA-66cg-284q-vjh6.json @@ -7,12 +7,8 @@ "CVE-2007-4443" ], "details": "The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (continuous beep and server slowdown) via a string containing many 0x07 characters in (1) a request to the images/ directory, (2) the Content-Type field, (3) a HEAD request, and possibly other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-66jg-p3fh-9w8p/GHSA-66jg-p3fh-9w8p.json b/advisories/unreviewed/2022/05/GHSA-66jg-p3fh-9w8p/GHSA-66jg-p3fh-9w8p.json index be3bfe98c77..0d16d9bb20d 100644 --- a/advisories/unreviewed/2022/05/GHSA-66jg-p3fh-9w8p/GHSA-66jg-p3fh-9w8p.json +++ b/advisories/unreviewed/2022/05/GHSA-66jg-p3fh-9w8p/GHSA-66jg-p3fh-9w8p.json @@ -7,12 +7,8 @@ "CVE-2007-4471" ], "details": "Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the (1) httpGETToFile, (2) httpPOSTFromFile, and possibly other methods, probably involving path traversal vulnerabilities in exposed dangerous methods. NOTE: this can be leveraged for code execution by writing to a Startup folder.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-673p-4g53-cx29/GHSA-673p-4g53-cx29.json b/advisories/unreviewed/2022/05/GHSA-673p-4g53-cx29/GHSA-673p-4g53-cx29.json index ab18ff04a28..095825be931 100644 --- a/advisories/unreviewed/2022/05/GHSA-673p-4g53-cx29/GHSA-673p-4g53-cx29.json +++ b/advisories/unreviewed/2022/05/GHSA-673p-4g53-cx29/GHSA-673p-4g53-cx29.json @@ -7,12 +7,8 @@ "CVE-2007-4090" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to inc/lib/screen.php or (2) the title parameter to post.php. NOTE: vector 2 might overlap CVE-2006-6283. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-686m-wx69-7h93/GHSA-686m-wx69-7h93.json b/advisories/unreviewed/2022/05/GHSA-686m-wx69-7h93/GHSA-686m-wx69-7h93.json index 5347eab6831..b83f4b0d2bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-686m-wx69-7h93/GHSA-686m-wx69-7h93.json +++ b/advisories/unreviewed/2022/05/GHSA-686m-wx69-7h93/GHSA-686m-wx69-7h93.json @@ -7,12 +7,8 @@ "CVE-2007-4410" ], "details": "ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-694x-r8j4-g92q/GHSA-694x-r8j4-g92q.json b/advisories/unreviewed/2022/05/GHSA-694x-r8j4-g92q/GHSA-694x-r8j4-g92q.json index 679e4e5147e..1078128468a 100644 --- a/advisories/unreviewed/2022/05/GHSA-694x-r8j4-g92q/GHSA-694x-r8j4-g92q.json +++ b/advisories/unreviewed/2022/05/GHSA-694x-r8j4-g92q/GHSA-694x-r8j4-g92q.json @@ -7,12 +7,8 @@ "CVE-2007-4320" ], "details": "PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-697g-wjpp-pfqr/GHSA-697g-wjpp-pfqr.json b/advisories/unreviewed/2022/05/GHSA-697g-wjpp-pfqr/GHSA-697g-wjpp-pfqr.json index 8af40d00f76..b9f801ecf0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-697g-wjpp-pfqr/GHSA-697g-wjpp-pfqr.json +++ b/advisories/unreviewed/2022/05/GHSA-697g-wjpp-pfqr/GHSA-697g-wjpp-pfqr.json @@ -7,12 +7,8 @@ "CVE-2019-16125" ], "details": "In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69cw-43h7-mp2v/GHSA-69cw-43h7-mp2v.json b/advisories/unreviewed/2022/05/GHSA-69cw-43h7-mp2v/GHSA-69cw-43h7-mp2v.json index a44ba813634..aad88705766 100644 --- a/advisories/unreviewed/2022/05/GHSA-69cw-43h7-mp2v/GHSA-69cw-43h7-mp2v.json +++ b/advisories/unreviewed/2022/05/GHSA-69cw-43h7-mp2v/GHSA-69cw-43h7-mp2v.json @@ -7,12 +7,8 @@ "CVE-2007-4198" ], "details": "The fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (TSK) before 2.09 does not validate a certain length value, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image, which triggers a buffer over-read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69h2-4v8j-jxhj/GHSA-69h2-4v8j-jxhj.json b/advisories/unreviewed/2022/05/GHSA-69h2-4v8j-jxhj/GHSA-69h2-4v8j-jxhj.json index 7e667ffe2d7..6ab9cf1e433 100644 --- a/advisories/unreviewed/2022/05/GHSA-69h2-4v8j-jxhj/GHSA-69h2-4v8j-jxhj.json +++ b/advisories/unreviewed/2022/05/GHSA-69h2-4v8j-jxhj/GHSA-69h2-4v8j-jxhj.json @@ -7,12 +7,8 @@ "CVE-2007-4237" ], "details": "Buffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows local users to gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6c8x-pc5w-78fc/GHSA-6c8x-pc5w-78fc.json b/advisories/unreviewed/2022/05/GHSA-6c8x-pc5w-78fc/GHSA-6c8x-pc5w-78fc.json index 7274b9a98b9..e38464f51f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-6c8x-pc5w-78fc/GHSA-6c8x-pc5w-78fc.json +++ b/advisories/unreviewed/2022/05/GHSA-6c8x-pc5w-78fc/GHSA-6c8x-pc5w-78fc.json @@ -7,12 +7,8 @@ "CVE-2007-4052" ], "details": "Cross-site scripting (XSS) vulnerability in utilities/login.asp in nukedit 4.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6g2v-vv47-v62p/GHSA-6g2v-vv47-v62p.json b/advisories/unreviewed/2022/05/GHSA-6g2v-vv47-v62p/GHSA-6g2v-vv47-v62p.json index 324f562e602..ff411d020ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g2v-vv47-v62p/GHSA-6g2v-vv47-v62p.json +++ b/advisories/unreviewed/2022/05/GHSA-6g2v-vv47-v62p/GHSA-6g2v-vv47-v62p.json @@ -7,12 +7,8 @@ "CVE-2007-4111" ], "details": "SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as user or manager, allows remote attackers to execute arbitrary SQL commands via the Password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6hm4-3rg9-26wj/GHSA-6hm4-3rg9-26wj.json b/advisories/unreviewed/2022/05/GHSA-6hm4-3rg9-26wj/GHSA-6hm4-3rg9-26wj.json index 73bae583908..ab5faaad216 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hm4-3rg9-26wj/GHSA-6hm4-3rg9-26wj.json +++ b/advisories/unreviewed/2022/05/GHSA-6hm4-3rg9-26wj/GHSA-6hm4-3rg9-26wj.json @@ -7,12 +7,8 @@ "CVE-2007-4375" ], "details": "The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to (1) obtain sensitive information (process memory contents), as demonstrated by an attack that obtains module base addresses to defeat Address Space Layout Randomization (ASLR); or (2) cause a denial of service (application crash) via an out-of-bounds address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6jpv-w9q2-rpqc/GHSA-6jpv-w9q2-rpqc.json b/advisories/unreviewed/2022/05/GHSA-6jpv-w9q2-rpqc/GHSA-6jpv-w9q2-rpqc.json index 9338dcfacdb..5af4355f937 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jpv-w9q2-rpqc/GHSA-6jpv-w9q2-rpqc.json +++ b/advisories/unreviewed/2022/05/GHSA-6jpv-w9q2-rpqc/GHSA-6jpv-w9q2-rpqc.json @@ -7,12 +7,8 @@ "CVE-2007-4463" ], "details": "The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service (unhandled exception) via an invalid RVA address function pointer in (1) an IMAGE_THUNK_DATA structure, involving the (a) OriginalFirstThunk and (b) FirstThunk IMAGE_IMPORT_DESCRIPTOR fields, or (2) the AddressOfNames IMAGE_EXPORT_DIRECTORY field in a PE file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6mgw-cv29-m4qm/GHSA-6mgw-cv29-m4qm.json b/advisories/unreviewed/2022/05/GHSA-6mgw-cv29-m4qm/GHSA-6mgw-cv29-m4qm.json index 03a7e7366fd..50f2637d699 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mgw-cv29-m4qm/GHSA-6mgw-cv29-m4qm.json +++ b/advisories/unreviewed/2022/05/GHSA-6mgw-cv29-m4qm/GHSA-6mgw-cv29-m4qm.json @@ -7,12 +7,8 @@ "CVE-2007-4505" ], "details": "SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6mmx-fhq4-jh82/GHSA-6mmx-fhq4-jh82.json b/advisories/unreviewed/2022/05/GHSA-6mmx-fhq4-jh82/GHSA-6mmx-fhq4-jh82.json index c63dabce5b6..8a9606a1048 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mmx-fhq4-jh82/GHSA-6mmx-fhq4-jh82.json +++ b/advisories/unreviewed/2022/05/GHSA-6mmx-fhq4-jh82/GHSA-6mmx-fhq4-jh82.json @@ -7,12 +7,8 @@ "CVE-2007-4400" ], "details": "CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6p3c-cf6r-gj3c/GHSA-6p3c-cf6r-gj3c.json b/advisories/unreviewed/2022/05/GHSA-6p3c-cf6r-gj3c/GHSA-6p3c-cf6r-gj3c.json index c703ef958ae..73a4e80757b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p3c-cf6r-gj3c/GHSA-6p3c-cf6r-gj3c.json +++ b/advisories/unreviewed/2022/05/GHSA-6p3c-cf6r-gj3c/GHSA-6p3c-cf6r-gj3c.json @@ -7,12 +7,8 @@ "CVE-2007-4314" ], "details": "pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote directory tree via a URL in the root parameter. NOTE: this can be leveraged for traffic amplification or other denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6p6h-7mm4-6mhv/GHSA-6p6h-7mm4-6mhv.json b/advisories/unreviewed/2022/05/GHSA-6p6h-7mm4-6mhv/GHSA-6p6h-7mm4-6mhv.json index 8ec2a542404..c5eb147fade 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p6h-7mm4-6mhv/GHSA-6p6h-7mm4-6mhv.json +++ b/advisories/unreviewed/2022/05/GHSA-6p6h-7mm4-6mhv/GHSA-6p6h-7mm4-6mhv.json @@ -7,12 +7,8 @@ "CVE-2007-3844" ], "details": "Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka \"Cross Context Scripting.\" NOTE: this issue is caused by a CVE-2007-3089 regression.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -240,9 +236,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6p6q-5rx4-fvv8/GHSA-6p6q-5rx4-fvv8.json b/advisories/unreviewed/2022/05/GHSA-6p6q-5rx4-fvv8/GHSA-6p6q-5rx4-fvv8.json index a7e6970790d..2aa80265090 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p6q-5rx4-fvv8/GHSA-6p6q-5rx4-fvv8.json +++ b/advisories/unreviewed/2022/05/GHSA-6p6q-5rx4-fvv8/GHSA-6p6q-5rx4-fvv8.json @@ -7,12 +7,8 @@ "CVE-2007-3857" ], "details": "Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 allow remote authenticated users to have an unknown impact via (a) the Oracle Text component, including (1) unspecified vectors (DB05), (2) CTXSYS.DRVXMD (DB06), (3) CTXSYS.DRI_MOVE_CTXSYS (DB07), (4) CTXSYS.DRVXMD (DB08), and (b) JavaVM (DB14).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6p85-8j97-xrrh/GHSA-6p85-8j97-xrrh.json b/advisories/unreviewed/2022/05/GHSA-6p85-8j97-xrrh/GHSA-6p85-8j97-xrrh.json index aca12c83071..1fcdcae7ddc 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p85-8j97-xrrh/GHSA-6p85-8j97-xrrh.json +++ b/advisories/unreviewed/2022/05/GHSA-6p85-8j97-xrrh/GHSA-6p85-8j97-xrrh.json @@ -7,12 +7,8 @@ "CVE-2007-4327" ], "details": "Multiple PHP remote file inclusion vulnerabilities in File Uploader 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index.php or (2) datei.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6rcr-7f7h-w6qx/GHSA-6rcr-7f7h-w6qx.json b/advisories/unreviewed/2022/05/GHSA-6rcr-7f7h-w6qx/GHSA-6rcr-7f7h-w6qx.json index f082168000e..7ced3cca4a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rcr-7f7h-w6qx/GHSA-6rcr-7f7h-w6qx.json +++ b/advisories/unreviewed/2022/05/GHSA-6rcr-7f7h-w6qx/GHSA-6rcr-7f7h-w6qx.json @@ -7,12 +7,8 @@ "CVE-2007-4045" ], "details": "The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6v59-3wh4-8h9q/GHSA-6v59-3wh4-8h9q.json b/advisories/unreviewed/2022/05/GHSA-6v59-3wh4-8h9q/GHSA-6v59-3wh4-8h9q.json index 6d9a0caef9b..bb05a4a6fa4 100644 --- a/advisories/unreviewed/2022/05/GHSA-6v59-3wh4-8h9q/GHSA-6v59-3wh4-8h9q.json +++ b/advisories/unreviewed/2022/05/GHSA-6v59-3wh4-8h9q/GHSA-6v59-3wh4-8h9q.json @@ -7,12 +7,8 @@ "CVE-2007-4136" ], "details": "The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeatedly sending data or attempting connections.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6vpr-vqqf-9fw3/GHSA-6vpr-vqqf-9fw3.json b/advisories/unreviewed/2022/05/GHSA-6vpr-vqqf-9fw3/GHSA-6vpr-vqqf-9fw3.json index 3b4988fb69a..844cad30538 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vpr-vqqf-9fw3/GHSA-6vpr-vqqf-9fw3.json +++ b/advisories/unreviewed/2022/05/GHSA-6vpr-vqqf-9fw3/GHSA-6vpr-vqqf-9fw3.json @@ -7,12 +7,8 @@ "CVE-2019-11380" ], "details": "The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6w26-88rc-hjg7/GHSA-6w26-88rc-hjg7.json b/advisories/unreviewed/2022/05/GHSA-6w26-88rc-hjg7/GHSA-6w26-88rc-hjg7.json index dc0cf58c799..eedd33bf778 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w26-88rc-hjg7/GHSA-6w26-88rc-hjg7.json +++ b/advisories/unreviewed/2022/05/GHSA-6w26-88rc-hjg7/GHSA-6w26-88rc-hjg7.json @@ -7,12 +7,8 @@ "CVE-2007-3840" ], "details": "SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6w48-3j72-vg4r/GHSA-6w48-3j72-vg4r.json b/advisories/unreviewed/2022/05/GHSA-6w48-3j72-vg4r/GHSA-6w48-3j72-vg4r.json index 64fc8f0d594..e515f55a6ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w48-3j72-vg4r/GHSA-6w48-3j72-vg4r.json +++ b/advisories/unreviewed/2022/05/GHSA-6w48-3j72-vg4r/GHSA-6w48-3j72-vg4r.json @@ -7,12 +7,8 @@ "CVE-2007-4343" ], "details": "Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows user-assisted remote attackers to execute arbitrary code via a crafted palette (.pal) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6wc4-62vg-g675/GHSA-6wc4-62vg-g675.json b/advisories/unreviewed/2022/05/GHSA-6wc4-62vg-g675/GHSA-6wc4-62vg-g675.json index 6154fe3ca91..0ec4b4f8996 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wc4-62vg-g675/GHSA-6wc4-62vg-g675.json +++ b/advisories/unreviewed/2022/05/GHSA-6wc4-62vg-g675/GHSA-6wc4-62vg-g675.json @@ -7,12 +7,8 @@ "CVE-2007-4194" ], "details": "Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service (stack memory consumption) and possibly have other unspecified impact via a malformed file, related to \"EnCase's file system parsing.\" NOTE: this information is based upon a vague pre-advisory. It might overlap CVE-2007-4036.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6wgv-cpj2-hjhf/GHSA-6wgv-cpj2-hjhf.json b/advisories/unreviewed/2022/05/GHSA-6wgv-cpj2-hjhf/GHSA-6wgv-cpj2-hjhf.json index 24bd0fec37a..4c15eca4513 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wgv-cpj2-hjhf/GHSA-6wgv-cpj2-hjhf.json +++ b/advisories/unreviewed/2022/05/GHSA-6wgv-cpj2-hjhf/GHSA-6wgv-cpj2-hjhf.json @@ -7,12 +7,8 @@ "CVE-2007-4411" ], "details": "ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with (1) CIDR mask arguments or (2) certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6xjq-wfj9-v6x3/GHSA-6xjq-wfj9-v6x3.json b/advisories/unreviewed/2022/05/GHSA-6xjq-wfj9-v6x3/GHSA-6xjq-wfj9-v6x3.json index 5210f354ae1..d30e8ef6e1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xjq-wfj9-v6x3/GHSA-6xjq-wfj9-v6x3.json +++ b/advisories/unreviewed/2022/05/GHSA-6xjq-wfj9-v6x3/GHSA-6xjq-wfj9-v6x3.json @@ -7,12 +7,8 @@ "CVE-2007-3984" ], "details": "Buffer overflow in a certain ActiveX control in the NixonMyPrograms class in sasatl.dll 1.5.0.531 in Zenturi ProgramChecker allows remote attackers to execute arbitrary code via a long argument to the Scan method. NOTE: this is probably a different issue than CVE-2007-2987.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-725r-g3h3-7hw9/GHSA-725r-g3h3-7hw9.json b/advisories/unreviewed/2022/05/GHSA-725r-g3h3-7hw9/GHSA-725r-g3h3-7hw9.json index 55462d613d1..0df465b0f90 100644 --- a/advisories/unreviewed/2022/05/GHSA-725r-g3h3-7hw9/GHSA-725r-g3h3-7hw9.json +++ b/advisories/unreviewed/2022/05/GHSA-725r-g3h3-7hw9/GHSA-725r-g3h3-7hw9.json @@ -7,12 +7,8 @@ "CVE-2007-4316" ], "details": "The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device has a certain default password, which allows remote attackers to perform administrative actions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7269-5j4w-86wq/GHSA-7269-5j4w-86wq.json b/advisories/unreviewed/2022/05/GHSA-7269-5j4w-86wq/GHSA-7269-5j4w-86wq.json index d8ac1cc5d3f..2469a2b65d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-7269-5j4w-86wq/GHSA-7269-5j4w-86wq.json +++ b/advisories/unreviewed/2022/05/GHSA-7269-5j4w-86wq/GHSA-7269-5j4w-86wq.json @@ -7,12 +7,8 @@ "CVE-2007-4524" ], "details": "PHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-72jf-qgj5-rj9w/GHSA-72jf-qgj5-rj9w.json b/advisories/unreviewed/2022/05/GHSA-72jf-qgj5-rj9w/GHSA-72jf-qgj5-rj9w.json index aae32f2fcb0..446f52429ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-72jf-qgj5-rj9w/GHSA-72jf-qgj5-rj9w.json +++ b/advisories/unreviewed/2022/05/GHSA-72jf-qgj5-rj9w/GHSA-72jf-qgj5-rj9w.json @@ -7,12 +7,8 @@ "CVE-2007-4413" ], "details": "Direct static code injection vulnerability in admincp/user_help.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users to inject arbitrary PHP code into an unspecified file via a new_entry value in the do parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-72mr-454g-5j99/GHSA-72mr-454g-5j99.json b/advisories/unreviewed/2022/05/GHSA-72mr-454g-5j99/GHSA-72mr-454g-5j99.json index de7f88f63c6..015d5f282f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-72mr-454g-5j99/GHSA-72mr-454g-5j99.json +++ b/advisories/unreviewed/2022/05/GHSA-72mr-454g-5j99/GHSA-72mr-454g-5j99.json @@ -7,12 +7,8 @@ "CVE-2007-4196" ], "details": "icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 misinterprets a certain memory location as the holder of a loop iteration count, which allows user-assisted remote attackers to cause a denial of service (long loop) and prevent examination of certain NTFS files via a malformed NTFS image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-73vx-774c-f378/GHSA-73vx-774c-f378.json b/advisories/unreviewed/2022/05/GHSA-73vx-774c-f378/GHSA-73vx-774c-f378.json index d375b4fa5d6..20c4e530a0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-73vx-774c-f378/GHSA-73vx-774c-f378.json +++ b/advisories/unreviewed/2022/05/GHSA-73vx-774c-f378/GHSA-73vx-774c-f378.json @@ -7,12 +7,8 @@ "CVE-2007-4270" ], "details": "Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-74rm-gxr2-j77h/GHSA-74rm-gxr2-j77h.json b/advisories/unreviewed/2022/05/GHSA-74rm-gxr2-j77h/GHSA-74rm-gxr2-j77h.json index 804423a9748..b3fb519b5a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-74rm-gxr2-j77h/GHSA-74rm-gxr2-j77h.json +++ b/advisories/unreviewed/2022/05/GHSA-74rm-gxr2-j77h/GHSA-74rm-gxr2-j77h.json @@ -7,12 +7,8 @@ "CVE-2007-4138" ], "details": "The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the \"winbind nss info\" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-76x4-5xfr-fp8g/GHSA-76x4-5xfr-fp8g.json b/advisories/unreviewed/2022/05/GHSA-76x4-5xfr-fp8g/GHSA-76x4-5xfr-fp8g.json index 295b1b16fc3..f838947ac6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-76x4-5xfr-fp8g/GHSA-76x4-5xfr-fp8g.json +++ b/advisories/unreviewed/2022/05/GHSA-76x4-5xfr-fp8g/GHSA-76x4-5xfr-fp8g.json @@ -7,12 +7,8 @@ "CVE-2007-4027" ], "details": "Buffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow local users to gain privileges via a long argument. NOTE: this program is not setuid by default, but there are some usage scenarios in which an administrator might make it setuid.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-784p-f8qg-9fqj/GHSA-784p-f8qg-9fqj.json b/advisories/unreviewed/2022/05/GHSA-784p-f8qg-9fqj/GHSA-784p-f8qg-9fqj.json index b01decf5020..906983d3bb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-784p-f8qg-9fqj/GHSA-784p-f8qg-9fqj.json +++ b/advisories/unreviewed/2022/05/GHSA-784p-f8qg-9fqj/GHSA-784p-f8qg-9fqj.json @@ -7,12 +7,8 @@ "CVE-2007-4063" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-78pf-52m8-mxjc/GHSA-78pf-52m8-mxjc.json b/advisories/unreviewed/2022/05/GHSA-78pf-52m8-mxjc/GHSA-78pf-52m8-mxjc.json index 0117c300c48..0fb8d7c7cdf 100644 --- a/advisories/unreviewed/2022/05/GHSA-78pf-52m8-mxjc/GHSA-78pf-52m8-mxjc.json +++ b/advisories/unreviewed/2022/05/GHSA-78pf-52m8-mxjc/GHSA-78pf-52m8-mxjc.json @@ -7,12 +7,8 @@ "CVE-2019-2115" ], "details": "In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-78qc-jhj6-3x6x/GHSA-78qc-jhj6-3x6x.json b/advisories/unreviewed/2022/05/GHSA-78qc-jhj6-3x6x/GHSA-78qc-jhj6-3x6x.json index 8810858a578..52664005480 100644 --- a/advisories/unreviewed/2022/05/GHSA-78qc-jhj6-3x6x/GHSA-78qc-jhj6-3x6x.json +++ b/advisories/unreviewed/2022/05/GHSA-78qc-jhj6-3x6x/GHSA-78qc-jhj6-3x6x.json @@ -7,12 +7,8 @@ "CVE-2007-4418" ], "details": "IBM DB2 UDB 8 before Fixpak 15 does not properly check authorization, which allows remote authenticated users with a certain SELECT privilege to have an unknown impact via unspecified vectors. NOTE: this issue is probably related to CVE-2007-1089, but this is uncertain due to lack of details.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-794q-hcj4-2cqp/GHSA-794q-hcj4-2cqp.json b/advisories/unreviewed/2022/05/GHSA-794q-hcj4-2cqp/GHSA-794q-hcj4-2cqp.json index e84278f9d3d..77c23512796 100644 --- a/advisories/unreviewed/2022/05/GHSA-794q-hcj4-2cqp/GHSA-794q-hcj4-2cqp.json +++ b/advisories/unreviewed/2022/05/GHSA-794q-hcj4-2cqp/GHSA-794q-hcj4-2cqp.json @@ -7,12 +7,8 @@ "CVE-2007-4162" ], "details": "TIBCO Rendezvous (RV) 7.5.2 does not protect confidentiality or integrity of inter-daemon communication, which allows remote attackers to capture and spoof traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7c6h-cf9x-293j/GHSA-7c6h-cf9x-293j.json b/advisories/unreviewed/2022/05/GHSA-7c6h-cf9x-293j/GHSA-7c6h-cf9x-293j.json index 3467cd99402..5d0f2463698 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c6h-cf9x-293j/GHSA-7c6h-cf9x-293j.json +++ b/advisories/unreviewed/2022/05/GHSA-7c6h-cf9x-293j/GHSA-7c6h-cf9x-293j.json @@ -7,12 +7,8 @@ "CVE-2019-2292" ], "details": "Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9650, MSM8996AU, QCA6574AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7c7j-75pm-888x/GHSA-7c7j-75pm-888x.json b/advisories/unreviewed/2022/05/GHSA-7c7j-75pm-888x/GHSA-7c7j-75pm-888x.json index 0872a1511ed..50470bb1151 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c7j-75pm-888x/GHSA-7c7j-75pm-888x.json +++ b/advisories/unreviewed/2022/05/GHSA-7c7j-75pm-888x/GHSA-7c7j-75pm-888x.json @@ -7,12 +7,8 @@ "CVE-2007-4251" ], "details": "OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7ccg-35qw-m5mc/GHSA-7ccg-35qw-m5mc.json b/advisories/unreviewed/2022/05/GHSA-7ccg-35qw-m5mc/GHSA-7ccg-35qw-m5mc.json index 43b94171c3a..183573cbd32 100644 --- a/advisories/unreviewed/2022/05/GHSA-7ccg-35qw-m5mc/GHSA-7ccg-35qw-m5mc.json +++ b/advisories/unreviewed/2022/05/GHSA-7ccg-35qw-m5mc/GHSA-7ccg-35qw-m5mc.json @@ -7,12 +7,8 @@ "CVE-2007-4163" ], "details": "Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id, (2) start_id, (3) row[parent_id], and (4) row[cat_id] parameters to unspecified components, related to use of these parameters within include/utils.php. NOTE: the show_cat.php cat_id vector is already covered by CVE-2007-4069.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7cw9-q929-vcrm/GHSA-7cw9-q929-vcrm.json b/advisories/unreviewed/2022/05/GHSA-7cw9-q929-vcrm/GHSA-7cw9-q929-vcrm.json index 9ef24f9d6a2..0929b40185b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cw9-q929-vcrm/GHSA-7cw9-q929-vcrm.json +++ b/advisories/unreviewed/2022/05/GHSA-7cw9-q929-vcrm/GHSA-7cw9-q929-vcrm.json @@ -7,12 +7,8 @@ "CVE-2007-3832" ], "details": "Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///#1111111/ substring.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7g5r-pc7v-gq4c/GHSA-7g5r-pc7v-gq4c.json b/advisories/unreviewed/2022/05/GHSA-7g5r-pc7v-gq4c/GHSA-7g5r-pc7v-gq4c.json index a966d47fe66..cde4d23ca8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7g5r-pc7v-gq4c/GHSA-7g5r-pc7v-gq4c.json +++ b/advisories/unreviewed/2022/05/GHSA-7g5r-pc7v-gq4c/GHSA-7g5r-pc7v-gq4c.json @@ -7,12 +7,8 @@ "CVE-2007-4089" ], "details": "Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2) cp.php, and possibly other unspecified components.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7ggm-889r-327h/GHSA-7ggm-889r-327h.json b/advisories/unreviewed/2022/05/GHSA-7ggm-889r-327h/GHSA-7ggm-889r-327h.json index 62881adc422..18c35bd6e79 100644 --- a/advisories/unreviewed/2022/05/GHSA-7ggm-889r-327h/GHSA-7ggm-889r-327h.json +++ b/advisories/unreviewed/2022/05/GHSA-7ggm-889r-327h/GHSA-7ggm-889r-327h.json @@ -7,12 +7,8 @@ "CVE-2007-4296" ], "details": "Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server (ASSP) 1.3.3 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7ghr-4c3p-5m65/GHSA-7ghr-4c3p-5m65.json b/advisories/unreviewed/2022/05/GHSA-7ghr-4c3p-5m65/GHSA-7ghr-4c3p-5m65.json index 5dc73c57ab9..937057d5413 100644 --- a/advisories/unreviewed/2022/05/GHSA-7ghr-4c3p-5m65/GHSA-7ghr-4c3p-5m65.json +++ b/advisories/unreviewed/2022/05/GHSA-7ghr-4c3p-5m65/GHSA-7ghr-4c3p-5m65.json @@ -7,12 +7,8 @@ "CVE-2007-4206" ], "details": "Kaspersky Anti-Spam 3.0 MP1 before Critical Fix 2 (3.0.278.4) sets incorrect permissions for application files in certain upgrade scenarios, which might allow local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7h3m-f66x-j7cc/GHSA-7h3m-f66x-j7cc.json b/advisories/unreviewed/2022/05/GHSA-7h3m-f66x-j7cc/GHSA-7h3m-f66x-j7cc.json index d2894faa484..46d0ddaa908 100644 --- a/advisories/unreviewed/2022/05/GHSA-7h3m-f66x-j7cc/GHSA-7h3m-f66x-j7cc.json +++ b/advisories/unreviewed/2022/05/GHSA-7h3m-f66x-j7cc/GHSA-7h3m-f66x-j7cc.json @@ -7,12 +7,8 @@ "CVE-2007-4167" ], "details": "PHP remote file inclusion vulnerability in cat_viewed.php in AL-Caricatier 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the CatName parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hh7-mhm5-pgp7/GHSA-7hh7-mhm5-pgp7.json b/advisories/unreviewed/2022/05/GHSA-7hh7-mhm5-pgp7/GHSA-7hh7-mhm5-pgp7.json index 8155a9ba57a..9a6d841614b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hh7-mhm5-pgp7/GHSA-7hh7-mhm5-pgp7.json +++ b/advisories/unreviewed/2022/05/GHSA-7hh7-mhm5-pgp7/GHSA-7hh7-mhm5-pgp7.json @@ -7,12 +7,8 @@ "CVE-2007-4013" ], "details": "Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis Client) in a Firefox plugin directory, and (3) a second npCtxCAO.dll (aka CCAOControl Object) before 4.5.0.0 in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 have unknown impact and attack vectors, possibly related to buffer overflows. NOTE: vector 3 might overlap CVE-2007-3679.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hp2-wg9m-cm55/GHSA-7hp2-wg9m-cm55.json b/advisories/unreviewed/2022/05/GHSA-7hp2-wg9m-cm55/GHSA-7hp2-wg9m-cm55.json index 424fa87519c..9fcd4dd7fe9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hp2-wg9m-cm55/GHSA-7hp2-wg9m-cm55.json +++ b/advisories/unreviewed/2022/05/GHSA-7hp2-wg9m-cm55/GHSA-7hp2-wg9m-cm55.json @@ -7,12 +7,8 @@ "CVE-2007-3872" ], "details": "Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7mf2-w637-f57x/GHSA-7mf2-w637-f57x.json b/advisories/unreviewed/2022/05/GHSA-7mf2-w637-f57x/GHSA-7mf2-w637-f57x.json index 4d7263f6e3c..b75e642e9d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mf2-w637-f57x/GHSA-7mf2-w637-f57x.json +++ b/advisories/unreviewed/2022/05/GHSA-7mf2-w637-f57x/GHSA-7mf2-w637-f57x.json @@ -7,12 +7,8 @@ "CVE-2007-4041" ], "details": "Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mwq-29x6-x8fx/GHSA-7mwq-29x6-x8fx.json b/advisories/unreviewed/2022/05/GHSA-7mwq-29x6-x8fx/GHSA-7mwq-29x6-x8fx.json index 0e4e9336d7c..b44c8d34e3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mwq-29x6-x8fx/GHSA-7mwq-29x6-x8fx.json +++ b/advisories/unreviewed/2022/05/GHSA-7mwq-29x6-x8fx/GHSA-7mwq-29x6-x8fx.json @@ -7,12 +7,8 @@ "CVE-2007-4141" ], "details": "OpenRat CMS 0.8-beta1 and earlier allows remote attackers to obtain sensitive information via a request containing an XSS sequence in the action parameter to index.php, which reveals the path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7p4g-p325-hv5m/GHSA-7p4g-p325-hv5m.json b/advisories/unreviewed/2022/05/GHSA-7p4g-p325-hv5m/GHSA-7p4g-p325-hv5m.json index 638b07372aa..c9409789896 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p4g-p325-hv5m/GHSA-7p4g-p325-hv5m.json +++ b/advisories/unreviewed/2022/05/GHSA-7p4g-p325-hv5m/GHSA-7p4g-p325-hv5m.json @@ -7,12 +7,8 @@ "CVE-2007-4311" ], "details": "The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7p6q-pqf8-h6hj/GHSA-7p6q-pqf8-h6hj.json b/advisories/unreviewed/2022/05/GHSA-7p6q-pqf8-h6hj/GHSA-7p6q-pqf8-h6hj.json index b922f307d00..3a925804948 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p6q-pqf8-h6hj/GHSA-7p6q-pqf8-h6hj.json +++ b/advisories/unreviewed/2022/05/GHSA-7p6q-pqf8-h6hj/GHSA-7p6q-pqf8-h6hj.json @@ -7,12 +7,8 @@ "CVE-2007-3861" ], "details": "Unspecified vulnerability in Oracle Jdeveloper in Oracle Application Server 10.1.2.2 and Collaboration Suite 10.1.2 allows context-dependent attackers to have an unknown impact via custom applications that use JBO.KEY, aka JDEV01.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7p9v-m7wx-54jr/GHSA-7p9v-m7wx-54jr.json b/advisories/unreviewed/2022/05/GHSA-7p9v-m7wx-54jr/GHSA-7p9v-m7wx-54jr.json index 84161653711..a0fe6c90443 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p9v-m7wx-54jr/GHSA-7p9v-m7wx-54jr.json +++ b/advisories/unreviewed/2022/05/GHSA-7p9v-m7wx-54jr/GHSA-7p9v-m7wx-54jr.json @@ -7,12 +7,8 @@ "CVE-2007-4312" ], "details": "SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter in a \"print articles\" action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7q45-837r-mmf6/GHSA-7q45-837r-mmf6.json b/advisories/unreviewed/2022/05/GHSA-7q45-837r-mmf6/GHSA-7q45-837r-mmf6.json index a0879c23a5d..bed75f91a07 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q45-837r-mmf6/GHSA-7q45-837r-mmf6.json +++ b/advisories/unreviewed/2022/05/GHSA-7q45-837r-mmf6/GHSA-7q45-837r-mmf6.json @@ -7,12 +7,8 @@ "CVE-2007-4358" ], "details": "Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (aka connection packet) containing 0x69 in the ninth byte, which triggers a \"double-delete\" of trace data, a different vulnerability than CVE-2005-1643.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7qf3-hj74-prhw/GHSA-7qf3-hj74-prhw.json b/advisories/unreviewed/2022/05/GHSA-7qf3-hj74-prhw/GHSA-7qf3-hj74-prhw.json index af8ec36f4b3..12c4f82c85c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qf3-hj74-prhw/GHSA-7qf3-hj74-prhw.json +++ b/advisories/unreviewed/2022/05/GHSA-7qf3-hj74-prhw/GHSA-7qf3-hj74-prhw.json @@ -7,12 +7,8 @@ "CVE-2007-4267" ], "details": "Stack-based buffer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted IOCTL request that adds an AppleTalk zone to a routing table.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7qph-c6xr-695q/GHSA-7qph-c6xr-695q.json b/advisories/unreviewed/2022/05/GHSA-7qph-c6xr-695q/GHSA-7qph-c6xr-695q.json index 3b78aa4ebb8..6e28d053732 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qph-c6xr-695q/GHSA-7qph-c6xr-695q.json +++ b/advisories/unreviewed/2022/05/GHSA-7qph-c6xr-695q/GHSA-7qph-c6xr-695q.json @@ -7,12 +7,8 @@ "CVE-2007-4211" ], "details": "The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7r5x-79rr-q8gm/GHSA-7r5x-79rr-q8gm.json b/advisories/unreviewed/2022/05/GHSA-7r5x-79rr-q8gm/GHSA-7r5x-79rr-q8gm.json index 681116f826f..0f0ad21f35c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7r5x-79rr-q8gm/GHSA-7r5x-79rr-q8gm.json +++ b/advisories/unreviewed/2022/05/GHSA-7r5x-79rr-q8gm/GHSA-7r5x-79rr-q8gm.json @@ -7,12 +7,8 @@ "CVE-2007-3998" ], "details": "The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash, or infinite loop) via certain arguments, as demonstrated by a 'chr(0), 0, \"\"' argument set.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7rff-gj34-r64x/GHSA-7rff-gj34-r64x.json b/advisories/unreviewed/2022/05/GHSA-7rff-gj34-r64x/GHSA-7rff-gj34-r64x.json index ade7a3a7a75..f123229f8a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rff-gj34-r64x/GHSA-7rff-gj34-r64x.json +++ b/advisories/unreviewed/2022/05/GHSA-7rff-gj34-r64x/GHSA-7rff-gj34-r64x.json @@ -7,12 +7,8 @@ "CVE-2019-4165" ], "details": "IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow a remote attacker to cause a denial of service attack using repeated requests to the server. IBM X-Force ID: 158698.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7rhj-q792-j2vw/GHSA-7rhj-q792-j2vw.json b/advisories/unreviewed/2022/05/GHSA-7rhj-q792-j2vw/GHSA-7rhj-q792-j2vw.json index b8a81ef9338..38929f4971b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rhj-q792-j2vw/GHSA-7rhj-q792-j2vw.json +++ b/advisories/unreviewed/2022/05/GHSA-7rhj-q792-j2vw/GHSA-7rhj-q792-j2vw.json @@ -7,12 +7,8 @@ "CVE-2007-4450" ], "details": "The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is not clear, although it probably makes exploitation of CVE-2007-4449 easier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7rhm-xghr-qr5r/GHSA-7rhm-xghr-qr5r.json b/advisories/unreviewed/2022/05/GHSA-7rhm-xghr-qr5r/GHSA-7rhm-xghr-qr5r.json index 08829216372..e599f2a2619 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rhm-xghr-qr5r/GHSA-7rhm-xghr-qr5r.json +++ b/advisories/unreviewed/2022/05/GHSA-7rhm-xghr-qr5r/GHSA-7rhm-xghr-qr5r.json @@ -7,12 +7,8 @@ "CVE-2007-3868" ], "details": "Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7rwq-85qc-qq76/GHSA-7rwq-85qc-qq76.json b/advisories/unreviewed/2022/05/GHSA-7rwq-85qc-qq76/GHSA-7rwq-85qc-qq76.json index 0c8721f3004..4388df411c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rwq-85qc-qq76/GHSA-7rwq-85qc-qq76.json +++ b/advisories/unreviewed/2022/05/GHSA-7rwq-85qc-qq76/GHSA-7rwq-85qc-qq76.json @@ -7,12 +7,8 @@ "CVE-2007-4098" ], "details": "Tor before 0.1.2.15 does not properly distinguish \"streamids from different exits,\" which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7v4r-7vpf-mxwf/GHSA-7v4r-7vpf-mxwf.json b/advisories/unreviewed/2022/05/GHSA-7v4r-7vpf-mxwf/GHSA-7v4r-7vpf-mxwf.json index 1e73daa1a0a..7c4a1154fa0 100644 --- a/advisories/unreviewed/2022/05/GHSA-7v4r-7vpf-mxwf/GHSA-7v4r-7vpf-mxwf.json +++ b/advisories/unreviewed/2022/05/GHSA-7v4r-7vpf-mxwf/GHSA-7v4r-7vpf-mxwf.json @@ -7,12 +7,8 @@ "CVE-2007-4401" ], "details": "Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7w62-3gcr-qh6w/GHSA-7w62-3gcr-qh6w.json b/advisories/unreviewed/2022/05/GHSA-7w62-3gcr-qh6w/GHSA-7w62-3gcr-qh6w.json index 68acb26acfc..023d90d2aac 100644 --- a/advisories/unreviewed/2022/05/GHSA-7w62-3gcr-qh6w/GHSA-7w62-3gcr-qh6w.json +++ b/advisories/unreviewed/2022/05/GHSA-7w62-3gcr-qh6w/GHSA-7w62-3gcr-qh6w.json @@ -7,12 +7,8 @@ "CVE-2016-10901" ], "details": "The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7wh9-gwxv-66ch/GHSA-7wh9-gwxv-66ch.json b/advisories/unreviewed/2022/05/GHSA-7wh9-gwxv-66ch/GHSA-7wh9-gwxv-66ch.json index c906ea0ec27..2939866519c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wh9-gwxv-66ch/GHSA-7wh9-gwxv-66ch.json +++ b/advisories/unreviewed/2022/05/GHSA-7wh9-gwxv-66ch/GHSA-7wh9-gwxv-66ch.json @@ -7,12 +7,8 @@ "CVE-2007-4193" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to perform certain actions as arbitrary users, as demonstrated by (1) modifying data or (2) canceling a subscription. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so, then this issue should not be included in CVE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7x5f-fvjf-pxrp/GHSA-7x5f-fvjf-pxrp.json b/advisories/unreviewed/2022/05/GHSA-7x5f-fvjf-pxrp/GHSA-7x5f-fvjf-pxrp.json index 3b4b89f9a91..bfc04d59ee1 100644 --- a/advisories/unreviewed/2022/05/GHSA-7x5f-fvjf-pxrp/GHSA-7x5f-fvjf-pxrp.json +++ b/advisories/unreviewed/2022/05/GHSA-7x5f-fvjf-pxrp/GHSA-7x5f-fvjf-pxrp.json @@ -7,12 +7,8 @@ "CVE-2007-4352" ], "details": "Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -348,9 +344,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7xvp-h8mg-2vfg/GHSA-7xvp-h8mg-2vfg.json b/advisories/unreviewed/2022/05/GHSA-7xvp-h8mg-2vfg/GHSA-7xvp-h8mg-2vfg.json index d9c1e9e4f26..754db5d188e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xvp-h8mg-2vfg/GHSA-7xvp-h8mg-2vfg.json +++ b/advisories/unreviewed/2022/05/GHSA-7xvp-h8mg-2vfg/GHSA-7xvp-h8mg-2vfg.json @@ -7,12 +7,8 @@ "CVE-2007-4391" ], "details": "Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field in JPEG2000 data, as demonstrated by sending an \"invite to view my webcam\" request, and then injecting a DLL into the attacker's peer Yahoo! Messenger application when this request is accepted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-82mh-7w4c-7wxg/GHSA-82mh-7w4c-7wxg.json b/advisories/unreviewed/2022/05/GHSA-82mh-7w4c-7wxg/GHSA-82mh-7w4c-7wxg.json index 33fa20a8dc3..65a361baf26 100644 --- a/advisories/unreviewed/2022/05/GHSA-82mh-7w4c-7wxg/GHSA-82mh-7w4c-7wxg.json +++ b/advisories/unreviewed/2022/05/GHSA-82mh-7w4c-7wxg/GHSA-82mh-7w4c-7wxg.json @@ -7,12 +7,8 @@ "CVE-2007-4475" ], "details": "Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-82qc-37vw-wmf4/GHSA-82qc-37vw-wmf4.json b/advisories/unreviewed/2022/05/GHSA-82qc-37vw-wmf4/GHSA-82qc-37vw-wmf4.json index 42f5e3b55a8..e8a416deb09 100644 --- a/advisories/unreviewed/2022/05/GHSA-82qc-37vw-wmf4/GHSA-82qc-37vw-wmf4.json +++ b/advisories/unreviewed/2022/05/GHSA-82qc-37vw-wmf4/GHSA-82qc-37vw-wmf4.json @@ -7,12 +7,8 @@ "CVE-2007-4025" ], "details": "Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8378-c84x-wpqv/GHSA-8378-c84x-wpqv.json b/advisories/unreviewed/2022/05/GHSA-8378-c84x-wpqv/GHSA-8378-c84x-wpqv.json index 341d10ad120..caaa851be0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8378-c84x-wpqv/GHSA-8378-c84x-wpqv.json +++ b/advisories/unreviewed/2022/05/GHSA-8378-c84x-wpqv/GHSA-8378-c84x-wpqv.json @@ -7,12 +7,8 @@ "CVE-2007-3996" ], "details": "Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -180,9 +176,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-847m-hhjw-9pj4/GHSA-847m-hhjw-9pj4.json b/advisories/unreviewed/2022/05/GHSA-847m-hhjw-9pj4/GHSA-847m-hhjw-9pj4.json index 988c55e8ca7..0ea2ffd7d87 100644 --- a/advisories/unreviewed/2022/05/GHSA-847m-hhjw-9pj4/GHSA-847m-hhjw-9pj4.json +++ b/advisories/unreviewed/2022/05/GHSA-847m-hhjw-9pj4/GHSA-847m-hhjw-9pj4.json @@ -7,12 +7,8 @@ "CVE-2007-4292" ], "details": "Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service (device crash) via a malformed SIP packet, aka (1) CSCsf11855, (2) CSCeb21064, (3) CSCse40276, (4) CSCse68355, (5) CSCsf30058, (6) CSCsb24007, and (7) CSCsc60249.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8543-8r74-prff/GHSA-8543-8r74-prff.json b/advisories/unreviewed/2022/05/GHSA-8543-8r74-prff/GHSA-8543-8r74-prff.json index 93a0473bfc7..278abce62ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-8543-8r74-prff/GHSA-8543-8r74-prff.json +++ b/advisories/unreviewed/2022/05/GHSA-8543-8r74-prff/GHSA-8543-8r74-prff.json @@ -7,12 +7,8 @@ "CVE-2019-14388" ], "details": "cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled (SEC-507).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-85vp-6795-ghg7/GHSA-85vp-6795-ghg7.json b/advisories/unreviewed/2022/05/GHSA-85vp-6795-ghg7/GHSA-85vp-6795-ghg7.json index 8d27b7f0247..9241a83bcbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-85vp-6795-ghg7/GHSA-85vp-6795-ghg7.json +++ b/advisories/unreviewed/2022/05/GHSA-85vp-6795-ghg7/GHSA-85vp-6795-ghg7.json @@ -7,12 +7,8 @@ "CVE-2007-4671" ], "details": "Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to \"alter or access\" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages from the same domain.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-873j-h7j7-5h23/GHSA-873j-h7j7-5h23.json b/advisories/unreviewed/2022/05/GHSA-873j-h7j7-5h23/GHSA-873j-h7j7-5h23.json index a96ff1f6bbd..83ef17be338 100644 --- a/advisories/unreviewed/2022/05/GHSA-873j-h7j7-5h23/GHSA-873j-h7j7-5h23.json +++ b/advisories/unreviewed/2022/05/GHSA-873j-h7j7-5h23/GHSA-873j-h7j7-5h23.json @@ -7,12 +7,8 @@ "CVE-2007-4668" ], "details": "Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other \"file access,\" via unknown vectors, aka CORE-1312.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-875w-pqpj-756w/GHSA-875w-pqpj-756w.json b/advisories/unreviewed/2022/05/GHSA-875w-pqpj-756w/GHSA-875w-pqpj-756w.json index 5926b271bbb..a6dbd6f7f38 100644 --- a/advisories/unreviewed/2022/05/GHSA-875w-pqpj-756w/GHSA-875w-pqpj-756w.json +++ b/advisories/unreviewed/2022/05/GHSA-875w-pqpj-756w/GHSA-875w-pqpj-756w.json @@ -7,12 +7,8 @@ "CVE-2007-4429" ], "details": "Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a \"call to a specific number.\" NOTE: this identifier is for the en.securitylab.ru disclosure. According to the vendor, this issue is separate from the \"sign-on issues\" that reduced Skype service on 20070817, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8887-2wp4-729w/GHSA-8887-2wp4-729w.json b/advisories/unreviewed/2022/05/GHSA-8887-2wp4-729w/GHSA-8887-2wp4-729w.json index a8a2b9940fa..752af054182 100644 --- a/advisories/unreviewed/2022/05/GHSA-8887-2wp4-729w/GHSA-8887-2wp4-729w.json +++ b/advisories/unreviewed/2022/05/GHSA-8887-2wp4-729w/GHSA-8887-2wp4-729w.json @@ -7,12 +7,8 @@ "CVE-2007-4118" ], "details": "PHP remote file inclusion vulnerability in includes/functions.inc.php in phpVoter 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-88m4-p3vv-26ch/GHSA-88m4-p3vv-26ch.json b/advisories/unreviewed/2022/05/GHSA-88m4-p3vv-26ch/GHSA-88m4-p3vv-26ch.json index a3b03392193..b7cd3c34bb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-88m4-p3vv-26ch/GHSA-88m4-p3vv-26ch.json +++ b/advisories/unreviewed/2022/05/GHSA-88m4-p3vv-26ch/GHSA-88m4-p3vv-26ch.json @@ -7,12 +7,8 @@ "CVE-2007-3866" ], "details": "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via (a) Oracle Configurator (APPS02), (b) Oracle iExpenses (APPS03), (c) Oracle Application Object Library (APPS09), and (1) APPS12, (2) APPS13, and (3) APPS14 in (d) Oracle Payables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-89cm-m256-jgc7/GHSA-89cm-m256-jgc7.json b/advisories/unreviewed/2022/05/GHSA-89cm-m256-jgc7/GHSA-89cm-m256-jgc7.json index 1d6456b9a7c..8ea5bd14b4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-89cm-m256-jgc7/GHSA-89cm-m256-jgc7.json +++ b/advisories/unreviewed/2022/05/GHSA-89cm-m256-jgc7/GHSA-89cm-m256-jgc7.json @@ -7,12 +7,8 @@ "CVE-2007-3985" ], "details": "Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to download arbitrary files via a .. (dot dot) in the name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-89x3-9fp9-3xgq/GHSA-89x3-9fp9-3xgq.json b/advisories/unreviewed/2022/05/GHSA-89x3-9fp9-3xgq/GHSA-89x3-9fp9-3xgq.json index 7ce9efa67e6..8cb712f2df7 100644 --- a/advisories/unreviewed/2022/05/GHSA-89x3-9fp9-3xgq/GHSA-89x3-9fp9-3xgq.json +++ b/advisories/unreviewed/2022/05/GHSA-89x3-9fp9-3xgq/GHSA-89x3-9fp9-3xgq.json @@ -7,12 +7,8 @@ "CVE-2016-10900" ], "details": "The uji-countdown plugin before 2.0.7 for WordPress has XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8c56-vjvg-j75m/GHSA-8c56-vjvg-j75m.json b/advisories/unreviewed/2022/05/GHSA-8c56-vjvg-j75m/GHSA-8c56-vjvg-j75m.json index d75b1dc3df1..5a45d028d41 100644 --- a/advisories/unreviewed/2022/05/GHSA-8c56-vjvg-j75m/GHSA-8c56-vjvg-j75m.json +++ b/advisories/unreviewed/2022/05/GHSA-8c56-vjvg-j75m/GHSA-8c56-vjvg-j75m.json @@ -7,12 +7,8 @@ "CVE-2007-3862" ], "details": "Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka AS01.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8f3c-mh5h-xmx7/GHSA-8f3c-mh5h-xmx7.json b/advisories/unreviewed/2022/05/GHSA-8f3c-mh5h-xmx7/GHSA-8f3c-mh5h-xmx7.json index 33f2c350b2a..951673f2f4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f3c-mh5h-xmx7/GHSA-8f3c-mh5h-xmx7.json +++ b/advisories/unreviewed/2022/05/GHSA-8f3c-mh5h-xmx7/GHSA-8f3c-mh5h-xmx7.json @@ -7,12 +7,8 @@ "CVE-2007-4018" ], "details": "Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8fj5-2863-2jwg/GHSA-8fj5-2863-2jwg.json b/advisories/unreviewed/2022/05/GHSA-8fj5-2863-2jwg/GHSA-8fj5-2863-2jwg.json index 8d3bee4113c..27ff3a6e9b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fj5-2863-2jwg/GHSA-8fj5-2863-2jwg.json +++ b/advisories/unreviewed/2022/05/GHSA-8fj5-2863-2jwg/GHSA-8fj5-2863-2jwg.json @@ -7,12 +7,8 @@ "CVE-2019-1020008" ], "details": "stacktable.js before 1.0.4 allows XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "WEB", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8h2r-r59q-86xf/GHSA-8h2r-r59q-86xf.json b/advisories/unreviewed/2022/05/GHSA-8h2r-r59q-86xf/GHSA-8h2r-r59q-86xf.json index 2fb9cc45bab..843313f28c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h2r-r59q-86xf/GHSA-8h2r-r59q-86xf.json +++ b/advisories/unreviewed/2022/05/GHSA-8h2r-r59q-86xf/GHSA-8h2r-r59q-86xf.json @@ -7,12 +7,8 @@ "CVE-2007-4050" ], "details": "Unspecified vulnerability in WebUI in ADempiere Bazaar before 3.3 beta Victoria edition allows remote attackers to access system-level windows via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8h42-mpmq-5frp/GHSA-8h42-mpmq-5frp.json b/advisories/unreviewed/2022/05/GHSA-8h42-mpmq-5frp/GHSA-8h42-mpmq-5frp.json index a56bb4bdee4..6c7c152db49 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h42-mpmq-5frp/GHSA-8h42-mpmq-5frp.json +++ b/advisories/unreviewed/2022/05/GHSA-8h42-mpmq-5frp/GHSA-8h42-mpmq-5frp.json @@ -7,12 +7,8 @@ "CVE-2007-4172" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Open Webmail (OWM) 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchtype, (2) longpage, and (3) page parameters to (a) openwebmail-main.pl; the (4) prefs_caller, (5) userfirsttime, (6) page, (7) sort, (8) folder, and (9) message_id parameters to (b) openwebmail-prefs.pl; the (10) compose_caller, (11) msgdatetype, (12) keyword, (13) searchtype, (14) folder, (15) page, and (16) sort parameters to (c) openwebmail-send.pl; the (17) folder, (18) page, and (19) sort parameters to (d) openwebmail-folder.pl; the (20) searchtype, (21) page, (22) filesort, (23) singlepage, (24) showhidden, (25) showthumbnail, and (26) message_id parameters to (e) openwebmail-webdisk.pl; the (27) folder parameter to (f) openwebmail-advsearch.pl; and the (28) abookcollapse, (29) abooksearchtype, (30) abooksort, (31) abooklongpage, (32) abookpage, (33) message_id, (34) searchtype, (35) msgdatetype, (36) sort, (37) page, (38) rootxowmuid, and (39) listviewmode parameters to (g) openwebmail-abook.pl, different vectors than CVE-2005-2863, CVE-2006-2190, CVE-2006-3229, and CVE-2006-3233.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8h7g-gwqv-cxvr/GHSA-8h7g-gwqv-cxvr.json b/advisories/unreviewed/2022/05/GHSA-8h7g-gwqv-cxvr/GHSA-8h7g-gwqv-cxvr.json index 30faa769292..ebd7e7fdb05 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h7g-gwqv-cxvr/GHSA-8h7g-gwqv-cxvr.json +++ b/advisories/unreviewed/2022/05/GHSA-8h7g-gwqv-cxvr/GHSA-8h7g-gwqv-cxvr.json @@ -7,12 +7,8 @@ "CVE-2007-4301" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8hhr-gmc5-rh68/GHSA-8hhr-gmc5-rh68.json b/advisories/unreviewed/2022/05/GHSA-8hhr-gmc5-rh68/GHSA-8hhr-gmc5-rh68.json index 00b32d1d702..779244af9ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hhr-gmc5-rh68/GHSA-8hhr-gmc5-rh68.json +++ b/advisories/unreviewed/2022/05/GHSA-8hhr-gmc5-rh68/GHSA-8hhr-gmc5-rh68.json @@ -7,12 +7,8 @@ "CVE-2007-3974" ], "details": "admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8hx5-8mhr-hxfm/GHSA-8hx5-8mhr-hxfm.json b/advisories/unreviewed/2022/05/GHSA-8hx5-8mhr-hxfm/GHSA-8hx5-8mhr-hxfm.json index 27914495b58..fbedf53b5a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hx5-8mhr-hxfm/GHSA-8hx5-8mhr-hxfm.json +++ b/advisories/unreviewed/2022/05/GHSA-8hx5-8mhr-hxfm/GHSA-8hx5-8mhr-hxfm.json @@ -7,12 +7,8 @@ "CVE-2007-4254" ], "details": "Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8j2f-wxx3-3hpg/GHSA-8j2f-wxx3-3hpg.json b/advisories/unreviewed/2022/05/GHSA-8j2f-wxx3-3hpg/GHSA-8j2f-wxx3-3hpg.json index 60984ec7c72..e51a514d606 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j2f-wxx3-3hpg/GHSA-8j2f-wxx3-3hpg.json +++ b/advisories/unreviewed/2022/05/GHSA-8j2f-wxx3-3hpg/GHSA-8j2f-wxx3-3hpg.json @@ -7,12 +7,8 @@ "CVE-2007-4365" ], "details": "Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a set_lang cookie to an unspecified component. NOTE: this may overlap CVE-2007-1965.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8jmw-m2mh-5mcm/GHSA-8jmw-m2mh-5mcm.json b/advisories/unreviewed/2022/05/GHSA-8jmw-m2mh-5mcm/GHSA-8jmw-m2mh-5mcm.json index 05c5864d2c8..5a74a4dae39 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jmw-m2mh-5mcm/GHSA-8jmw-m2mh-5mcm.json +++ b/advisories/unreviewed/2022/05/GHSA-8jmw-m2mh-5mcm/GHSA-8jmw-m2mh-5mcm.json @@ -7,12 +7,8 @@ "CVE-2007-4059" ], "details": "Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8m4r-hmpf-cp7g/GHSA-8m4r-hmpf-cp7g.json b/advisories/unreviewed/2022/05/GHSA-8m4r-hmpf-cp7g/GHSA-8m4r-hmpf-cp7g.json index e0f99490608..3108c6e774c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m4r-hmpf-cp7g/GHSA-8m4r-hmpf-cp7g.json +++ b/advisories/unreviewed/2022/05/GHSA-8m4r-hmpf-cp7g/GHSA-8m4r-hmpf-cp7g.json @@ -7,12 +7,8 @@ "CVE-2007-4663" ], "details": "Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open_basedir restrictions via unspecified vectors involving the glob function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8mw3-jcqc-w7cw/GHSA-8mw3-jcqc-w7cw.json b/advisories/unreviewed/2022/05/GHSA-8mw3-jcqc-w7cw/GHSA-8mw3-jcqc-w7cw.json index a821f3121aa..cf4a0b93db1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mw3-jcqc-w7cw/GHSA-8mw3-jcqc-w7cw.json +++ b/advisories/unreviewed/2022/05/GHSA-8mw3-jcqc-w7cw/GHSA-8mw3-jcqc-w7cw.json @@ -7,12 +7,8 @@ "CVE-2007-4326" ], "details": "Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) gruppen.php, (2) bild.php, (3) feed.php, (4) mitglieder.php, (5) online.php, (6) profil.php, and possibly other unspecified PHP scripts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8p52-f87h-wxg3/GHSA-8p52-f87h-wxg3.json b/advisories/unreviewed/2022/05/GHSA-8p52-f87h-wxg3/GHSA-8p52-f87h-wxg3.json index 6e7545933a2..923a1e9c766 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p52-f87h-wxg3/GHSA-8p52-f87h-wxg3.json +++ b/advisories/unreviewed/2022/05/GHSA-8p52-f87h-wxg3/GHSA-8p52-f87h-wxg3.json @@ -7,12 +7,8 @@ "CVE-2007-4371" ], "details": "Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload and execute arbitrary PHP files in uploads/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8p79-497p-9qx5/GHSA-8p79-497p-9qx5.json b/advisories/unreviewed/2022/05/GHSA-8p79-497p-9qx5/GHSA-8p79-497p-9qx5.json index ea11d49becb..2c29f66af52 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p79-497p-9qx5/GHSA-8p79-497p-9qx5.json +++ b/advisories/unreviewed/2022/05/GHSA-8p79-497p-9qx5/GHSA-8p79-497p-9qx5.json @@ -7,12 +7,8 @@ "CVE-2007-4093" ], "details": "Minb Is Not a Blog (minb) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing usernames and encrypted passwords via a direct request for db/users.db.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8phx-jw6g-7x8q/GHSA-8phx-jw6g-7x8q.json b/advisories/unreviewed/2022/05/GHSA-8phx-jw6g-7x8q/GHSA-8phx-jw6g-7x8q.json index 0c91f6d34a5..11848afcd7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8phx-jw6g-7x8q/GHSA-8phx-jw6g-7x8q.json +++ b/advisories/unreviewed/2022/05/GHSA-8phx-jw6g-7x8q/GHSA-8phx-jw6g-7x8q.json @@ -7,12 +7,8 @@ "CVE-2007-4444" ], "details": "Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID (1) 0x80 or (2) 0x88 to UDP port 34297, related to the buffer containing the server version number.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8pm8-x89q-wwh9/GHSA-8pm8-x89q-wwh9.json b/advisories/unreviewed/2022/05/GHSA-8pm8-x89q-wwh9/GHSA-8pm8-x89q-wwh9.json index 40655c564fb..0b54e0a0f7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pm8-x89q-wwh9/GHSA-8pm8-x89q-wwh9.json +++ b/advisories/unreviewed/2022/05/GHSA-8pm8-x89q-wwh9/GHSA-8pm8-x89q-wwh9.json @@ -7,12 +7,8 @@ "CVE-2007-4368" ], "details": "SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter in a GenerateMainFrame command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8pq8-2jfh-2v88/GHSA-8pq8-2jfh-2v88.json b/advisories/unreviewed/2022/05/GHSA-8pq8-2jfh-2v88/GHSA-8pq8-2jfh-2v88.json index 6f4f75008dc..c3c4a7e00ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pq8-2jfh-2v88/GHSA-8pq8-2jfh-2v88.json +++ b/advisories/unreviewed/2022/05/GHSA-8pq8-2jfh-2v88/GHSA-8pq8-2jfh-2v88.json @@ -7,12 +7,8 @@ "CVE-2019-2178" ], "details": "In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC service with no additional execution privileges needed. User interaction is not needed for exploitation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8qqj-ch4p-86p2/GHSA-8qqj-ch4p-86p2.json b/advisories/unreviewed/2022/05/GHSA-8qqj-ch4p-86p2/GHSA-8qqj-ch4p-86p2.json index bb4f599b506..ec1e3783b2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qqj-ch4p-86p2/GHSA-8qqj-ch4p-86p2.json +++ b/advisories/unreviewed/2022/05/GHSA-8qqj-ch4p-86p2/GHSA-8qqj-ch4p-86p2.json @@ -7,12 +7,8 @@ "CVE-2007-4357" ], "details": "Mozilla Firefox 2.0.0.6 and earlier allows remote attackers to spoof the contents of the status bar via a link to a data: URI containing an encoded URL. NOTE: the severity of this issue has been disputed by a reliable third party, since the intended functionality of the status bar allows it to be modified.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8qrp-j8rm-jjjx/GHSA-8qrp-j8rm-jjjx.json b/advisories/unreviewed/2022/05/GHSA-8qrp-j8rm-jjjx/GHSA-8qrp-j8rm-jjjx.json index a596d2c8b91..cbae3422d9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qrp-j8rm-jjjx/GHSA-8qrp-j8rm-jjjx.json +++ b/advisories/unreviewed/2022/05/GHSA-8qrp-j8rm-jjjx/GHSA-8qrp-j8rm-jjjx.json @@ -7,12 +7,8 @@ "CVE-2007-4511" ], "details": "The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, which causes the (1) SSL and (2) SSL_MutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass intended policy.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8qrr-wj6c-wg69/GHSA-8qrr-wj6c-wg69.json b/advisories/unreviewed/2022/05/GHSA-8qrr-wj6c-wg69/GHSA-8qrr-wj6c-wg69.json index c8002e779c5..54ca8e8653d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qrr-wj6c-wg69/GHSA-8qrr-wj6c-wg69.json +++ b/advisories/unreviewed/2022/05/GHSA-8qrr-wj6c-wg69/GHSA-8qrr-wj6c-wg69.json @@ -7,12 +7,8 @@ "CVE-2007-4486" ], "details": "Multiple PHP remote file inclusion vulnerabilities in index.php in Linkliste 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) styl[top], (2) url_eintrag, or (3) styl[themen] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8rxv-xq45-73mm/GHSA-8rxv-xq45-73mm.json b/advisories/unreviewed/2022/05/GHSA-8rxv-xq45-73mm/GHSA-8rxv-xq45-73mm.json index a0b5896cf39..0c2056e2f19 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rxv-xq45-73mm/GHSA-8rxv-xq45-73mm.json +++ b/advisories/unreviewed/2022/05/GHSA-8rxv-xq45-73mm/GHSA-8rxv-xq45-73mm.json @@ -7,12 +7,8 @@ "CVE-2007-4456" ], "details": "SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attackers to execute arbitrary SQL commands via the aid parameter. NOTE: it was later reported that 2.40 is also affected, and that the component can be used in Joomla! in addition to Mambo.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8w89-3rvr-hm3w/GHSA-8w89-3rvr-hm3w.json b/advisories/unreviewed/2022/05/GHSA-8w89-3rvr-hm3w/GHSA-8w89-3rvr-hm3w.json index 8733e9f8cc8..8b16835cad6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w89-3rvr-hm3w/GHSA-8w89-3rvr-hm3w.json +++ b/advisories/unreviewed/2022/05/GHSA-8w89-3rvr-hm3w/GHSA-8w89-3rvr-hm3w.json @@ -7,12 +7,8 @@ "CVE-2007-4367" ], "details": "Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a \"virtual function call on an invalid pointer.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8w9v-5prf-r8mm/GHSA-8w9v-5prf-r8mm.json b/advisories/unreviewed/2022/05/GHSA-8w9v-5prf-r8mm/GHSA-8w9v-5prf-r8mm.json index e4cbb66c921..8a862eba222 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w9v-5prf-r8mm/GHSA-8w9v-5prf-r8mm.json +++ b/advisories/unreviewed/2022/05/GHSA-8w9v-5prf-r8mm/GHSA-8w9v-5prf-r8mm.json @@ -7,12 +7,8 @@ "CVE-2007-4186" ], "details": "PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8wh5-6c6f-pxpq/GHSA-8wh5-6c6f-pxpq.json b/advisories/unreviewed/2022/05/GHSA-8wh5-6c6f-pxpq/GHSA-8wh5-6c6f-pxpq.json index efb2693834a..22d5eb00930 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wh5-6c6f-pxpq/GHSA-8wh5-6c6f-pxpq.json +++ b/advisories/unreviewed/2022/05/GHSA-8wh5-6c6f-pxpq/GHSA-8wh5-6c6f-pxpq.json @@ -7,12 +7,8 @@ "CVE-2007-4382" ], "details": "CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8x3g-x37v-2c8f/GHSA-8x3g-x37v-2c8f.json b/advisories/unreviewed/2022/05/GHSA-8x3g-x37v-2c8f/GHSA-8x3g-x37v-2c8f.json index 62c095b3531..0c01657bbfa 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x3g-x37v-2c8f/GHSA-8x3g-x37v-2c8f.json +++ b/advisories/unreviewed/2022/05/GHSA-8x3g-x37v-2c8f/GHSA-8x3g-x37v-2c8f.json @@ -7,12 +7,8 @@ "CVE-2019-14386" ], "details": "cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface (SEC-504).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8xwc-w2c9-2f8c/GHSA-8xwc-w2c9-2f8c.json b/advisories/unreviewed/2022/05/GHSA-8xwc-w2c9-2f8c/GHSA-8xwc-w2c9-2f8c.json index 33ca1691908..9c3e4f9d2b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xwc-w2c9-2f8c/GHSA-8xwc-w2c9-2f8c.json +++ b/advisories/unreviewed/2022/05/GHSA-8xwc-w2c9-2f8c/GHSA-8xwc-w2c9-2f8c.json @@ -7,12 +7,8 @@ "CVE-2007-4228" ], "details": "rmpvc on IBM AIX 4.3 allows local users to cause a denial of service (system crash) via long port logical name (-l) argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9333-3mp2-vq88/GHSA-9333-3mp2-vq88.json b/advisories/unreviewed/2022/05/GHSA-9333-3mp2-vq88/GHSA-9333-3mp2-vq88.json index 67d760faaf1..352350f7ab8 100644 --- a/advisories/unreviewed/2022/05/GHSA-9333-3mp2-vq88/GHSA-9333-3mp2-vq88.json +++ b/advisories/unreviewed/2022/05/GHSA-9333-3mp2-vq88/GHSA-9333-3mp2-vq88.json @@ -7,12 +7,8 @@ "CVE-2007-3988" ], "details": "Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-93f6-cmww-g7mv/GHSA-93f6-cmww-g7mv.json b/advisories/unreviewed/2022/05/GHSA-93f6-cmww-g7mv/GHSA-93f6-cmww-g7mv.json index 490b582a3c8..228983ea512 100644 --- a/advisories/unreviewed/2022/05/GHSA-93f6-cmww-g7mv/GHSA-93f6-cmww-g7mv.json +++ b/advisories/unreviewed/2022/05/GHSA-93f6-cmww-g7mv/GHSA-93f6-cmww-g7mv.json @@ -7,12 +7,8 @@ "CVE-2007-4065" ], "details": "lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted OGG file, aka trac Changeset 13217.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-93gm-pgf6-cgvg/GHSA-93gm-pgf6-cgvg.json b/advisories/unreviewed/2022/05/GHSA-93gm-pgf6-cgvg/GHSA-93gm-pgf6-cgvg.json index a0104e859f1..91be0a6d3bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-93gm-pgf6-cgvg/GHSA-93gm-pgf6-cgvg.json +++ b/advisories/unreviewed/2022/05/GHSA-93gm-pgf6-cgvg/GHSA-93gm-pgf6-cgvg.json @@ -7,12 +7,8 @@ "CVE-2007-4272" ], "details": "Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via (1) unspecified vectors where an attacker's umask is honored, (2) /etc/ld.so.preload, (3) certain \"cron data file locations\", and other unspecified vectors possibly involving the (4) OSSEMEMDBG or (5) TRC_LOG_FILE environment variable in db2licd (db2licm).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-946w-fc5x-gqqm/GHSA-946w-fc5x-gqqm.json b/advisories/unreviewed/2022/05/GHSA-946w-fc5x-gqqm/GHSA-946w-fc5x-gqqm.json index 07c08871cd8..2a44e57b64f 100644 --- a/advisories/unreviewed/2022/05/GHSA-946w-fc5x-gqqm/GHSA-946w-fc5x-gqqm.json +++ b/advisories/unreviewed/2022/05/GHSA-946w-fc5x-gqqm/GHSA-946w-fc5x-gqqm.json @@ -7,12 +7,8 @@ "CVE-2007-4273" ], "details": "IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a \"crafted localized message file\" that enables a format string attack, possibly involving the (1) OSSEMEMDBG or (2) TRC_LOG_FILE environment variable in db2licd (db2licm).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-94j6-5477-xx25/GHSA-94j6-5477-xx25.json b/advisories/unreviewed/2022/05/GHSA-94j6-5477-xx25/GHSA-94j6-5477-xx25.json index 57d75f9f24f..630322fad46 100644 --- a/advisories/unreviewed/2022/05/GHSA-94j6-5477-xx25/GHSA-94j6-5477-xx25.json +++ b/advisories/unreviewed/2022/05/GHSA-94j6-5477-xx25/GHSA-94j6-5477-xx25.json @@ -7,12 +7,8 @@ "CVE-2007-4488" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI immediately following the filename for (1) a GIF filename, which triggers display of the GIF file in text format and an unspecified denial of service (crash); or (2) the login.tri filename, which triggers a continuous loop of the browser attempting to visit the login page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-953w-v856-4gqv/GHSA-953w-v856-4gqv.json b/advisories/unreviewed/2022/05/GHSA-953w-v856-4gqv/GHSA-953w-v856-4gqv.json index 6602102c3c2..5c141fda240 100644 --- a/advisories/unreviewed/2022/05/GHSA-953w-v856-4gqv/GHSA-953w-v856-4gqv.json +++ b/advisories/unreviewed/2022/05/GHSA-953w-v856-4gqv/GHSA-953w-v856-4gqv.json @@ -7,12 +7,8 @@ "CVE-2007-4669" ], "details": "The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-966w-852v-c3c4/GHSA-966w-852v-c3c4.json b/advisories/unreviewed/2022/05/GHSA-966w-852v-c3c4/GHSA-966w-852v-c3c4.json index 0abdc4e4c22..4b8e8295106 100644 --- a/advisories/unreviewed/2022/05/GHSA-966w-852v-c3c4/GHSA-966w-852v-c3c4.json +++ b/advisories/unreviewed/2022/05/GHSA-966w-852v-c3c4/GHSA-966w-852v-c3c4.json @@ -7,12 +7,8 @@ "CVE-2007-3997" ], "details": "The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_basedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-96px-j5gx-ww84/GHSA-96px-j5gx-ww84.json b/advisories/unreviewed/2022/05/GHSA-96px-j5gx-ww84/GHSA-96px-j5gx-ww84.json index 8454318bc92..8bb10646ad0 100644 --- a/advisories/unreviewed/2022/05/GHSA-96px-j5gx-ww84/GHSA-96px-j5gx-ww84.json +++ b/advisories/unreviewed/2022/05/GHSA-96px-j5gx-ww84/GHSA-96px-j5gx-ww84.json @@ -7,12 +7,8 @@ "CVE-2007-4349" ], "details": "The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-978x-vf2g-q5gr/GHSA-978x-vf2g-q5gr.json b/advisories/unreviewed/2022/05/GHSA-978x-vf2g-q5gr/GHSA-978x-vf2g-q5gr.json index da35ef4642a..696852ac463 100644 --- a/advisories/unreviewed/2022/05/GHSA-978x-vf2g-q5gr/GHSA-978x-vf2g-q5gr.json +++ b/advisories/unreviewed/2022/05/GHSA-978x-vf2g-q5gr/GHSA-978x-vf2g-q5gr.json @@ -7,12 +7,8 @@ "CVE-2007-3976" ], "details": "SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-979g-pm7h-8w7x/GHSA-979g-pm7h-8w7x.json b/advisories/unreviewed/2022/05/GHSA-979g-pm7h-8w7x/GHSA-979g-pm7h-8w7x.json index cb1e4341caf..363145f3c22 100644 --- a/advisories/unreviewed/2022/05/GHSA-979g-pm7h-8w7x/GHSA-979g-pm7h-8w7x.json +++ b/advisories/unreviewed/2022/05/GHSA-979g-pm7h-8w7x/GHSA-979g-pm7h-8w7x.json @@ -7,12 +7,8 @@ "CVE-2019-14390" ], "details": "cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface (SEC-512).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-97hf-fx7v-9cc8/GHSA-97hf-fx7v-9cc8.json b/advisories/unreviewed/2022/05/GHSA-97hf-fx7v-9cc8/GHSA-97hf-fx7v-9cc8.json index 96cddeac74f..39420bf1a9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-97hf-fx7v-9cc8/GHSA-97hf-fx7v-9cc8.json +++ b/advisories/unreviewed/2022/05/GHSA-97hf-fx7v-9cc8/GHSA-97hf-fx7v-9cc8.json @@ -7,12 +7,8 @@ "CVE-2007-4107" ], "details": "SQL injection vulnerability in editpost.php in phpMyForum before 4.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-97qr-g756-476h/GHSA-97qr-g756-476h.json b/advisories/unreviewed/2022/05/GHSA-97qr-g756-476h/GHSA-97qr-g756-476h.json index a3030d6a16c..6ea15fa085c 100644 --- a/advisories/unreviewed/2022/05/GHSA-97qr-g756-476h/GHSA-97qr-g756-476h.json +++ b/advisories/unreviewed/2022/05/GHSA-97qr-g756-476h/GHSA-97qr-g756-476h.json @@ -7,12 +7,8 @@ "CVE-2007-4010" ], "details": "The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote attackers to execute arbitrary commands via the win_shell_execute function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-98gg-7cgj-4r9j/GHSA-98gg-7cgj-4r9j.json b/advisories/unreviewed/2022/05/GHSA-98gg-7cgj-4r9j/GHSA-98gg-7cgj-4r9j.json index 453e347a20c..cf2abd58f08 100644 --- a/advisories/unreviewed/2022/05/GHSA-98gg-7cgj-4r9j/GHSA-98gg-7cgj-4r9j.json +++ b/advisories/unreviewed/2022/05/GHSA-98gg-7cgj-4r9j/GHSA-98gg-7cgj-4r9j.json @@ -7,12 +7,8 @@ "CVE-2019-14389" ], "details": "cPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9cx2-wh5f-rgrj/GHSA-9cx2-wh5f-rgrj.json b/advisories/unreviewed/2022/05/GHSA-9cx2-wh5f-rgrj/GHSA-9cx2-wh5f-rgrj.json index f244eabb030..7102cf1e47c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cx2-wh5f-rgrj/GHSA-9cx2-wh5f-rgrj.json +++ b/advisories/unreviewed/2022/05/GHSA-9cx2-wh5f-rgrj/GHSA-9cx2-wh5f-rgrj.json @@ -7,12 +7,8 @@ "CVE-2019-2179" ], "details": "In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9hw8-279p-g3rh/GHSA-9hw8-279p-g3rh.json b/advisories/unreviewed/2022/05/GHSA-9hw8-279p-g3rh/GHSA-9hw8-279p-g3rh.json index 4552e20310d..471d5deb0d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hw8-279p-g3rh/GHSA-9hw8-279p-g3rh.json +++ b/advisories/unreviewed/2022/05/GHSA-9hw8-279p-g3rh/GHSA-9hw8-279p-g3rh.json @@ -7,12 +7,8 @@ "CVE-2007-4173" ], "details": "SQL injection vulnerability in duyuruoku.asp in Hunkaray Okul Portali 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-3080.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9j28-rgm8-rqw2/GHSA-9j28-rgm8-rqw2.json b/advisories/unreviewed/2022/05/GHSA-9j28-rgm8-rqw2/GHSA-9j28-rgm8-rqw2.json index c807a3195c5..0a8bfaabe0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9j28-rgm8-rqw2/GHSA-9j28-rgm8-rqw2.json +++ b/advisories/unreviewed/2022/05/GHSA-9j28-rgm8-rqw2/GHSA-9j28-rgm8-rqw2.json @@ -7,12 +7,8 @@ "CVE-2007-4460" ], "details": "The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9mxx-w74h-p26c/GHSA-9mxx-w74h-p26c.json b/advisories/unreviewed/2022/05/GHSA-9mxx-w74h-p26c/GHSA-9mxx-w74h-p26c.json index a113522ad3a..7f2cdc64a62 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mxx-w74h-p26c/GHSA-9mxx-w74h-p26c.json +++ b/advisories/unreviewed/2022/05/GHSA-9mxx-w74h-p26c/GHSA-9mxx-w74h-p26c.json @@ -7,12 +7,8 @@ "CVE-2007-4396" ], "details": "Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0, (6) xmms2.pl 1.1.3, and (7) xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.11 allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9p2r-6h2j-22xf/GHSA-9p2r-6h2j-22xf.json b/advisories/unreviewed/2022/05/GHSA-9p2r-6h2j-22xf/GHSA-9p2r-6h2j-22xf.json index fb2537f811c..af3fe1e76fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-9p2r-6h2j-22xf/GHSA-9p2r-6h2j-22xf.json +++ b/advisories/unreviewed/2022/05/GHSA-9p2r-6h2j-22xf/GHSA-9p2r-6h2j-22xf.json @@ -7,12 +7,8 @@ "CVE-2007-4342" ], "details": "PHP remote file inclusion vulnerability in include.php in PHPCentral Login 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. NOTE: a third party disputes this vulnerability because of the special nature of the SERVER superglobal array.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9q76-jpwf-q3pq/GHSA-9q76-jpwf-q3pq.json b/advisories/unreviewed/2022/05/GHSA-9q76-jpwf-q3pq/GHSA-9q76-jpwf-q3pq.json index 707f68763f8..ea7b16b60c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q76-jpwf-q3pq/GHSA-9q76-jpwf-q3pq.json +++ b/advisories/unreviewed/2022/05/GHSA-9q76-jpwf-q3pq/GHSA-9q76-jpwf-q3pq.json @@ -7,12 +7,8 @@ "CVE-2007-4328" ], "details": "Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index.php, (2) galerie.php, or (3) anzagien.php. NOTE: A later report states that 1.1 is also affected, but that the filename for vector 3 is anzeigen.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9qgp-8vwj-75r2/GHSA-9qgp-8vwj-75r2.json b/advisories/unreviewed/2022/05/GHSA-9qgp-8vwj-75r2/GHSA-9qgp-8vwj-75r2.json index e4e9c484745..3160bec979b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qgp-8vwj-75r2/GHSA-9qgp-8vwj-75r2.json +++ b/advisories/unreviewed/2022/05/GHSA-9qgp-8vwj-75r2/GHSA-9qgp-8vwj-75r2.json @@ -7,12 +7,8 @@ "CVE-2007-4054" ], "details": "SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL commands via the cat parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9r4x-679c-v27f/GHSA-9r4x-679c-v27f.json b/advisories/unreviewed/2022/05/GHSA-9r4x-679c-v27f/GHSA-9r4x-679c-v27f.json index 0170c91759f..02c1735ebb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r4x-679c-v27f/GHSA-9r4x-679c-v27f.json +++ b/advisories/unreviewed/2022/05/GHSA-9r4x-679c-v27f/GHSA-9r4x-679c-v27f.json @@ -7,12 +7,8 @@ "CVE-2007-4458" ], "details": "PHP remote file inclusion vulnerability in includes/class/class_tpl.php in Firesoft allows remote attackers to execute arbitrary PHP code via a URL in the cache_file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9r7c-2w6m-p4h6/GHSA-9r7c-2w6m-p4h6.json b/advisories/unreviewed/2022/05/GHSA-9r7c-2w6m-p4h6/GHSA-9r7c-2w6m-p4h6.json index e9915c253ff..b5c43f63576 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r7c-2w6m-p4h6/GHSA-9r7c-2w6m-p4h6.json +++ b/advisories/unreviewed/2022/05/GHSA-9r7c-2w6m-p4h6/GHSA-9r7c-2w6m-p4h6.json @@ -7,12 +7,8 @@ "CVE-2007-4261" ], "details": "EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) a file containing cleartext passwords via a direct request for OnlineViewing/data/galleries.txt, or (2) a file containing username hashes and password hashes via a direct request for OnlineViewing/configuration/config.dat/. NOTE: vector 2 can be leveraged for administrative access because authentication does not require knowledge of cleartext values, but instead uses the username hash in the ConfigLogin parameter and the password hash in the ConfigPassword parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9rjr-pq6m-pxx6/GHSA-9rjr-pq6m-pxx6.json b/advisories/unreviewed/2022/05/GHSA-9rjr-pq6m-pxx6/GHSA-9rjr-pq6m-pxx6.json index 724d9fd19fa..0e2779a8ca2 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rjr-pq6m-pxx6/GHSA-9rjr-pq6m-pxx6.json +++ b/advisories/unreviewed/2022/05/GHSA-9rjr-pq6m-pxx6/GHSA-9rjr-pq6m-pxx6.json @@ -7,12 +7,8 @@ "CVE-2007-3821" ], "details": "Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9rrm-j8h8-3xc5/GHSA-9rrm-j8h8-3xc5.json b/advisories/unreviewed/2022/05/GHSA-9rrm-j8h8-3xc5/GHSA-9rrm-j8h8-3xc5.json index db58d7bac88..8d4fc35fffb 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rrm-j8h8-3xc5/GHSA-9rrm-j8h8-3xc5.json +++ b/advisories/unreviewed/2022/05/GHSA-9rrm-j8h8-3xc5/GHSA-9rrm-j8h8-3xc5.json @@ -7,12 +7,8 @@ "CVE-2007-3856" ], "details": "Unspecified vulnerability in the Oracle Data Mining component for Oracle Database 10g Release 2 10.2.0.2 and 10.2.0.3, 10g 10.1.0.5, and Oracle9i Database Release 2 9.2.0.7, 9.2.0.8, and 9.2.0.8DV has unknown impact and remote authenticated attack vectors related to DMSYS.DMP_SYS, aka DB04.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9v2p-jw8g-g2vv/GHSA-9v2p-jw8g-g2vv.json b/advisories/unreviewed/2022/05/GHSA-9v2p-jw8g-g2vv/GHSA-9v2p-jw8g-g2vv.json index ab30f914a7f..d367dd9502c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9v2p-jw8g-g2vv/GHSA-9v2p-jw8g-g2vv.json +++ b/advisories/unreviewed/2022/05/GHSA-9v2p-jw8g-g2vv/GHSA-9v2p-jw8g-g2vv.json @@ -7,12 +7,8 @@ "CVE-2007-4235" ], "details": "Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a URL in (1) the dirpath parameter to (a) _functions.php, or (2) the language parameter to (b) admin/index.php or (c) index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9vff-p4vx-rw52/GHSA-9vff-p4vx-rw52.json b/advisories/unreviewed/2022/05/GHSA-9vff-p4vx-rw52/GHSA-9vff-p4vx-rw52.json index 7fc2377f97a..b2f2f8ea0bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vff-p4vx-rw52/GHSA-9vff-p4vx-rw52.json +++ b/advisories/unreviewed/2022/05/GHSA-9vff-p4vx-rw52/GHSA-9vff-p4vx-rw52.json @@ -7,12 +7,8 @@ "CVE-2007-4346" ], "details": "The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers to cause a denial of service (NULL dereference and service crash) via a crafted packet to port 5633/tcp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9wjm-59qc-x6qf/GHSA-9wjm-59qc-x6qf.json b/advisories/unreviewed/2022/05/GHSA-9wjm-59qc-x6qf/GHSA-9wjm-59qc-x6qf.json index d186a9555dc..11e989edc0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wjm-59qc-x6qf/GHSA-9wjm-59qc-x6qf.json +++ b/advisories/unreviewed/2022/05/GHSA-9wjm-59qc-x6qf/GHSA-9wjm-59qc-x6qf.json @@ -7,12 +7,8 @@ "CVE-2007-4166" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special Edition (SE) 1.02, before 20070804 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757, CVE-2007-4014, and CVE-2007-4165. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9wjw-6987-wfmj/GHSA-9wjw-6987-wfmj.json b/advisories/unreviewed/2022/05/GHSA-9wjw-6987-wfmj/GHSA-9wjw-6987-wfmj.json index 2b0ac8f2a36..8a0b9882c82 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wjw-6987-wfmj/GHSA-9wjw-6987-wfmj.json +++ b/advisories/unreviewed/2022/05/GHSA-9wjw-6987-wfmj/GHSA-9wjw-6987-wfmj.json @@ -7,12 +7,8 @@ "CVE-2007-4257" ], "details": "Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary code via (1) a .spr file (single player replay file) containing a long user name or (2) a .ply file containing a long number plate string, different vectors than CVE-2007-4140.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9xr7-28fx-hh67/GHSA-9xr7-28fx-hh67.json b/advisories/unreviewed/2022/05/GHSA-9xr7-28fx-hh67/GHSA-9xr7-28fx-hh67.json index 38312a460d4..46ac1b9699d 100644 --- a/advisories/unreviewed/2022/05/GHSA-9xr7-28fx-hh67/GHSA-9xr7-28fx-hh67.json +++ b/advisories/unreviewed/2022/05/GHSA-9xr7-28fx-hh67/GHSA-9xr7-28fx-hh67.json @@ -7,12 +7,8 @@ "CVE-2007-3903" ], "details": "Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of \"Uninitialized Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c22p-4cg5-h8x4/GHSA-c22p-4cg5-h8x4.json b/advisories/unreviewed/2022/05/GHSA-c22p-4cg5-h8x4/GHSA-c22p-4cg5-h8x4.json index 9b7f881a9a7..8331470e96e 100644 --- a/advisories/unreviewed/2022/05/GHSA-c22p-4cg5-h8x4/GHSA-c22p-4cg5-h8x4.json +++ b/advisories/unreviewed/2022/05/GHSA-c22p-4cg5-h8x4/GHSA-c22p-4cg5-h8x4.json @@ -7,12 +7,8 @@ "CVE-2007-4021" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in login.php in Brain Book Software Secure 1.0.20070629 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3hv-6xx5-73jr/GHSA-c3hv-6xx5-73jr.json b/advisories/unreviewed/2022/05/GHSA-c3hv-6xx5-73jr/GHSA-c3hv-6xx5-73jr.json index 0021aa58875..550932f8965 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3hv-6xx5-73jr/GHSA-c3hv-6xx5-73jr.json +++ b/advisories/unreviewed/2022/05/GHSA-c3hv-6xx5-73jr/GHSA-c3hv-6xx5-73jr.json @@ -7,12 +7,8 @@ "CVE-2007-4370" ], "details": "Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long string to UDP port 26000.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3j9-w7pw-hrww/GHSA-c3j9-w7pw-hrww.json b/advisories/unreviewed/2022/05/GHSA-c3j9-w7pw-hrww/GHSA-c3j9-w7pw-hrww.json index d416ecda25f..0bbb71ae15a 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3j9-w7pw-hrww/GHSA-c3j9-w7pw-hrww.json +++ b/advisories/unreviewed/2022/05/GHSA-c3j9-w7pw-hrww/GHSA-c3j9-w7pw-hrww.json @@ -7,12 +7,8 @@ "CVE-2007-4133" ], "details": "The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which allows local users to cause a denial of service (panic) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3jc-cr5w-8999/GHSA-c3jc-cr5w-8999.json b/advisories/unreviewed/2022/05/GHSA-c3jc-cr5w-8999/GHSA-c3jc-cr5w-8999.json index 2afb1b2f14d..ca2a7928075 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3jc-cr5w-8999/GHSA-c3jc-cr5w-8999.json +++ b/advisories/unreviewed/2022/05/GHSA-c3jc-cr5w-8999/GHSA-c3jc-cr5w-8999.json @@ -7,12 +7,8 @@ "CVE-2007-4455" ], "details": "The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote attackers to cause a denial of service (memory exhaustion) via a SIP dialog that causes a large number of history entries to be created.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3qf-x87m-5wfc/GHSA-c3qf-x87m-5wfc.json b/advisories/unreviewed/2022/05/GHSA-c3qf-x87m-5wfc/GHSA-c3qf-x87m-5wfc.json index 07ad4eb031f..e0152a9ca89 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3qf-x87m-5wfc/GHSA-c3qf-x87m-5wfc.json +++ b/advisories/unreviewed/2022/05/GHSA-c3qf-x87m-5wfc/GHSA-c3qf-x87m-5wfc.json @@ -7,12 +7,8 @@ "CVE-2007-4239" ], "details": "Cross-site scripting (XSS) vulnerability in user/forgotPassStep2.jsp in the admin interface in C-SAM oneWallet 210_07062007;1.0 allows remote attackers to inject arbitrary web script or HTML via the loginID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c4g9-gqcc-w8q5/GHSA-c4g9-gqcc-w8q5.json b/advisories/unreviewed/2022/05/GHSA-c4g9-gqcc-w8q5/GHSA-c4g9-gqcc-w8q5.json index 7d3614c80db..5842067b3ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4g9-gqcc-w8q5/GHSA-c4g9-gqcc-w8q5.json +++ b/advisories/unreviewed/2022/05/GHSA-c4g9-gqcc-w8q5/GHSA-c4g9-gqcc-w8q5.json @@ -7,12 +7,8 @@ "CVE-2007-3905" ], "details": "SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the _order parameter to (1) photos.php and (2) edit_photos.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c664-xxmv-x72r/GHSA-c664-xxmv-x72r.json b/advisories/unreviewed/2022/05/GHSA-c664-xxmv-x72r/GHSA-c664-xxmv-x72r.json index 334d452f0ec..4432ea314dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-c664-xxmv-x72r/GHSA-c664-xxmv-x72r.json +++ b/advisories/unreviewed/2022/05/GHSA-c664-xxmv-x72r/GHSA-c664-xxmv-x72r.json @@ -7,12 +7,8 @@ "CVE-2007-4361" ], "details": "NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial number, which makes it easier for remote attackers to guess the password and obtain login access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c6f6-fv43-rm9r/GHSA-c6f6-fv43-rm9r.json b/advisories/unreviewed/2022/05/GHSA-c6f6-fv43-rm9r/GHSA-c6f6-fv43-rm9r.json index ae9e78700e7..56754efa65f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6f6-fv43-rm9r/GHSA-c6f6-fv43-rm9r.json +++ b/advisories/unreviewed/2022/05/GHSA-c6f6-fv43-rm9r/GHSA-c6f6-fv43-rm9r.json @@ -7,12 +7,8 @@ "CVE-2007-4016" ], "details": "Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c865-g6gw-3hjp/GHSA-c865-g6gw-3hjp.json b/advisories/unreviewed/2022/05/GHSA-c865-g6gw-3hjp/GHSA-c865-g6gw-3hjp.json index 8a649c3dad3..58adc81926f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c865-g6gw-3hjp/GHSA-c865-g6gw-3hjp.json +++ b/advisories/unreviewed/2022/05/GHSA-c865-g6gw-3hjp/GHSA-c865-g6gw-3hjp.json @@ -7,12 +7,8 @@ "CVE-2007-4309" ], "details": "IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by setting the notes.ini (1) KFM_ShowEntropy and (2) Debug_Outfile debug variables, a different vulnerability than CVE-2005-2696.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c8pc-2gg4-6rmx/GHSA-c8pc-2gg4-6rmx.json b/advisories/unreviewed/2022/05/GHSA-c8pc-2gg4-6rmx/GHSA-c8pc-2gg4-6rmx.json index 4b1be0576a5..c2857a2629d 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8pc-2gg4-6rmx/GHSA-c8pc-2gg4-6rmx.json +++ b/advisories/unreviewed/2022/05/GHSA-c8pc-2gg4-6rmx/GHSA-c8pc-2gg4-6rmx.json @@ -7,12 +7,8 @@ "CVE-2007-4146" ], "details": "Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c8v7-9x4w-8h42/GHSA-c8v7-9x4w-8h42.json b/advisories/unreviewed/2022/05/GHSA-c8v7-9x4w-8h42/GHSA-c8v7-9x4w-8h42.json index 064bd6cabcd..5596c6246a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8v7-9x4w-8h42/GHSA-c8v7-9x4w-8h42.json +++ b/advisories/unreviewed/2022/05/GHSA-c8v7-9x4w-8h42/GHSA-c8v7-9x4w-8h42.json @@ -7,12 +7,8 @@ "CVE-2007-4454" ], "details": "Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::ATTR_SERVER_VERSION or (2) PDO::ATTR_CLIENT_VERSION attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c98m-pvjv-v9r2/GHSA-c98m-pvjv-v9r2.json b/advisories/unreviewed/2022/05/GHSA-c98m-pvjv-v9r2/GHSA-c98m-pvjv-v9r2.json index a4e1e4b6aee..beec41424e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-c98m-pvjv-v9r2/GHSA-c98m-pvjv-v9r2.json +++ b/advisories/unreviewed/2022/05/GHSA-c98m-pvjv-v9r2/GHSA-c98m-pvjv-v9r2.json @@ -7,12 +7,8 @@ "CVE-2007-3875" ], "details": "arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid \"previous listing chunk number\" field in a CHM file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cc73-5m66-8hg8/GHSA-cc73-5m66-8hg8.json b/advisories/unreviewed/2022/05/GHSA-cc73-5m66-8hg8/GHSA-cc73-5m66-8hg8.json index 5895e22b8c3..4f85e885a9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc73-5m66-8hg8/GHSA-cc73-5m66-8hg8.json +++ b/advisories/unreviewed/2022/05/GHSA-cc73-5m66-8hg8/GHSA-cc73-5m66-8hg8.json @@ -7,12 +7,8 @@ "CVE-2007-4125" ], "details": "Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause an unspecified denial of service via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ccw9-4m3j-6grw/GHSA-ccw9-4m3j-6grw.json b/advisories/unreviewed/2022/05/GHSA-ccw9-4m3j-6grw/GHSA-ccw9-4m3j-6grw.json index 7bfc7b38029..5e6b0a0dc61 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccw9-4m3j-6grw/GHSA-ccw9-4m3j-6grw.json +++ b/advisories/unreviewed/2022/05/GHSA-ccw9-4m3j-6grw/GHSA-ccw9-4m3j-6grw.json @@ -7,12 +7,8 @@ "CVE-2007-4020" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cf55-p8mp-6944/GHSA-cf55-p8mp-6944.json b/advisories/unreviewed/2022/05/GHSA-cf55-p8mp-6944/GHSA-cf55-p8mp-6944.json index 29b479e3b77..98cd5f6e735 100644 --- a/advisories/unreviewed/2022/05/GHSA-cf55-p8mp-6944/GHSA-cf55-p8mp-6944.json +++ b/advisories/unreviewed/2022/05/GHSA-cf55-p8mp-6944/GHSA-cf55-p8mp-6944.json @@ -7,12 +7,8 @@ "CVE-2007-3863" ], "details": "Unspecified vulnerability in Oracle JDeveloper for Application Server 10.1.2.2 and 10.1.3.1, and Collaboration Suite 10.1.2, allows context-dependent attackers to have an unknown impact via custom applications that use JBO.SERVER, aka JDEV02.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cgcq-9664-vh48/GHSA-cgcq-9664-vh48.json b/advisories/unreviewed/2022/05/GHSA-cgcq-9664-vh48/GHSA-cgcq-9664-vh48.json index 4518b0d5eb0..8c752f1df0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgcq-9664-vh48/GHSA-cgcq-9664-vh48.json +++ b/advisories/unreviewed/2022/05/GHSA-cgcq-9664-vh48/GHSA-cgcq-9664-vh48.json @@ -7,12 +7,8 @@ "CVE-2007-4366" ], "details": "WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cgh9-wvv3-mg5j/GHSA-cgh9-wvv3-mg5j.json b/advisories/unreviewed/2022/05/GHSA-cgh9-wvv3-mg5j/GHSA-cgh9-wvv3-mg5j.json index d45cfe0e9d4..c0c1b45e702 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgh9-wvv3-mg5j/GHSA-cgh9-wvv3-mg5j.json +++ b/advisories/unreviewed/2022/05/GHSA-cgh9-wvv3-mg5j/GHSA-cgh9-wvv3-mg5j.json @@ -7,12 +7,8 @@ "CVE-2007-4478" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary web script or HTML in the local zone via a URI, when the document at the associated URL is saved to a local file, which then contains the URI string along with the document's original content.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ch64-2w7r-7949/GHSA-ch64-2w7r-7949.json b/advisories/unreviewed/2022/05/GHSA-ch64-2w7r-7949/GHSA-ch64-2w7r-7949.json index 72141d72ab9..3084c80971b 100644 --- a/advisories/unreviewed/2022/05/GHSA-ch64-2w7r-7949/GHSA-ch64-2w7r-7949.json +++ b/advisories/unreviewed/2022/05/GHSA-ch64-2w7r-7949/GHSA-ch64-2w7r-7949.json @@ -7,12 +7,8 @@ "CVE-2007-4315" ], "details": "The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by \"Purple Pill\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-chv6-62j2-334r/GHSA-chv6-62j2-334r.json b/advisories/unreviewed/2022/05/GHSA-chv6-62j2-334r/GHSA-chv6-62j2-334r.json index f58d58162a6..5ce6dcdd41e 100644 --- a/advisories/unreviewed/2022/05/GHSA-chv6-62j2-334r/GHSA-chv6-62j2-334r.json +++ b/advisories/unreviewed/2022/05/GHSA-chv6-62j2-334r/GHSA-chv6-62j2-334r.json @@ -7,12 +7,8 @@ "CVE-2007-4405" ], "details": "ircu 2.10.12.02 through 2.10.12.04 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by creating a large number of unused channels (zannels).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cj6x-mcmj-9c4c/GHSA-cj6x-mcmj-9c4c.json b/advisories/unreviewed/2022/05/GHSA-cj6x-mcmj-9c4c/GHSA-cj6x-mcmj-9c4c.json index 0d73f132a3b..44d75f840bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-cj6x-mcmj-9c4c/GHSA-cj6x-mcmj-9c4c.json +++ b/advisories/unreviewed/2022/05/GHSA-cj6x-mcmj-9c4c/GHSA-cj6x-mcmj-9c4c.json @@ -7,12 +7,8 @@ "CVE-2007-4070" ], "details": "Unspecified vulnerability in Low Bandwidth X proxy (lbxproxy) on Sun Solaris 8 through 10 before 20070725 allows local users to read arbitrary files with root group ownership via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cjq5-93qv-57v9/GHSA-cjq5-93qv-57v9.json b/advisories/unreviewed/2022/05/GHSA-cjq5-93qv-57v9/GHSA-cjq5-93qv-57v9.json index 5401290e6f0..5c3ca9fadad 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjq5-93qv-57v9/GHSA-cjq5-93qv-57v9.json +++ b/advisories/unreviewed/2022/05/GHSA-cjq5-93qv-57v9/GHSA-cjq5-93qv-57v9.json @@ -7,12 +7,8 @@ "CVE-2007-4432" ], "details": "Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux 10.1 and Enterprise 10 allows local users to gain privileges via modified (a) LD_LIBRARY_PATH and (b) MONO_GAC_PREFIX environment variables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cmjp-5pjj-7527/GHSA-cmjp-5pjj-7527.json b/advisories/unreviewed/2022/05/GHSA-cmjp-5pjj-7527/GHSA-cmjp-5pjj-7527.json index f3852eb8140..cd656df41ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmjp-5pjj-7527/GHSA-cmjp-5pjj-7527.json +++ b/advisories/unreviewed/2022/05/GHSA-cmjp-5pjj-7527/GHSA-cmjp-5pjj-7527.json @@ -7,12 +7,8 @@ "CVE-2007-4438" ], "details": "Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cmww-3mjc-q37f/GHSA-cmww-3mjc-q37f.json b/advisories/unreviewed/2022/05/GHSA-cmww-3mjc-q37f/GHSA-cmww-3mjc-q37f.json index 2870e7a7a03..cae2f7c91ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmww-3mjc-q37f/GHSA-cmww-3mjc-q37f.json +++ b/advisories/unreviewed/2022/05/GHSA-cmww-3mjc-q37f/GHSA-cmww-3mjc-q37f.json @@ -7,12 +7,8 @@ "CVE-2007-3842" ], "details": "Cross-site scripting (XSS) vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this may be the same as CVE-2007-2970.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cp92-p89j-f44w/GHSA-cp92-p89j-f44w.json b/advisories/unreviewed/2022/05/GHSA-cp92-p89j-f44w/GHSA-cp92-p89j-f44w.json index a2e9b29efb1..45de9e0e901 100644 --- a/advisories/unreviewed/2022/05/GHSA-cp92-p89j-f44w/GHSA-cp92-p89j-f44w.json +++ b/advisories/unreviewed/2022/05/GHSA-cp92-p89j-f44w/GHSA-cp92-p89j-f44w.json @@ -7,12 +7,8 @@ "CVE-2007-4197" ], "details": "icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service (NULL dereference and application crash) and prevent examination of certain NTFS files via a malformed NTFS image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cphm-8pg6-j542/GHSA-cphm-8pg6-j542.json b/advisories/unreviewed/2022/05/GHSA-cphm-8pg6-j542/GHSA-cphm-8pg6-j542.json index 281e843af3a..bf3de5f74f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-cphm-8pg6-j542/GHSA-cphm-8pg6-j542.json +++ b/advisories/unreviewed/2022/05/GHSA-cphm-8pg6-j542/GHSA-cphm-8pg6-j542.json @@ -7,12 +7,8 @@ "CVE-2007-3876" ], "details": "Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long workgroup (-W) option to mount_smbfs or (2) an unspecified manipulation of the command line to smbutil.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cppx-x244-mfpp/GHSA-cppx-x244-mfpp.json b/advisories/unreviewed/2022/05/GHSA-cppx-x244-mfpp/GHSA-cppx-x244-mfpp.json index f38f8e1f688..23eb4398ae5 100644 --- a/advisories/unreviewed/2022/05/GHSA-cppx-x244-mfpp/GHSA-cppx-x244-mfpp.json +++ b/advisories/unreviewed/2022/05/GHSA-cppx-x244-mfpp/GHSA-cppx-x244-mfpp.json @@ -7,12 +7,8 @@ "CVE-2007-4058" ], "details": "Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cpr8-hhr5-r4f4/GHSA-cpr8-hhr5-r4f4.json b/advisories/unreviewed/2022/05/GHSA-cpr8-hhr5-r4f4/GHSA-cpr8-hhr5-r4f4.json index 3278986f2ac..c4e70452460 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpr8-hhr5-r4f4/GHSA-cpr8-hhr5-r4f4.json +++ b/advisories/unreviewed/2022/05/GHSA-cpr8-hhr5-r4f4/GHSA-cpr8-hhr5-r4f4.json @@ -7,12 +7,8 @@ "CVE-2007-4185" ], "details": "Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other unspecified components, which reveal the path in various error messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cqv6-r3g5-66x8/GHSA-cqv6-r3g5-66x8.json b/advisories/unreviewed/2022/05/GHSA-cqv6-r3g5-66x8/GHSA-cqv6-r3g5-66x8.json index 2b4c6b5d6fc..655422c361b 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqv6-r3g5-66x8/GHSA-cqv6-r3g5-66x8.json +++ b/advisories/unreviewed/2022/05/GHSA-cqv6-r3g5-66x8/GHSA-cqv6-r3g5-66x8.json @@ -7,12 +7,8 @@ "CVE-2007-4081" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in (a) merchants/index.php, including the (1) id or (2) msg parameter in a programedit action; the (3) pgmid parameter in an uploadProducts action; the (4) d, (5) m, or (6) y parameter in a daily action; the (7) err parameter in a ProgramReport action; the (8) i, (9) txtto, (10) txtfrom, or (11) programs parameter in a LinkReport action; or the (12) msg parameter in an add_money action; and one vector in (b) merchants/temp.php using (13) the rowid parameter. NOTE: vector 7 might overlap CVE-2005-3795.1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cr6p-q9r2-r2x2/GHSA-cr6p-q9r2-r2x2.json b/advisories/unreviewed/2022/05/GHSA-cr6p-q9r2-r2x2/GHSA-cr6p-q9r2-r2x2.json index 60240bb23df..1e8566f89c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr6p-q9r2-r2x2/GHSA-cr6p-q9r2-r2x2.json +++ b/advisories/unreviewed/2022/05/GHSA-cr6p-q9r2-r2x2/GHSA-cr6p-q9r2-r2x2.json @@ -7,12 +7,8 @@ "CVE-2007-4457" ], "details": "Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the chemin parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-crqw-2ww4-m54r/GHSA-crqw-2ww4-m54r.json b/advisories/unreviewed/2022/05/GHSA-crqw-2ww4-m54r/GHSA-crqw-2ww4-m54r.json index d932c9c34f8..a491da6b061 100644 --- a/advisories/unreviewed/2022/05/GHSA-crqw-2ww4-m54r/GHSA-crqw-2ww4-m54r.json +++ b/advisories/unreviewed/2022/05/GHSA-crqw-2ww4-m54r/GHSA-crqw-2ww4-m54r.json @@ -7,12 +7,8 @@ "CVE-2007-4204" ], "details": "Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cv6j-7mpg-hh9x/GHSA-cv6j-7mpg-hh9x.json b/advisories/unreviewed/2022/05/GHSA-cv6j-7mpg-hh9x/GHSA-cv6j-7mpg-hh9x.json index 09515e520ae..e5f580c20c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv6j-7mpg-hh9x/GHSA-cv6j-7mpg-hh9x.json +++ b/advisories/unreviewed/2022/05/GHSA-cv6j-7mpg-hh9x/GHSA-cv6j-7mpg-hh9x.json @@ -7,12 +7,8 @@ "CVE-2007-4431" ], "details": "Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to external domains, via a certain body.innerHTML property value, aka \"classic JavaScript frame hijacking.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cvx3-8832-cq9f/GHSA-cvx3-8832-cq9f.json b/advisories/unreviewed/2022/05/GHSA-cvx3-8832-cq9f/GHSA-cvx3-8832-cq9f.json index 1dcbd81b75f..ac756ae4de2 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvx3-8832-cq9f/GHSA-cvx3-8832-cq9f.json +++ b/advisories/unreviewed/2022/05/GHSA-cvx3-8832-cq9f/GHSA-cvx3-8832-cq9f.json @@ -7,12 +7,8 @@ "CVE-2007-4233" ], "details": "Multiple unspecified vulnerabilities in Camera Life before 2.6 allow attackers to cause a denial of service via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cxp3-m897-wfvf/GHSA-cxp3-m897-wfvf.json b/advisories/unreviewed/2022/05/GHSA-cxp3-m897-wfvf/GHSA-cxp3-m897-wfvf.json index 886b6734494..c1dfd97c782 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxp3-m897-wfvf/GHSA-cxp3-m897-wfvf.json +++ b/advisories/unreviewed/2022/05/GHSA-cxp3-m897-wfvf/GHSA-cxp3-m897-wfvf.json @@ -7,12 +7,8 @@ "CVE-2007-4062" ], "details": "The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxpm-phr4-m48g/GHSA-cxpm-phr4-m48g.json b/advisories/unreviewed/2022/05/GHSA-cxpm-phr4-m48g/GHSA-cxpm-phr4-m48g.json index 1840d26631d..4fa1869c0cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxpm-phr4-m48g/GHSA-cxpm-phr4-m48g.json +++ b/advisories/unreviewed/2022/05/GHSA-cxpm-phr4-m48g/GHSA-cxpm-phr4-m48g.json @@ -7,12 +7,8 @@ "CVE-2007-4145" ], "details": "Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f26v-rp94-xv52/GHSA-f26v-rp94-xv52.json b/advisories/unreviewed/2022/05/GHSA-f26v-rp94-xv52/GHSA-f26v-rp94-xv52.json index 48306c1d7d0..e89b7ac881f 100644 --- a/advisories/unreviewed/2022/05/GHSA-f26v-rp94-xv52/GHSA-f26v-rp94-xv52.json +++ b/advisories/unreviewed/2022/05/GHSA-f26v-rp94-xv52/GHSA-f26v-rp94-xv52.json @@ -7,12 +7,8 @@ "CVE-2007-4091" ], "details": "Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f2m9-jf7f-hcjr/GHSA-f2m9-jf7f-hcjr.json b/advisories/unreviewed/2022/05/GHSA-f2m9-jf7f-hcjr/GHSA-f2m9-jf7f-hcjr.json index ee414c46e74..417ba64e20c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2m9-jf7f-hcjr/GHSA-f2m9-jf7f-hcjr.json +++ b/advisories/unreviewed/2022/05/GHSA-f2m9-jf7f-hcjr/GHSA-f2m9-jf7f-hcjr.json @@ -7,12 +7,8 @@ "CVE-2007-4448" ], "details": "The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service (daemon crash) via a GRIP command with the ID of -1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f33g-7p96-3gr2/GHSA-f33g-7p96-3gr2.json b/advisories/unreviewed/2022/05/GHSA-f33g-7p96-3gr2/GHSA-f33g-7p96-3gr2.json index 5829331f1af..ddf45afb635 100644 --- a/advisories/unreviewed/2022/05/GHSA-f33g-7p96-3gr2/GHSA-f33g-7p96-3gr2.json +++ b/advisories/unreviewed/2022/05/GHSA-f33g-7p96-3gr2/GHSA-f33g-7p96-3gr2.json @@ -7,12 +7,8 @@ "CVE-2007-4263" ], "details": "Unspecified vulnerability in the server side of the Secure Copy (SCP) implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f34f-q8xr-m883/GHSA-f34f-q8xr-m883.json b/advisories/unreviewed/2022/05/GHSA-f34f-q8xr-m883/GHSA-f34f-q8xr-m883.json index d1e286cdc93..c6476054cf3 100644 --- a/advisories/unreviewed/2022/05/GHSA-f34f-q8xr-m883/GHSA-f34f-q8xr-m883.json +++ b/advisories/unreviewed/2022/05/GHSA-f34f-q8xr-m883/GHSA-f34f-q8xr-m883.json @@ -7,12 +7,8 @@ "CVE-2007-3978" ], "details": "Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f4m6-pc47-p952/GHSA-f4m6-pc47-p952.json b/advisories/unreviewed/2022/05/GHSA-f4m6-pc47-p952/GHSA-f4m6-pc47-p952.json index 0b01df4dbef..126aa51a043 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4m6-pc47-p952/GHSA-f4m6-pc47-p952.json +++ b/advisories/unreviewed/2022/05/GHSA-f4m6-pc47-p952/GHSA-f4m6-pc47-p952.json @@ -7,12 +7,8 @@ "CVE-2007-4467" ], "details": "Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified \"initialization parameters.\" NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4xm-wmrx-52wp/GHSA-f4xm-wmrx-52wp.json b/advisories/unreviewed/2022/05/GHSA-f4xm-wmrx-52wp/GHSA-f4xm-wmrx-52wp.json index a564fd46636..105cbb25ad0 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4xm-wmrx-52wp/GHSA-f4xm-wmrx-52wp.json +++ b/advisories/unreviewed/2022/05/GHSA-f4xm-wmrx-52wp/GHSA-f4xm-wmrx-52wp.json @@ -7,12 +7,8 @@ "CVE-2007-4176" ], "details": "Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f6cc-62ph-4v37/GHSA-f6cc-62ph-4v37.json b/advisories/unreviewed/2022/05/GHSA-f6cc-62ph-4v37/GHSA-f6cc-62ph-4v37.json index 1d3bf8a9f07..ca68384e9a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-f6cc-62ph-4v37/GHSA-f6cc-62ph-4v37.json +++ b/advisories/unreviewed/2022/05/GHSA-f6cc-62ph-4v37/GHSA-f6cc-62ph-4v37.json @@ -7,12 +7,8 @@ "CVE-2007-4395" ], "details": "Multiple unspecified vulnerabilities in the Role Based Access Control (RBAC) functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f72g-w3rw-4xmp/GHSA-f72g-w3rw-4xmp.json b/advisories/unreviewed/2022/05/GHSA-f72g-w3rw-4xmp/GHSA-f72g-w3rw-4xmp.json index 1944e0a0280..8cd64dfaab5 100644 --- a/advisories/unreviewed/2022/05/GHSA-f72g-w3rw-4xmp/GHSA-f72g-w3rw-4xmp.json +++ b/advisories/unreviewed/2022/05/GHSA-f72g-w3rw-4xmp/GHSA-f72g-w3rw-4xmp.json @@ -7,12 +7,8 @@ "CVE-2007-4398" ], "details": "Multiple CRLF injection vulnerabilities in the (1) now-playing.rb and (2) xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f76m-wr28-86f7/GHSA-f76m-wr28-86f7.json b/advisories/unreviewed/2022/05/GHSA-f76m-wr28-86f7/GHSA-f76m-wr28-86f7.json index 0de44cf5be6..2793dfa520d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f76m-wr28-86f7/GHSA-f76m-wr28-86f7.json +++ b/advisories/unreviewed/2022/05/GHSA-f76m-wr28-86f7/GHSA-f76m-wr28-86f7.json @@ -7,12 +7,8 @@ "CVE-2007-3822" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via (1) the who parameter to showuser; and other vectors involving (2) calendar mode, (3) bulletin board mode, (4) room names, and (5) uploaded file names.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f7c7-pw5m-vrm3/GHSA-f7c7-pw5m-vrm3.json b/advisories/unreviewed/2022/05/GHSA-f7c7-pw5m-vrm3/GHSA-f7c7-pw5m-vrm3.json index 147259e9116..bde6bafc6e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7c7-pw5m-vrm3/GHSA-f7c7-pw5m-vrm3.json +++ b/advisories/unreviewed/2022/05/GHSA-f7c7-pw5m-vrm3/GHSA-f7c7-pw5m-vrm3.json @@ -7,12 +7,8 @@ "CVE-2007-3982" ], "details": "Absolute path traversal vulnerability in the Data Dynamics ActiveReport (ActiveReports) ActiveX control in actrpt2.dll 2.5 and earlier allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveLayout method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f885-7gr5-w3p4/GHSA-f885-7gr5-w3p4.json b/advisories/unreviewed/2022/05/GHSA-f885-7gr5-w3p4/GHSA-f885-7gr5-w3p4.json index e26dd56ce7d..00b2501f192 100644 --- a/advisories/unreviewed/2022/05/GHSA-f885-7gr5-w3p4/GHSA-f885-7gr5-w3p4.json +++ b/advisories/unreviewed/2022/05/GHSA-f885-7gr5-w3p4/GHSA-f885-7gr5-w3p4.json @@ -7,12 +7,8 @@ "CVE-2007-4029" ], "details": "libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f949-mcg2-v3qv/GHSA-f949-mcg2-v3qv.json b/advisories/unreviewed/2022/05/GHSA-f949-mcg2-v3qv/GHSA-f949-mcg2-v3qv.json index 73ad544a24b..9e42e12b9f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-f949-mcg2-v3qv/GHSA-f949-mcg2-v3qv.json +++ b/advisories/unreviewed/2022/05/GHSA-f949-mcg2-v3qv/GHSA-f949-mcg2-v3qv.json @@ -7,12 +7,8 @@ "CVE-2007-4064" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4.7.7, (1) allow remote attackers to inject arbitrary web script or HTML via \"some server variables,\" including PHP_SELF; and (2) allow remote authenticated administrators to inject arbitrary web script or HTML via custom content type names.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fc9v-f38v-7g92/GHSA-fc9v-f38v-7g92.json b/advisories/unreviewed/2022/05/GHSA-fc9v-f38v-7g92/GHSA-fc9v-f38v-7g92.json index a3d4c8e1f03..004ca3c77cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc9v-f38v-7g92/GHSA-fc9v-f38v-7g92.json +++ b/advisories/unreviewed/2022/05/GHSA-fc9v-f38v-7g92/GHSA-fc9v-f38v-7g92.json @@ -7,12 +7,8 @@ "CVE-2007-4205" ], "details": "XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service (heartbeat control process crash) via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fgr3-8fgg-jjgv/GHSA-fgr3-8fgg-jjgv.json b/advisories/unreviewed/2022/05/GHSA-fgr3-8fgg-jjgv/GHSA-fgr3-8fgg-jjgv.json index b8fc2b19d69..ef64c7ffced 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgr3-8fgg-jjgv/GHSA-fgr3-8fgg-jjgv.json +++ b/advisories/unreviewed/2022/05/GHSA-fgr3-8fgg-jjgv/GHSA-fgr3-8fgg-jjgv.json @@ -7,12 +7,8 @@ "CVE-2007-4048" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fh44-j3pc-3p3h/GHSA-fh44-j3pc-3p3h.json b/advisories/unreviewed/2022/05/GHSA-fh44-j3pc-3p3h/GHSA-fh44-j3pc-3p3h.json index 02c02da4f2f..a054c8459a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-fh44-j3pc-3p3h/GHSA-fh44-j3pc-3p3h.json +++ b/advisories/unreviewed/2022/05/GHSA-fh44-j3pc-3p3h/GHSA-fh44-j3pc-3p3h.json @@ -7,12 +7,8 @@ "CVE-2007-4522" ], "details": "Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php. NOTE: some vectors might be reachable through the url and name parameters to (g) admin/navigation/new_nav_item.php. NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fh6j-979r-9hxg/GHSA-fh6j-979r-9hxg.json b/advisories/unreviewed/2022/05/GHSA-fh6j-979r-9hxg/GHSA-fh6j-979r-9hxg.json index 6e2bbefea3a..50045deec52 100644 --- a/advisories/unreviewed/2022/05/GHSA-fh6j-979r-9hxg/GHSA-fh6j-979r-9hxg.json +++ b/advisories/unreviewed/2022/05/GHSA-fh6j-979r-9hxg/GHSA-fh6j-979r-9hxg.json @@ -7,12 +7,8 @@ "CVE-2019-2124" ], "details": "In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fh8v-v736-pf7m/GHSA-fh8v-v736-pf7m.json b/advisories/unreviewed/2022/05/GHSA-fh8v-v736-pf7m/GHSA-fh8v-v736-pf7m.json index b49f7265b6b..eb27ba4a049 100644 --- a/advisories/unreviewed/2022/05/GHSA-fh8v-v736-pf7m/GHSA-fh8v-v736-pf7m.json +++ b/advisories/unreviewed/2022/05/GHSA-fh8v-v736-pf7m/GHSA-fh8v-v736-pf7m.json @@ -7,12 +7,8 @@ "CVE-2007-4213" ], "details": "Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service (device reset or hang) via a flood of large ICMP echo requests. NOTE: this is probably a different vulnerability than CVE-2003-0293.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fjwx-jcvh-q6g8/GHSA-fjwx-jcvh-q6g8.json b/advisories/unreviewed/2022/05/GHSA-fjwx-jcvh-q6g8/GHSA-fjwx-jcvh-q6g8.json index 453b3e99516..122b3858cf1 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjwx-jcvh-q6g8/GHSA-fjwx-jcvh-q6g8.json +++ b/advisories/unreviewed/2022/05/GHSA-fjwx-jcvh-q6g8/GHSA-fjwx-jcvh-q6g8.json @@ -7,12 +7,8 @@ "CVE-2007-4364" ], "details": "Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), related to (1) a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain \"unexpected / strange response\" from an LDAP server, and (2) a reauthentication attempt that throws an exception, which allows remote attackers to trigger use of a cached authentication decision. NOTE: authentication can be bypassed by using vector 1 followed by vector 2, and possibly can be bypassed by using a single vector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fmcp-4f5w-89fr/GHSA-fmcp-4f5w-89fr.json b/advisories/unreviewed/2022/05/GHSA-fmcp-4f5w-89fr/GHSA-fmcp-4f5w-89fr.json index 71ddfe5c433..7dd314f8c8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmcp-4f5w-89fr/GHSA-fmcp-4f5w-89fr.json +++ b/advisories/unreviewed/2022/05/GHSA-fmcp-4f5w-89fr/GHSA-fmcp-4f5w-89fr.json @@ -7,12 +7,8 @@ "CVE-2007-4325" ], "details": "PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fmhq-mj3g-mwmq/GHSA-fmhq-mj3g-mwmq.json b/advisories/unreviewed/2022/05/GHSA-fmhq-mj3g-mwmq/GHSA-fmhq-mj3g-mwmq.json index b5087602d14..0002f82feee 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmhq-mj3g-mwmq/GHSA-fmhq-mj3g-mwmq.json +++ b/advisories/unreviewed/2022/05/GHSA-fmhq-mj3g-mwmq/GHSA-fmhq-mj3g-mwmq.json @@ -7,12 +7,8 @@ "CVE-2007-4487" ], "details": "Cross-site scripting (XSS) vulnerability in D22-Shoutbox for Invision Power Board (IPB or IP.Board) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fmrj-qgrx-g82j/GHSA-fmrj-qgrx-g82j.json b/advisories/unreviewed/2022/05/GHSA-fmrj-qgrx-g82j/GHSA-fmrj-qgrx-g82j.json index b5b0e54a3ad..9379d6f9ad1 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmrj-qgrx-g82j/GHSA-fmrj-qgrx-g82j.json +++ b/advisories/unreviewed/2022/05/GHSA-fmrj-qgrx-g82j/GHSA-fmrj-qgrx-g82j.json @@ -7,12 +7,8 @@ "CVE-2007-4275" ], "details": "Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to (1) DB2 instance or FMP startup on Linux and Solaris; (2) exec of executables while running as root on non-Windows systems, as demonstrated by AIX; and unspecified vectors involving (3) db2licm and (4) db2pd.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fp3h-jqq5-mq74/GHSA-fp3h-jqq5-mq74.json b/advisories/unreviewed/2022/05/GHSA-fp3h-jqq5-mq74/GHSA-fp3h-jqq5-mq74.json index 37d781fc8fe..d465f7c42ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp3h-jqq5-mq74/GHSA-fp3h-jqq5-mq74.json +++ b/advisories/unreviewed/2022/05/GHSA-fp3h-jqq5-mq74/GHSA-fp3h-jqq5-mq74.json @@ -7,12 +7,8 @@ "CVE-2007-4207" ], "details": "SQL injection vulnerability in admin_console/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fp6x-72cw-rg73/GHSA-fp6x-72cw-rg73.json b/advisories/unreviewed/2022/05/GHSA-fp6x-72cw-rg73/GHSA-fp6x-72cw-rg73.json index 4464037e5b0..9e91cbb5c6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp6x-72cw-rg73/GHSA-fp6x-72cw-rg73.json +++ b/advisories/unreviewed/2022/05/GHSA-fp6x-72cw-rg73/GHSA-fp6x-72cw-rg73.json @@ -7,12 +7,8 @@ "CVE-2007-4385" ], "details": "OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fp96-6m78-cv33/GHSA-fp96-6m78-cv33.json b/advisories/unreviewed/2022/05/GHSA-fp96-6m78-cv33/GHSA-fp96-6m78-cv33.json index 236ada0e65a..1ae1122704a 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp96-6m78-cv33/GHSA-fp96-6m78-cv33.json +++ b/advisories/unreviewed/2022/05/GHSA-fp96-6m78-cv33/GHSA-fp96-6m78-cv33.json @@ -7,12 +7,8 @@ "CVE-2007-4384" ], "details": "Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers to execute arbitrary PHP code via a URL in the (1) NomVote and (2) FilePalHex parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fpj9-xrvv-p65j/GHSA-fpj9-xrvv-p65j.json b/advisories/unreviewed/2022/05/GHSA-fpj9-xrvv-p65j/GHSA-fpj9-xrvv-p65j.json index f2e4780a16c..954898f4832 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpj9-xrvv-p65j/GHSA-fpj9-xrvv-p65j.json +++ b/advisories/unreviewed/2022/05/GHSA-fpj9-xrvv-p65j/GHSA-fpj9-xrvv-p65j.json @@ -7,12 +7,8 @@ "CVE-2007-4677" ], "details": "Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size when parsing the color table atom (CTAB) in a movie file, related to the CTAB RGB values.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fpv5-2m85-w77h/GHSA-fpv5-2m85-w77h.json b/advisories/unreviewed/2022/05/GHSA-fpv5-2m85-w77h/GHSA-fpv5-2m85-w77h.json index ab2d7691a5f..db05ccdac48 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpv5-2m85-w77h/GHSA-fpv5-2m85-w77h.json +++ b/advisories/unreviewed/2022/05/GHSA-fpv5-2m85-w77h/GHSA-fpv5-2m85-w77h.json @@ -7,12 +7,8 @@ "CVE-2007-3979" ], "details": "SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to execute arbitrary SQL commands via the news_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fq8q-p2hj-mx9w/GHSA-fq8q-p2hj-mx9w.json b/advisories/unreviewed/2022/05/GHSA-fq8q-p2hj-mx9w/GHSA-fq8q-p2hj-mx9w.json index d6d2eafb415..085f7992228 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq8q-p2hj-mx9w/GHSA-fq8q-p2hj-mx9w.json +++ b/advisories/unreviewed/2022/05/GHSA-fq8q-p2hj-mx9w/GHSA-fq8q-p2hj-mx9w.json @@ -7,12 +7,8 @@ "CVE-2007-4231" ], "details": "PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svr_rootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fqfh-h66q-wccr/GHSA-fqfh-h66q-wccr.json b/advisories/unreviewed/2022/05/GHSA-fqfh-h66q-wccr/GHSA-fqfh-h66q-wccr.json index 2381b4ff7bb..d5aee1d0ac6 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqfh-h66q-wccr/GHSA-fqfh-h66q-wccr.json +++ b/advisories/unreviewed/2022/05/GHSA-fqfh-h66q-wccr/GHSA-fqfh-h66q-wccr.json @@ -7,12 +7,8 @@ "CVE-2007-3836" ], "details": "Format string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of service via format string specifiers in certain data related to failed DCC file transfer negotiation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fvc6-7939-69wx/GHSA-fvc6-7939-69wx.json b/advisories/unreviewed/2022/05/GHSA-fvc6-7939-69wx/GHSA-fvc6-7939-69wx.json index 7db3c0bc147..635e346489a 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvc6-7939-69wx/GHSA-fvc6-7939-69wx.json +++ b/advisories/unreviewed/2022/05/GHSA-fvc6-7939-69wx/GHSA-fvc6-7939-69wx.json @@ -7,12 +7,8 @@ "CVE-2007-3851" ], "details": "The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fvpx-c9g3-8m4p/GHSA-fvpx-c9g3-8m4p.json b/advisories/unreviewed/2022/05/GHSA-fvpx-c9g3-8m4p/GHSA-fvpx-c9g3-8m4p.json index 874da118564..e04c3726995 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvpx-c9g3-8m4p/GHSA-fvpx-c9g3-8m4p.json +++ b/advisories/unreviewed/2022/05/GHSA-fvpx-c9g3-8m4p/GHSA-fvpx-c9g3-8m4p.json @@ -7,12 +7,8 @@ "CVE-2007-4177" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2007-3328.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fvv5-4452-jhc8/GHSA-fvv5-4452-jhc8.json b/advisories/unreviewed/2022/05/GHSA-fvv5-4452-jhc8/GHSA-fvv5-4452-jhc8.json index f7be3389119..3a990a3e8f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvv5-4452-jhc8/GHSA-fvv5-4452-jhc8.json +++ b/advisories/unreviewed/2022/05/GHSA-fvv5-4452-jhc8/GHSA-fvv5-4452-jhc8.json @@ -7,12 +7,8 @@ "CVE-2007-4324" ], "details": "ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan arbitrary hosts via a Flash (SWF) movie that specifies a connection to make, then uses timing discrepancies from the SecurityErrorEvent error to determine whether a port is open or not. NOTE: 9.0.115.0 introduces support for a workaround, but does not fix the vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -160,9 +156,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fx8g-cgwg-pm6c/GHSA-fx8g-cgwg-pm6c.json b/advisories/unreviewed/2022/05/GHSA-fx8g-cgwg-pm6c/GHSA-fx8g-cgwg-pm6c.json index 5516fa8f94d..2c810f89e79 100644 --- a/advisories/unreviewed/2022/05/GHSA-fx8g-cgwg-pm6c/GHSA-fx8g-cgwg-pm6c.json +++ b/advisories/unreviewed/2022/05/GHSA-fx8g-cgwg-pm6c/GHSA-fx8g-cgwg-pm6c.json @@ -7,12 +7,8 @@ "CVE-2019-16115" ], "details": "In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g2f7-3fv3-ch6q/GHSA-g2f7-3fv3-ch6q.json b/advisories/unreviewed/2022/05/GHSA-g2f7-3fv3-ch6q/GHSA-g2f7-3fv3-ch6q.json index fc2d80b7fbd..3ccd56f3299 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2f7-3fv3-ch6q/GHSA-g2f7-3fv3-ch6q.json +++ b/advisories/unreviewed/2022/05/GHSA-g2f7-3fv3-ch6q/GHSA-g2f7-3fv3-ch6q.json @@ -7,12 +7,8 @@ "CVE-2007-4319" ], "details": "The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service (infinite reboot loop) via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF; if so, then it should not be included in CVE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g35q-w93f-4c48/GHSA-g35q-w93f-4c48.json b/advisories/unreviewed/2022/05/GHSA-g35q-w93f-4c48/GHSA-g35q-w93f-4c48.json index 95225501a24..05f7195b6b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-g35q-w93f-4c48/GHSA-g35q-w93f-4c48.json +++ b/advisories/unreviewed/2022/05/GHSA-g35q-w93f-4c48/GHSA-g35q-w93f-4c48.json @@ -7,12 +7,8 @@ "CVE-2007-4017" ], "details": "Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g52g-75rw-jcw7/GHSA-g52g-75rw-jcw7.json b/advisories/unreviewed/2022/05/GHSA-g52g-75rw-jcw7/GHSA-g52g-75rw-jcw7.json index de13ba7cc74..b4418b08a9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g52g-75rw-jcw7/GHSA-g52g-75rw-jcw7.json +++ b/advisories/unreviewed/2022/05/GHSA-g52g-75rw-jcw7/GHSA-g52g-75rw-jcw7.json @@ -7,12 +7,8 @@ "CVE-2007-4304" ], "details": "CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an \"incorrect write protection of pages\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g7gf-94hw-64mg/GHSA-g7gf-94hw-64mg.json b/advisories/unreviewed/2022/05/GHSA-g7gf-94hw-64mg/GHSA-g7gf-94hw-64mg.json index 48816fc8e66..e9d5147845c 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7gf-94hw-64mg/GHSA-g7gf-94hw-64mg.json +++ b/advisories/unreviewed/2022/05/GHSA-g7gf-94hw-64mg/GHSA-g7gf-94hw-64mg.json @@ -7,12 +7,8 @@ "CVE-2007-3882" ], "details": "SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g8fg-g275-53mg/GHSA-g8fg-g275-53mg.json b/advisories/unreviewed/2022/05/GHSA-g8fg-g275-53mg/GHSA-g8fg-g275-53mg.json index 773dbd2549e..bba1f042210 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8fg-g275-53mg/GHSA-g8fg-g275-53mg.json +++ b/advisories/unreviewed/2022/05/GHSA-g8fg-g275-53mg/GHSA-g8fg-g275-53mg.json @@ -7,12 +7,8 @@ "CVE-2007-4160" ], "details": "The default configuration of TIBCO Rendezvous (RV) 7.5.2 clients, when -no-multicast is omitted, uses a multicast group as the destination for a network message, which might make it easier for remote attackers to capture message contents by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g8jq-6q65-689r/GHSA-g8jq-6q65-689r.json b/advisories/unreviewed/2022/05/GHSA-g8jq-6q65-689r/GHSA-g8jq-6q65-689r.json index a0ad700db90..37fafed229d 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8jq-6q65-689r/GHSA-g8jq-6q65-689r.json +++ b/advisories/unreviewed/2022/05/GHSA-g8jq-6q65-689r/GHSA-g8jq-6q65-689r.json @@ -7,12 +7,8 @@ "CVE-2007-4085" ], "details": "Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter to forum_answer.php or (2) the cat_id parameter to search.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g975-6398-g6r8/GHSA-g975-6398-g6r8.json b/advisories/unreviewed/2022/05/GHSA-g975-6398-g6r8/GHSA-g975-6398-g6r8.json index b14ec552d5b..ee53728efad 100644 --- a/advisories/unreviewed/2022/05/GHSA-g975-6398-g6r8/GHSA-g975-6398-g6r8.json +++ b/advisories/unreviewed/2022/05/GHSA-g975-6398-g6r8/GHSA-g975-6398-g6r8.json @@ -7,12 +7,8 @@ "CVE-2007-4277" ], "details": "The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write) for the \\\\.\\Tmfilter device, which allows local users to send arbitrary content to the device via the IOCTL functionality. NOTE: this can be leveraged for privilege escalation by exploiting a buffer overflow in the handler for IOCTL 0xa0284403.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gcc5-hrjv-52gx/GHSA-gcc5-hrjv-52gx.json b/advisories/unreviewed/2022/05/GHSA-gcc5-hrjv-52gx/GHSA-gcc5-hrjv-52gx.json index 005d5aa8d05..50f8524e508 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcc5-hrjv-52gx/GHSA-gcc5-hrjv-52gx.json +++ b/advisories/unreviewed/2022/05/GHSA-gcc5-hrjv-52gx/GHSA-gcc5-hrjv-52gx.json @@ -7,12 +7,8 @@ "CVE-2007-4043" ], "details": "file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to bypass authentication via a name parameter ending with a \"%00.gif\" sequence. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gg32-f5c6-mgh7/GHSA-gg32-f5c6-mgh7.json b/advisories/unreviewed/2022/05/GHSA-gg32-f5c6-mgh7/GHSA-gg32-f5c6-mgh7.json index c3808774799..b0e1dc1370b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg32-f5c6-mgh7/GHSA-gg32-f5c6-mgh7.json +++ b/advisories/unreviewed/2022/05/GHSA-gg32-f5c6-mgh7/GHSA-gg32-f5c6-mgh7.json @@ -7,12 +7,8 @@ "CVE-2007-3849" ], "details": "Red Hat Enterprise Linux (RHEL) 5 ships the rpm for the Advanced Intrusion Detection Environment (AIDE) before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gg9f-65cg-m3qx/GHSA-gg9f-65cg-m3qx.json b/advisories/unreviewed/2022/05/GHSA-gg9f-65cg-m3qx/GHSA-gg9f-65cg-m3qx.json index 9f5b274db0e..957c529d890 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg9f-65cg-m3qx/GHSA-gg9f-65cg-m3qx.json +++ b/advisories/unreviewed/2022/05/GHSA-gg9f-65cg-m3qx/GHSA-gg9f-65cg-m3qx.json @@ -7,12 +7,8 @@ "CVE-2007-4345" ], "details": "Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart MIME e-mail message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggw2-hv98-c7p2/GHSA-ggw2-hv98-c7p2.json b/advisories/unreviewed/2022/05/GHSA-ggw2-hv98-c7p2/GHSA-ggw2-hv98-c7p2.json index bbac7766d0a..fb3239edda0 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggw2-hv98-c7p2/GHSA-ggw2-hv98-c7p2.json +++ b/advisories/unreviewed/2022/05/GHSA-ggw2-hv98-c7p2/GHSA-ggw2-hv98-c7p2.json @@ -7,12 +7,8 @@ "CVE-2007-4356" ], "details": "Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, which allows context-dependent attackers to obtain sensitive information by reading the HTML source, as demonstrated by a (1) .htm, (2) .html, or (3) .mht file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ggwj-wrgj-7mh6/GHSA-ggwj-wrgj-7mh6.json b/advisories/unreviewed/2022/05/GHSA-ggwj-wrgj-7mh6/GHSA-ggwj-wrgj-7mh6.json index 17664ac2af7..b157f8dc34a 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggwj-wrgj-7mh6/GHSA-ggwj-wrgj-7mh6.json +++ b/advisories/unreviewed/2022/05/GHSA-ggwj-wrgj-7mh6/GHSA-ggwj-wrgj-7mh6.json @@ -7,12 +7,8 @@ "CVE-2007-4675" ], "details": "Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gh4x-48gh-r2hh/GHSA-gh4x-48gh-r2hh.json b/advisories/unreviewed/2022/05/GHSA-gh4x-48gh-r2hh/GHSA-gh4x-48gh-r2hh.json index 0bad1c45ed9..7455a2ad103 100644 --- a/advisories/unreviewed/2022/05/GHSA-gh4x-48gh-r2hh/GHSA-gh4x-48gh-r2hh.json +++ b/advisories/unreviewed/2022/05/GHSA-gh4x-48gh-r2hh/GHSA-gh4x-48gh-r2hh.json @@ -7,12 +7,8 @@ "CVE-2007-3880" ], "details": "Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gjrj-3h8r-hphq/GHSA-gjrj-3h8r-hphq.json b/advisories/unreviewed/2022/05/GHSA-gjrj-3h8r-hphq/GHSA-gjrj-3h8r-hphq.json index 245a49f482a..c14b3d199ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjrj-3h8r-hphq/GHSA-gjrj-3h8r-hphq.json +++ b/advisories/unreviewed/2022/05/GHSA-gjrj-3h8r-hphq/GHSA-gjrj-3h8r-hphq.json @@ -7,12 +7,8 @@ "CVE-2007-4318" ], "details": "Cross-site scripting (XSS) vulnerability in Forms/General_1 in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to inject arbitrary web script or HTML via the sysSystemName parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjwr-v3q3-r53h/GHSA-gjwr-v3q3-r53h.json b/advisories/unreviewed/2022/05/GHSA-gjwr-v3q3-r53h/GHSA-gjwr-v3q3-r53h.json index 49e6ae19fad..80e0cc0727b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjwr-v3q3-r53h/GHSA-gjwr-v3q3-r53h.json +++ b/advisories/unreviewed/2022/05/GHSA-gjwr-v3q3-r53h/GHSA-gjwr-v3q3-r53h.json @@ -7,12 +7,8 @@ "CVE-2007-4115" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to (1) lang-en.php, (2) menu-ed.php, or (3) titletext-ed.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gm7r-3hg9-9wc5/GHSA-gm7r-3hg9-9wc5.json b/advisories/unreviewed/2022/05/GHSA-gm7r-3hg9-9wc5/GHSA-gm7r-3hg9-9wc5.json index 8bc2134f5cf..e871762bfd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm7r-3hg9-9wc5/GHSA-gm7r-3hg9-9wc5.json +++ b/advisories/unreviewed/2022/05/GHSA-gm7r-3hg9-9wc5/GHSA-gm7r-3hg9-9wc5.json @@ -7,12 +7,8 @@ "CVE-2007-4414" ], "details": "Cisco VPN Client on Windows before 4.8.02.0010 allows local users to gain privileges by enabling the \"Start Before Logon\" (SBL) and Microsoft Dial-Up Networking options, and then interacting with the dial-up networking dialog box.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gm9q-2pmp-cv6h/GHSA-gm9q-2pmp-cv6h.json b/advisories/unreviewed/2022/05/GHSA-gm9q-2pmp-cv6h/GHSA-gm9q-2pmp-cv6h.json index c35831d7b87..f538346e319 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm9q-2pmp-cv6h/GHSA-gm9q-2pmp-cv6h.json +++ b/advisories/unreviewed/2022/05/GHSA-gm9q-2pmp-cv6h/GHSA-gm9q-2pmp-cv6h.json @@ -7,12 +7,8 @@ "CVE-2007-3855" ], "details": "Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1) SYS.DBMS_DRS in the DataGuard component (DB03), (2) SYS.DBMS_STANDARD in the PL/SQL component (DB10), (3) MDSYS.RTREE_IDX in the Spatial component (DB16), and (4) SQL Compiler (DB17). NOTE: a reliable researcher claims that DB17 is for using Views to perform unauthorized insert, update, or delete actions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gp64-xw5c-22fh/GHSA-gp64-xw5c-22fh.json b/advisories/unreviewed/2022/05/GHSA-gp64-xw5c-22fh/GHSA-gp64-xw5c-22fh.json index b679ebbc589..6f627ff35c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-gp64-xw5c-22fh/GHSA-gp64-xw5c-22fh.json +++ b/advisories/unreviewed/2022/05/GHSA-gp64-xw5c-22fh/GHSA-gp64-xw5c-22fh.json @@ -7,12 +7,8 @@ "CVE-2007-4218" ], "details": "Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the (1) RPCFN_ENG_NewManualScan, (2) RPCFN_ENG_TimedNewManualScan, and (3) RPCFN_SetComputerName functions in (a) StRpcSrv.dll; the (4) RPCFN_CMON_SetSvcImpersonateUser and (5) RPCFN_OldCMON_SetSvcImpersonateUser functions in (b) Stcommon.dll; the (6) RPCFN_ENG_TakeActionOnAFile and (7) RPCFN_ENG_AddTaskExportLogItem functions in (c) Eng50.dll; the (8) NTF_SetPagerNotifyConfig function in (d) Notification.dll; or the (9) RPCFN_CopyAUSrc function in the (e) ServerProtect Agent service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gp9r-pc32-qp8q/GHSA-gp9r-pc32-qp8q.json b/advisories/unreviewed/2022/05/GHSA-gp9r-pc32-qp8q/GHSA-gp9r-pc32-qp8q.json index ee8c9d10e25..45b4ea37e56 100644 --- a/advisories/unreviewed/2022/05/GHSA-gp9r-pc32-qp8q/GHSA-gp9r-pc32-qp8q.json +++ b/advisories/unreviewed/2022/05/GHSA-gp9r-pc32-qp8q/GHSA-gp9r-pc32-qp8q.json @@ -7,12 +7,8 @@ "CVE-2007-4421" ], "details": "SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_AutoLogin cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gp9v-g4v7-r5mc/GHSA-gp9v-g4v7-r5mc.json b/advisories/unreviewed/2022/05/GHSA-gp9v-g4v7-r5mc/GHSA-gp9v-g4v7-r5mc.json index 80516c25328..68e0b7d607f 100644 --- a/advisories/unreviewed/2022/05/GHSA-gp9v-g4v7-r5mc/GHSA-gp9v-g4v7-r5mc.json +++ b/advisories/unreviewed/2022/05/GHSA-gp9v-g4v7-r5mc/GHSA-gp9v-g4v7-r5mc.json @@ -7,12 +7,8 @@ "CVE-2007-4499" ], "details": "Unrestricted file upload vulnerability in output.php in American Financing eMail Image Upload 4.1 allows remote attackers to upload and execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gq4g-6rp8-gv9f/GHSA-gq4g-6rp8-gv9f.json b/advisories/unreviewed/2022/05/GHSA-gq4g-6rp8-gv9f/GHSA-gq4g-6rp8-gv9f.json index 4fc4f2773d1..9636bd0b99e 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq4g-6rp8-gv9f/GHSA-gq4g-6rp8-gv9f.json +++ b/advisories/unreviewed/2022/05/GHSA-gq4g-6rp8-gv9f/GHSA-gq4g-6rp8-gv9f.json @@ -7,12 +7,8 @@ "CVE-2007-4210" ], "details": "Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via (1) the mid parameter in an faqviewgroup action in the FAQ Modules, (2) the cid parameter in the EZSHOPINGCART Modules, or (3) the gid parameter in a view action in the GALLERY Modules.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gr23-f346-64f6/GHSA-gr23-f346-64f6.json b/advisories/unreviewed/2022/05/GHSA-gr23-f346-64f6/GHSA-gr23-f346-64f6.json index 11b991c6f5f..7a56f5e5035 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr23-f346-64f6/GHSA-gr23-f346-64f6.json +++ b/advisories/unreviewed/2022/05/GHSA-gr23-f346-64f6/GHSA-gr23-f346-64f6.json @@ -7,12 +7,8 @@ "CVE-2007-4104" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, one of which involves an rss2 feed with an invalid or missing blog with an XSS sequence in the query string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-grh8-24vj-352c/GHSA-grh8-24vj-352c.json b/advisories/unreviewed/2022/05/GHSA-grh8-24vj-352c/GHSA-grh8-24vj-352c.json index c443fe41764..4bc9dce8640 100644 --- a/advisories/unreviewed/2022/05/GHSA-grh8-24vj-352c/GHSA-grh8-24vj-352c.json +++ b/advisories/unreviewed/2022/05/GHSA-grh8-24vj-352c/GHSA-grh8-24vj-352c.json @@ -7,12 +7,8 @@ "CVE-2007-3756" ], "details": "Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to obtain sensitive information via a crafted web page that identifies the URL of the parent window, even when the parent window is in a different domain.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gvg4-5vhv-vr9p/GHSA-gvg4-5vhv-vr9p.json b/advisories/unreviewed/2022/05/GHSA-gvg4-5vhv-vr9p/GHSA-gvg4-5vhv-vr9p.json index 03661eed444..48609bc4793 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvg4-5vhv-vr9p/GHSA-gvg4-5vhv-vr9p.json +++ b/advisories/unreviewed/2022/05/GHSA-gvg4-5vhv-vr9p/GHSA-gvg4-5vhv-vr9p.json @@ -7,12 +7,8 @@ "CVE-2007-4504" ], "details": "Directory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and earlier for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter in a files.display action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gvrq-xg6g-r9ww/GHSA-gvrq-xg6g-r9ww.json b/advisories/unreviewed/2022/05/GHSA-gvrq-xg6g-r9ww/GHSA-gvrq-xg6g-r9ww.json index 0fb7e704f62..fb5b0e1b14c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvrq-xg6g-r9ww/GHSA-gvrq-xg6g-r9ww.json +++ b/advisories/unreviewed/2022/05/GHSA-gvrq-xg6g-r9ww/GHSA-gvrq-xg6g-r9ww.json @@ -7,12 +7,8 @@ "CVE-2007-3830" ], "details": "Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gvvw-994f-q34f/GHSA-gvvw-994f-q34f.json b/advisories/unreviewed/2022/05/GHSA-gvvw-994f-q34f/GHSA-gvvw-994f-q34f.json index 578377c78cb..0e746f4bb7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvvw-994f-q34f/GHSA-gvvw-994f-q34f.json +++ b/advisories/unreviewed/2022/05/GHSA-gvvw-994f-q34f/GHSA-gvvw-994f-q34f.json @@ -7,12 +7,8 @@ "CVE-2007-4307" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow remote attackers to inject arbitrary web script or HTML via the next parameter to (1) addaddress.php, (2) editshipdetails.php, (3) register.php, or (4) login.php in secure/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gwmh-6579-2hjm/GHSA-gwmh-6579-2hjm.json b/advisories/unreviewed/2022/05/GHSA-gwmh-6579-2hjm/GHSA-gwmh-6579-2hjm.json index 5668d663ae1..36efdb86d0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gwmh-6579-2hjm/GHSA-gwmh-6579-2hjm.json +++ b/advisories/unreviewed/2022/05/GHSA-gwmh-6579-2hjm/GHSA-gwmh-6579-2hjm.json @@ -7,12 +7,8 @@ "CVE-2007-4303" ], "details": "Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gx7v-h3m2-w6v5/GHSA-gx7v-h3m2-w6v5.json b/advisories/unreviewed/2022/05/GHSA-gx7v-h3m2-w6v5/GHSA-gx7v-h3m2-w6v5.json index 89fd7c0e45d..9ffb50c1a91 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx7v-h3m2-w6v5/GHSA-gx7v-h3m2-w6v5.json +++ b/advisories/unreviewed/2022/05/GHSA-gx7v-h3m2-w6v5/GHSA-gx7v-h3m2-w6v5.json @@ -7,12 +7,8 @@ "CVE-2007-4495" ], "details": "Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service (system panic) via an unspecified ioctl function, aka Bug 6433124.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gxjq-gw5j-w87m/GHSA-gxjq-gw5j-w87m.json b/advisories/unreviewed/2022/05/GHSA-gxjq-gw5j-w87m/GHSA-gxjq-gw5j-w87m.json index e1806044042..77c3c5a2dcd 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxjq-gw5j-w87m/GHSA-gxjq-gw5j-w87m.json +++ b/advisories/unreviewed/2022/05/GHSA-gxjq-gw5j-w87m/GHSA-gxjq-gw5j-w87m.json @@ -7,12 +7,8 @@ "CVE-2007-4529" ], "details": "The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the (1) AdminAddServer, (2) AdminDeleteServer, (3) AdminStartServer, and (4) AdminStopServer privileges; and administration of arbitrary virtual servers via a request to a .tscmd URI with a modified serverid parameter, as demonstrated by (a) add_server.tscmd, (b) ask_delete_server.tscmd, (c) start_server.tscmd, and (d) stop_server.tscmd.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h235-4vp3-9j96/GHSA-h235-4vp3-9j96.json b/advisories/unreviewed/2022/05/GHSA-h235-4vp3-9j96/GHSA-h235-4vp3-9j96.json index 17efeca96f2..d26a68898f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-h235-4vp3-9j96/GHSA-h235-4vp3-9j96.json +++ b/advisories/unreviewed/2022/05/GHSA-h235-4vp3-9j96/GHSA-h235-4vp3-9j96.json @@ -7,12 +7,8 @@ "CVE-2007-4075" ], "details": "Cross-site scripting (XSS) vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h24w-j9mf-mjf2/GHSA-h24w-j9mf-mjf2.json b/advisories/unreviewed/2022/05/GHSA-h24w-j9mf-mjf2/GHSA-h24w-j9mf-mjf2.json index bedf94004f9..f92fed21a8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-h24w-j9mf-mjf2/GHSA-h24w-j9mf-mjf2.json +++ b/advisories/unreviewed/2022/05/GHSA-h24w-j9mf-mjf2/GHSA-h24w-j9mf-mjf2.json @@ -7,12 +7,8 @@ "CVE-2007-4322" ], "details": "BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) vsftpd log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of service by adding arbitrary IP addresses to a daemon log file, as demonstrated by connecting through ssh with a client protocol version identification containing an IP address string, or connecting through ftp with a username containing an IP address string, different vectors than CVE-2007-2765.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h4hx-g865-m72c/GHSA-h4hx-g865-m72c.json b/advisories/unreviewed/2022/05/GHSA-h4hx-g865-m72c/GHSA-h4hx-g865-m72c.json index a1e4c4df465..e8f579a8966 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4hx-g865-m72c/GHSA-h4hx-g865-m72c.json +++ b/advisories/unreviewed/2022/05/GHSA-h4hx-g865-m72c/GHSA-h4hx-g865-m72c.json @@ -7,12 +7,8 @@ "CVE-2007-4437" ], "details": "SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h5qf-mmv4-97gc/GHSA-h5qf-mmv4-97gc.json b/advisories/unreviewed/2022/05/GHSA-h5qf-mmv4-97gc/GHSA-h5qf-mmv4-97gc.json index 2c3d6e12c67..7d5fb380090 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5qf-mmv4-97gc/GHSA-h5qf-mmv4-97gc.json +++ b/advisories/unreviewed/2022/05/GHSA-h5qf-mmv4-97gc/GHSA-h5qf-mmv4-97gc.json @@ -7,12 +7,8 @@ "CVE-2007-4473" ], "details": "Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h68g-pwvj-5r42/GHSA-h68g-pwvj-5r42.json b/advisories/unreviewed/2022/05/GHSA-h68g-pwvj-5r42/GHSA-h68g-pwvj-5r42.json index bfcf2f06c27..3fa13174ed8 100644 --- a/advisories/unreviewed/2022/05/GHSA-h68g-pwvj-5r42/GHSA-h68g-pwvj-5r42.json +++ b/advisories/unreviewed/2022/05/GHSA-h68g-pwvj-5r42/GHSA-h68g-pwvj-5r42.json @@ -7,12 +7,8 @@ "CVE-2007-4481" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h836-c58g-r2c4/GHSA-h836-c58g-r2c4.json b/advisories/unreviewed/2022/05/GHSA-h836-c58g-r2c4/GHSA-h836-c58g-r2c4.json index 4faddadf252..65e0db4fa8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-h836-c58g-r2c4/GHSA-h836-c58g-r2c4.json +++ b/advisories/unreviewed/2022/05/GHSA-h836-c58g-r2c4/GHSA-h836-c58g-r2c4.json @@ -7,12 +7,8 @@ "CVE-2007-4284" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (MP) 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) Success Template (STPL) and (2) Failure Template (FTPL) parameters, which are not properly handled in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h838-jhq5-7hmc/GHSA-h838-jhq5-7hmc.json b/advisories/unreviewed/2022/05/GHSA-h838-jhq5-7hmc/GHSA-h838-jhq5-7hmc.json index 30c1d6e243a..5a28434d21a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h838-jhq5-7hmc/GHSA-h838-jhq5-7hmc.json +++ b/advisories/unreviewed/2022/05/GHSA-h838-jhq5-7hmc/GHSA-h838-jhq5-7hmc.json @@ -7,12 +7,8 @@ "CVE-2007-4034" ], "details": "Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h954-gg76-fwj2/GHSA-h954-gg76-fwj2.json b/advisories/unreviewed/2022/05/GHSA-h954-gg76-fwj2/GHSA-h954-gg76-fwj2.json index 176b4fc64ca..2aa29374be5 100644 --- a/advisories/unreviewed/2022/05/GHSA-h954-gg76-fwj2/GHSA-h954-gg76-fwj2.json +++ b/advisories/unreviewed/2022/05/GHSA-h954-gg76-fwj2/GHSA-h954-gg76-fwj2.json @@ -7,12 +7,8 @@ "CVE-2007-4068" ], "details": "Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the kat_id parameter to the default URI in a download action or (2) the id parameter to the default URI in a duyurular_detay action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9rh-qg2g-rfjq/GHSA-h9rh-qg2g-rfjq.json b/advisories/unreviewed/2022/05/GHSA-h9rh-qg2g-rfjq/GHSA-h9rh-qg2g-rfjq.json index d822cfc8b22..d9a0dc4df43 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9rh-qg2g-rfjq/GHSA-h9rh-qg2g-rfjq.json +++ b/advisories/unreviewed/2022/05/GHSA-h9rh-qg2g-rfjq/GHSA-h9rh-qg2g-rfjq.json @@ -7,12 +7,8 @@ "CVE-2007-4369" ], "details": "Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hc7f-87mj-4472/GHSA-hc7f-87mj-4472.json b/advisories/unreviewed/2022/05/GHSA-hc7f-87mj-4472/GHSA-hc7f-87mj-4472.json index 481addddf93..a266d197a9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc7f-87mj-4472/GHSA-hc7f-87mj-4472.json +++ b/advisories/unreviewed/2022/05/GHSA-hc7f-87mj-4472/GHSA-hc7f-87mj-4472.json @@ -7,12 +7,8 @@ "CVE-2007-4151" ], "details": "The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to obtain sensitive information via (1) a LOG.ON command, which reveals the logging pathname in the server response; (2) a VER command, which reveals the version number in the server response; and (3) a connection, which reveals the version number in the banner.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hg8q-4rx2-c88w/GHSA-hg8q-4rx2-c88w.json b/advisories/unreviewed/2022/05/GHSA-hg8q-4rx2-c88w/GHSA-hg8q-4rx2-c88w.json index b3aaefa9237..484a402d848 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg8q-4rx2-c88w/GHSA-hg8q-4rx2-c88w.json +++ b/advisories/unreviewed/2022/05/GHSA-hg8q-4rx2-c88w/GHSA-hg8q-4rx2-c88w.json @@ -7,12 +7,8 @@ "CVE-2007-4408" ], "details": "ircu 2.10.12.05 and earlier ignores timestamps in bounces, which allows remote attackers to take over a channel during a netjoin by causing a bounce while a server with an older version of the channel is linking.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hgw5-352q-jm68/GHSA-hgw5-352q-jm68.json b/advisories/unreviewed/2022/05/GHSA-hgw5-352q-jm68/GHSA-hgw5-352q-jm68.json index ac1c5fb731e..5980972990e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgw5-352q-jm68/GHSA-hgw5-352q-jm68.json +++ b/advisories/unreviewed/2022/05/GHSA-hgw5-352q-jm68/GHSA-hgw5-352q-jm68.json @@ -7,12 +7,8 @@ "CVE-2007-4336" ], "details": "Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hhp6-3f6p-xrjv/GHSA-hhp6-3f6p-xrjv.json b/advisories/unreviewed/2022/05/GHSA-hhp6-3f6p-xrjv/GHSA-hhp6-3f6p-xrjv.json index 86bcec26099..d3cceab24e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhp6-3f6p-xrjv/GHSA-hhp6-3f6p-xrjv.json +++ b/advisories/unreviewed/2022/05/GHSA-hhp6-3f6p-xrjv/GHSA-hhp6-3f6p-xrjv.json @@ -7,12 +7,8 @@ "CVE-2007-4124" ], "details": "The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hjhw-rh28-h57q/GHSA-hjhw-rh28-h57q.json b/advisories/unreviewed/2022/05/GHSA-hjhw-rh28-h57q/GHSA-hjhw-rh28-h57q.json index 0d12b1194d5..28290c34f3f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjhw-rh28-h57q/GHSA-hjhw-rh28-h57q.json +++ b/advisories/unreviewed/2022/05/GHSA-hjhw-rh28-h57q/GHSA-hjhw-rh28-h57q.json @@ -7,12 +7,8 @@ "CVE-2007-4243" ], "details": "Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a denial of service (CPU consumption) via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hjqm-r2mc-9j6m/GHSA-hjqm-r2mc-9j6m.json b/advisories/unreviewed/2022/05/GHSA-hjqm-r2mc-9j6m/GHSA-hjqm-r2mc-9j6m.json index d2f78c3241c..263ba160543 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjqm-r2mc-9j6m/GHSA-hjqm-r2mc-9j6m.json +++ b/advisories/unreviewed/2022/05/GHSA-hjqm-r2mc-9j6m/GHSA-hjqm-r2mc-9j6m.json @@ -7,12 +7,8 @@ "CVE-2007-4159" ], "details": "index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hm88-4c8q-7h3p/GHSA-hm88-4c8q-7h3p.json b/advisories/unreviewed/2022/05/GHSA-hm88-4c8q-7h3p/GHSA-hm88-4c8q-7h3p.json index 16af12b1e9a..56236d28c59 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm88-4c8q-7h3p/GHSA-hm88-4c8q-7h3p.json +++ b/advisories/unreviewed/2022/05/GHSA-hm88-4c8q-7h3p/GHSA-hm88-4c8q-7h3p.json @@ -7,12 +7,8 @@ "CVE-2007-4494" ], "details": "The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hm9h-6w2c-4rp9/GHSA-hm9h-6w2c-4rp9.json b/advisories/unreviewed/2022/05/GHSA-hm9h-6w2c-4rp9/GHSA-hm9h-6w2c-4rp9.json index 9f37eceb8aa..1cddc854013 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm9h-6w2c-4rp9/GHSA-hm9h-6w2c-4rp9.json +++ b/advisories/unreviewed/2022/05/GHSA-hm9h-6w2c-4rp9/GHSA-hm9h-6w2c-4rp9.json @@ -7,12 +7,8 @@ "CVE-2007-4149" ], "details": "The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 does not require authentication for (1) the \"LOG.\" command, which allows remote attackers to create or overwrite arbitrary files; (2) the SETTINGSFILE command, which allows remote attackers to overwrite the ini file, and reconfigure VSAOD or cause a denial of service; or (3) the UNINSTALL command, which allows remote attackers to cause a denial of service (daemon shutdown). NOTE: vector 1 can be leveraged for code execution by writing to a Startup folder.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hmrf-mvw2-pcgr/GHSA-hmrf-mvw2-pcgr.json b/advisories/unreviewed/2022/05/GHSA-hmrf-mvw2-pcgr/GHSA-hmrf-mvw2-pcgr.json index bda704e0e9b..d8dfd895727 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmrf-mvw2-pcgr/GHSA-hmrf-mvw2-pcgr.json +++ b/advisories/unreviewed/2022/05/GHSA-hmrf-mvw2-pcgr/GHSA-hmrf-mvw2-pcgr.json @@ -7,12 +7,8 @@ "CVE-2007-3893" ], "details": "Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified vectors involving memory corruption from an unhandled error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hpfj-5hrq-qgp2/GHSA-hpfj-5hrq-qgp2.json b/advisories/unreviewed/2022/05/GHSA-hpfj-5hrq-qgp2/GHSA-hpfj-5hrq-qgp2.json index 123c8f3a829..d57e9144649 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpfj-5hrq-qgp2/GHSA-hpfj-5hrq-qgp2.json +++ b/advisories/unreviewed/2022/05/GHSA-hpfj-5hrq-qgp2/GHSA-hpfj-5hrq-qgp2.json @@ -7,12 +7,8 @@ "CVE-2007-4244" ], "details": "PHP remote file inclusion vulnerability in langset.php in J! Reactions (com_jreactions) 1.8.1 and earlier, a Joomla! component, allows remote attackers to execute arbitrary PHP code via a URL in the comPath parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hq47-jrpj-2gwp/GHSA-hq47-jrpj-2gwp.json b/advisories/unreviewed/2022/05/GHSA-hq47-jrpj-2gwp/GHSA-hq47-jrpj-2gwp.json index 82fdd1d1cfc..0d6e2bff249 100644 --- a/advisories/unreviewed/2022/05/GHSA-hq47-jrpj-2gwp/GHSA-hq47-jrpj-2gwp.json +++ b/advisories/unreviewed/2022/05/GHSA-hq47-jrpj-2gwp/GHSA-hq47-jrpj-2gwp.json @@ -7,12 +7,8 @@ "CVE-2007-4412" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to (1) techs.php, (2) ticket_category.php, (3) ticket_priority.php, (4) ticket_workflow.php, (5) ticket_escalate.php, (6) fields_ticket.php, (7) ticket_rules_web.php, (8) ticket_displayfields.php, (9) ticket_rules_mail.php, (10) fields_user.php, (11) fields_faq.php, and (12) user_help.php, in (a) admincp/ and (b) possibly a directory on the \"User side.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hqgm-p47x-vmfg/GHSA-hqgm-p47x-vmfg.json b/advisories/unreviewed/2022/05/GHSA-hqgm-p47x-vmfg/GHSA-hqgm-p47x-vmfg.json index a9d829fdde9..49f30d3e04e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqgm-p47x-vmfg/GHSA-hqgm-p47x-vmfg.json +++ b/advisories/unreviewed/2022/05/GHSA-hqgm-p47x-vmfg/GHSA-hqgm-p47x-vmfg.json @@ -7,12 +7,8 @@ "CVE-2007-3825" ], "details": "Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hrmw-cjqg-9hxh/GHSA-hrmw-cjqg-9hxh.json b/advisories/unreviewed/2022/05/GHSA-hrmw-cjqg-9hxh/GHSA-hrmw-cjqg-9hxh.json index c81d9ec5a00..2c76d3da004 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrmw-cjqg-9hxh/GHSA-hrmw-cjqg-9hxh.json +++ b/advisories/unreviewed/2022/05/GHSA-hrmw-cjqg-9hxh/GHSA-hrmw-cjqg-9hxh.json @@ -7,12 +7,8 @@ "CVE-2007-3956" ], "details": "TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username and password parameters in a request to login.tscmd on TCP port 14534.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hv2h-86hc-65fp/GHSA-hv2h-86hc-65fp.json b/advisories/unreviewed/2022/05/GHSA-hv2h-86hc-65fp/GHSA-hv2h-86hc-65fp.json index bb101a220ad..9609739298d 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv2h-86hc-65fp/GHSA-hv2h-86hc-65fp.json +++ b/advisories/unreviewed/2022/05/GHSA-hv2h-86hc-65fp/GHSA-hv2h-86hc-65fp.json @@ -7,12 +7,8 @@ "CVE-2007-4310" ], "details": "The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a \"finger 9@host\" command, a different vulnerability than CVE-2001-1503.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hvcp-w92q-c45m/GHSA-hvcp-w92q-c45m.json b/advisories/unreviewed/2022/05/GHSA-hvcp-w92q-c45m/GHSA-hvcp-w92q-c45m.json index 3c28a051e3b..4e2f08fdf63 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvcp-w92q-c45m/GHSA-hvcp-w92q-c45m.json +++ b/advisories/unreviewed/2022/05/GHSA-hvcp-w92q-c45m/GHSA-hvcp-w92q-c45m.json @@ -7,12 +7,8 @@ "CVE-2007-4072" ], "details": "Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hvqc-c4rf-m8rq/GHSA-hvqc-c4rf-m8rq.json b/advisories/unreviewed/2022/05/GHSA-hvqc-c4rf-m8rq/GHSA-hvqc-c4rf-m8rq.json index ddafc9ddb65..c15f8fcef32 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvqc-c4rf-m8rq/GHSA-hvqc-c4rf-m8rq.json +++ b/advisories/unreviewed/2022/05/GHSA-hvqc-c4rf-m8rq/GHSA-hvqc-c4rf-m8rq.json @@ -7,12 +7,8 @@ "CVE-2007-4501" ], "details": "Unspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows attackers to obtain sensitive information (passwords) via unknown vectors, related to \"poor protection.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hvww-3pcr-wpmj/GHSA-hvww-3pcr-wpmj.json b/advisories/unreviewed/2022/05/GHSA-hvww-3pcr-wpmj/GHSA-hvww-3pcr-wpmj.json index 155c615e20a..10d0c513e44 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvww-3pcr-wpmj/GHSA-hvww-3pcr-wpmj.json +++ b/advisories/unreviewed/2022/05/GHSA-hvww-3pcr-wpmj/GHSA-hvww-3pcr-wpmj.json @@ -7,12 +7,8 @@ "CVE-2007-4099" ], "details": "Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hwq8-gxx8-crhc/GHSA-hwq8-gxx8-crhc.json b/advisories/unreviewed/2022/05/GHSA-hwq8-gxx8-crhc/GHSA-hwq8-gxx8-crhc.json index a83d78ca967..e4e27ba8277 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwq8-gxx8-crhc/GHSA-hwq8-gxx8-crhc.json +++ b/advisories/unreviewed/2022/05/GHSA-hwq8-gxx8-crhc/GHSA-hwq8-gxx8-crhc.json @@ -7,12 +7,8 @@ "CVE-2007-4403" ], "details": "The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hx46-g3jf-9qgx/GHSA-hx46-g3jf-9qgx.json b/advisories/unreviewed/2022/05/GHSA-hx46-g3jf-9qgx/GHSA-hx46-g3jf-9qgx.json index bbe1963137e..538de2c4aad 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx46-g3jf-9qgx/GHSA-hx46-g3jf-9qgx.json +++ b/advisories/unreviewed/2022/05/GHSA-hx46-g3jf-9qgx/GHSA-hx46-g3jf-9qgx.json @@ -7,12 +7,8 @@ "CVE-2007-4252" ], "details": "Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hx8r-p24q-f264/GHSA-hx8r-p24q-f264.json b/advisories/unreviewed/2022/05/GHSA-hx8r-p24q-f264/GHSA-hx8r-p24q-f264.json index f35b6f65f96..9ac0410af33 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx8r-p24q-f264/GHSA-hx8r-p24q-f264.json +++ b/advisories/unreviewed/2022/05/GHSA-hx8r-p24q-f264/GHSA-hx8r-p24q-f264.json @@ -7,12 +7,8 @@ "CVE-2007-3837" ], "details": "Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service (application crash) via a long CTCP request message containing '%' (percent) characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hxvm-w548-m27r/GHSA-hxvm-w548-m27r.json b/advisories/unreviewed/2022/05/GHSA-hxvm-w548-m27r/GHSA-hxvm-w548-m27r.json index 49679d0e582..861be1bafa0 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxvm-w548-m27r/GHSA-hxvm-w548-m27r.json +++ b/advisories/unreviewed/2022/05/GHSA-hxvm-w548-m27r/GHSA-hxvm-w548-m27r.json @@ -7,12 +7,8 @@ "CVE-2007-4066" ], "details": "Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.exe related to the _psy_noiseguards_8 array.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j34x-wmhc-q593/GHSA-j34x-wmhc-q593.json b/advisories/unreviewed/2022/05/GHSA-j34x-wmhc-q593/GHSA-j34x-wmhc-q593.json index db25727e9c5..a4259428da2 100644 --- a/advisories/unreviewed/2022/05/GHSA-j34x-wmhc-q593/GHSA-j34x-wmhc-q593.json +++ b/advisories/unreviewed/2022/05/GHSA-j34x-wmhc-q593/GHSA-j34x-wmhc-q593.json @@ -7,12 +7,8 @@ "CVE-2007-4523" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php, probably involving the Title or textarea field as reachable through admin/pages/new_page.php. NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j3q5-g96j-jc59/GHSA-j3q5-g96j-jc59.json b/advisories/unreviewed/2022/05/GHSA-j3q5-g96j-jc59/GHSA-j3q5-g96j-jc59.json index 03aebbc3af6..7af636165e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3q5-g96j-jc59/GHSA-j3q5-g96j-jc59.json +++ b/advisories/unreviewed/2022/05/GHSA-j3q5-g96j-jc59/GHSA-j3q5-g96j-jc59.json @@ -7,12 +7,8 @@ "CVE-2007-4269" ], "details": "Integer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk Session Protocol (ASP) message on an AppleTalk socket, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j4qw-pq8p-xp38/GHSA-j4qw-pq8p-xp38.json b/advisories/unreviewed/2022/05/GHSA-j4qw-pq8p-xp38/GHSA-j4qw-pq8p-xp38.json index c936dd0dc9b..67a4c63f650 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4qw-pq8p-xp38/GHSA-j4qw-pq8p-xp38.json +++ b/advisories/unreviewed/2022/05/GHSA-j4qw-pq8p-xp38/GHSA-j4qw-pq8p-xp38.json @@ -7,12 +7,8 @@ "CVE-2007-4067" ], "details": "Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j4vw-m9pg-m7rf/GHSA-j4vw-m9pg-m7rf.json b/advisories/unreviewed/2022/05/GHSA-j4vw-m9pg-m7rf/GHSA-j4vw-m9pg-m7rf.json index 75c976984b1..35e6ba14526 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4vw-m9pg-m7rf/GHSA-j4vw-m9pg-m7rf.json +++ b/advisories/unreviewed/2022/05/GHSA-j4vw-m9pg-m7rf/GHSA-j4vw-m9pg-m7rf.json @@ -7,12 +7,8 @@ "CVE-2007-3839" ], "details": "Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 010306 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the avatar parameter. NOTE: this may be related to the tracker program in the Janitor package. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j54h-g75g-7ph6/GHSA-j54h-g75g-7ph6.json b/advisories/unreviewed/2022/05/GHSA-j54h-g75g-7ph6/GHSA-j54h-g75g-7ph6.json index 780aa13c2a0..6ec4a0539b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-j54h-g75g-7ph6/GHSA-j54h-g75g-7ph6.json +++ b/advisories/unreviewed/2022/05/GHSA-j54h-g75g-7ph6/GHSA-j54h-g75g-7ph6.json @@ -7,12 +7,8 @@ "CVE-2007-4095" ], "details": "SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j5hf-f8j5-h5qm/GHSA-j5hf-f8j5-h5qm.json b/advisories/unreviewed/2022/05/GHSA-j5hf-f8j5-h5qm/GHSA-j5hf-f8j5-h5qm.json index 27e9965e031..5f91d392ed3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5hf-f8j5-h5qm/GHSA-j5hf-f8j5-h5qm.json +++ b/advisories/unreviewed/2022/05/GHSA-j5hf-f8j5-h5qm/GHSA-j5hf-f8j5-h5qm.json @@ -7,12 +7,8 @@ "CVE-2007-4152" ], "details": "The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j6mm-5cf5-j7mr/GHSA-j6mm-5cf5-j7mr.json b/advisories/unreviewed/2022/05/GHSA-j6mm-5cf5-j7mr/GHSA-j6mm-5cf5-j7mr.json index 312cab96238..c4ab63ac3d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6mm-5cf5-j7mr/GHSA-j6mm-5cf5-j7mr.json +++ b/advisories/unreviewed/2022/05/GHSA-j6mm-5cf5-j7mr/GHSA-j6mm-5cf5-j7mr.json @@ -7,12 +7,8 @@ "CVE-2007-4287" ], "details": "PHP remote file inclusion vulnerability in fc_functions/fc_example.php in FishCart 3.2 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the docroot parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j7cr-pfx5-wv5h/GHSA-j7cr-pfx5-wv5h.json b/advisories/unreviewed/2022/05/GHSA-j7cr-pfx5-wv5h/GHSA-j7cr-pfx5-wv5h.json index 0b1fa32c53a..ff4cef22ff8 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7cr-pfx5-wv5h/GHSA-j7cr-pfx5-wv5h.json +++ b/advisories/unreviewed/2022/05/GHSA-j7cr-pfx5-wv5h/GHSA-j7cr-pfx5-wv5h.json @@ -7,12 +7,8 @@ "CVE-2007-4387" ], "details": "Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j7ph-7g6h-ch7w/GHSA-j7ph-7g6h-ch7w.json b/advisories/unreviewed/2022/05/GHSA-j7ph-7g6h-ch7w/GHSA-j7ph-7g6h-ch7w.json index e0aeeff61a4..5a852e07fb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7ph-7g6h-ch7w/GHSA-j7ph-7g6h-ch7w.json +++ b/advisories/unreviewed/2022/05/GHSA-j7ph-7g6h-ch7w/GHSA-j7ph-7g6h-ch7w.json @@ -7,12 +7,8 @@ "CVE-2007-4249" ], "details": "The isChecked function in Toolbar.DLL in the ExportNation toolbar for Internet Explorer allows remote attackers to cause a denial of service (NULL dereference and browser crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j9fv-vvq8-cm36/GHSA-j9fv-vvq8-cm36.json b/advisories/unreviewed/2022/05/GHSA-j9fv-vvq8-cm36/GHSA-j9fv-vvq8-cm36.json index 8a3c3f0bb51..69ab4c3fd29 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9fv-vvq8-cm36/GHSA-j9fv-vvq8-cm36.json +++ b/advisories/unreviewed/2022/05/GHSA-j9fv-vvq8-cm36/GHSA-j9fv-vvq8-cm36.json @@ -7,12 +7,8 @@ "CVE-2007-4139" ], "details": "Cross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin/includes/upload.php) in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HTML via the style parameter to wp-admin/upload.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jc9m-67cw-qp9r/GHSA-jc9m-67cw-qp9r.json b/advisories/unreviewed/2022/05/GHSA-jc9m-67cw-qp9r/GHSA-jc9m-67cw-qp9r.json index b392c4b7b2a..cdb4b9ad187 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc9m-67cw-qp9r/GHSA-jc9m-67cw-qp9r.json +++ b/advisories/unreviewed/2022/05/GHSA-jc9m-67cw-qp9r/GHSA-jc9m-67cw-qp9r.json @@ -7,12 +7,8 @@ "CVE-2007-4516" ], "details": "The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service (daemon crash or hang) via malformed packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jchr-ph58-p2fr/GHSA-jchr-ph58-p2fr.json b/advisories/unreviewed/2022/05/GHSA-jchr-ph58-p2fr/GHSA-jchr-ph58-p2fr.json index 9fbf63714a0..f0740cf68b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jchr-ph58-p2fr/GHSA-jchr-ph58-p2fr.json +++ b/advisories/unreviewed/2022/05/GHSA-jchr-ph58-p2fr/GHSA-jchr-ph58-p2fr.json @@ -7,12 +7,8 @@ "CVE-2007-4359" ], "details": "Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbitrary SQL commands via (1) the search form or (2) the jobid parameter to index.php in a showbyID action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jcxv-vj45-grr9/GHSA-jcxv-vj45-grr9.json b/advisories/unreviewed/2022/05/GHSA-jcxv-vj45-grr9/GHSA-jcxv-vj45-grr9.json index aa24420d573..0e52c8c9d79 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcxv-vj45-grr9/GHSA-jcxv-vj45-grr9.json +++ b/advisories/unreviewed/2022/05/GHSA-jcxv-vj45-grr9/GHSA-jcxv-vj45-grr9.json @@ -7,12 +7,8 @@ "CVE-2007-4074" ], "details": "The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute arbitrary commands via the local daemon on port 1314, a different vulnerability than CVE-2001-0956. NOTE: this issue is local in some environments, but remote on others.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jf67-7g9q-qpv8/GHSA-jf67-7g9q-qpv8.json b/advisories/unreviewed/2022/05/GHSA-jf67-7g9q-qpv8/GHSA-jf67-7g9q-qpv8.json index 29df47cfbcf..7f83fa21ce7 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf67-7g9q-qpv8/GHSA-jf67-7g9q-qpv8.json +++ b/advisories/unreviewed/2022/05/GHSA-jf67-7g9q-qpv8/GHSA-jf67-7g9q-qpv8.json @@ -7,12 +7,8 @@ "CVE-2007-4208" ], "details": "SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary SQL commands via the (1) Users_Email or (2) Users_Password parameter in an ExecuteTheLogin action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jfgc-fvm5-h7pj/GHSA-jfgc-fvm5-h7pj.json b/advisories/unreviewed/2022/05/GHSA-jfgc-fvm5-h7pj/GHSA-jfgc-fvm5-h7pj.json index 16927d34bb7..6f102105602 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfgc-fvm5-h7pj/GHSA-jfgc-fvm5-h7pj.json +++ b/advisories/unreviewed/2022/05/GHSA-jfgc-fvm5-h7pj/GHSA-jfgc-fvm5-h7pj.json @@ -7,12 +7,8 @@ "CVE-2007-4126" ], "details": "Unspecified vulnerability in the dynamic tracing framework (DTrace) on Sun Solaris 10 before 20070730 allows local users with PRIV_DTRACE_USER privileges to cause a denial of service (panic or hang) via unspecified use of certain DTrace programs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jfgg-xqgc-pgqr/GHSA-jfgg-xqgc-pgqr.json b/advisories/unreviewed/2022/05/GHSA-jfgg-xqgc-pgqr/GHSA-jfgg-xqgc-pgqr.json index 4fa5e124054..c77325e4272 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfgg-xqgc-pgqr/GHSA-jfgg-xqgc-pgqr.json +++ b/advisories/unreviewed/2022/05/GHSA-jfgg-xqgc-pgqr/GHSA-jfgg-xqgc-pgqr.json @@ -7,12 +7,8 @@ "CVE-2007-4032" ], "details": "Buffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute arbitrary code via a long string in a .mls Playlist file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jfpf-5jr9-pf7p/GHSA-jfpf-5jr9-pf7p.json b/advisories/unreviewed/2022/05/GHSA-jfpf-5jr9-pf7p/GHSA-jfpf-5jr9-pf7p.json index 69880da928d..b4e6ca49cf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfpf-5jr9-pf7p/GHSA-jfpf-5jr9-pf7p.json +++ b/advisories/unreviewed/2022/05/GHSA-jfpf-5jr9-pf7p/GHSA-jfpf-5jr9-pf7p.json @@ -7,12 +7,8 @@ "CVE-2007-4055" ], "details": "SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this may be related to CVE-2006-4300.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jhw4-989v-7prf/GHSA-jhw4-989v-7prf.json b/advisories/unreviewed/2022/05/GHSA-jhw4-989v-7prf/GHSA-jhw4-989v-7prf.json index 5494a82ee57..7e4ab83d2d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhw4-989v-7prf/GHSA-jhw4-989v-7prf.json +++ b/advisories/unreviewed/2022/05/GHSA-jhw4-989v-7prf/GHSA-jhw4-989v-7prf.json @@ -7,12 +7,8 @@ "CVE-2007-4154" ], "details": "SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the page_options parameter to (1) options-general.php, (2) options-writing.php, (3) options-reading.php, (4) options-discussion.php, (5) options-privacy.php, (6) options-permalink.php, (7) options-misc.php, and possibly other unspecified components.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmjv-2hr3-5g9q/GHSA-jmjv-2hr3-5g9q.json b/advisories/unreviewed/2022/05/GHSA-jmjv-2hr3-5g9q/GHSA-jmjv-2hr3-5g9q.json index 0e36e09fb9c..bb66fdb4289 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmjv-2hr3-5g9q/GHSA-jmjv-2hr3-5g9q.json +++ b/advisories/unreviewed/2022/05/GHSA-jmjv-2hr3-5g9q/GHSA-jmjv-2hr3-5g9q.json @@ -7,12 +7,8 @@ "CVE-2007-4294" ], "details": "Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jp28-qfhx-jc9h/GHSA-jp28-qfhx-jc9h.json b/advisories/unreviewed/2022/05/GHSA-jp28-qfhx-jc9h/GHSA-jp28-qfhx-jc9h.json index 6f1b368684a..ae20c71e82b 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp28-qfhx-jc9h/GHSA-jp28-qfhx-jc9h.json +++ b/advisories/unreviewed/2022/05/GHSA-jp28-qfhx-jc9h/GHSA-jp28-qfhx-jc9h.json @@ -7,12 +7,8 @@ "CVE-2007-3853" ], "details": "Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to have unknown impact via (1) DBMS_JAVA_TEST in the JavaVM component (DB01), (2) Oracle Text component (DB09), and (3) MDSYS.SDO_GEOR_INT in the Spatial component (DB15). NOTE: a reliable researcher claims that DB01 is SQL injection in DBMS_PRVTAQIS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jp97-ghmc-3f94/GHSA-jp97-ghmc-3f94.json b/advisories/unreviewed/2022/05/GHSA-jp97-ghmc-3f94/GHSA-jp97-ghmc-3f94.json index 343ace4484c..b1b8a0e7505 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp97-ghmc-3f94/GHSA-jp97-ghmc-3f94.json +++ b/advisories/unreviewed/2022/05/GHSA-jp97-ghmc-3f94/GHSA-jp97-ghmc-3f94.json @@ -7,12 +7,8 @@ "CVE-2007-4200" ], "details": "ntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK) before 2.09 interprets a certain variable as a byte count rather than a count of 32-bit integers, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jpx4-8qqh-9593/GHSA-jpx4-8qqh-9593.json b/advisories/unreviewed/2022/05/GHSA-jpx4-8qqh-9593/GHSA-jpx4-8qqh-9593.json index 7878c782f60..6c76663f88c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpx4-8qqh-9593/GHSA-jpx4-8qqh-9593.json +++ b/advisories/unreviewed/2022/05/GHSA-jpx4-8qqh-9593/GHSA-jpx4-8qqh-9593.json @@ -7,12 +7,8 @@ "CVE-2019-2103" ], "details": "In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAG_SECURE. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jqq8-884r-26cj/GHSA-jqq8-884r-26cj.json b/advisories/unreviewed/2022/05/GHSA-jqq8-884r-26cj/GHSA-jqq8-884r-26cj.json index c43146fed96..c6662c67451 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqq8-884r-26cj/GHSA-jqq8-884r-26cj.json +++ b/advisories/unreviewed/2022/05/GHSA-jqq8-884r-26cj/GHSA-jqq8-884r-26cj.json @@ -7,12 +7,8 @@ "CVE-2007-3860" ], "details": "Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwv_flow_security.check_db_password function due to insufficient checks for '\"' characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jw92-2pmf-g68h/GHSA-jw92-2pmf-g68h.json b/advisories/unreviewed/2022/05/GHSA-jw92-2pmf-g68h/GHSA-jw92-2pmf-g68h.json index 5a993f1d272..cd6b7362564 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw92-2pmf-g68h/GHSA-jw92-2pmf-g68h.json +++ b/advisories/unreviewed/2022/05/GHSA-jw92-2pmf-g68h/GHSA-jw92-2pmf-g68h.json @@ -7,12 +7,8 @@ "CVE-2007-4423" ], "details": "Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows attackers to cause a denial of service and possibly execute arbitrary code via a long argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwgr-wg75-437r/GHSA-jwgr-wg75-437r.json b/advisories/unreviewed/2022/05/GHSA-jwgr-wg75-437r/GHSA-jwgr-wg75-437r.json index ff91eb603ae..dcaade2343b 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwgr-wg75-437r/GHSA-jwgr-wg75-437r.json +++ b/advisories/unreviewed/2022/05/GHSA-jwgr-wg75-437r/GHSA-jwgr-wg75-437r.json @@ -7,12 +7,8 @@ "CVE-2007-3848" ], "details": "Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -188,9 +184,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jwmf-2gw3-68v2/GHSA-jwmf-2gw3-68v2.json b/advisories/unreviewed/2022/05/GHSA-jwmf-2gw3-68v2/GHSA-jwmf-2gw3-68v2.json index fb719647f8b..16973518c26 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwmf-2gw3-68v2/GHSA-jwmf-2gw3-68v2.json +++ b/advisories/unreviewed/2022/05/GHSA-jwmf-2gw3-68v2/GHSA-jwmf-2gw3-68v2.json @@ -7,12 +7,8 @@ "CVE-2007-3865" ], "details": "Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote attack vectors, aka APPS01.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jx9x-r3hq-w433/GHSA-jx9x-r3hq-w433.json b/advisories/unreviewed/2022/05/GHSA-jx9x-r3hq-w433/GHSA-jx9x-r3hq-w433.json index db123ae2a94..6ff836038b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx9x-r3hq-w433/GHSA-jx9x-r3hq-w433.json +++ b/advisories/unreviewed/2022/05/GHSA-jx9x-r3hq-w433/GHSA-jx9x-r3hq-w433.json @@ -7,12 +7,8 @@ "CVE-2007-4223" ], "details": "Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel memory, which allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m2j4-xrjv-vxj9/GHSA-m2j4-xrjv-vxj9.json b/advisories/unreviewed/2022/05/GHSA-m2j4-xrjv-vxj9/GHSA-m2j4-xrjv-vxj9.json index 27aefd0632a..e2250cd2af9 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2j4-xrjv-vxj9/GHSA-m2j4-xrjv-vxj9.json +++ b/advisories/unreviewed/2022/05/GHSA-m2j4-xrjv-vxj9/GHSA-m2j4-xrjv-vxj9.json @@ -7,12 +7,8 @@ "CVE-2007-4113" ], "details": "Unspecified vulnerability in Advanced Webhost Billing System (AWBS) before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m3q9-2vwv-jcgp/GHSA-m3q9-2vwv-jcgp.json b/advisories/unreviewed/2022/05/GHSA-m3q9-2vwv-jcgp/GHSA-m3q9-2vwv-jcgp.json index 7ca487073f5..4a16f5ff748 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3q9-2vwv-jcgp/GHSA-m3q9-2vwv-jcgp.json +++ b/advisories/unreviewed/2022/05/GHSA-m3q9-2vwv-jcgp/GHSA-m3q9-2vwv-jcgp.json @@ -7,12 +7,8 @@ "CVE-2007-4415" ], "details": "Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m48w-9957-hwr5/GHSA-m48w-9957-hwr5.json b/advisories/unreviewed/2022/05/GHSA-m48w-9957-hwr5/GHSA-m48w-9957-hwr5.json index ea7f07fae99..f644380bf20 100644 --- a/advisories/unreviewed/2022/05/GHSA-m48w-9957-hwr5/GHSA-m48w-9957-hwr5.json +++ b/advisories/unreviewed/2022/05/GHSA-m48w-9957-hwr5/GHSA-m48w-9957-hwr5.json @@ -7,12 +7,8 @@ "CVE-2007-3889" ], "details": "Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the current_subsection parameter to index.php and other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m5vr-h7fw-fcf2/GHSA-m5vr-h7fw-fcf2.json b/advisories/unreviewed/2022/05/GHSA-m5vr-h7fw-fcf2/GHSA-m5vr-h7fw-fcf2.json index 7b044dbc47d..4e92cb28eb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5vr-h7fw-fcf2/GHSA-m5vr-h7fw-fcf2.json +++ b/advisories/unreviewed/2022/05/GHSA-m5vr-h7fw-fcf2/GHSA-m5vr-h7fw-fcf2.json @@ -7,12 +7,8 @@ "CVE-2019-14392" ], "details": "cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching (SEC-501).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m5wx-989q-4wj4/GHSA-m5wx-989q-4wj4.json b/advisories/unreviewed/2022/05/GHSA-m5wx-989q-4wj4/GHSA-m5wx-989q-4wj4.json index c676915f96d..a44d28e5546 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5wx-989q-4wj4/GHSA-m5wx-989q-4wj4.json +++ b/advisories/unreviewed/2022/05/GHSA-m5wx-989q-4wj4/GHSA-m5wx-989q-4wj4.json @@ -7,12 +7,8 @@ "CVE-2007-4102" ], "details": "Cross-site scripting (XSS) vulnerability in search.php for sBlog 0.7.3 Beta allows remote attackers to inject arbitrary HTML and web script via a leading '\"/> sequence in the search string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m6cg-292h-c82c/GHSA-m6cg-292h-c82c.json b/advisories/unreviewed/2022/05/GHSA-m6cg-292h-c82c/GHSA-m6cg-292h-c82c.json index 482a66ee8e4..70f2077794e 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6cg-292h-c82c/GHSA-m6cg-292h-c82c.json +++ b/advisories/unreviewed/2022/05/GHSA-m6cg-292h-c82c/GHSA-m6cg-292h-c82c.json @@ -7,12 +7,8 @@ "CVE-2007-3977" ], "details": "Cross-site scripting (XSS) vulnerability in bwired allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m6x3-rw6v-632g/GHSA-m6x3-rw6v-632g.json b/advisories/unreviewed/2022/05/GHSA-m6x3-rw6v-632g/GHSA-m6x3-rw6v-632g.json index 5fcfb604a66..7ca140d70df 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6x3-rw6v-632g/GHSA-m6x3-rw6v-632g.json +++ b/advisories/unreviewed/2022/05/GHSA-m6x3-rw6v-632g/GHSA-m6x3-rw6v-632g.json @@ -7,12 +7,8 @@ "CVE-2007-3829" ], "details": "Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a (1) long FailURL attribute in the IAMCE ActiveX Control (IAMCE.dll) or a (2) long URLCode attribute in the IAKey ActiveX Control (IAKey.dll). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m9jp-5r56-gqvq/GHSA-m9jp-5r56-gqvq.json b/advisories/unreviewed/2022/05/GHSA-m9jp-5r56-gqvq/GHSA-m9jp-5r56-gqvq.json index 509922f4add..421d0b7b3c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9jp-5r56-gqvq/GHSA-m9jp-5r56-gqvq.json +++ b/advisories/unreviewed/2022/05/GHSA-m9jp-5r56-gqvq/GHSA-m9jp-5r56-gqvq.json @@ -7,12 +7,8 @@ "CVE-2007-4297" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in yorumkaydet.asp in Dersimiz Haber Ekleme Modulu allow remote attackers to inject arbitrary web script or HTML via the (1) yazan, (2) mail, and (3) yorum parameters. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mc4h-vfvq-mc75/GHSA-mc4h-vfvq-mc75.json b/advisories/unreviewed/2022/05/GHSA-mc4h-vfvq-mc75/GHSA-mc4h-vfvq-mc75.json index 904eddcd95e..a674c5b27f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mc4h-vfvq-mc75/GHSA-mc4h-vfvq-mc75.json +++ b/advisories/unreviewed/2022/05/GHSA-mc4h-vfvq-mc75/GHSA-mc4h-vfvq-mc75.json @@ -7,12 +7,8 @@ "CVE-2007-4248" ], "details": "The CallCmd function in toolbar_gaming.dll in the Toolbar Gaming toolbar for Internet Explorer allows remote attackers to cause a denial of service (NULL dereference and browser crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mc8r-fh77-9634/GHSA-mc8r-fh77-9634.json b/advisories/unreviewed/2022/05/GHSA-mc8r-fh77-9634/GHSA-mc8r-fh77-9634.json index db382518deb..9a47e269d3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-mc8r-fh77-9634/GHSA-mc8r-fh77-9634.json +++ b/advisories/unreviewed/2022/05/GHSA-mc8r-fh77-9634/GHSA-mc8r-fh77-9634.json @@ -7,12 +7,8 @@ "CVE-2019-14339" ], "details": "The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mc8x-j7pp-229w/GHSA-mc8x-j7pp-229w.json b/advisories/unreviewed/2022/05/GHSA-mc8x-j7pp-229w/GHSA-mc8x-j7pp-229w.json index 304fb8edda8..3707b8c14c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-mc8x-j7pp-229w/GHSA-mc8x-j7pp-229w.json +++ b/advisories/unreviewed/2022/05/GHSA-mc8x-j7pp-229w/GHSA-mc8x-j7pp-229w.json @@ -7,12 +7,8 @@ "CVE-2007-4132" ], "details": "Unspecified vulnerability in Red Hat Network Satellite Server 5.0.0 allows remote authenticated users to execute arbitrary code via unknown vectors in a \"back-end XMLRPC handler.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mff5-wxc7-9wqp/GHSA-mff5-wxc7-9wqp.json b/advisories/unreviewed/2022/05/GHSA-mff5-wxc7-9wqp/GHSA-mff5-wxc7-9wqp.json index fe30cc1c29c..9885b8fdf7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mff5-wxc7-9wqp/GHSA-mff5-wxc7-9wqp.json +++ b/advisories/unreviewed/2022/05/GHSA-mff5-wxc7-9wqp/GHSA-mff5-wxc7-9wqp.json @@ -7,12 +7,8 @@ "CVE-2019-2176" ], "details": "In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mfxj-hq4m-7vpg/GHSA-mfxj-hq4m-7vpg.json b/advisories/unreviewed/2022/05/GHSA-mfxj-hq4m-7vpg/GHSA-mfxj-hq4m-7vpg.json index caf56560d03..2be5dc2a26a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfxj-hq4m-7vpg/GHSA-mfxj-hq4m-7vpg.json +++ b/advisories/unreviewed/2022/05/GHSA-mfxj-hq4m-7vpg/GHSA-mfxj-hq4m-7vpg.json @@ -7,12 +7,8 @@ "CVE-2007-4079" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) q parameter to (a) admin/membersearch.php, or (3) the userid parameter to (b) admin/edituser.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mhww-7vf3-c57h/GHSA-mhww-7vf3-c57h.json b/advisories/unreviewed/2022/05/GHSA-mhww-7vf3-c57h/GHSA-mhww-7vf3-c57h.json index fd506ea4234..140eec38671 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhww-7vf3-c57h/GHSA-mhww-7vf3-c57h.json +++ b/advisories/unreviewed/2022/05/GHSA-mhww-7vf3-c57h/GHSA-mhww-7vf3-c57h.json @@ -7,12 +7,8 @@ "CVE-2007-4340" ], "details": "PHP remote file inclusion vulnerability in index.php in phpDVD 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the dvd_config_file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mjmq-m73w-2rj6/GHSA-mjmq-m73w-2rj6.json b/advisories/unreviewed/2022/05/GHSA-mjmq-m73w-2rj6/GHSA-mjmq-m73w-2rj6.json index e556e968347..0de1edd46bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjmq-m73w-2rj6/GHSA-mjmq-m73w-2rj6.json +++ b/advisories/unreviewed/2022/05/GHSA-mjmq-m73w-2rj6/GHSA-mjmq-m73w-2rj6.json @@ -7,12 +7,8 @@ "CVE-2007-3826" ], "details": "Microsoft Internet Explorer 7 on Windows XP SP2 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via repeated document.open function calls after a user requests a new page, but before the onBeforeUnload function is called.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mm4c-ggh7-6cw3/GHSA-mm4c-ggh7-6cw3.json b/advisories/unreviewed/2022/05/GHSA-mm4c-ggh7-6cw3/GHSA-mm4c-ggh7-6cw3.json index dd6e76698d6..25739bddc78 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm4c-ggh7-6cw3/GHSA-mm4c-ggh7-6cw3.json +++ b/advisories/unreviewed/2022/05/GHSA-mm4c-ggh7-6cw3/GHSA-mm4c-ggh7-6cw3.json @@ -7,12 +7,8 @@ "CVE-2007-3752" ], "details": "Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mp6h-qg5r-fq5f/GHSA-mp6h-qg5r-fq5f.json b/advisories/unreviewed/2022/05/GHSA-mp6h-qg5r-fq5f/GHSA-mp6h-qg5r-fq5f.json index 8e8b9fd99af..7d9244075cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp6h-qg5r-fq5f/GHSA-mp6h-qg5r-fq5f.json +++ b/advisories/unreviewed/2022/05/GHSA-mp6h-qg5r-fq5f/GHSA-mp6h-qg5r-fq5f.json @@ -7,12 +7,8 @@ "CVE-2007-4183" ], "details": "SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mqj4-xj4m-2gxf/GHSA-mqj4-xj4m-2gxf.json b/advisories/unreviewed/2022/05/GHSA-mqj4-xj4m-2gxf/GHSA-mqj4-xj4m-2gxf.json index 67670a90640..5650ca97bbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqj4-xj4m-2gxf/GHSA-mqj4-xj4m-2gxf.json +++ b/advisories/unreviewed/2022/05/GHSA-mqj4-xj4m-2gxf/GHSA-mqj4-xj4m-2gxf.json @@ -7,12 +7,8 @@ "CVE-2007-4083" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to search.php or the (2) typ parameter to register.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mrvp-cxc3-h9q7/GHSA-mrvp-cxc3-h9q7.json b/advisories/unreviewed/2022/05/GHSA-mrvp-cxc3-h9q7/GHSA-mrvp-cxc3-h9q7.json index 73dfc26b40f..66833e44f52 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrvp-cxc3-h9q7/GHSA-mrvp-cxc3-h9q7.json +++ b/advisories/unreviewed/2022/05/GHSA-mrvp-cxc3-h9q7/GHSA-mrvp-cxc3-h9q7.json @@ -7,12 +7,8 @@ "CVE-2007-4105" ], "details": "A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing \"a link to download and a file to execute,\" possibly involving remote file inclusion.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mv4j-mff2-j8jc/GHSA-mv4j-mff2-j8jc.json b/advisories/unreviewed/2022/05/GHSA-mv4j-mff2-j8jc/GHSA-mv4j-mff2-j8jc.json index 32465356ff9..38ba7ed6aff 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv4j-mff2-j8jc/GHSA-mv4j-mff2-j8jc.json +++ b/advisories/unreviewed/2022/05/GHSA-mv4j-mff2-j8jc/GHSA-mv4j-mff2-j8jc.json @@ -7,12 +7,8 @@ "CVE-2007-4106" ], "details": "SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mw2p-m86f-7p5q/GHSA-mw2p-m86f-7p5q.json b/advisories/unreviewed/2022/05/GHSA-mw2p-m86f-7p5q/GHSA-mw2p-m86f-7p5q.json index 454e051a5d1..f99d618a576 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw2p-m86f-7p5q/GHSA-mw2p-m86f-7p5q.json +++ b/advisories/unreviewed/2022/05/GHSA-mw2p-m86f-7p5q/GHSA-mw2p-m86f-7p5q.json @@ -7,12 +7,8 @@ "CVE-2007-4178" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the deslocal parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mxp6-9cg4-mcrc/GHSA-mxp6-9cg4-mcrc.json b/advisories/unreviewed/2022/05/GHSA-mxp6-9cg4-mcrc/GHSA-mxp6-9cg4-mcrc.json index a8f7a68a458..94db858e3b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxp6-9cg4-mcrc/GHSA-mxp6-9cg4-mcrc.json +++ b/advisories/unreviewed/2022/05/GHSA-mxp6-9cg4-mcrc/GHSA-mxp6-9cg4-mcrc.json @@ -7,12 +7,8 @@ "CVE-2007-4426" ], "details": "Live for Speed (LFS) S1 and S2 allows remote attackers to cause a denial of service (server crash) via (1) a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or (2) a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p25j-m6wj-r6qj/GHSA-p25j-m6wj-r6qj.json b/advisories/unreviewed/2022/05/GHSA-p25j-m6wj-r6qj/GHSA-p25j-m6wj-r6qj.json index 807c4ca72cc..ab66c6d7756 100644 --- a/advisories/unreviewed/2022/05/GHSA-p25j-m6wj-r6qj/GHSA-p25j-m6wj-r6qj.json +++ b/advisories/unreviewed/2022/05/GHSA-p25j-m6wj-r6qj/GHSA-p25j-m6wj-r6qj.json @@ -7,12 +7,8 @@ "CVE-2007-4279" ], "details": "PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p29m-wgr2-368m/GHSA-p29m-wgr2-368m.json b/advisories/unreviewed/2022/05/GHSA-p29m-wgr2-368m/GHSA-p29m-wgr2-368m.json index 6d2398b216b..1007c44bdb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-p29m-wgr2-368m/GHSA-p29m-wgr2-368m.json +++ b/advisories/unreviewed/2022/05/GHSA-p29m-wgr2-368m/GHSA-p29m-wgr2-368m.json @@ -7,12 +7,8 @@ "CVE-2007-4046" ], "details": "SQL injection vulnerability in index.php in the Pony Gallery (com_ponygallery) 1.5 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p2vh-xmwq-vxr2/GHSA-p2vh-xmwq-vxr2.json b/advisories/unreviewed/2022/05/GHSA-p2vh-xmwq-vxr2/GHSA-p2vh-xmwq-vxr2.json index 464f193a78b..1c6cea0953d 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2vh-xmwq-vxr2/GHSA-p2vh-xmwq-vxr2.json +++ b/advisories/unreviewed/2022/05/GHSA-p2vh-xmwq-vxr2/GHSA-p2vh-xmwq-vxr2.json @@ -7,12 +7,8 @@ "CVE-2007-4425" ], "details": "Multiple buffer overflows in Live for Speed (LFS) demo, S1, and S2 allow remote authenticated users to (1) cause a denial of service (server crash) and probably execute arbitrary code via an ID 3 packet with a long nickname field, and (2) cause a denial of service (server crash) via an ID 10 packet containing a long string corresponding to an unavailable track.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p3rf-hqhj-fhpg/GHSA-p3rf-hqhj-fhpg.json b/advisories/unreviewed/2022/05/GHSA-p3rf-hqhj-fhpg/GHSA-p3rf-hqhj-fhpg.json index fd15d314638..e883d1df9bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3rf-hqhj-fhpg/GHSA-p3rf-hqhj-fhpg.json +++ b/advisories/unreviewed/2022/05/GHSA-p3rf-hqhj-fhpg/GHSA-p3rf-hqhj-fhpg.json @@ -7,12 +7,8 @@ "CVE-2019-15938" ], "details": "Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p3xg-f76r-937w/GHSA-p3xg-f76r-937w.json b/advisories/unreviewed/2022/05/GHSA-p3xg-f76r-937w/GHSA-p3xg-f76r-937w.json index 9f17e39d2d8..c0ebc17446b 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3xg-f76r-937w/GHSA-p3xg-f76r-937w.json +++ b/advisories/unreviewed/2022/05/GHSA-p3xg-f76r-937w/GHSA-p3xg-f76r-937w.json @@ -7,12 +7,8 @@ "CVE-2007-4147" ], "details": "Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to (1) AL_SANITIZE and (2) \"Calling the constructor to make sure things are checked, safe mode, etc.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p428-5vgm-3pf6/GHSA-p428-5vgm-3pf6.json b/advisories/unreviewed/2022/05/GHSA-p428-5vgm-3pf6/GHSA-p428-5vgm-3pf6.json index d9b41db5d6d..c38fc46cbad 100644 --- a/advisories/unreviewed/2022/05/GHSA-p428-5vgm-3pf6/GHSA-p428-5vgm-3pf6.json +++ b/advisories/unreviewed/2022/05/GHSA-p428-5vgm-3pf6/GHSA-p428-5vgm-3pf6.json @@ -7,12 +7,8 @@ "CVE-2007-3975" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p44w-q7f3-xgf6/GHSA-p44w-q7f3-xgf6.json b/advisories/unreviewed/2022/05/GHSA-p44w-q7f3-xgf6/GHSA-p44w-q7f3-xgf6.json index 35dcc148a5d..684a43d2555 100644 --- a/advisories/unreviewed/2022/05/GHSA-p44w-q7f3-xgf6/GHSA-p44w-q7f3-xgf6.json +++ b/advisories/unreviewed/2022/05/GHSA-p44w-q7f3-xgf6/GHSA-p44w-q7f3-xgf6.json @@ -7,12 +7,8 @@ "CVE-2007-4288" ], "details": "Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .au file that triggers a divide-by-zero error, as demonstrated by iapetus.au.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p46g-5fmx-9ghw/GHSA-p46g-5fmx-9ghw.json b/advisories/unreviewed/2022/05/GHSA-p46g-5fmx-9ghw/GHSA-p46g-5fmx-9ghw.json index c2abcc31db4..b9990cd2b05 100644 --- a/advisories/unreviewed/2022/05/GHSA-p46g-5fmx-9ghw/GHSA-p46g-5fmx-9ghw.json +++ b/advisories/unreviewed/2022/05/GHSA-p46g-5fmx-9ghw/GHSA-p46g-5fmx-9ghw.json @@ -7,12 +7,8 @@ "CVE-2019-14391" ], "details": "cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs (SEC-514).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p47g-43wg-p7p4/GHSA-p47g-43wg-p7p4.json b/advisories/unreviewed/2022/05/GHSA-p47g-43wg-p7p4/GHSA-p47g-43wg-p7p4.json index 608566ac8ce..eddbe051917 100644 --- a/advisories/unreviewed/2022/05/GHSA-p47g-43wg-p7p4/GHSA-p47g-43wg-p7p4.json +++ b/advisories/unreviewed/2022/05/GHSA-p47g-43wg-p7p4/GHSA-p47g-43wg-p7p4.json @@ -7,12 +7,8 @@ "CVE-2019-1010162" ], "details": "jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict (jsiChar.c:121). The attack vector is: The victim must execute crafted javascript code. The fixed version is: 2.4.77.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p4x6-253f-f724/GHSA-p4x6-253f-f724.json b/advisories/unreviewed/2022/05/GHSA-p4x6-253f-f724/GHSA-p4x6-253f-f724.json index 442694fb283..2a65d32851d 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4x6-253f-f724/GHSA-p4x6-253f-f724.json +++ b/advisories/unreviewed/2022/05/GHSA-p4x6-253f-f724/GHSA-p4x6-253f-f724.json @@ -7,12 +7,8 @@ "CVE-2007-4084" ], "details": "Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid parameter in an uploadProducts action to merchants/index.php and possibly (2) the rowid parameter to merchants/temp.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p537-w4qf-x2cx/GHSA-p537-w4qf-x2cx.json b/advisories/unreviewed/2022/05/GHSA-p537-w4qf-x2cx/GHSA-p537-w4qf-x2cx.json index 2c864c655de..94722e6b520 100644 --- a/advisories/unreviewed/2022/05/GHSA-p537-w4qf-x2cx/GHSA-p537-w4qf-x2cx.json +++ b/advisories/unreviewed/2022/05/GHSA-p537-w4qf-x2cx/GHSA-p537-w4qf-x2cx.json @@ -7,12 +7,8 @@ "CVE-2007-4088" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) f, (3) quote, and (4) act parameters to cp.php; the (5) u parameter to user.php; the (6) f parameter to post.php; the (7) s parameter to topic.php; the (8) quote, (9) t, (10) poll, and (11) p parameters to post.php; the (12) Message Title field of a private message (PM) in mode 6 of cp.php; the (13) title field of a private message (PM) in mode 7 of cp.php; and (14) allow user-assisted remote attackers to inject arbitrary web script or HTML via a dosearch action to search.php, which reflects the first lines of all posts by a user. NOTE: the act parameter to help.php and the p parameter to report.php are already covered by CVE-2006-4708. NOTE: vectors 12 and 13 might overlap CVE-2006-6283.1. NOTE: vector 14 might overlap CVE-2006-4708.b.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p6pg-cg4v-wgm3/GHSA-p6pg-cg4v-wgm3.json b/advisories/unreviewed/2022/05/GHSA-p6pg-cg4v-wgm3/GHSA-p6pg-cg4v-wgm3.json index e82bf6b1b9a..c0958f8e840 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6pg-cg4v-wgm3/GHSA-p6pg-cg4v-wgm3.json +++ b/advisories/unreviewed/2022/05/GHSA-p6pg-cg4v-wgm3/GHSA-p6pg-cg4v-wgm3.json @@ -7,12 +7,8 @@ "CVE-2007-4329" ], "details": "Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index.php, (2) news.php, or (3) feed.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p6pp-wx4f-7xcp/GHSA-p6pp-wx4f-7xcp.json b/advisories/unreviewed/2022/05/GHSA-p6pp-wx4f-7xcp/GHSA-p6pp-wx4f-7xcp.json index e812d621bf0..75fe36d2833 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6pp-wx4f-7xcp/GHSA-p6pp-wx4f-7xcp.json +++ b/advisories/unreviewed/2022/05/GHSA-p6pp-wx4f-7xcp/GHSA-p6pp-wx4f-7xcp.json @@ -7,12 +7,8 @@ "CVE-2007-4227" ], "details": "Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certain JPG file, as demonstrated by something.jpg. NOTE: this issue might be related to CVE-2007-3958.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p6xx-vj76-6hpm/GHSA-p6xx-vj76-6hpm.json b/advisories/unreviewed/2022/05/GHSA-p6xx-vj76-6hpm/GHSA-p6xx-vj76-6hpm.json index 34e331db8f4..bb95c25446a 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6xx-vj76-6hpm/GHSA-p6xx-vj76-6hpm.json +++ b/advisories/unreviewed/2022/05/GHSA-p6xx-vj76-6hpm/GHSA-p6xx-vj76-6hpm.json @@ -7,12 +7,8 @@ "CVE-2007-4282" ], "details": "The \"Extended properties for entries\" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and \"deliver custom entryproperties settings to the Serendipity Frontend\" via a certain request that modifies the password being checked.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p77h-48f6-v3h6/GHSA-p77h-48f6-v3h6.json b/advisories/unreviewed/2022/05/GHSA-p77h-48f6-v3h6/GHSA-p77h-48f6-v3h6.json index 6185715e3d6..2f5ccd444d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p77h-48f6-v3h6/GHSA-p77h-48f6-v3h6.json +++ b/advisories/unreviewed/2022/05/GHSA-p77h-48f6-v3h6/GHSA-p77h-48f6-v3h6.json @@ -7,12 +7,8 @@ "CVE-2007-4492" ], "details": "Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 20070821 allow local users to cause a denial of service (system panic) via unspecified ioctl functions, aka Bug 6433123.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p7mw-r6q6-hf52/GHSA-p7mw-r6q6-hf52.json b/advisories/unreviewed/2022/05/GHSA-p7mw-r6q6-hf52/GHSA-p7mw-r6q6-hf52.json index baf25e2d7fd..ed1049e1255 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7mw-r6q6-hf52/GHSA-p7mw-r6q6-hf52.json +++ b/advisories/unreviewed/2022/05/GHSA-p7mw-r6q6-hf52/GHSA-p7mw-r6q6-hf52.json @@ -7,12 +7,8 @@ "CVE-2007-4253" ], "details": "SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2005-4263.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p87f-r7w4-3wpx/GHSA-p87f-r7w4-3wpx.json b/advisories/unreviewed/2022/05/GHSA-p87f-r7w4-3wpx/GHSA-p87f-r7w4-3wpx.json index 5e2de2bdcb8..efd48823b8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-p87f-r7w4-3wpx/GHSA-p87f-r7w4-3wpx.json +++ b/advisories/unreviewed/2022/05/GHSA-p87f-r7w4-3wpx/GHSA-p87f-r7w4-3wpx.json @@ -7,12 +7,8 @@ "CVE-2007-4007" ], "details": "PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p898-pgm6-xvx9/GHSA-p898-pgm6-xvx9.json b/advisories/unreviewed/2022/05/GHSA-p898-pgm6-xvx9/GHSA-p898-pgm6-xvx9.json index bd71827d682..cc26401f0d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-p898-pgm6-xvx9/GHSA-p898-pgm6-xvx9.json +++ b/advisories/unreviewed/2022/05/GHSA-p898-pgm6-xvx9/GHSA-p898-pgm6-xvx9.json @@ -7,12 +7,8 @@ "CVE-2007-3968" ], "details": "index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pcq5-fq6m-vxj9/GHSA-pcq5-fq6m-vxj9.json b/advisories/unreviewed/2022/05/GHSA-pcq5-fq6m-vxj9/GHSA-pcq5-fq6m-vxj9.json index 689ab115438..41c31dca983 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcq5-fq6m-vxj9/GHSA-pcq5-fq6m-vxj9.json +++ b/advisories/unreviewed/2022/05/GHSA-pcq5-fq6m-vxj9/GHSA-pcq5-fq6m-vxj9.json @@ -7,12 +7,8 @@ "CVE-2007-4420" ], "details": "Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability than CVE-2007-3168 and CVE-2007-3169.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfr2-xfmg-cpwf/GHSA-pfr2-xfmg-cpwf.json b/advisories/unreviewed/2022/05/GHSA-pfr2-xfmg-cpwf/GHSA-pfr2-xfmg-cpwf.json index fd9ac575554..bdb7aa80bae 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfr2-xfmg-cpwf/GHSA-pfr2-xfmg-cpwf.json +++ b/advisories/unreviewed/2022/05/GHSA-pfr2-xfmg-cpwf/GHSA-pfr2-xfmg-cpwf.json @@ -7,12 +7,8 @@ "CVE-2019-1010171" ], "details": "Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.c:567). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pj67-prgq-wrqw/GHSA-pj67-prgq-wrqw.json b/advisories/unreviewed/2022/05/GHSA-pj67-prgq-wrqw/GHSA-pj67-prgq-wrqw.json index 1de374b70d0..ef51c06f901 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj67-prgq-wrqw/GHSA-pj67-prgq-wrqw.json +++ b/advisories/unreviewed/2022/05/GHSA-pj67-prgq-wrqw/GHSA-pj67-prgq-wrqw.json @@ -7,12 +7,8 @@ "CVE-2007-3983" ], "details": "Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 (ActiveReports) ActiveX control in arpro2.dll in ActiveReports 2.0 Professional Edition 2.5.0.1308 (SP5 RC) allows remote attackers to create or overwrite arbitrary files via a full pathname in an argument to the SaveLayout method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pm2q-hpwc-7mr9/GHSA-pm2q-hpwc-7mr9.json b/advisories/unreviewed/2022/05/GHSA-pm2q-hpwc-7mr9/GHSA-pm2q-hpwc-7mr9.json index e7031e92c8e..f443fefd13b 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm2q-hpwc-7mr9/GHSA-pm2q-hpwc-7mr9.json +++ b/advisories/unreviewed/2022/05/GHSA-pm2q-hpwc-7mr9/GHSA-pm2q-hpwc-7mr9.json @@ -7,12 +7,8 @@ "CVE-2007-4234" ], "details": "Unspecified vulnerability in Camera Life before 2.6 allows remote attackers to download private photos via unspecified vectors associated with the names of the photos. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pmmx-wv98-xg9f/GHSA-pmmx-wv98-xg9f.json b/advisories/unreviewed/2022/05/GHSA-pmmx-wv98-xg9f/GHSA-pmmx-wv98-xg9f.json index 189fe3ff322..e75509e9509 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmmx-wv98-xg9f/GHSA-pmmx-wv98-xg9f.json +++ b/advisories/unreviewed/2022/05/GHSA-pmmx-wv98-xg9f/GHSA-pmmx-wv98-xg9f.json @@ -7,12 +7,8 @@ "CVE-2007-4348" ], "details": "Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file that is accessible through a certain web interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqrm-7qr5-4r3c/GHSA-pqrm-7qr5-4r3c.json b/advisories/unreviewed/2022/05/GHSA-pqrm-7qr5-4r3c/GHSA-pqrm-7qr5-4r3c.json index a086f5cda6d..07bd9de9c39 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqrm-7qr5-4r3c/GHSA-pqrm-7qr5-4r3c.json +++ b/advisories/unreviewed/2022/05/GHSA-pqrm-7qr5-4r3c/GHSA-pqrm-7qr5-4r3c.json @@ -7,12 +7,8 @@ "CVE-2007-4170" ], "details": "Multiple PHP remote file inclusion vulnerabilities in AL-Athkar 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) include parameter to (a) Main.php and (b) get.php and the (2) exec parameter to (c) count.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pr75-whp9-w4gq/GHSA-pr75-whp9-w4gq.json b/advisories/unreviewed/2022/05/GHSA-pr75-whp9-w4gq/GHSA-pr75-whp9-w4gq.json index 694ad7df24f..e8fd3d92234 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr75-whp9-w4gq/GHSA-pr75-whp9-w4gq.json +++ b/advisories/unreviewed/2022/05/GHSA-pr75-whp9-w4gq/GHSA-pr75-whp9-w4gq.json @@ -7,12 +7,8 @@ "CVE-2007-4262" ], "details": "Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-prgf-2j5r-6m96/GHSA-prgf-2j5r-6m96.json b/advisories/unreviewed/2022/05/GHSA-prgf-2j5r-6m96/GHSA-prgf-2j5r-6m96.json index 6dabfd53e57..49aa43d242f 100644 --- a/advisories/unreviewed/2022/05/GHSA-prgf-2j5r-6m96/GHSA-prgf-2j5r-6m96.json +++ b/advisories/unreviewed/2022/05/GHSA-prgf-2j5r-6m96/GHSA-prgf-2j5r-6m96.json @@ -7,12 +7,8 @@ "CVE-2007-4060" ], "details": "Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attackers to execute arbitrary code via a long string in the (1) method name or (2) URI in an HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-prvc-qmpg-9m85/GHSA-prvc-qmpg-9m85.json b/advisories/unreviewed/2022/05/GHSA-prvc-qmpg-9m85/GHSA-prvc-qmpg-9m85.json index e3c09cd03f8..b81716e5d64 100644 --- a/advisories/unreviewed/2022/05/GHSA-prvc-qmpg-9m85/GHSA-prvc-qmpg-9m85.json +++ b/advisories/unreviewed/2022/05/GHSA-prvc-qmpg-9m85/GHSA-prvc-qmpg-9m85.json @@ -7,12 +7,8 @@ "CVE-2007-4507" ], "details": "Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to the (1) ntuser_getuserlist, (2) ntuser_getuserinfo, (3) ntuser_getusergroups, or (4) ntuser_getdomaincontroller functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pxp9-fmhc-vjvg/GHSA-pxp9-fmhc-vjvg.json b/advisories/unreviewed/2022/05/GHSA-pxp9-fmhc-vjvg/GHSA-pxp9-fmhc-vjvg.json index 6d2cbe460a8..6e452ae18f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxp9-fmhc-vjvg/GHSA-pxp9-fmhc-vjvg.json +++ b/advisories/unreviewed/2022/05/GHSA-pxp9-fmhc-vjvg/GHSA-pxp9-fmhc-vjvg.json @@ -7,12 +7,8 @@ "CVE-2007-4224" ], "details": "KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pxpr-9xwq-q422/GHSA-pxpr-9xwq-q422.json b/advisories/unreviewed/2022/05/GHSA-pxpr-9xwq-q422/GHSA-pxpr-9xwq-q422.json index 95fc69a20dd..81c95a9ce7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxpr-9xwq-q422/GHSA-pxpr-9xwq-q422.json +++ b/advisories/unreviewed/2022/05/GHSA-pxpr-9xwq-q422/GHSA-pxpr-9xwq-q422.json @@ -7,12 +7,8 @@ "CVE-2007-4452" ], "details": "The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (disconnection) via a long (1) emote or (2) SPEC command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pxq9-8hjr-4x2g/GHSA-pxq9-8hjr-4x2g.json b/advisories/unreviewed/2022/05/GHSA-pxq9-8hjr-4x2g/GHSA-pxq9-8hjr-4x2g.json index 2809dba1bc5..537556c3677 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxq9-8hjr-4x2g/GHSA-pxq9-8hjr-4x2g.json +++ b/advisories/unreviewed/2022/05/GHSA-pxq9-8hjr-4x2g/GHSA-pxq9-8hjr-4x2g.json @@ -7,12 +7,8 @@ "CVE-2019-14387" ], "details": "cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q23q-ghm4-c2r9/GHSA-q23q-ghm4-c2r9.json b/advisories/unreviewed/2022/05/GHSA-q23q-ghm4-c2r9/GHSA-q23q-ghm4-c2r9.json index 69fce6b1044..1bcd59def0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q23q-ghm4-c2r9/GHSA-q23q-ghm4-c2r9.json +++ b/advisories/unreviewed/2022/05/GHSA-q23q-ghm4-c2r9/GHSA-q23q-ghm4-c2r9.json @@ -7,12 +7,8 @@ "CVE-2007-4417" ], "details": "IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q29j-3f7p-x46x/GHSA-q29j-3f7p-x46x.json b/advisories/unreviewed/2022/05/GHSA-q29j-3f7p-x46x/GHSA-q29j-3f7p-x46x.json index 0edfda63d01..a67b7c264ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-q29j-3f7p-x46x/GHSA-q29j-3f7p-x46x.json +++ b/advisories/unreviewed/2022/05/GHSA-q29j-3f7p-x46x/GHSA-q29j-3f7p-x46x.json @@ -7,12 +7,8 @@ "CVE-2007-4427" ], "details": "Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection logic, aka MAK2116.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q2fr-786f-crqr/GHSA-q2fr-786f-crqr.json b/advisories/unreviewed/2022/05/GHSA-q2fr-786f-crqr/GHSA-q2fr-786f-crqr.json index 12ac26c2682..6f6620317db 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2fr-786f-crqr/GHSA-q2fr-786f-crqr.json +++ b/advisories/unreviewed/2022/05/GHSA-q2fr-786f-crqr/GHSA-q2fr-786f-crqr.json @@ -7,12 +7,8 @@ "CVE-2007-3846" ], "details": "Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on Windows-based systems, allows remote authenticated users to overwrite and create arbitrary files via a ..\\ (dot dot backslash) sequence in the filename, as stored in the file repository.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q38j-h243-5f97/GHSA-q38j-h243-5f97.json b/advisories/unreviewed/2022/05/GHSA-q38j-h243-5f97/GHSA-q38j-h243-5f97.json index f447de20606..ce05fdb8db2 100644 --- a/advisories/unreviewed/2022/05/GHSA-q38j-h243-5f97/GHSA-q38j-h243-5f97.json +++ b/advisories/unreviewed/2022/05/GHSA-q38j-h243-5f97/GHSA-q38j-h243-5f97.json @@ -7,12 +7,8 @@ "CVE-2007-4260" ], "details": "EZPhotoSales 1.9.3 and earlier has a default \"admin\" account for galleries, which allows remote attackers to access arbitrary galleries by specifying this username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q39p-pv7h-rrx6/GHSA-q39p-pv7h-rrx6.json b/advisories/unreviewed/2022/05/GHSA-q39p-pv7h-rrx6/GHSA-q39p-pv7h-rrx6.json index 0cb3eb0c726..2c586bf2aa4 100644 --- a/advisories/unreviewed/2022/05/GHSA-q39p-pv7h-rrx6/GHSA-q39p-pv7h-rrx6.json +++ b/advisories/unreviewed/2022/05/GHSA-q39p-pv7h-rrx6/GHSA-q39p-pv7h-rrx6.json @@ -7,12 +7,8 @@ "CVE-2007-4378" ], "details": "Multiple format string vulnerabilities in Babo Violent 2 2.08.00 and earlier allow remote attackers to execute arbitrary code via format string specifiers in (1) a message or (2) certain data associated with an admin login.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q49q-f47q-m2gq/GHSA-q49q-f47q-m2gq.json b/advisories/unreviewed/2022/05/GHSA-q49q-f47q-m2gq/GHSA-q49q-f47q-m2gq.json index 0a3b0f2db46..fefe49c97dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-q49q-f47q-m2gq/GHSA-q49q-f47q-m2gq.json +++ b/advisories/unreviewed/2022/05/GHSA-q49q-f47q-m2gq/GHSA-q49q-f47q-m2gq.json @@ -7,12 +7,8 @@ "CVE-2007-3888" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the search action, possibly related to the term parameter to index.php; or (2) an anonymous blog entry, possibly involving the (a) posted_by, (b) subject, and (c) content parameters to index.php; as demonstrated by the onmouseover attribute of certain elements. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q5mm-22g8-m6p8/GHSA-q5mm-22g8-m6p8.json b/advisories/unreviewed/2022/05/GHSA-q5mm-22g8-m6p8/GHSA-q5mm-22g8-m6p8.json index 0d8ce7a1c04..5fc2d954cae 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5mm-22g8-m6p8/GHSA-q5mm-22g8-m6p8.json +++ b/advisories/unreviewed/2022/05/GHSA-q5mm-22g8-m6p8/GHSA-q5mm-22g8-m6p8.json @@ -7,12 +7,8 @@ "CVE-2007-4086" ], "details": "Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q65r-h72w-q6hc/GHSA-q65r-h72w-q6hc.json b/advisories/unreviewed/2022/05/GHSA-q65r-h72w-q6hc/GHSA-q65r-h72w-q6hc.json index 9def16844e5..0070a934d63 100644 --- a/advisories/unreviewed/2022/05/GHSA-q65r-h72w-q6hc/GHSA-q65r-h72w-q6hc.json +++ b/advisories/unreviewed/2022/05/GHSA-q65r-h72w-q6hc/GHSA-q65r-h72w-q6hc.json @@ -7,12 +7,8 @@ "CVE-2007-4466" ], "details": "Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q69v-9h9q-cr4v/GHSA-q69v-9h9q-cr4v.json b/advisories/unreviewed/2022/05/GHSA-q69v-9h9q-cr4v/GHSA-q69v-9h9q-cr4v.json index a78f4f8482d..79ec72e656c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q69v-9h9q-cr4v/GHSA-q69v-9h9q-cr4v.json +++ b/advisories/unreviewed/2022/05/GHSA-q69v-9h9q-cr4v/GHSA-q69v-9h9q-cr4v.json @@ -7,12 +7,8 @@ "CVE-2007-4012" ], "details": "Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (ARP storm) via a broadcast ARP packet that \"targets the IP address of a known client context\", aka CSCsj50374.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q6xx-2fjc-hr82/GHSA-q6xx-2fjc-hr82.json b/advisories/unreviewed/2022/05/GHSA-q6xx-2fjc-hr82/GHSA-q6xx-2fjc-hr82.json index 9d664bc9516..e2e341c6cca 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6xx-2fjc-hr82/GHSA-q6xx-2fjc-hr82.json +++ b/advisories/unreviewed/2022/05/GHSA-q6xx-2fjc-hr82/GHSA-q6xx-2fjc-hr82.json @@ -7,12 +7,8 @@ "CVE-2007-4189" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the (1) com_search, (2) com_content, and (3) mod_login components. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q7r2-4w32-9vg9/GHSA-q7r2-4w32-9vg9.json b/advisories/unreviewed/2022/05/GHSA-q7r2-4w32-9vg9/GHSA-q7r2-4w32-9vg9.json index 64e7403f4bb..029f42d8ba4 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7r2-4w32-9vg9/GHSA-q7r2-4w32-9vg9.json +++ b/advisories/unreviewed/2022/05/GHSA-q7r2-4w32-9vg9/GHSA-q7r2-4w32-9vg9.json @@ -7,12 +7,8 @@ "CVE-2007-4057" ], "details": "Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users to upload arbitrary PHP code via a filename ending with (1) .php.gif, (2) .php.jpg, or (3) .php.png.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q9vq-prwg-9mjj/GHSA-q9vq-prwg-9mjj.json b/advisories/unreviewed/2022/05/GHSA-q9vq-prwg-9mjj/GHSA-q9vq-prwg-9mjj.json index d048a6fda97..6b53c55a6a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9vq-prwg-9mjj/GHSA-q9vq-prwg-9mjj.json +++ b/advisories/unreviewed/2022/05/GHSA-q9vq-prwg-9mjj/GHSA-q9vq-prwg-9mjj.json @@ -7,12 +7,8 @@ "CVE-2007-3869" ], "details": "Multiple unspecified vulnerabilities in the Customer Relationship Management Online Marketing component in Oracle PeopleSoft Enterprise 8.9 Bundle 26 and 9.0 Bundle 7 allow remote authenticated users to have an unknown impact, aka (1) PSE04 and (2) PSE05.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qc73-rhr3-jrq7/GHSA-qc73-rhr3-jrq7.json b/advisories/unreviewed/2022/05/GHSA-qc73-rhr3-jrq7/GHSA-qc73-rhr3-jrq7.json index 2ed290ced5a..0be4ce7ce32 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc73-rhr3-jrq7/GHSA-qc73-rhr3-jrq7.json +++ b/advisories/unreviewed/2022/05/GHSA-qc73-rhr3-jrq7/GHSA-qc73-rhr3-jrq7.json @@ -7,12 +7,8 @@ "CVE-2007-3884" ], "details": "SQL injection vulnerability in philboard_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: it was later reported that 2.0.1 is also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qc9f-9qmm-9663/GHSA-qc9f-9qmm-9663.json b/advisories/unreviewed/2022/05/GHSA-qc9f-9qmm-9663/GHSA-qc9f-9qmm-9663.json index 5ee49c25ce5..4ffcdc1d788 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc9f-9qmm-9663/GHSA-qc9f-9qmm-9663.json +++ b/advisories/unreviewed/2022/05/GHSA-qc9f-9qmm-9663/GHSA-qc9f-9qmm-9663.json @@ -7,12 +7,8 @@ "CVE-2007-4476" ], "details": "Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a \"crashing stack.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qcj3-69rc-j5jm/GHSA-qcj3-69rc-j5jm.json b/advisories/unreviewed/2022/05/GHSA-qcj3-69rc-j5jm/GHSA-qcj3-69rc-j5jm.json index adf30af09b4..22a54147b2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcj3-69rc-j5jm/GHSA-qcj3-69rc-j5jm.json +++ b/advisories/unreviewed/2022/05/GHSA-qcj3-69rc-j5jm/GHSA-qcj3-69rc-j5jm.json @@ -7,12 +7,8 @@ "CVE-2007-4182" ], "details": "Unrestricted file upload vulnerability in index.php in WikiWebWeaver 1.1 and earlier allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .gif.php, which is accessible from data/documents/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qg39-p6xp-j59x/GHSA-qg39-p6xp-j59x.json b/advisories/unreviewed/2022/05/GHSA-qg39-p6xp-j59x/GHSA-qg39-p6xp-j59x.json index ab339351570..9d1ad5faa56 100644 --- a/advisories/unreviewed/2022/05/GHSA-qg39-p6xp-j59x/GHSA-qg39-p6xp-j59x.json +++ b/advisories/unreviewed/2022/05/GHSA-qg39-p6xp-j59x/GHSA-qg39-p6xp-j59x.json @@ -7,12 +7,8 @@ "CVE-2007-4672" ], "details": "Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qh6q-878h-p9vx/GHSA-qh6q-878h-p9vx.json b/advisories/unreviewed/2022/05/GHSA-qh6q-878h-p9vx/GHSA-qh6q-878h-p9vx.json index a01608566bf..cb0b5c51af3 100644 --- a/advisories/unreviewed/2022/05/GHSA-qh6q-878h-p9vx/GHSA-qh6q-878h-p9vx.json +++ b/advisories/unreviewed/2022/05/GHSA-qh6q-878h-p9vx/GHSA-qh6q-878h-p9vx.json @@ -7,12 +7,8 @@ "CVE-2007-4331" ], "details": "PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbitrary URLs and conduct cross-site scripting (XSS) attacks via a URL in the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qhhg-x68m-7rh6/GHSA-qhhg-x68m-7rh6.json b/advisories/unreviewed/2022/05/GHSA-qhhg-x68m-7rh6/GHSA-qhhg-x68m-7rh6.json index b40d41c9924..e82441841d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhhg-x68m-7rh6/GHSA-qhhg-x68m-7rh6.json +++ b/advisories/unreviewed/2022/05/GHSA-qhhg-x68m-7rh6/GHSA-qhhg-x68m-7rh6.json @@ -7,12 +7,8 @@ "CVE-2007-4073" ], "details": "Webbler CMS before 3.1.6 does not properly restrict use of \"mail a friend\" forms, which allows remote attackers to send arbitrary amounts of forged e-mail. NOTE: this could be leveraged for spam or phishing attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qhrx-98pj-388r/GHSA-qhrx-98pj-388r.json b/advisories/unreviewed/2022/05/GHSA-qhrx-98pj-388r/GHSA-qhrx-98pj-388r.json index 9322d27f57a..c02704e9dbc 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhrx-98pj-388r/GHSA-qhrx-98pj-388r.json +++ b/advisories/unreviewed/2022/05/GHSA-qhrx-98pj-388r/GHSA-qhrx-98pj-388r.json @@ -7,12 +7,8 @@ "CVE-2007-4399" ], "details": "CRLF injection vulnerability in the xmms.bx 1.0 script for BitchX allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qm8p-hggf-57ff/GHSA-qm8p-hggf-57ff.json b/advisories/unreviewed/2022/05/GHSA-qm8p-hggf-57ff/GHSA-qm8p-hggf-57ff.json index e28ce135774..ed1a109b11d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm8p-hggf-57ff/GHSA-qm8p-hggf-57ff.json +++ b/advisories/unreviewed/2022/05/GHSA-qm8p-hggf-57ff/GHSA-qm8p-hggf-57ff.json @@ -7,12 +7,8 @@ "CVE-2007-4489" ], "details": "Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qmjc-xpgx-gfcq/GHSA-qmjc-xpgx-gfcq.json b/advisories/unreviewed/2022/05/GHSA-qmjc-xpgx-gfcq/GHSA-qmjc-xpgx-gfcq.json index 2b872d6ea32..2ef59eca32e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qmjc-xpgx-gfcq/GHSA-qmjc-xpgx-gfcq.json +++ b/advisories/unreviewed/2022/05/GHSA-qmjc-xpgx-gfcq/GHSA-qmjc-xpgx-gfcq.json @@ -7,12 +7,8 @@ "CVE-2007-4439" ], "details": "PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site_isp_root parameter, probably related to cart.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qprc-v4xr-fwgr/GHSA-qprc-v4xr-fwgr.json b/advisories/unreviewed/2022/05/GHSA-qprc-v4xr-fwgr/GHSA-qprc-v4xr-fwgr.json index f88d09e382a..4e435b87532 100644 --- a/advisories/unreviewed/2022/05/GHSA-qprc-v4xr-fwgr/GHSA-qprc-v4xr-fwgr.json +++ b/advisories/unreviewed/2022/05/GHSA-qprc-v4xr-fwgr/GHSA-qprc-v4xr-fwgr.json @@ -7,12 +7,8 @@ "CVE-2007-4174" ], "details": "Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qq35-r26p-ch7c/GHSA-qq35-r26p-ch7c.json b/advisories/unreviewed/2022/05/GHSA-qq35-r26p-ch7c/GHSA-qq35-r26p-ch7c.json index 001d966ee04..6db28f0a127 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq35-r26p-ch7c/GHSA-qq35-r26p-ch7c.json +++ b/advisories/unreviewed/2022/05/GHSA-qq35-r26p-ch7c/GHSA-qq35-r26p-ch7c.json @@ -7,12 +7,8 @@ "CVE-2007-4006" ], "details": "Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qq66-4w8c-gc49/GHSA-qq66-4w8c-gc49.json b/advisories/unreviewed/2022/05/GHSA-qq66-4w8c-gc49/GHSA-qq66-4w8c-gc49.json index 43775cea0ea..0cd86ccfefb 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq66-4w8c-gc49/GHSA-qq66-4w8c-gc49.json +++ b/advisories/unreviewed/2022/05/GHSA-qq66-4w8c-gc49/GHSA-qq66-4w8c-gc49.json @@ -7,12 +7,8 @@ "CVE-2007-3874" ], "details": "Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component (pxemtftp.exe) in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qqfg-93rc-qwq3/GHSA-qqfg-93rc-qwq3.json b/advisories/unreviewed/2022/05/GHSA-qqfg-93rc-qwq3/GHSA-qqfg-93rc-qwq3.json index 12a803cbe9c..23dbfaf6867 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqfg-93rc-qwq3/GHSA-qqfg-93rc-qwq3.json +++ b/advisories/unreviewed/2022/05/GHSA-qqfg-93rc-qwq3/GHSA-qqfg-93rc-qwq3.json @@ -7,12 +7,8 @@ "CVE-2007-4670" ], "details": "Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an \"Improved fix for MOPB-03-2007,\" probably a variant of CVE-2007-1285.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qwg9-63m8-jhjg/GHSA-qwg9-63m8-jhjg.json b/advisories/unreviewed/2022/05/GHSA-qwg9-63m8-jhjg/GHSA-qwg9-63m8-jhjg.json index c922c3dfb84..41b1a7e2ed0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwg9-63m8-jhjg/GHSA-qwg9-63m8-jhjg.json +++ b/advisories/unreviewed/2022/05/GHSA-qwg9-63m8-jhjg/GHSA-qwg9-63m8-jhjg.json @@ -7,12 +7,8 @@ "CVE-2007-4153" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin Panel, accessed through options.php; or (2) the opml_url parameter to link-import.php. NOTE: this might not cross privilege boundaries in some configurations, since the Administrator role has the unfiltered_html capability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qxc6-6fhg-q3v6/GHSA-qxc6-6fhg-q3v6.json b/advisories/unreviewed/2022/05/GHSA-qxc6-6fhg-q3v6/GHSA-qxc6-6fhg-q3v6.json index 96bfc319821..946242bc01c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxc6-6fhg-q3v6/GHSA-qxc6-6fhg-q3v6.json +++ b/advisories/unreviewed/2022/05/GHSA-qxc6-6fhg-q3v6/GHSA-qxc6-6fhg-q3v6.json @@ -7,12 +7,8 @@ "CVE-2007-3883" ], "details": "The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in (1) the second argument to the Save method, or the first argument to the (2) SaveLayoutChanges or (3) SaveMenuUsageData method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qxc6-wp6h-39r3/GHSA-qxc6-wp6h-39r3.json b/advisories/unreviewed/2022/05/GHSA-qxc6-wp6h-39r3/GHSA-qxc6-wp6h-39r3.json index 6a813533720..e3956244676 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxc6-wp6h-39r3/GHSA-qxc6-wp6h-39r3.json +++ b/advisories/unreviewed/2022/05/GHSA-qxc6-wp6h-39r3/GHSA-qxc6-wp6h-39r3.json @@ -7,12 +7,8 @@ "CVE-2007-4148" ], "details": "Heap-based buffer overflow in the Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to cause a denial of service (persistent daemon crashes) or execute arbitrary code via a long filename in a \"LOG.\" command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r24g-2v7x-vg9j/GHSA-r24g-2v7x-vg9j.json b/advisories/unreviewed/2022/05/GHSA-r24g-2v7x-vg9j/GHSA-r24g-2v7x-vg9j.json index 3a5681b559a..748465f33b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-r24g-2v7x-vg9j/GHSA-r24g-2v7x-vg9j.json +++ b/advisories/unreviewed/2022/05/GHSA-r24g-2v7x-vg9j/GHSA-r24g-2v7x-vg9j.json @@ -7,12 +7,8 @@ "CVE-2007-3966" ], "details": "SQL injection vulnerability in Munch Pro allows remote attackers to execute arbitrary SQL commands via the login field to /admin, a different vulnerability than CVE-2006-5880.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r26j-h88h-p76w/GHSA-r26j-h88h-p76w.json b/advisories/unreviewed/2022/05/GHSA-r26j-h88h-p76w/GHSA-r26j-h88h-p76w.json index 2af874898bb..2bd87eaeacf 100644 --- a/advisories/unreviewed/2022/05/GHSA-r26j-h88h-p76w/GHSA-r26j-h88h-p76w.json +++ b/advisories/unreviewed/2022/05/GHSA-r26j-h88h-p76w/GHSA-r26j-h88h-p76w.json @@ -7,12 +7,8 @@ "CVE-2007-4140" ], "details": "Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary code via a .mpr file (replay file) that contains a long car name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r3r7-8q5v-779v/GHSA-r3r7-8q5v-779v.json b/advisories/unreviewed/2022/05/GHSA-r3r7-8q5v-779v/GHSA-r3r7-8q5v-779v.json index d9c6199e1dd..d70e61698a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3r7-8q5v-779v/GHSA-r3r7-8q5v-779v.json +++ b/advisories/unreviewed/2022/05/GHSA-r3r7-8q5v-779v/GHSA-r3r7-8q5v-779v.json @@ -7,12 +7,8 @@ "CVE-2007-4459" ], "details": "Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE message that contains a remote tag, followed by a certain set of two related SIP OPTIONS messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r46f-38c2-m2fx/GHSA-r46f-38c2-m2fx.json b/advisories/unreviewed/2022/05/GHSA-r46f-38c2-m2fx/GHSA-r46f-38c2-m2fx.json index bab52d340fc..64209eda155 100644 --- a/advisories/unreviewed/2022/05/GHSA-r46f-38c2-m2fx/GHSA-r46f-38c2-m2fx.json +++ b/advisories/unreviewed/2022/05/GHSA-r46f-38c2-m2fx/GHSA-r46f-38c2-m2fx.json @@ -7,12 +7,8 @@ "CVE-2007-3858" ], "details": "Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 allow remote authenticated users to have an unknown impact via (1) EXFSYS.DBMS_RLMGR_UTL in Rules Manager (DB11) and (2) Program Interface (DB13).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r4j3-xf29-96fh/GHSA-r4j3-xf29-96fh.json b/advisories/unreviewed/2022/05/GHSA-r4j3-xf29-96fh/GHSA-r4j3-xf29-96fh.json index da0281a5874..8b3148d12a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4j3-xf29-96fh/GHSA-r4j3-xf29-96fh.json +++ b/advisories/unreviewed/2022/05/GHSA-r4j3-xf29-96fh/GHSA-r4j3-xf29-96fh.json @@ -7,12 +7,8 @@ "CVE-2007-4374" ], "details": "Babo Violent 2 2.08.00 does not validate the sender field of a chat message composed by a client, which allows remote authenticated users to spoof messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5fw-3pw4-7hhg/GHSA-r5fw-3pw4-7hhg.json b/advisories/unreviewed/2022/05/GHSA-r5fw-3pw4-7hhg/GHSA-r5fw-3pw4-7hhg.json index 4889d0b8245..faca6e874d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5fw-3pw4-7hhg/GHSA-r5fw-3pw4-7hhg.json +++ b/advisories/unreviewed/2022/05/GHSA-r5fw-3pw4-7hhg/GHSA-r5fw-3pw4-7hhg.json @@ -7,12 +7,8 @@ "CVE-2007-3870" ], "details": "Multiple unspecified vulnerabilities in the Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 Bundle 11 allow local users to have unknown impact via unknown vectors, aka (1) PSE06 and (2) PSE07.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5x6-vq9j-ccgv/GHSA-r5x6-vq9j-ccgv.json b/advisories/unreviewed/2022/05/GHSA-r5x6-vq9j-ccgv/GHSA-r5x6-vq9j-ccgv.json index c21a0529052..de6fd060ef3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5x6-vq9j-ccgv/GHSA-r5x6-vq9j-ccgv.json +++ b/advisories/unreviewed/2022/05/GHSA-r5x6-vq9j-ccgv/GHSA-r5x6-vq9j-ccgv.json @@ -7,12 +7,8 @@ "CVE-2007-4202" ], "details": "Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet (EEE servlet), which might allow remote attackers to spoof the disk image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r6f5-7qgq-p53v/GHSA-r6f5-7qgq-p53v.json b/advisories/unreviewed/2022/05/GHSA-r6f5-7qgq-p53v/GHSA-r6f5-7qgq-p53v.json index a843e4f5509..6b1889b411a 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6f5-7qgq-p53v/GHSA-r6f5-7qgq-p53v.json +++ b/advisories/unreviewed/2022/05/GHSA-r6f5-7qgq-p53v/GHSA-r6f5-7qgq-p53v.json @@ -7,12 +7,8 @@ "CVE-2007-4014" ], "details": "Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r6wr-9qjw-jvwm/GHSA-r6wr-9qjw-jvwm.json b/advisories/unreviewed/2022/05/GHSA-r6wr-9qjw-jvwm/GHSA-r6wr-9qjw-jvwm.json index 0efb13cc95b..c4ddb8f3bc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6wr-9qjw-jvwm/GHSA-r6wr-9qjw-jvwm.json +++ b/advisories/unreviewed/2022/05/GHSA-r6wr-9qjw-jvwm/GHSA-r6wr-9qjw-jvwm.json @@ -7,12 +7,8 @@ "CVE-2007-3971" ], "details": "Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r79v-84jh-ff36/GHSA-r79v-84jh-ff36.json b/advisories/unreviewed/2022/05/GHSA-r79v-84jh-ff36/GHSA-r79v-84jh-ff36.json index 86e9628a9da..05e169a8241 100644 --- a/advisories/unreviewed/2022/05/GHSA-r79v-84jh-ff36/GHSA-r79v-84jh-ff36.json +++ b/advisories/unreviewed/2022/05/GHSA-r79v-84jh-ff36/GHSA-r79v-84jh-ff36.json @@ -7,12 +7,8 @@ "CVE-2007-4351" ], "details": "Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -180,9 +176,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r847-794v-mgw3/GHSA-r847-794v-mgw3.json b/advisories/unreviewed/2022/05/GHSA-r847-794v-mgw3/GHSA-r847-794v-mgw3.json index 4f92f7d390c..e476a22afd5 100644 --- a/advisories/unreviewed/2022/05/GHSA-r847-794v-mgw3/GHSA-r847-794v-mgw3.json +++ b/advisories/unreviewed/2022/05/GHSA-r847-794v-mgw3/GHSA-r847-794v-mgw3.json @@ -7,12 +7,8 @@ "CVE-2007-4023" ], "details": "Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r8m8-h626-xgw4/GHSA-r8m8-h626-xgw4.json b/advisories/unreviewed/2022/05/GHSA-r8m8-h626-xgw4/GHSA-r8m8-h626-xgw4.json index 151e880c4a4..c1ab32392fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8m8-h626-xgw4/GHSA-r8m8-h626-xgw4.json +++ b/advisories/unreviewed/2022/05/GHSA-r8m8-h626-xgw4/GHSA-r8m8-h626-xgw4.json @@ -7,12 +7,8 @@ "CVE-2007-4246" ], "details": "Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers to execute arbitrary code via a modified document, as actively exploited in August 2007 by malware such as Tarodrop.D (Tarodrop.Q), a different vulnerability than CVE-2006-4326, CVE-2006-5424, CVE-2006-6400, and CVE-2007-1938.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r8pf-vgh2-gwhf/GHSA-r8pf-vgh2-gwhf.json b/advisories/unreviewed/2022/05/GHSA-r8pf-vgh2-gwhf/GHSA-r8pf-vgh2-gwhf.json index a5dbdd0169f..3eb463ada7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8pf-vgh2-gwhf/GHSA-r8pf-vgh2-gwhf.json +++ b/advisories/unreviewed/2022/05/GHSA-r8pf-vgh2-gwhf/GHSA-r8pf-vgh2-gwhf.json @@ -7,12 +7,8 @@ "CVE-2007-4229" ], "details": "Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service (failed assertion and application crash) via certain malformed HTML, as demonstrated by a document containing TEXTAREA, BUTTON, BR, BDO, PRE, FRAMESET, and A tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rcwh-84xx-rm72/GHSA-rcwh-84xx-rm72.json b/advisories/unreviewed/2022/05/GHSA-rcwh-84xx-rm72/GHSA-rcwh-84xx-rm72.json index 460069415f6..128fe7e1506 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcwh-84xx-rm72/GHSA-rcwh-84xx-rm72.json +++ b/advisories/unreviewed/2022/05/GHSA-rcwh-84xx-rm72/GHSA-rcwh-84xx-rm72.json @@ -7,12 +7,8 @@ "CVE-2007-4236" ], "details": "Buffer overflow in lpd in bos.rte.printers in AIX 5.2 and 5.3 allows local users with printq group privileges to gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rf5p-v73w-ggfj/GHSA-rf5p-v73w-ggfj.json b/advisories/unreviewed/2022/05/GHSA-rf5p-v73w-ggfj/GHSA-rf5p-v73w-ggfj.json index da4367c0052..71c578e6543 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf5p-v73w-ggfj/GHSA-rf5p-v73w-ggfj.json +++ b/advisories/unreviewed/2022/05/GHSA-rf5p-v73w-ggfj/GHSA-rf5p-v73w-ggfj.json @@ -7,12 +7,8 @@ "CVE-2007-3987" ], "details": "SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rggf-g8fq-cf6h/GHSA-rggf-g8fq-cf6h.json b/advisories/unreviewed/2022/05/GHSA-rggf-g8fq-cf6h/GHSA-rggf-g8fq-cf6h.json index 8b7e4c54080..bf107989952 100644 --- a/advisories/unreviewed/2022/05/GHSA-rggf-g8fq-cf6h/GHSA-rggf-g8fq-cf6h.json +++ b/advisories/unreviewed/2022/05/GHSA-rggf-g8fq-cf6h/GHSA-rggf-g8fq-cf6h.json @@ -7,12 +7,8 @@ "CVE-2007-4512" ], "details": "Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rggg-6j22-p4rj/GHSA-rggg-6j22-p4rj.json b/advisories/unreviewed/2022/05/GHSA-rggg-6j22-p4rj/GHSA-rggg-6j22-p4rj.json index e2bcc9701b6..b457cce5d89 100644 --- a/advisories/unreviewed/2022/05/GHSA-rggg-6j22-p4rj/GHSA-rggg-6j22-p4rj.json +++ b/advisories/unreviewed/2022/05/GHSA-rggg-6j22-p4rj/GHSA-rggg-6j22-p4rj.json @@ -7,12 +7,8 @@ "CVE-2007-4264" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) path and (2) download parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rgw2-w25q-cqh2/GHSA-rgw2-w25q-cqh2.json b/advisories/unreviewed/2022/05/GHSA-rgw2-w25q-cqh2/GHSA-rgw2-w25q-cqh2.json index c77ab93ad37..009fcf9d1ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgw2-w25q-cqh2/GHSA-rgw2-w25q-cqh2.json +++ b/advisories/unreviewed/2022/05/GHSA-rgw2-w25q-cqh2/GHSA-rgw2-w25q-cqh2.json @@ -7,12 +7,8 @@ "CVE-2007-4484" ], "details": "PHP remote file inclusion vulnerability in login.php in My_REFERER 1.08 allows remote attackers to execute arbitrary PHP code via a URL in the value parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rh3m-5hxq-4gg8/GHSA-rh3m-5hxq-4gg8.json b/advisories/unreviewed/2022/05/GHSA-rh3m-5hxq-4gg8/GHSA-rh3m-5hxq-4gg8.json index 5188e43c1ee..680a41e6d9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rh3m-5hxq-4gg8/GHSA-rh3m-5hxq-4gg8.json +++ b/advisories/unreviewed/2022/05/GHSA-rh3m-5hxq-4gg8/GHSA-rh3m-5hxq-4gg8.json @@ -7,12 +7,8 @@ "CVE-2007-4506" ], "details": "SQL injection vulnerability in index.php in the NeoRecruit component (com_neorecruit) 1.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an offer_view action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rjgh-f2m3-ggcc/GHSA-rjgh-f2m3-ggcc.json b/advisories/unreviewed/2022/05/GHSA-rjgh-f2m3-ggcc/GHSA-rjgh-f2m3-ggcc.json index c57a0278c69..cc0bca8e41f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjgh-f2m3-ggcc/GHSA-rjgh-f2m3-ggcc.json +++ b/advisories/unreviewed/2022/05/GHSA-rjgh-f2m3-ggcc/GHSA-rjgh-f2m3-ggcc.json @@ -7,12 +7,8 @@ "CVE-2007-4238" ], "details": "AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rjmp-h7fr-8g38/GHSA-rjmp-h7fr-8g38.json b/advisories/unreviewed/2022/05/GHSA-rjmp-h7fr-8g38/GHSA-rjmp-h7fr-8g38.json index 9adafaa467b..b0ae107f9e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjmp-h7fr-8g38/GHSA-rjmp-h7fr-8g38.json +++ b/advisories/unreviewed/2022/05/GHSA-rjmp-h7fr-8g38/GHSA-rjmp-h7fr-8g38.json @@ -7,12 +7,8 @@ "CVE-2007-4510" ], "details": "ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -128,9 +124,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rm3p-fh82-w8mf/GHSA-rm3p-fh82-w8mf.json b/advisories/unreviewed/2022/05/GHSA-rm3p-fh82-w8mf/GHSA-rm3p-fh82-w8mf.json index 10781d374e2..5d421ac56c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-rm3p-fh82-w8mf/GHSA-rm3p-fh82-w8mf.json +++ b/advisories/unreviewed/2022/05/GHSA-rm3p-fh82-w8mf/GHSA-rm3p-fh82-w8mf.json @@ -7,12 +7,8 @@ "CVE-2007-4225" ], "details": "Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rm9h-xhc3-q747/GHSA-rm9h-xhc3-q747.json b/advisories/unreviewed/2022/05/GHSA-rm9h-xhc3-q747/GHSA-rm9h-xhc3-q747.json index d1661c1664f..45f9a66eeae 100644 --- a/advisories/unreviewed/2022/05/GHSA-rm9h-xhc3-q747/GHSA-rm9h-xhc3-q747.json +++ b/advisories/unreviewed/2022/05/GHSA-rm9h-xhc3-q747/GHSA-rm9h-xhc3-q747.json @@ -7,12 +7,8 @@ "CVE-2007-4283" ], "details": "PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rmmw-wrwp-3vrq/GHSA-rmmw-wrwp-3vrq.json b/advisories/unreviewed/2022/05/GHSA-rmmw-wrwp-3vrq/GHSA-rmmw-wrwp-3vrq.json index b3d028edcc3..e4792453a94 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmmw-wrwp-3vrq/GHSA-rmmw-wrwp-3vrq.json +++ b/advisories/unreviewed/2022/05/GHSA-rmmw-wrwp-3vrq/GHSA-rmmw-wrwp-3vrq.json @@ -7,12 +7,8 @@ "CVE-2007-4096" ], "details": "Buffer overflow in Tor before 0.1.2.15, when using BSD natd support, allows remote attackers to cause a denial of service via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rqq2-rvvw-7vm3/GHSA-rqq2-rvvw-7vm3.json b/advisories/unreviewed/2022/05/GHSA-rqq2-rvvw-7vm3/GHSA-rqq2-rvvw-7vm3.json index 1836969bdaa..8996b61da70 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqq2-rvvw-7vm3/GHSA-rqq2-rvvw-7vm3.json +++ b/advisories/unreviewed/2022/05/GHSA-rqq2-rvvw-7vm3/GHSA-rqq2-rvvw-7vm3.json @@ -7,12 +7,8 @@ "CVE-2007-3944" ], "details": "Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, allow remote attackers to execute arbitrary code via certain JavaScript regular expressions. NOTE: this issue was originally reported only for MobileSafari on the iPhone. NOTE: it is not clear whether this stems from an issue in the original distribution of PCRE, which might already have a separate CVE identifier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rr2q-h82c-mqqm/GHSA-rr2q-h82c-mqqm.json b/advisories/unreviewed/2022/05/GHSA-rr2q-h82c-mqqm/GHSA-rr2q-h82c-mqqm.json index 1c1edb904f5..c1bda49be7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr2q-h82c-mqqm/GHSA-rr2q-h82c-mqqm.json +++ b/advisories/unreviewed/2022/05/GHSA-rr2q-h82c-mqqm/GHSA-rr2q-h82c-mqqm.json @@ -7,12 +7,8 @@ "CVE-2007-4114" ], "details": "Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) kadi or (2) email parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rw5m-g76h-ww34/GHSA-rw5m-g76h-ww34.json b/advisories/unreviewed/2022/05/GHSA-rw5m-g76h-ww34/GHSA-rw5m-g76h-ww34.json index 0228581d033..a567e40c461 100644 --- a/advisories/unreviewed/2022/05/GHSA-rw5m-g76h-ww34/GHSA-rw5m-g76h-ww34.json +++ b/advisories/unreviewed/2022/05/GHSA-rw5m-g76h-ww34/GHSA-rw5m-g76h-ww34.json @@ -7,12 +7,8 @@ "CVE-2007-4135" ], "details": "The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by \"root\" instead of \"nobody\" if the file exists on the server but not on the client.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rxpf-c2jc-w98h/GHSA-rxpf-c2jc-w98h.json b/advisories/unreviewed/2022/05/GHSA-rxpf-c2jc-w98h/GHSA-rxpf-c2jc-w98h.json index 28d3b966a34..13b5544cb4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxpf-c2jc-w98h/GHSA-rxpf-c2jc-w98h.json +++ b/advisories/unreviewed/2022/05/GHSA-rxpf-c2jc-w98h/GHSA-rxpf-c2jc-w98h.json @@ -7,12 +7,8 @@ "CVE-2007-4500" ], "details": "Unspecified vulnerability in TunnelRunner in SSHKeychain before 0.8.2 beta, and possibly later versions, allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rxr5-9xmw-h4rj/GHSA-rxr5-9xmw-h4rj.json b/advisories/unreviewed/2022/05/GHSA-rxr5-9xmw-h4rj/GHSA-rxr5-9xmw-h4rj.json index 1e47e67c73a..764ee57ae6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxr5-9xmw-h4rj/GHSA-rxr5-9xmw-h4rj.json +++ b/advisories/unreviewed/2022/05/GHSA-rxr5-9xmw-h4rj/GHSA-rxr5-9xmw-h4rj.json @@ -7,12 +7,8 @@ "CVE-2007-4053" ], "details": "SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to new_images.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rxv9-cmq6-hg5r/GHSA-rxv9-cmq6-hg5r.json b/advisories/unreviewed/2022/05/GHSA-rxv9-cmq6-hg5r/GHSA-rxv9-cmq6-hg5r.json index 9a04e69cfdf..26abdebad37 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxv9-cmq6-hg5r/GHSA-rxv9-cmq6-hg5r.json +++ b/advisories/unreviewed/2022/05/GHSA-rxv9-cmq6-hg5r/GHSA-rxv9-cmq6-hg5r.json @@ -7,12 +7,8 @@ "CVE-2007-4380" ], "details": "Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privileges via the Log File Viewer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v28w-5h8r-rj75/GHSA-v28w-5h8r-rj75.json b/advisories/unreviewed/2022/05/GHSA-v28w-5h8r-rj75/GHSA-v28w-5h8r-rj75.json index d993737237b..09633362a64 100644 --- a/advisories/unreviewed/2022/05/GHSA-v28w-5h8r-rj75/GHSA-v28w-5h8r-rj75.json +++ b/advisories/unreviewed/2022/05/GHSA-v28w-5h8r-rj75/GHSA-v28w-5h8r-rj75.json @@ -7,12 +7,8 @@ "CVE-2007-4474" ], "details": "Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v3v8-gxq3-gm5c/GHSA-v3v8-gxq3-gm5c.json b/advisories/unreviewed/2022/05/GHSA-v3v8-gxq3-gm5c/GHSA-v3v8-gxq3-gm5c.json index 7c9d80e50de..5b541d7e923 100644 --- a/advisories/unreviewed/2022/05/GHSA-v3v8-gxq3-gm5c/GHSA-v3v8-gxq3-gm5c.json +++ b/advisories/unreviewed/2022/05/GHSA-v3v8-gxq3-gm5c/GHSA-v3v8-gxq3-gm5c.json @@ -7,12 +7,8 @@ "CVE-2007-4347" ], "details": "Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v43v-9xx8-7jfw/GHSA-v43v-9xx8-7jfw.json b/advisories/unreviewed/2022/05/GHSA-v43v-9xx8-7jfw/GHSA-v43v-9xx8-7jfw.json index 205e8fbe4de..f97f909ce98 100644 --- a/advisories/unreviewed/2022/05/GHSA-v43v-9xx8-7jfw/GHSA-v43v-9xx8-7jfw.json +++ b/advisories/unreviewed/2022/05/GHSA-v43v-9xx8-7jfw/GHSA-v43v-9xx8-7jfw.json @@ -7,12 +7,8 @@ "CVE-2007-3993" ], "details": "Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v526-5wc6-v9fv/GHSA-v526-5wc6-v9fv.json b/advisories/unreviewed/2022/05/GHSA-v526-5wc6-v9fv/GHSA-v526-5wc6-v9fv.json index 2633d20d903..3dac53a0205 100644 --- a/advisories/unreviewed/2022/05/GHSA-v526-5wc6-v9fv/GHSA-v526-5wc6-v9fv.json +++ b/advisories/unreviewed/2022/05/GHSA-v526-5wc6-v9fv/GHSA-v526-5wc6-v9fv.json @@ -7,12 +7,8 @@ "CVE-2007-4461" ], "details": "NuFW 2.2.3, and certain other versions after 2.0, allows remote attackers to bypass time-based packet filtering rules via certain \"out of period\" choices of packet transmission time.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v528-pfj4-fcf2/GHSA-v528-pfj4-fcf2.json b/advisories/unreviewed/2022/05/GHSA-v528-pfj4-fcf2/GHSA-v528-pfj4-fcf2.json index a59ba7359c9..2fe5df59609 100644 --- a/advisories/unreviewed/2022/05/GHSA-v528-pfj4-fcf2/GHSA-v528-pfj4-fcf2.json +++ b/advisories/unreviewed/2022/05/GHSA-v528-pfj4-fcf2/GHSA-v528-pfj4-fcf2.json @@ -7,12 +7,8 @@ "CVE-2007-3793" ], "details": "SQL injection vulnerability in Job Management Partner 1/NETM/DM (JP1/NETM/DM) Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v529-q2r7-535c/GHSA-v529-q2r7-535c.json b/advisories/unreviewed/2022/05/GHSA-v529-q2r7-535c/GHSA-v529-q2r7-535c.json index a6b51bcf899..d9e20f9cc95 100644 --- a/advisories/unreviewed/2022/05/GHSA-v529-q2r7-535c/GHSA-v529-q2r7-535c.json +++ b/advisories/unreviewed/2022/05/GHSA-v529-q2r7-535c/GHSA-v529-q2r7-535c.json @@ -7,12 +7,8 @@ "CVE-2007-3859" ], "details": "Unspecified vulnerability in the Oracle Internet Directory component for Oracle Database 9.2.0.8 and 9.2.0.8DV; Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka OID01.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v65j-rjv5-gxhw/GHSA-v65j-rjv5-gxhw.json b/advisories/unreviewed/2022/05/GHSA-v65j-rjv5-gxhw/GHSA-v65j-rjv5-gxhw.json index 9051b4300be..581d81e313c 100644 --- a/advisories/unreviewed/2022/05/GHSA-v65j-rjv5-gxhw/GHSA-v65j-rjv5-gxhw.json +++ b/advisories/unreviewed/2022/05/GHSA-v65j-rjv5-gxhw/GHSA-v65j-rjv5-gxhw.json @@ -7,12 +7,8 @@ "CVE-2007-4485" ], "details": "PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. NOTE: it could be argued that this vulnerability is caused by a problem in PHP and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Butterfly online visitors counter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v689-7vgf-r3r8/GHSA-v689-7vgf-r3r8.json b/advisories/unreviewed/2022/05/GHSA-v689-7vgf-r3r8/GHSA-v689-7vgf-r3r8.json index c85cc1ca497..5813a60060d 100644 --- a/advisories/unreviewed/2022/05/GHSA-v689-7vgf-r3r8/GHSA-v689-7vgf-r3r8.json +++ b/advisories/unreviewed/2022/05/GHSA-v689-7vgf-r3r8/GHSA-v689-7vgf-r3r8.json @@ -7,12 +7,8 @@ "CVE-2007-4445" ], "details": "Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an ID 0x38 packet, and an invalid 13-bit integer in (3) an ID 0x60 packet and (4) an ID 0x68 packet; and a denial of service (UDP port block) via (5) an ID 0x20 packet and (6) an ID 0x28 packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v7w5-c9j9-2f2r/GHSA-v7w5-c9j9-2f2r.json b/advisories/unreviewed/2022/05/GHSA-v7w5-c9j9-2f2r/GHSA-v7w5-c9j9-2f2r.json index 416626a89ac..5096b9cc695 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7w5-c9j9-2f2r/GHSA-v7w5-c9j9-2f2r.json +++ b/advisories/unreviewed/2022/05/GHSA-v7w5-c9j9-2f2r/GHSA-v7w5-c9j9-2f2r.json @@ -7,12 +7,8 @@ "CVE-2019-2181" ], "details": "In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v8qg-q643-x698/GHSA-v8qg-q643-x698.json b/advisories/unreviewed/2022/05/GHSA-v8qg-q643-x698/GHSA-v8qg-q643-x698.json index e8afc2729e0..ec373f74cac 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8qg-q643-x698/GHSA-v8qg-q643-x698.json +++ b/advisories/unreviewed/2022/05/GHSA-v8qg-q643-x698/GHSA-v8qg-q643-x698.json @@ -7,12 +7,8 @@ "CVE-2007-4142" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v9fc-pf23-42rf/GHSA-v9fc-pf23-42rf.json b/advisories/unreviewed/2022/05/GHSA-v9fc-pf23-42rf/GHSA-v9fc-pf23-42rf.json index 2cd468c5277..f87cba69b41 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9fc-pf23-42rf/GHSA-v9fc-pf23-42rf.json +++ b/advisories/unreviewed/2022/05/GHSA-v9fc-pf23-42rf/GHSA-v9fc-pf23-42rf.json @@ -7,12 +7,8 @@ "CVE-2007-4216" ], "details": "vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in a METHOD_NEITHER (1) IOCTL 0x8400000F or (2) IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory locations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vc49-v673-rrjp/GHSA-vc49-v673-rrjp.json b/advisories/unreviewed/2022/05/GHSA-vc49-v673-rrjp/GHSA-vc49-v673-rrjp.json index be6002cac63..c82132bbaf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc49-v673-rrjp/GHSA-vc49-v673-rrjp.json +++ b/advisories/unreviewed/2022/05/GHSA-vc49-v673-rrjp/GHSA-vc49-v673-rrjp.json @@ -7,12 +7,8 @@ "CVE-2007-4184" ], "details": "SQL injection vulnerability in administrator/popups/pollwindow.php in Joomla! 1.0.12 allows remote attackers to execute arbitrary SQL commands via the pollid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vc6h-mhq4-24qv/GHSA-vc6h-mhq4-24qv.json b/advisories/unreviewed/2022/05/GHSA-vc6h-mhq4-24qv/GHSA-vc6h-mhq4-24qv.json index 50fbdf1bc13..4e3e66a8e69 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc6h-mhq4-24qv/GHSA-vc6h-mhq4-24qv.json +++ b/advisories/unreviewed/2022/05/GHSA-vc6h-mhq4-24qv/GHSA-vc6h-mhq4-24qv.json @@ -7,12 +7,8 @@ "CVE-2007-3991" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in cv.asp in Asp cvmatik 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Adiniz (Ady), (2) Soyadiniz (Soyady), (3) Ehliyet, (4) Askerlik, and (5) GSM parameters; and possibly other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vccg-86m6-wf86/GHSA-vccg-86m6-wf86.json b/advisories/unreviewed/2022/05/GHSA-vccg-86m6-wf86/GHSA-vccg-86m6-wf86.json index 6cdfe0b2bbe..f5cd0f62cd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vccg-86m6-wf86/GHSA-vccg-86m6-wf86.json +++ b/advisories/unreviewed/2022/05/GHSA-vccg-86m6-wf86/GHSA-vccg-86m6-wf86.json @@ -7,12 +7,8 @@ "CVE-2007-4289" ], "details": "Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vcmc-mvhv-w8c3/GHSA-vcmc-mvhv-w8c3.json b/advisories/unreviewed/2022/05/GHSA-vcmc-mvhv-w8c3/GHSA-vcmc-mvhv-w8c3.json index 208b9bb996a..9e044423ae9 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcmc-mvhv-w8c3/GHSA-vcmc-mvhv-w8c3.json +++ b/advisories/unreviewed/2022/05/GHSA-vcmc-mvhv-w8c3/GHSA-vcmc-mvhv-w8c3.json @@ -7,12 +7,8 @@ "CVE-2007-4164" ], "details": "CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the url-prefix parameter and escape is disabled, or an Error directive uses the url-prefix parameter in obj.conf, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vcpg-cfvx-g342/GHSA-vcpg-cfvx-g342.json b/advisories/unreviewed/2022/05/GHSA-vcpg-cfvx-g342/GHSA-vcpg-cfvx-g342.json index 81a6177d546..6b04308332c 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcpg-cfvx-g342/GHSA-vcpg-cfvx-g342.json +++ b/advisories/unreviewed/2022/05/GHSA-vcpg-cfvx-g342/GHSA-vcpg-cfvx-g342.json @@ -7,12 +7,8 @@ "CVE-2007-4242" ], "details": "The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vf5q-3rgp-67xj/GHSA-vf5q-3rgp-67xj.json b/advisories/unreviewed/2022/05/GHSA-vf5q-3rgp-67xj/GHSA-vf5q-3rgp-67xj.json index 008b0dc4c39..536a9a48347 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf5q-3rgp-67xj/GHSA-vf5q-3rgp-67xj.json +++ b/advisories/unreviewed/2022/05/GHSA-vf5q-3rgp-67xj/GHSA-vf5q-3rgp-67xj.json @@ -7,12 +7,8 @@ "CVE-2007-4295" ], "details": "Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vg4r-p8pw-h88f/GHSA-vg4r-p8pw-h88f.json b/advisories/unreviewed/2022/05/GHSA-vg4r-p8pw-h88f/GHSA-vg4r-p8pw-h88f.json index 51590c18247..4557776ea03 100644 --- a/advisories/unreviewed/2022/05/GHSA-vg4r-p8pw-h88f/GHSA-vg4r-p8pw-h88f.json +++ b/advisories/unreviewed/2022/05/GHSA-vg4r-p8pw-h88f/GHSA-vg4r-p8pw-h88f.json @@ -7,12 +7,8 @@ "CVE-2007-4157" ], "details": "PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing the authentication cookie only requires the password hash, not the cleartext version.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vgfw-qwqf-rmvv/GHSA-vgfw-qwqf-rmvv.json b/advisories/unreviewed/2022/05/GHSA-vgfw-qwqf-rmvv/GHSA-vgfw-qwqf-rmvv.json index 3867114856b..2077de0b7b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgfw-qwqf-rmvv/GHSA-vgfw-qwqf-rmvv.json +++ b/advisories/unreviewed/2022/05/GHSA-vgfw-qwqf-rmvv/GHSA-vgfw-qwqf-rmvv.json @@ -7,12 +7,8 @@ "CVE-2007-4129" ], "details": "CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vgxg-wwfg-46jp/GHSA-vgxg-wwfg-46jp.json b/advisories/unreviewed/2022/05/GHSA-vgxg-wwfg-46jp/GHSA-vgxg-wwfg-46jp.json index 9afcf61f8a3..b56449f70c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgxg-wwfg-46jp/GHSA-vgxg-wwfg-46jp.json +++ b/advisories/unreviewed/2022/05/GHSA-vgxg-wwfg-46jp/GHSA-vgxg-wwfg-46jp.json @@ -7,12 +7,8 @@ "CVE-2007-4390" ], "details": "The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vhp4-8j53-43v9/GHSA-vhp4-8j53-43v9.json b/advisories/unreviewed/2022/05/GHSA-vhp4-8j53-43v9/GHSA-vhp4-8j53-43v9.json index aeccc93a41e..9eb1108fc01 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhp4-8j53-43v9/GHSA-vhp4-8j53-43v9.json +++ b/advisories/unreviewed/2022/05/GHSA-vhp4-8j53-43v9/GHSA-vhp4-8j53-43v9.json @@ -7,12 +7,8 @@ "CVE-2007-4259" ], "details": "EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via (1) a direct request for a URL under OnlineViewing/galleries/ or (2) navigation of the gallery user interface with JavaScript disabled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vhqm-w4h9-5rqc/GHSA-vhqm-w4h9-5rqc.json b/advisories/unreviewed/2022/05/GHSA-vhqm-w4h9-5rqc/GHSA-vhqm-w4h9-5rqc.json index 20a30da1d0b..1c2bbb0b570 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhqm-w4h9-5rqc/GHSA-vhqm-w4h9-5rqc.json +++ b/advisories/unreviewed/2022/05/GHSA-vhqm-w4h9-5rqc/GHSA-vhqm-w4h9-5rqc.json @@ -7,12 +7,8 @@ "CVE-2007-3885" ], "details": "Cross-site scripting (XSS) vulnerability in philboard_search.asp in husrevforum 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vhww-rr55-xpgp/GHSA-vhww-rr55-xpgp.json b/advisories/unreviewed/2022/05/GHSA-vhww-rr55-xpgp/GHSA-vhww-rr55-xpgp.json index 6141116ba04..e24f84287cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhww-rr55-xpgp/GHSA-vhww-rr55-xpgp.json +++ b/advisories/unreviewed/2022/05/GHSA-vhww-rr55-xpgp/GHSA-vhww-rr55-xpgp.json @@ -7,12 +7,8 @@ "CVE-2007-4344" ], "details": "Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in (1) a PSP image to the ID_PSP.apl plug-in or (2) an LHA archive to the AM_LHA.apl plug-in, resulting in a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjfm-f6cq-h3cc/GHSA-vjfm-f6cq-h3cc.json b/advisories/unreviewed/2022/05/GHSA-vjfm-f6cq-h3cc/GHSA-vjfm-f6cq-h3cc.json index 00ad8671e27..c072fdb4943 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjfm-f6cq-h3cc/GHSA-vjfm-f6cq-h3cc.json +++ b/advisories/unreviewed/2022/05/GHSA-vjfm-f6cq-h3cc/GHSA-vjfm-f6cq-h3cc.json @@ -7,12 +7,8 @@ "CVE-2007-4515" ], "details": "Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmg6-hwvc-96fg/GHSA-vmg6-hwvc-96fg.json b/advisories/unreviewed/2022/05/GHSA-vmg6-hwvc-96fg/GHSA-vmg6-hwvc-96fg.json index feab36de5cf..a7f8409f550 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmg6-hwvc-96fg/GHSA-vmg6-hwvc-96fg.json +++ b/advisories/unreviewed/2022/05/GHSA-vmg6-hwvc-96fg/GHSA-vmg6-hwvc-96fg.json @@ -7,12 +7,8 @@ "CVE-2007-4100" ], "details": "MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vp44-326x-5c5g/GHSA-vp44-326x-5c5g.json b/advisories/unreviewed/2022/05/GHSA-vp44-326x-5c5g/GHSA-vp44-326x-5c5g.json index e7af394ccfd..23a635125ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-vp44-326x-5c5g/GHSA-vp44-326x-5c5g.json +++ b/advisories/unreviewed/2022/05/GHSA-vp44-326x-5c5g/GHSA-vp44-326x-5c5g.json @@ -7,12 +7,8 @@ "CVE-2007-4255" ], "details": "Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vq93-37v2-76p4/GHSA-vq93-37v2-76p4.json b/advisories/unreviewed/2022/05/GHSA-vq93-37v2-76p4/GHSA-vq93-37v2-76p4.json index 84b72da1c0a..d2db837354f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vq93-37v2-76p4/GHSA-vq93-37v2-76p4.json +++ b/advisories/unreviewed/2022/05/GHSA-vq93-37v2-76p4/GHSA-vq93-37v2-76p4.json @@ -7,12 +7,8 @@ "CVE-2007-4191" ], "details": "Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqg9-c22m-rj53/GHSA-vqg9-c22m-rj53.json b/advisories/unreviewed/2022/05/GHSA-vqg9-c22m-rj53/GHSA-vqg9-c22m-rj53.json index 12556e8bca4..42545f367fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqg9-c22m-rj53/GHSA-vqg9-c22m-rj53.json +++ b/advisories/unreviewed/2022/05/GHSA-vqg9-c22m-rj53/GHSA-vqg9-c22m-rj53.json @@ -7,12 +7,8 @@ "CVE-2017-18596" ], "details": "The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqv3-6cp5-xgwr/GHSA-vqv3-6cp5-xgwr.json b/advisories/unreviewed/2022/05/GHSA-vqv3-6cp5-xgwr/GHSA-vqv3-6cp5-xgwr.json index c1fb22dc046..fdbd5e980f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqv3-6cp5-xgwr/GHSA-vqv3-6cp5-xgwr.json +++ b/advisories/unreviewed/2022/05/GHSA-vqv3-6cp5-xgwr/GHSA-vqv3-6cp5-xgwr.json @@ -7,12 +7,8 @@ "CVE-2007-4005" ], "details": "Stack-based buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 allows remote attackers to execute arbitrary code via a long string to the shell port (514/tcp). NOTE: this might overlap CVE-2007-4006.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vr4m-cmfx-452h/GHSA-vr4m-cmfx-452h.json b/advisories/unreviewed/2022/05/GHSA-vr4m-cmfx-452h/GHSA-vr4m-cmfx-452h.json index f0a314d4cd7..ff0f7fcd182 100644 --- a/advisories/unreviewed/2022/05/GHSA-vr4m-cmfx-452h/GHSA-vr4m-cmfx-452h.json +++ b/advisories/unreviewed/2022/05/GHSA-vr4m-cmfx-452h/GHSA-vr4m-cmfx-452h.json @@ -7,12 +7,8 @@ "CVE-2007-4047" ], "details": "geoBlog (aka BitDamaged) 1 does not require authentication for (1) deletecomment.php, (2) deleteblog.php, and (3) listcomment.php in admin/, which allows remote attackers to delete arbitrary comments, delete arbitrary blogs, and have other unspecified impact via a request with a valid id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vr83-27jc-hxm2/GHSA-vr83-27jc-hxm2.json b/advisories/unreviewed/2022/05/GHSA-vr83-27jc-hxm2/GHSA-vr83-27jc-hxm2.json index b6e589c9169..819db7411cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-vr83-27jc-hxm2/GHSA-vr83-27jc-hxm2.json +++ b/advisories/unreviewed/2022/05/GHSA-vr83-27jc-hxm2/GHSA-vr83-27jc-hxm2.json @@ -7,12 +7,8 @@ "CVE-2007-3909" ], "details": "Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) date and (2) limit parameters to index.php, and other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vwq8-j8h6-76qq/GHSA-vwq8-j8h6-76qq.json b/advisories/unreviewed/2022/05/GHSA-vwq8-j8h6-76qq/GHSA-vwq8-j8h6-76qq.json index ca0c1636fa8..ae926a3015a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwq8-j8h6-76qq/GHSA-vwq8-j8h6-76qq.json +++ b/advisories/unreviewed/2022/05/GHSA-vwq8-j8h6-76qq/GHSA-vwq8-j8h6-76qq.json @@ -7,12 +7,8 @@ "CVE-2007-3864" ], "details": "Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via (1) Instant Messaging/Presence (OCS01) and (2) Oracle Single Sign On (AS02).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vxc5-fc48-p4m6/GHSA-vxc5-fc48-p4m6.json b/advisories/unreviewed/2022/05/GHSA-vxc5-fc48-p4m6/GHSA-vxc5-fc48-p4m6.json index 278ce05a8a3..befef5918a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxc5-fc48-p4m6/GHSA-vxc5-fc48-p4m6.json +++ b/advisories/unreviewed/2022/05/GHSA-vxc5-fc48-p4m6/GHSA-vxc5-fc48-p4m6.json @@ -7,12 +7,8 @@ "CVE-2007-4201" ], "details": "Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow remote attackers to prevent examination of certain data, a related issue to CVE-2007-4035.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vxjh-47fv-jqcm/GHSA-vxjh-47fv-jqcm.json b/advisories/unreviewed/2022/05/GHSA-vxjh-47fv-jqcm/GHSA-vxjh-47fv-jqcm.json index ba8d2426b96..5c362a521a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxjh-47fv-jqcm/GHSA-vxjh-47fv-jqcm.json +++ b/advisories/unreviewed/2022/05/GHSA-vxjh-47fv-jqcm/GHSA-vxjh-47fv-jqcm.json @@ -7,12 +7,8 @@ "CVE-2007-3891" ], "details": "Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HTML attributes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vxxj-6jx6-2x5h/GHSA-vxxj-6jx6-2x5h.json b/advisories/unreviewed/2022/05/GHSA-vxxj-6jx6-2x5h/GHSA-vxxj-6jx6-2x5h.json index 99596a8c0fc..540762d1c94 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxxj-6jx6-2x5h/GHSA-vxxj-6jx6-2x5h.json +++ b/advisories/unreviewed/2022/05/GHSA-vxxj-6jx6-2x5h/GHSA-vxxj-6jx6-2x5h.json @@ -7,12 +7,8 @@ "CVE-2007-4428" ], "details": "Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w2w2-rjx3-6hwf/GHSA-w2w2-rjx3-6hwf.json b/advisories/unreviewed/2022/05/GHSA-w2w2-rjx3-6hwf/GHSA-w2w2-rjx3-6hwf.json index 744a8529398..ed26e24c91a 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2w2-rjx3-6hwf/GHSA-w2w2-rjx3-6hwf.json +++ b/advisories/unreviewed/2022/05/GHSA-w2w2-rjx3-6hwf/GHSA-w2w2-rjx3-6hwf.json @@ -7,12 +7,8 @@ "CVE-2007-3881" ], "details": "SQL injection vulnerability in index.php in Pictures Rating (Picture Rating) allows remote attackers to execute arbitrary SQL commands via the msgid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w2xx-p535-mqhm/GHSA-w2xx-p535-mqhm.json b/advisories/unreviewed/2022/05/GHSA-w2xx-p535-mqhm/GHSA-w2xx-p535-mqhm.json index e28502b7b6f..9c802fe957f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2xx-p535-mqhm/GHSA-w2xx-p535-mqhm.json +++ b/advisories/unreviewed/2022/05/GHSA-w2xx-p535-mqhm/GHSA-w2xx-p535-mqhm.json @@ -7,12 +7,8 @@ "CVE-2019-9254" ], "details": "In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w57x-j39p-mpp8/GHSA-w57x-j39p-mpp8.json b/advisories/unreviewed/2022/05/GHSA-w57x-j39p-mpp8/GHSA-w57x-j39p-mpp8.json index b2c8dfed12c..f874d3d2272 100644 --- a/advisories/unreviewed/2022/05/GHSA-w57x-j39p-mpp8/GHSA-w57x-j39p-mpp8.json +++ b/advisories/unreviewed/2022/05/GHSA-w57x-j39p-mpp8/GHSA-w57x-j39p-mpp8.json @@ -7,12 +7,8 @@ "CVE-2007-4130" ], "details": "The Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64) does not properly handle page faults during NUMA memory access, which allows local users to cause a denial of service (panic) via invalid arguments to set_mempolicy in an MPOL_BIND operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w645-h57c-qhmp/GHSA-w645-h57c-qhmp.json b/advisories/unreviewed/2022/05/GHSA-w645-h57c-qhmp/GHSA-w645-h57c-qhmp.json index 89571f4f147..dd1505971c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-w645-h57c-qhmp/GHSA-w645-h57c-qhmp.json +++ b/advisories/unreviewed/2022/05/GHSA-w645-h57c-qhmp/GHSA-w645-h57c-qhmp.json @@ -7,12 +7,8 @@ "CVE-2007-3873" ], "details": "Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap (VST) feature is enabled, allows local users to cause a denial of service (service crash) or execute arbitrary code via a file with a long pathname, which triggers the overflow during a ReadDirectoryChangesW callback notification.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w6h3-c95g-hxhm/GHSA-w6h3-c95g-hxhm.json b/advisories/unreviewed/2022/05/GHSA-w6h3-c95g-hxhm/GHSA-w6h3-c95g-hxhm.json index 6b58a110a3e..df9ab05dbbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6h3-c95g-hxhm/GHSA-w6h3-c95g-hxhm.json +++ b/advisories/unreviewed/2022/05/GHSA-w6h3-c95g-hxhm/GHSA-w6h3-c95g-hxhm.json @@ -7,12 +7,8 @@ "CVE-2007-3980" ], "details": "PHP remote file inclusion vulnerability in page.php in RCMS Pro RGameScript Pro allows remote attackers to execute arbitrary PHP code via a URL in the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w6p5-2cpj-45qm/GHSA-w6p5-2cpj-45qm.json b/advisories/unreviewed/2022/05/GHSA-w6p5-2cpj-45qm/GHSA-w6p5-2cpj-45qm.json index e40b8b54f9a..d3af24cff5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6p5-2cpj-45qm/GHSA-w6p5-2cpj-45qm.json +++ b/advisories/unreviewed/2022/05/GHSA-w6p5-2cpj-45qm/GHSA-w6p5-2cpj-45qm.json @@ -7,12 +7,8 @@ "CVE-2007-4434" ], "details": "Cross-site scripting (XSS) vulnerability in textfilesearch.asp in the Text File Search ASP (Classic) edition allows remote attackers to inject arbitrary web script or HTML via the query parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w7p2-993h-mv78/GHSA-w7p2-993h-mv78.json b/advisories/unreviewed/2022/05/GHSA-w7p2-993h-mv78/GHSA-w7p2-993h-mv78.json index 45774a67868..ba3fc142e7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7p2-993h-mv78/GHSA-w7p2-993h-mv78.json +++ b/advisories/unreviewed/2022/05/GHSA-w7p2-993h-mv78/GHSA-w7p2-993h-mv78.json @@ -7,12 +7,8 @@ "CVE-2007-4424" ], "details": "Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop of a client system via certain HTML, as demonstrated by a filename in the DATA attribute of an OBJECT element. NOTE: it could be argued that this is not a vulnerability because a dangerous file is not actually launched, but as of 2007, it is generally accepted that web browsers should prompt users before saving dangerous content.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w84j-78mr-q3j2/GHSA-w84j-78mr-q3j2.json b/advisories/unreviewed/2022/05/GHSA-w84j-78mr-q3j2/GHSA-w84j-78mr-q3j2.json index 8c91f4d1675..ea061552bad 100644 --- a/advisories/unreviewed/2022/05/GHSA-w84j-78mr-q3j2/GHSA-w84j-78mr-q3j2.json +++ b/advisories/unreviewed/2022/05/GHSA-w84j-78mr-q3j2/GHSA-w84j-78mr-q3j2.json @@ -7,12 +7,8 @@ "CVE-2007-4409" ], "details": "Race condition in ircu 2.10.12.01 through 2.10.12.05 allows remote attackers to set a new Apass during a netburst by arranging for ops privilege to be granted before the mode arrives.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w8cp-4857-rqf2/GHSA-w8cp-4857-rqf2.json b/advisories/unreviewed/2022/05/GHSA-w8cp-4857-rqf2/GHSA-w8cp-4857-rqf2.json index d15c8bb0875..968d0cf939b 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8cp-4857-rqf2/GHSA-w8cp-4857-rqf2.json +++ b/advisories/unreviewed/2022/05/GHSA-w8cp-4857-rqf2/GHSA-w8cp-4857-rqf2.json @@ -7,12 +7,8 @@ "CVE-2007-4404" ], "details": "ircu 2.10.12.01 allows remote attackers to (1) cause a denial of service (flood wallops) by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and (2) cause a denial of service (daemon crash) via a \"J 0:#channel\" message on a channel without an apass; and (3) allows remote authenticated operators to cause a denial of service (daemon crash) via a remote \"names -D\" command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w9rx-jvwv-ffh3/GHSA-w9rx-jvwv-ffh3.json b/advisories/unreviewed/2022/05/GHSA-w9rx-jvwv-ffh3/GHSA-w9rx-jvwv-ffh3.json index a2b1d1ddbbf..ae7b8a82dc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9rx-jvwv-ffh3/GHSA-w9rx-jvwv-ffh3.json +++ b/advisories/unreviewed/2022/05/GHSA-w9rx-jvwv-ffh3/GHSA-w9rx-jvwv-ffh3.json @@ -7,12 +7,8 @@ "CVE-2007-3972" ], "details": "ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted (1) ASPACK or (2) FSG packed file, which triggers a divide-by-zero error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w9vx-wg94-r6pj/GHSA-w9vx-wg94-r6pj.json b/advisories/unreviewed/2022/05/GHSA-w9vx-wg94-r6pj/GHSA-w9vx-wg94-r6pj.json index a849a00ee6c..8b9b4dc18a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9vx-wg94-r6pj/GHSA-w9vx-wg94-r6pj.json +++ b/advisories/unreviewed/2022/05/GHSA-w9vx-wg94-r6pj/GHSA-w9vx-wg94-r6pj.json @@ -7,12 +7,8 @@ "CVE-2007-4219" ], "details": "Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a certain integer field in a request packet to TCP port 5168, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wch6-64mr-vfpg/GHSA-wch6-64mr-vfpg.json b/advisories/unreviewed/2022/05/GHSA-wch6-64mr-vfpg/GHSA-wch6-64mr-vfpg.json index b24798a4936..92aca48ecb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-wch6-64mr-vfpg/GHSA-wch6-64mr-vfpg.json +++ b/advisories/unreviewed/2022/05/GHSA-wch6-64mr-vfpg/GHSA-wch6-64mr-vfpg.json @@ -7,12 +7,8 @@ "CVE-2007-4323" ], "details": "DenyHosts 2.6 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol version identification containing an IP address string, a different vector than CVE-2006-6301.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wcrj-46fh-fmcv/GHSA-wcrj-46fh-fmcv.json b/advisories/unreviewed/2022/05/GHSA-wcrj-46fh-fmcv/GHSA-wcrj-46fh-fmcv.json index 93d8f22a97b..2ade1a3e6f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcrj-46fh-fmcv/GHSA-wcrj-46fh-fmcv.json +++ b/advisories/unreviewed/2022/05/GHSA-wcrj-46fh-fmcv/GHSA-wcrj-46fh-fmcv.json @@ -7,12 +7,8 @@ "CVE-2007-4156" ], "details": "Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to member.php in a page action, related to a SELECT statement in common.php; and the (2) loginid parameter (uid variable), and possibly the (3) pwd parameter, to admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wfw8-8fc8-8963/GHSA-wfw8-8fc8-8963.json b/advisories/unreviewed/2022/05/GHSA-wfw8-8fc8-8963/GHSA-wfw8-8fc8-8963.json index 937000aab05..85f34ab30f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfw8-8fc8-8963/GHSA-wfw8-8fc8-8963.json +++ b/advisories/unreviewed/2022/05/GHSA-wfw8-8fc8-8963/GHSA-wfw8-8fc8-8963.json @@ -7,12 +7,8 @@ "CVE-2007-3886" ], "details": "Cross-site scripting (XSS) vulnerability in default.asp in Element CMS allows remote attackers to inject arbitrary web script or HTML via the s parameter in a search pID action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wh27-hm8c-g8gh/GHSA-wh27-hm8c-g8gh.json b/advisories/unreviewed/2022/05/GHSA-wh27-hm8c-g8gh/GHSA-wh27-hm8c-g8gh.json index 415df27cc1d..0944442f06a 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh27-hm8c-g8gh/GHSA-wh27-hm8c-g8gh.json +++ b/advisories/unreviewed/2022/05/GHSA-wh27-hm8c-g8gh/GHSA-wh27-hm8c-g8gh.json @@ -7,12 +7,8 @@ "CVE-2007-3867" ], "details": "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to (1) APPS04, (2) APPS05, and (3) APPS06 in (a) Oracle Application Object Library, (4) APPS07 in Oracle Customer Intelligence, (5) APPS08 in Oracle Payments, (7) APPS10 in Oracle Human Resources, and (8) APPS11 in iRecruitment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wh48-jpcr-2cx7/GHSA-wh48-jpcr-2cx7.json b/advisories/unreviewed/2022/05/GHSA-wh48-jpcr-2cx7/GHSA-wh48-jpcr-2cx7.json index 910260d2b01..1aad0c78d5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh48-jpcr-2cx7/GHSA-wh48-jpcr-2cx7.json +++ b/advisories/unreviewed/2022/05/GHSA-wh48-jpcr-2cx7/GHSA-wh48-jpcr-2cx7.json @@ -7,12 +7,8 @@ "CVE-2007-4108" ], "details": "SQL injection vulnerability in sign_in.aspx in WebEvents (Online Event Registration Template) allows remote attackers to execute arbitrary SQL commands via the Password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-whfv-2c4g-wx2g/GHSA-whfv-2c4g-wx2g.json b/advisories/unreviewed/2022/05/GHSA-whfv-2c4g-wx2g/GHSA-whfv-2c4g-wx2g.json index 3182d443e26..84476f8a7dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-whfv-2c4g-wx2g/GHSA-whfv-2c4g-wx2g.json +++ b/advisories/unreviewed/2022/05/GHSA-whfv-2c4g-wx2g/GHSA-whfv-2c4g-wx2g.json @@ -7,12 +7,8 @@ "CVE-2019-14224" ], "details": "An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr configuration files and then receive a JMX connection from the victim, and serve a Java object that results in deserialization and code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-whfw-362r-m3qh/GHSA-whfw-362r-m3qh.json b/advisories/unreviewed/2022/05/GHSA-whfw-362r-m3qh/GHSA-whfw-362r-m3qh.json index b135065fea9..df66acdaba0 100644 --- a/advisories/unreviewed/2022/05/GHSA-whfw-362r-m3qh/GHSA-whfw-362r-m3qh.json +++ b/advisories/unreviewed/2022/05/GHSA-whfw-362r-m3qh/GHSA-whfw-362r-m3qh.json @@ -7,12 +7,8 @@ "CVE-2007-4308" ], "details": "The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -180,9 +176,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wmhg-7fm8-r4vp/GHSA-wmhg-7fm8-r4vp.json b/advisories/unreviewed/2022/05/GHSA-wmhg-7fm8-r4vp/GHSA-wmhg-7fm8-r4vp.json index 8fc8794902f..9af1b3afaf4 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmhg-7fm8-r4vp/GHSA-wmhg-7fm8-r4vp.json +++ b/advisories/unreviewed/2022/05/GHSA-wmhg-7fm8-r4vp/GHSA-wmhg-7fm8-r4vp.json @@ -7,12 +7,8 @@ "CVE-2007-3896" ], "details": "The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid \"%\" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe Reader, Skype, and other applications. NOTE: this issue might be related to other issues involving URL handlers in Windows systems, such as CVE-2007-3845. There also might be separate but closely related issues in the applications that are invoked by the handlers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wp8h-hh6c-99qc/GHSA-wp8h-hh6c-99qc.json b/advisories/unreviewed/2022/05/GHSA-wp8h-hh6c-99qc/GHSA-wp8h-hh6c-99qc.json index ddee54ffd2a..c8cac79a41a 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp8h-hh6c-99qc/GHSA-wp8h-hh6c-99qc.json +++ b/advisories/unreviewed/2022/05/GHSA-wp8h-hh6c-99qc/GHSA-wp8h-hh6c-99qc.json @@ -7,12 +7,8 @@ "CVE-2007-3785" ], "details": "Absolute path traversal vulnerability in a certain ActiveX control in PGPBBox.dll in EldoS SecureBlackbox (sbb) 5.1.0.112 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wpqw-x29j-wf9j/GHSA-wpqw-x29j-wf9j.json b/advisories/unreviewed/2022/05/GHSA-wpqw-x29j-wf9j/GHSA-wpqw-x29j-wf9j.json index c33268b1872..036e9048dbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpqw-x29j-wf9j/GHSA-wpqw-x29j-wf9j.json +++ b/advisories/unreviewed/2022/05/GHSA-wpqw-x29j-wf9j/GHSA-wpqw-x29j-wf9j.json @@ -7,12 +7,8 @@ "CVE-2007-4222" ], "details": "Buffer overflow in the TagAttributeListCopy function in nnotes.dll in IBM Lotus Notes before 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML email, related to duplicate RTF conversion when the recipient operates on this email.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqjj-5gv3-62gc/GHSA-wqjj-5gv3-62gc.json b/advisories/unreviewed/2022/05/GHSA-wqjj-5gv3-62gc/GHSA-wqjj-5gv3-62gc.json index 94018275bb7..ee2842ee56d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqjj-5gv3-62gc/GHSA-wqjj-5gv3-62gc.json +++ b/advisories/unreviewed/2022/05/GHSA-wqjj-5gv3-62gc/GHSA-wqjj-5gv3-62gc.json @@ -7,12 +7,8 @@ "CVE-2007-4508" ], "details": "Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wqxv-wp53-gjpf/GHSA-wqxv-wp53-gjpf.json b/advisories/unreviewed/2022/05/GHSA-wqxv-wp53-gjpf/GHSA-wqxv-wp53-gjpf.json index 1fd71fa7c43..865a35f289d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqxv-wp53-gjpf/GHSA-wqxv-wp53-gjpf.json +++ b/advisories/unreviewed/2022/05/GHSA-wqxv-wp53-gjpf/GHSA-wqxv-wp53-gjpf.json @@ -7,12 +7,8 @@ "CVE-2007-4490" ], "details": "Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to (1) RPCFN_EVENTBACK_DoHotFix or (2) CMD_CHANGE_AGENT_REGISTER_INFO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wr22-x6h6-rwqh/GHSA-wr22-x6h6-rwqh.json b/advisories/unreviewed/2022/05/GHSA-wr22-x6h6-rwqh/GHSA-wr22-x6h6-rwqh.json index b47e1439631..a883487d87d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr22-x6h6-rwqh/GHSA-wr22-x6h6-rwqh.json +++ b/advisories/unreviewed/2022/05/GHSA-wr22-x6h6-rwqh/GHSA-wr22-x6h6-rwqh.json @@ -7,12 +7,8 @@ "CVE-2007-4276" ], "details": "Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrqx-442q-74r6/GHSA-wrqx-442q-74r6.json b/advisories/unreviewed/2022/05/GHSA-wrqx-442q-74r6/GHSA-wrqx-442q-74r6.json index 10a199def92..fed4bd5a728 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrqx-442q-74r6/GHSA-wrqx-442q-74r6.json +++ b/advisories/unreviewed/2022/05/GHSA-wrqx-442q-74r6/GHSA-wrqx-442q-74r6.json @@ -7,12 +7,8 @@ "CVE-2007-4373" ], "details": "The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow remote attackers to bypass authentication by reconnecting after a connection closes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wv3w-qgrc-p3j4/GHSA-wv3w-qgrc-p3j4.json b/advisories/unreviewed/2022/05/GHSA-wv3w-qgrc-p3j4/GHSA-wv3w-qgrc-p3j4.json index 6722aa69d22..a0e2c8bc7c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-wv3w-qgrc-p3j4/GHSA-wv3w-qgrc-p3j4.json +++ b/advisories/unreviewed/2022/05/GHSA-wv3w-qgrc-p3j4/GHSA-wv3w-qgrc-p3j4.json @@ -7,12 +7,8 @@ "CVE-2007-4491" ], "details": "SQL injection vulnerability in uyeler2.php in Gurur haber 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wwp6-9693-6grc/GHSA-wwp6-9693-6grc.json b/advisories/unreviewed/2022/05/GHSA-wwp6-9693-6grc/GHSA-wwp6-9693-6grc.json index 387e1179c86..999c1dc3e34 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwp6-9693-6grc/GHSA-wwp6-9693-6grc.json +++ b/advisories/unreviewed/2022/05/GHSA-wwp6-9693-6grc/GHSA-wwp6-9693-6grc.json @@ -7,12 +7,8 @@ "CVE-2007-4435" ], "details": "Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x2f3-hqgw-x6gp/GHSA-x2f3-hqgw-x6gp.json b/advisories/unreviewed/2022/05/GHSA-x2f3-hqgw-x6gp/GHSA-x2f3-hqgw-x6gp.json index 0ad07851a14..3731b96b0d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2f3-hqgw-x6gp/GHSA-x2f3-hqgw-x6gp.json +++ b/advisories/unreviewed/2022/05/GHSA-x2f3-hqgw-x6gp/GHSA-x2f3-hqgw-x6gp.json @@ -7,12 +7,8 @@ "CVE-2007-4338" ], "details": "index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary account by placing the account's name in the value of an fcms_login_id cookie. NOTE: this can be leveraged for code execution via a POST with PHP code in the content parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x2mf-686w-vjjw/GHSA-x2mf-686w-vjjw.json b/advisories/unreviewed/2022/05/GHSA-x2mf-686w-vjjw/GHSA-x2mf-686w-vjjw.json index 6210ead0b4c..cfe34bfa778 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2mf-686w-vjjw/GHSA-x2mf-686w-vjjw.json +++ b/advisories/unreviewed/2022/05/GHSA-x2mf-686w-vjjw/GHSA-x2mf-686w-vjjw.json @@ -7,12 +7,8 @@ "CVE-2007-4158" ], "details": "Memory leak in TIBCO Rendezvous (RV) daemon (rvd) 7.5.2, 7.5.3 and 7.5.4 allows remote attackers to cause a denial of service (memory consumption) via a packet with a length field of zero, a different vulnerability than CVE-2006-2830.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x2rv-3vgv-5r78/GHSA-x2rv-3vgv-5r78.json b/advisories/unreviewed/2022/05/GHSA-x2rv-3vgv-5r78/GHSA-x2rv-3vgv-5r78.json index fafa0bdf7bb..d95dfac7a80 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2rv-3vgv-5r78/GHSA-x2rv-3vgv-5r78.json +++ b/advisories/unreviewed/2022/05/GHSA-x2rv-3vgv-5r78/GHSA-x2rv-3vgv-5r78.json @@ -7,12 +7,8 @@ "CVE-2007-4285" ], "details": "Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x2vh-w9hq-99wj/GHSA-x2vh-w9hq-99wj.json b/advisories/unreviewed/2022/05/GHSA-x2vh-w9hq-99wj/GHSA-x2vh-w9hq-99wj.json index f9dfcd549db..eaabebb1661 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2vh-w9hq-99wj/GHSA-x2vh-w9hq-99wj.json +++ b/advisories/unreviewed/2022/05/GHSA-x2vh-w9hq-99wj/GHSA-x2vh-w9hq-99wj.json @@ -7,12 +7,8 @@ "CVE-2007-4517" ], "details": "Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x39m-jhwf-pv29/GHSA-x39m-jhwf-pv29.json b/advisories/unreviewed/2022/05/GHSA-x39m-jhwf-pv29/GHSA-x39m-jhwf-pv29.json index ba4d76a182d..65c8745853f 100644 --- a/advisories/unreviewed/2022/05/GHSA-x39m-jhwf-pv29/GHSA-x39m-jhwf-pv29.json +++ b/advisories/unreviewed/2022/05/GHSA-x39m-jhwf-pv29/GHSA-x39m-jhwf-pv29.json @@ -7,12 +7,8 @@ "CVE-2007-4464" ], "details": "CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGE_EXPORT_DIRECTORY array in a PE file, which could complicate forensics investigations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3jg-4vr7-jq3q/GHSA-x3jg-4vr7-jq3q.json b/advisories/unreviewed/2022/05/GHSA-x3jg-4vr7-jq3q/GHSA-x3jg-4vr7-jq3q.json index c625ad808fb..51807098237 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3jg-4vr7-jq3q/GHSA-x3jg-4vr7-jq3q.json +++ b/advisories/unreviewed/2022/05/GHSA-x3jg-4vr7-jq3q/GHSA-x3jg-4vr7-jq3q.json @@ -7,12 +7,8 @@ "CVE-2007-4350" ], "details": "Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x5m4-pv6c-fx4w/GHSA-x5m4-pv6c-fx4w.json b/advisories/unreviewed/2022/05/GHSA-x5m4-pv6c-fx4w/GHSA-x5m4-pv6c-fx4w.json index fd93d3d262d..3fb88be93c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5m4-pv6c-fx4w/GHSA-x5m4-pv6c-fx4w.json +++ b/advisories/unreviewed/2022/05/GHSA-x5m4-pv6c-fx4w/GHSA-x5m4-pv6c-fx4w.json @@ -7,12 +7,8 @@ "CVE-2007-4313" ], "details": "PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x6x5-52g7-6q9m/GHSA-x6x5-52g7-6q9m.json b/advisories/unreviewed/2022/05/GHSA-x6x5-52g7-6q9m/GHSA-x6x5-52g7-6q9m.json index b868f60421a..9fcf3ac29a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6x5-52g7-6q9m/GHSA-x6x5-52g7-6q9m.json +++ b/advisories/unreviewed/2022/05/GHSA-x6x5-52g7-6q9m/GHSA-x6x5-52g7-6q9m.json @@ -7,12 +7,8 @@ "CVE-2007-4232" ], "details": "PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote attackers to execute arbitrary PHP code via a URL in the format_menue parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x7pv-rcxr-wj5m/GHSA-x7pv-rcxr-wj5m.json b/advisories/unreviewed/2022/05/GHSA-x7pv-rcxr-wj5m/GHSA-x7pv-rcxr-wj5m.json index 7570243411f..92b02475d4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-x7pv-rcxr-wj5m/GHSA-x7pv-rcxr-wj5m.json +++ b/advisories/unreviewed/2022/05/GHSA-x7pv-rcxr-wj5m/GHSA-x7pv-rcxr-wj5m.json @@ -7,12 +7,8 @@ "CVE-2007-4482" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x7r6-w4vx-8328/GHSA-x7r6-w4vx-8328.json b/advisories/unreviewed/2022/05/GHSA-x7r6-w4vx-8328/GHSA-x7r6-w4vx-8328.json index 452d042e351..5ffbac585ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-x7r6-w4vx-8328/GHSA-x7r6-w4vx-8328.json +++ b/advisories/unreviewed/2022/05/GHSA-x7r6-w4vx-8328/GHSA-x7r6-w4vx-8328.json @@ -7,12 +7,8 @@ "CVE-2007-4330" ], "details": "PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x83x-9mm3-pq5f/GHSA-x83x-9mm3-pq5f.json b/advisories/unreviewed/2022/05/GHSA-x83x-9mm3-pq5f/GHSA-x83x-9mm3-pq5f.json index d6a5630adbe..5b8a6924345 100644 --- a/advisories/unreviewed/2022/05/GHSA-x83x-9mm3-pq5f/GHSA-x83x-9mm3-pq5f.json +++ b/advisories/unreviewed/2022/05/GHSA-x83x-9mm3-pq5f/GHSA-x83x-9mm3-pq5f.json @@ -7,12 +7,8 @@ "CVE-2007-4317" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allow remote attackers to perform certain actions as administrators, as demonstrated by a request to Forms/General_1 with the (1) sysSystemName and (2) sysDomainName parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x8pf-6rg9-cfcg/GHSA-x8pf-6rg9-cfcg.json b/advisories/unreviewed/2022/05/GHSA-x8pf-6rg9-cfcg/GHSA-x8pf-6rg9-cfcg.json index c766a2025bd..f6c456fa731 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8pf-6rg9-cfcg/GHSA-x8pf-6rg9-cfcg.json +++ b/advisories/unreviewed/2022/05/GHSA-x8pf-6rg9-cfcg/GHSA-x8pf-6rg9-cfcg.json @@ -7,12 +7,8 @@ "CVE-2007-4503" ], "details": "SQL injection vulnerability in index.php in the Nice Talk component (com_nicetalk) 0.9.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the tagid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x97h-9f4h-rj28/GHSA-x97h-9f4h-rj28.json b/advisories/unreviewed/2022/05/GHSA-x97h-9f4h-rj28/GHSA-x97h-9f4h-rj28.json index ed923ae2352..cf426d090aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-x97h-9f4h-rj28/GHSA-x97h-9f4h-rj28.json +++ b/advisories/unreviewed/2022/05/GHSA-x97h-9f4h-rj28/GHSA-x97h-9f4h-rj28.json @@ -7,12 +7,8 @@ "CVE-2007-3947" ], "details": "request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate headers, as demonstrated by a request containing two Location header lines, which results in a segmentation fault.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xcpq-cc29-8fch/GHSA-xcpq-cc29-8fch.json b/advisories/unreviewed/2022/05/GHSA-xcpq-cc29-8fch/GHSA-xcpq-cc29-8fch.json index ee42a487af0..bb2b4a203f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xcpq-cc29-8fch/GHSA-xcpq-cc29-8fch.json +++ b/advisories/unreviewed/2022/05/GHSA-xcpq-cc29-8fch/GHSA-xcpq-cc29-8fch.json @@ -7,12 +7,8 @@ "CVE-2007-3897" ], "details": "Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xcv9-w924-vrgq/GHSA-xcv9-w924-vrgq.json b/advisories/unreviewed/2022/05/GHSA-xcv9-w924-vrgq/GHSA-xcv9-w924-vrgq.json index 994edcf4585..edb67886ca9 100644 --- a/advisories/unreviewed/2022/05/GHSA-xcv9-w924-vrgq/GHSA-xcv9-w924-vrgq.json +++ b/advisories/unreviewed/2022/05/GHSA-xcv9-w924-vrgq/GHSA-xcv9-w924-vrgq.json @@ -7,12 +7,8 @@ "CVE-2007-4496" ], "details": "Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows authenticated users with administrative privileges on a guest operating system to corrupt memory and possibly execute arbitrary code on the host operating system via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xgm9-wcvx-6rv6/GHSA-xgm9-wcvx-6rv6.json b/advisories/unreviewed/2022/05/GHSA-xgm9-wcvx-6rv6/GHSA-xgm9-wcvx-6rv6.json index cdb85fb02d4..1468253a569 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgm9-wcvx-6rv6/GHSA-xgm9-wcvx-6rv6.json +++ b/advisories/unreviewed/2022/05/GHSA-xgm9-wcvx-6rv6/GHSA-xgm9-wcvx-6rv6.json @@ -7,12 +7,8 @@ "CVE-2007-3835" ], "details": "Cross-site scripting (XSS) vulnerability in Ex Libris MetaLib 3.13 and 4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a resource id that can be discovered through a search.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xh3h-phv3-vx63/GHSA-xh3h-phv3-vx63.json b/advisories/unreviewed/2022/05/GHSA-xh3h-phv3-vx63/GHSA-xh3h-phv3-vx63.json index 7cfe64f26ae..de8c2e916c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh3h-phv3-vx63/GHSA-xh3h-phv3-vx63.json +++ b/advisories/unreviewed/2022/05/GHSA-xh3h-phv3-vx63/GHSA-xh3h-phv3-vx63.json @@ -7,12 +7,8 @@ "CVE-2007-4394" ], "details": "Unspecified vulnerability in a \"core clean\" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before 20070810 allows local users to delete of arbitrary files via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xh5m-rf6f-g69m/GHSA-xh5m-rf6f-g69m.json b/advisories/unreviewed/2022/05/GHSA-xh5m-rf6f-g69m/GHSA-xh5m-rf6f-g69m.json index db886933285..ead3949483b 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh5m-rf6f-g69m/GHSA-xh5m-rf6f-g69m.json +++ b/advisories/unreviewed/2022/05/GHSA-xh5m-rf6f-g69m/GHSA-xh5m-rf6f-g69m.json @@ -7,12 +7,8 @@ "CVE-2007-4402" ], "details": "Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xh82-j35j-j64c/GHSA-xh82-j35j-j64c.json b/advisories/unreviewed/2022/05/GHSA-xh82-j35j-j64c/GHSA-xh82-j35j-j64c.json index 92263b92b9a..c3e522a3e9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh82-j35j-j64c/GHSA-xh82-j35j-j64c.json +++ b/advisories/unreviewed/2022/05/GHSA-xh82-j35j-j64c/GHSA-xh82-j35j-j64c.json @@ -7,12 +7,8 @@ "CVE-2007-4376" ], "details": "Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upload and execute arbitrary PHP files in banners/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xhcv-5x87-p5v6/GHSA-xhcv-5x87-p5v6.json b/advisories/unreviewed/2022/05/GHSA-xhcv-5x87-p5v6/GHSA-xhcv-5x87-p5v6.json index 7ba470cb756..995efc3a6e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhcv-5x87-p5v6/GHSA-xhcv-5x87-p5v6.json +++ b/advisories/unreviewed/2022/05/GHSA-xhcv-5x87-p5v6/GHSA-xhcv-5x87-p5v6.json @@ -7,12 +7,8 @@ "CVE-2007-4144" ], "details": "Cross-site scripting (XSS) vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT eMail Form Processor Pro allows remote attackers to inject arbitrary web script or HTML via the base_path parameter, possibly related to (1) formprocessorpro.php in the PHP version of the product, and (2) formprocessorpro.pl in the Perl version of the product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xj65-x7fm-g6w2/GHSA-xj65-x7fm-g6w2.json b/advisories/unreviewed/2022/05/GHSA-xj65-x7fm-g6w2/GHSA-xj65-x7fm-g6w2.json index a1c8cd386c9..cf31d3e1f98 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj65-x7fm-g6w2/GHSA-xj65-x7fm-g6w2.json +++ b/advisories/unreviewed/2022/05/GHSA-xj65-x7fm-g6w2/GHSA-xj65-x7fm-g6w2.json @@ -7,12 +7,8 @@ "CVE-2007-4335" ], "details": "Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial of service (service crash) via format string specifiers in certain unexpected commands, which trigger a crash during error logging.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xjhv-m7vj-8xjp/GHSA-xjhv-m7vj-8xjp.json b/advisories/unreviewed/2022/05/GHSA-xjhv-m7vj-8xjp/GHSA-xjhv-m7vj-8xjp.json index c04627f92ae..8fa7886f306 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjhv-m7vj-8xjp/GHSA-xjhv-m7vj-8xjp.json +++ b/advisories/unreviewed/2022/05/GHSA-xjhv-m7vj-8xjp/GHSA-xjhv-m7vj-8xjp.json @@ -7,12 +7,8 @@ "CVE-2007-4031" ], "details": "Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xm3c-242r-5vmf/GHSA-xm3c-242r-5vmf.json b/advisories/unreviewed/2022/05/GHSA-xm3c-242r-5vmf/GHSA-xm3c-242r-5vmf.json index 69f4a6cb763..55b7778b2a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xm3c-242r-5vmf/GHSA-xm3c-242r-5vmf.json +++ b/advisories/unreviewed/2022/05/GHSA-xm3c-242r-5vmf/GHSA-xm3c-242r-5vmf.json @@ -7,12 +7,8 @@ "CVE-2007-4442" ], "details": "Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xmg2-6455-627q/GHSA-xmg2-6455-627q.json b/advisories/unreviewed/2022/05/GHSA-xmg2-6455-627q/GHSA-xmg2-6455-627q.json index ee75b652c4b..fe05e5194b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmg2-6455-627q/GHSA-xmg2-6455-627q.json +++ b/advisories/unreviewed/2022/05/GHSA-xmg2-6455-627q/GHSA-xmg2-6455-627q.json @@ -7,12 +7,8 @@ "CVE-2007-3843" ], "details": "The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xp9w-fp5w-rr6r/GHSA-xp9w-fp5w-rr6r.json b/advisories/unreviewed/2022/05/GHSA-xp9w-fp5w-rr6r/GHSA-xp9w-fp5w-rr6r.json index ce03deda5d7..3f08c08da72 100644 --- a/advisories/unreviewed/2022/05/GHSA-xp9w-fp5w-rr6r/GHSA-xp9w-fp5w-rr6r.json +++ b/advisories/unreviewed/2022/05/GHSA-xp9w-fp5w-rr6r/GHSA-xp9w-fp5w-rr6r.json @@ -7,12 +7,8 @@ "CVE-2007-3834" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue, CVE-2007-3835.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xpp7-fcx9-3jh8/GHSA-xpp7-fcx9-3jh8.json b/advisories/unreviewed/2022/05/GHSA-xpp7-fcx9-3jh8/GHSA-xpp7-fcx9-3jh8.json index 77b7cef328a..4a2e4265913 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpp7-fcx9-3jh8/GHSA-xpp7-fcx9-3jh8.json +++ b/advisories/unreviewed/2022/05/GHSA-xpp7-fcx9-3jh8/GHSA-xpp7-fcx9-3jh8.json @@ -7,12 +7,8 @@ "CVE-2007-3892" ], "details": "Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other \"trust UI\" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq44-9xmj-g9xr/GHSA-xq44-9xmj-g9xr.json b/advisories/unreviewed/2022/05/GHSA-xq44-9xmj-g9xr/GHSA-xq44-9xmj-g9xr.json index 8579bfb02a3..e54452fcc0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq44-9xmj-g9xr/GHSA-xq44-9xmj-g9xr.json +++ b/advisories/unreviewed/2022/05/GHSA-xq44-9xmj-g9xr/GHSA-xq44-9xmj-g9xr.json @@ -7,12 +7,8 @@ "CVE-2007-4302" ], "details": "Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system call interposition and possibly gain privileges or bypass auditing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xqh5-cr5c-xmhf/GHSA-xqh5-cr5c-xmhf.json b/advisories/unreviewed/2022/05/GHSA-xqh5-cr5c-xmhf/GHSA-xqh5-cr5c-xmhf.json index e32be9237ef..cd4db19de61 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqh5-cr5c-xmhf/GHSA-xqh5-cr5c-xmhf.json +++ b/advisories/unreviewed/2022/05/GHSA-xqh5-cr5c-xmhf/GHSA-xqh5-cr5c-xmhf.json @@ -7,12 +7,8 @@ "CVE-2019-2177" ], "details": "In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions bypass. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xqm2-9477-246x/GHSA-xqm2-9477-246x.json b/advisories/unreviewed/2022/05/GHSA-xqm2-9477-246x/GHSA-xqm2-9477-246x.json index 1976502e160..1b7b20db5a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqm2-9477-246x/GHSA-xqm2-9477-246x.json +++ b/advisories/unreviewed/2022/05/GHSA-xqm2-9477-246x/GHSA-xqm2-9477-246x.json @@ -7,12 +7,8 @@ "CVE-2007-4240" ], "details": "The check_logout function in class/auth.php in Help Center Live (hcl) 2.1.3a sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to delete administrative users and have other unspecified impact via certain requests to (1) admin/departments.php, (2) admin/operators.php, and other unspecified scripts. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xqq5-6fch-93j5/GHSA-xqq5-6fch-93j5.json b/advisories/unreviewed/2022/05/GHSA-xqq5-6fch-93j5/GHSA-xqq5-6fch-93j5.json index dc505faca5b..5859345eab3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqq5-6fch-93j5/GHSA-xqq5-6fch-93j5.json +++ b/advisories/unreviewed/2022/05/GHSA-xqq5-6fch-93j5/GHSA-xqq5-6fch-93j5.json @@ -7,12 +7,8 @@ "CVE-2007-4028" ], "details": "Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xqvj-6jwp-36gq/GHSA-xqvj-6jwp-36gq.json b/advisories/unreviewed/2022/05/GHSA-xqvj-6jwp-36gq/GHSA-xqvj-6jwp-36gq.json index 601a881fb11..3b494041a6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqvj-6jwp-36gq/GHSA-xqvj-6jwp-36gq.json +++ b/advisories/unreviewed/2022/05/GHSA-xqvj-6jwp-36gq/GHSA-xqvj-6jwp-36gq.json @@ -7,12 +7,8 @@ "CVE-2007-4116" ], "details": "SQL injection vulnerability in philboard_forum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xrhx-47w7-f9pm/GHSA-xrhx-47w7-f9pm.json b/advisories/unreviewed/2022/05/GHSA-xrhx-47w7-f9pm/GHSA-xrhx-47w7-f9pm.json index 6d878cbebc0..3fe4af7caf7 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrhx-47w7-f9pm/GHSA-xrhx-47w7-f9pm.json +++ b/advisories/unreviewed/2022/05/GHSA-xrhx-47w7-f9pm/GHSA-xrhx-47w7-f9pm.json @@ -7,12 +7,8 @@ "CVE-2007-4674" ], "details": "An \"integer arithmetic\" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary code via a crafted movie file containing a movie atom with a large size value, which triggers a stack-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xw39-hmhj-f95j/GHSA-xw39-hmhj-f95j.json b/advisories/unreviewed/2022/05/GHSA-xw39-hmhj-f95j/GHSA-xw39-hmhj-f95j.json index d778f22be0e..b142c84032e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xw39-hmhj-f95j/GHSA-xw39-hmhj-f95j.json +++ b/advisories/unreviewed/2022/05/GHSA-xw39-hmhj-f95j/GHSA-xw39-hmhj-f95j.json @@ -7,12 +7,8 @@ "CVE-2007-4430" ], "details": "Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a \"show ip bgp regexp\" command. NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xw57-xggj-g8vq/GHSA-xw57-xggj-g8vq.json b/advisories/unreviewed/2022/05/GHSA-xw57-xggj-g8vq/GHSA-xw57-xggj-g8vq.json index da42281028f..97e1622c85c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xw57-xggj-g8vq/GHSA-xw57-xggj-g8vq.json +++ b/advisories/unreviewed/2022/05/GHSA-xw57-xggj-g8vq/GHSA-xw57-xggj-g8vq.json @@ -7,12 +7,8 @@ "CVE-2007-4502" ], "details": "SQL injection vulnerability in index.php in the BibTeX component (com_jombib) 1.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the afilter parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xwfw-c659-qjpj/GHSA-xwfw-c659-qjpj.json b/advisories/unreviewed/2022/05/GHSA-xwfw-c659-qjpj/GHSA-xwfw-c659-qjpj.json index 6b552c355c8..884cccefdfa 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwfw-c659-qjpj/GHSA-xwfw-c659-qjpj.json +++ b/advisories/unreviewed/2022/05/GHSA-xwfw-c659-qjpj/GHSA-xwfw-c659-qjpj.json @@ -7,12 +7,8 @@ "CVE-2007-4406" ], "details": "ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xwhg-hhp3-v8r3/GHSA-xwhg-hhp3-v8r3.json b/advisories/unreviewed/2022/05/GHSA-xwhg-hhp3-v8r3/GHSA-xwhg-hhp3-v8r3.json index 5de8cc25e0e..ac57ce80c4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwhg-hhp3-v8r3/GHSA-xwhg-hhp3-v8r3.json +++ b/advisories/unreviewed/2022/05/GHSA-xwhg-hhp3-v8r3/GHSA-xwhg-hhp3-v8r3.json @@ -7,12 +7,8 @@ "CVE-2007-3967" ], "details": "Directory traversal vulnerability in index.php in PHP Directory Lister (dirLIST) before 0.1.1 allows remote attackers to list the contents of a parent directory via a .. (dot dot) in the folder parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx45-f7pv-xj5x/GHSA-xx45-f7pv-xj5x.json b/advisories/unreviewed/2022/05/GHSA-xx45-f7pv-xj5x/GHSA-xx45-f7pv-xj5x.json index dc3bbf3e508..6896b666d72 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx45-f7pv-xj5x/GHSA-xx45-f7pv-xj5x.json +++ b/advisories/unreviewed/2022/05/GHSA-xx45-f7pv-xj5x/GHSA-xx45-f7pv-xj5x.json @@ -7,12 +7,8 @@ "CVE-2007-4110" ], "details": "SQL injection vulnerability in sign_in.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-4m4g-fwv8-47j2/GHSA-4m4g-fwv8-47j2.json b/advisories/unreviewed/2022/09/GHSA-4m4g-fwv8-47j2/GHSA-4m4g-fwv8-47j2.json index 95f215fe1c8..36e1a628bca 100644 --- a/advisories/unreviewed/2022/09/GHSA-4m4g-fwv8-47j2/GHSA-4m4g-fwv8-47j2.json +++ b/advisories/unreviewed/2022/09/GHSA-4m4g-fwv8-47j2/GHSA-4m4g-fwv8-47j2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-jccx-v5h6-5qxq/GHSA-jccx-v5h6-5qxq.json b/advisories/unreviewed/2022/09/GHSA-jccx-v5h6-5qxq/GHSA-jccx-v5h6-5qxq.json index 6d630ba616c..f0781bc74aa 100644 --- a/advisories/unreviewed/2022/09/GHSA-jccx-v5h6-5qxq/GHSA-jccx-v5h6-5qxq.json +++ b/advisories/unreviewed/2022/09/GHSA-jccx-v5h6-5qxq/GHSA-jccx-v5h6-5qxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-jhv5-8vgm-f4p5/GHSA-jhv5-8vgm-f4p5.json b/advisories/unreviewed/2022/09/GHSA-jhv5-8vgm-f4p5/GHSA-jhv5-8vgm-f4p5.json index 9e107395258..29dd750d4ba 100644 --- a/advisories/unreviewed/2022/09/GHSA-jhv5-8vgm-f4p5/GHSA-jhv5-8vgm-f4p5.json +++ b/advisories/unreviewed/2022/09/GHSA-jhv5-8vgm-f4p5/GHSA-jhv5-8vgm-f4p5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-23gq-p5v8-4xh3/GHSA-23gq-p5v8-4xh3.json b/advisories/unreviewed/2024/04/GHSA-23gq-p5v8-4xh3/GHSA-23gq-p5v8-4xh3.json index 3d361f9ba52..fc6b03e2a4e 100644 --- a/advisories/unreviewed/2024/04/GHSA-23gq-p5v8-4xh3/GHSA-23gq-p5v8-4xh3.json +++ b/advisories/unreviewed/2024/04/GHSA-23gq-p5v8-4xh3/GHSA-23gq-p5v8-4xh3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-29wp-xqwp-4vqr/GHSA-29wp-xqwp-4vqr.json b/advisories/unreviewed/2024/04/GHSA-29wp-xqwp-4vqr/GHSA-29wp-xqwp-4vqr.json index 91e044fafbc..e9482084d96 100644 --- a/advisories/unreviewed/2024/04/GHSA-29wp-xqwp-4vqr/GHSA-29wp-xqwp-4vqr.json +++ b/advisories/unreviewed/2024/04/GHSA-29wp-xqwp-4vqr/GHSA-29wp-xqwp-4vqr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-29x8-vr7f-rwm6/GHSA-29x8-vr7f-rwm6.json b/advisories/unreviewed/2024/04/GHSA-29x8-vr7f-rwm6/GHSA-29x8-vr7f-rwm6.json index 5676767589f..787f73ad3aa 100644 --- a/advisories/unreviewed/2024/04/GHSA-29x8-vr7f-rwm6/GHSA-29x8-vr7f-rwm6.json +++ b/advisories/unreviewed/2024/04/GHSA-29x8-vr7f-rwm6/GHSA-29x8-vr7f-rwm6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-2f37-h53v-66vq/GHSA-2f37-h53v-66vq.json b/advisories/unreviewed/2024/04/GHSA-2f37-h53v-66vq/GHSA-2f37-h53v-66vq.json index 32fc4af923d..c898acac862 100644 --- a/advisories/unreviewed/2024/04/GHSA-2f37-h53v-66vq/GHSA-2f37-h53v-66vq.json +++ b/advisories/unreviewed/2024/04/GHSA-2f37-h53v-66vq/GHSA-2f37-h53v-66vq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-2gc3-gxvv-r87c/GHSA-2gc3-gxvv-r87c.json b/advisories/unreviewed/2024/04/GHSA-2gc3-gxvv-r87c/GHSA-2gc3-gxvv-r87c.json index dee17461441..e8fcff4658c 100644 --- a/advisories/unreviewed/2024/04/GHSA-2gc3-gxvv-r87c/GHSA-2gc3-gxvv-r87c.json +++ b/advisories/unreviewed/2024/04/GHSA-2gc3-gxvv-r87c/GHSA-2gc3-gxvv-r87c.json @@ -7,12 +7,8 @@ "CVE-2024-27895" ], "details": "Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-2jr3-vfc4-xrm2/GHSA-2jr3-vfc4-xrm2.json b/advisories/unreviewed/2024/04/GHSA-2jr3-vfc4-xrm2/GHSA-2jr3-vfc4-xrm2.json index d888b7f9e76..666189ab1a4 100644 --- a/advisories/unreviewed/2024/04/GHSA-2jr3-vfc4-xrm2/GHSA-2jr3-vfc4-xrm2.json +++ b/advisories/unreviewed/2024/04/GHSA-2jr3-vfc4-xrm2/GHSA-2jr3-vfc4-xrm2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-2pg5-q29v-6rxq/GHSA-2pg5-q29v-6rxq.json b/advisories/unreviewed/2024/04/GHSA-2pg5-q29v-6rxq/GHSA-2pg5-q29v-6rxq.json index 1ee7e2ff74d..72f32cce61f 100644 --- a/advisories/unreviewed/2024/04/GHSA-2pg5-q29v-6rxq/GHSA-2pg5-q29v-6rxq.json +++ b/advisories/unreviewed/2024/04/GHSA-2pg5-q29v-6rxq/GHSA-2pg5-q29v-6rxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-35gg-3hw5-mf59/GHSA-35gg-3hw5-mf59.json b/advisories/unreviewed/2024/04/GHSA-35gg-3hw5-mf59/GHSA-35gg-3hw5-mf59.json index e2e866c0bd5..27650967a27 100644 --- a/advisories/unreviewed/2024/04/GHSA-35gg-3hw5-mf59/GHSA-35gg-3hw5-mf59.json +++ b/advisories/unreviewed/2024/04/GHSA-35gg-3hw5-mf59/GHSA-35gg-3hw5-mf59.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3656-hc57-pfv2/GHSA-3656-hc57-pfv2.json b/advisories/unreviewed/2024/04/GHSA-3656-hc57-pfv2/GHSA-3656-hc57-pfv2.json index 1897209a927..71ad7958fdd 100644 --- a/advisories/unreviewed/2024/04/GHSA-3656-hc57-pfv2/GHSA-3656-hc57-pfv2.json +++ b/advisories/unreviewed/2024/04/GHSA-3656-hc57-pfv2/GHSA-3656-hc57-pfv2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-39m6-4cjh-f5fx/GHSA-39m6-4cjh-f5fx.json b/advisories/unreviewed/2024/04/GHSA-39m6-4cjh-f5fx/GHSA-39m6-4cjh-f5fx.json index c1d33549704..0a59c065b5f 100644 --- a/advisories/unreviewed/2024/04/GHSA-39m6-4cjh-f5fx/GHSA-39m6-4cjh-f5fx.json +++ b/advisories/unreviewed/2024/04/GHSA-39m6-4cjh-f5fx/GHSA-39m6-4cjh-f5fx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3g3p-3q57-722m/GHSA-3g3p-3q57-722m.json b/advisories/unreviewed/2024/04/GHSA-3g3p-3q57-722m/GHSA-3g3p-3q57-722m.json index 166e11102cb..1b9582881b2 100644 --- a/advisories/unreviewed/2024/04/GHSA-3g3p-3q57-722m/GHSA-3g3p-3q57-722m.json +++ b/advisories/unreviewed/2024/04/GHSA-3g3p-3q57-722m/GHSA-3g3p-3q57-722m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3gj4-2qc3-888r/GHSA-3gj4-2qc3-888r.json b/advisories/unreviewed/2024/04/GHSA-3gj4-2qc3-888r/GHSA-3gj4-2qc3-888r.json index 7484b84cb76..3eba17e7714 100644 --- a/advisories/unreviewed/2024/04/GHSA-3gj4-2qc3-888r/GHSA-3gj4-2qc3-888r.json +++ b/advisories/unreviewed/2024/04/GHSA-3gj4-2qc3-888r/GHSA-3gj4-2qc3-888r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3gw6-fj56-vc35/GHSA-3gw6-fj56-vc35.json b/advisories/unreviewed/2024/04/GHSA-3gw6-fj56-vc35/GHSA-3gw6-fj56-vc35.json index fa0376b2388..12646b67adf 100644 --- a/advisories/unreviewed/2024/04/GHSA-3gw6-fj56-vc35/GHSA-3gw6-fj56-vc35.json +++ b/advisories/unreviewed/2024/04/GHSA-3gw6-fj56-vc35/GHSA-3gw6-fj56-vc35.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3q37-hvwq-f7ph/GHSA-3q37-hvwq-f7ph.json b/advisories/unreviewed/2024/04/GHSA-3q37-hvwq-f7ph/GHSA-3q37-hvwq-f7ph.json index 5d58c4138b6..2d5b6bf2545 100644 --- a/advisories/unreviewed/2024/04/GHSA-3q37-hvwq-f7ph/GHSA-3q37-hvwq-f7ph.json +++ b/advisories/unreviewed/2024/04/GHSA-3q37-hvwq-f7ph/GHSA-3q37-hvwq-f7ph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3vvw-rvgw-fjmh/GHSA-3vvw-rvgw-fjmh.json b/advisories/unreviewed/2024/04/GHSA-3vvw-rvgw-fjmh/GHSA-3vvw-rvgw-fjmh.json index d2a3dc15c8c..77c9e66148e 100644 --- a/advisories/unreviewed/2024/04/GHSA-3vvw-rvgw-fjmh/GHSA-3vvw-rvgw-fjmh.json +++ b/advisories/unreviewed/2024/04/GHSA-3vvw-rvgw-fjmh/GHSA-3vvw-rvgw-fjmh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-443p-64xr-9cq7/GHSA-443p-64xr-9cq7.json b/advisories/unreviewed/2024/04/GHSA-443p-64xr-9cq7/GHSA-443p-64xr-9cq7.json index 531418e18c9..1f8a33900d9 100644 --- a/advisories/unreviewed/2024/04/GHSA-443p-64xr-9cq7/GHSA-443p-64xr-9cq7.json +++ b/advisories/unreviewed/2024/04/GHSA-443p-64xr-9cq7/GHSA-443p-64xr-9cq7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-454g-4qqq-2j4g/GHSA-454g-4qqq-2j4g.json b/advisories/unreviewed/2024/04/GHSA-454g-4qqq-2j4g/GHSA-454g-4qqq-2j4g.json index 23d3551a289..dda59832504 100644 --- a/advisories/unreviewed/2024/04/GHSA-454g-4qqq-2j4g/GHSA-454g-4qqq-2j4g.json +++ b/advisories/unreviewed/2024/04/GHSA-454g-4qqq-2j4g/GHSA-454g-4qqq-2j4g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-4677-2pjx-h9q8/GHSA-4677-2pjx-h9q8.json b/advisories/unreviewed/2024/04/GHSA-4677-2pjx-h9q8/GHSA-4677-2pjx-h9q8.json index 6f4420de4d5..ba87e544f99 100644 --- a/advisories/unreviewed/2024/04/GHSA-4677-2pjx-h9q8/GHSA-4677-2pjx-h9q8.json +++ b/advisories/unreviewed/2024/04/GHSA-4677-2pjx-h9q8/GHSA-4677-2pjx-h9q8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-4fhw-468x-g9rx/GHSA-4fhw-468x-g9rx.json b/advisories/unreviewed/2024/04/GHSA-4fhw-468x-g9rx/GHSA-4fhw-468x-g9rx.json index acec66d7b0b..29cca37d140 100644 --- a/advisories/unreviewed/2024/04/GHSA-4fhw-468x-g9rx/GHSA-4fhw-468x-g9rx.json +++ b/advisories/unreviewed/2024/04/GHSA-4fhw-468x-g9rx/GHSA-4fhw-468x-g9rx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-4gjr-9vhm-vxgx/GHSA-4gjr-9vhm-vxgx.json b/advisories/unreviewed/2024/04/GHSA-4gjr-9vhm-vxgx/GHSA-4gjr-9vhm-vxgx.json index a0180eb037d..2fad88e3c3e 100644 --- a/advisories/unreviewed/2024/04/GHSA-4gjr-9vhm-vxgx/GHSA-4gjr-9vhm-vxgx.json +++ b/advisories/unreviewed/2024/04/GHSA-4gjr-9vhm-vxgx/GHSA-4gjr-9vhm-vxgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-4h4c-f8cp-chxw/GHSA-4h4c-f8cp-chxw.json b/advisories/unreviewed/2024/04/GHSA-4h4c-f8cp-chxw/GHSA-4h4c-f8cp-chxw.json index 79d3dcb2422..c71f75de427 100644 --- a/advisories/unreviewed/2024/04/GHSA-4h4c-f8cp-chxw/GHSA-4h4c-f8cp-chxw.json +++ b/advisories/unreviewed/2024/04/GHSA-4h4c-f8cp-chxw/GHSA-4h4c-f8cp-chxw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-4mmh-h9hr-3pwj/GHSA-4mmh-h9hr-3pwj.json b/advisories/unreviewed/2024/04/GHSA-4mmh-h9hr-3pwj/GHSA-4mmh-h9hr-3pwj.json index 8922976d7e3..d5e97f24b03 100644 --- a/advisories/unreviewed/2024/04/GHSA-4mmh-h9hr-3pwj/GHSA-4mmh-h9hr-3pwj.json +++ b/advisories/unreviewed/2024/04/GHSA-4mmh-h9hr-3pwj/GHSA-4mmh-h9hr-3pwj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-4v46-qwhw-4224/GHSA-4v46-qwhw-4224.json b/advisories/unreviewed/2024/04/GHSA-4v46-qwhw-4224/GHSA-4v46-qwhw-4224.json index a1eec97d4c3..0fd5a428bdc 100644 --- a/advisories/unreviewed/2024/04/GHSA-4v46-qwhw-4224/GHSA-4v46-qwhw-4224.json +++ b/advisories/unreviewed/2024/04/GHSA-4v46-qwhw-4224/GHSA-4v46-qwhw-4224.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-556c-jfj4-29vc/GHSA-556c-jfj4-29vc.json b/advisories/unreviewed/2024/04/GHSA-556c-jfj4-29vc/GHSA-556c-jfj4-29vc.json index c3101727b61..a6d0ab597cf 100644 --- a/advisories/unreviewed/2024/04/GHSA-556c-jfj4-29vc/GHSA-556c-jfj4-29vc.json +++ b/advisories/unreviewed/2024/04/GHSA-556c-jfj4-29vc/GHSA-556c-jfj4-29vc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-564x-rr7c-f7qq/GHSA-564x-rr7c-f7qq.json b/advisories/unreviewed/2024/04/GHSA-564x-rr7c-f7qq/GHSA-564x-rr7c-f7qq.json index a442efc2694..8cdaba4f167 100644 --- a/advisories/unreviewed/2024/04/GHSA-564x-rr7c-f7qq/GHSA-564x-rr7c-f7qq.json +++ b/advisories/unreviewed/2024/04/GHSA-564x-rr7c-f7qq/GHSA-564x-rr7c-f7qq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-5gmw-5676-jhvh/GHSA-5gmw-5676-jhvh.json b/advisories/unreviewed/2024/04/GHSA-5gmw-5676-jhvh/GHSA-5gmw-5676-jhvh.json index 2f0a3c29630..d00422c2b5b 100644 --- a/advisories/unreviewed/2024/04/GHSA-5gmw-5676-jhvh/GHSA-5gmw-5676-jhvh.json +++ b/advisories/unreviewed/2024/04/GHSA-5gmw-5676-jhvh/GHSA-5gmw-5676-jhvh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-5hc2-c69v-grvx/GHSA-5hc2-c69v-grvx.json b/advisories/unreviewed/2024/04/GHSA-5hc2-c69v-grvx/GHSA-5hc2-c69v-grvx.json index 79881335efd..bb7d2e6d300 100644 --- a/advisories/unreviewed/2024/04/GHSA-5hc2-c69v-grvx/GHSA-5hc2-c69v-grvx.json +++ b/advisories/unreviewed/2024/04/GHSA-5hc2-c69v-grvx/GHSA-5hc2-c69v-grvx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-5hvp-4x73-f9p6/GHSA-5hvp-4x73-f9p6.json b/advisories/unreviewed/2024/04/GHSA-5hvp-4x73-f9p6/GHSA-5hvp-4x73-f9p6.json index 008bc015456..f215eb27c15 100644 --- a/advisories/unreviewed/2024/04/GHSA-5hvp-4x73-f9p6/GHSA-5hvp-4x73-f9p6.json +++ b/advisories/unreviewed/2024/04/GHSA-5hvp-4x73-f9p6/GHSA-5hvp-4x73-f9p6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-5p2g-jj66-wf2m/GHSA-5p2g-jj66-wf2m.json b/advisories/unreviewed/2024/04/GHSA-5p2g-jj66-wf2m/GHSA-5p2g-jj66-wf2m.json index ff5bb5db472..ab75bf964e4 100644 --- a/advisories/unreviewed/2024/04/GHSA-5p2g-jj66-wf2m/GHSA-5p2g-jj66-wf2m.json +++ b/advisories/unreviewed/2024/04/GHSA-5p2g-jj66-wf2m/GHSA-5p2g-jj66-wf2m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-5w6f-4hgh-2xpc/GHSA-5w6f-4hgh-2xpc.json b/advisories/unreviewed/2024/04/GHSA-5w6f-4hgh-2xpc/GHSA-5w6f-4hgh-2xpc.json index 2ea6abd295a..46ca2f769f0 100644 --- a/advisories/unreviewed/2024/04/GHSA-5w6f-4hgh-2xpc/GHSA-5w6f-4hgh-2xpc.json +++ b/advisories/unreviewed/2024/04/GHSA-5w6f-4hgh-2xpc/GHSA-5w6f-4hgh-2xpc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6234-wr38-h5fr/GHSA-6234-wr38-h5fr.json b/advisories/unreviewed/2024/04/GHSA-6234-wr38-h5fr/GHSA-6234-wr38-h5fr.json index db634544717..01e2c22b5cc 100644 --- a/advisories/unreviewed/2024/04/GHSA-6234-wr38-h5fr/GHSA-6234-wr38-h5fr.json +++ b/advisories/unreviewed/2024/04/GHSA-6234-wr38-h5fr/GHSA-6234-wr38-h5fr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6564-xvqw-fc42/GHSA-6564-xvqw-fc42.json b/advisories/unreviewed/2024/04/GHSA-6564-xvqw-fc42/GHSA-6564-xvqw-fc42.json index 4c6bf7450e6..6770697a4ab 100644 --- a/advisories/unreviewed/2024/04/GHSA-6564-xvqw-fc42/GHSA-6564-xvqw-fc42.json +++ b/advisories/unreviewed/2024/04/GHSA-6564-xvqw-fc42/GHSA-6564-xvqw-fc42.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-65q5-5rwq-hg89/GHSA-65q5-5rwq-hg89.json b/advisories/unreviewed/2024/04/GHSA-65q5-5rwq-hg89/GHSA-65q5-5rwq-hg89.json index 1b85c0812ae..d60fcb83954 100644 --- a/advisories/unreviewed/2024/04/GHSA-65q5-5rwq-hg89/GHSA-65q5-5rwq-hg89.json +++ b/advisories/unreviewed/2024/04/GHSA-65q5-5rwq-hg89/GHSA-65q5-5rwq-hg89.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-674p-xmpw-wcmm/GHSA-674p-xmpw-wcmm.json b/advisories/unreviewed/2024/04/GHSA-674p-xmpw-wcmm/GHSA-674p-xmpw-wcmm.json index 69d25865868..4bd5e9d2a2e 100644 --- a/advisories/unreviewed/2024/04/GHSA-674p-xmpw-wcmm/GHSA-674p-xmpw-wcmm.json +++ b/advisories/unreviewed/2024/04/GHSA-674p-xmpw-wcmm/GHSA-674p-xmpw-wcmm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-67xf-fx93-jxw5/GHSA-67xf-fx93-jxw5.json b/advisories/unreviewed/2024/04/GHSA-67xf-fx93-jxw5/GHSA-67xf-fx93-jxw5.json index f7be7f84a1d..579983441e2 100644 --- a/advisories/unreviewed/2024/04/GHSA-67xf-fx93-jxw5/GHSA-67xf-fx93-jxw5.json +++ b/advisories/unreviewed/2024/04/GHSA-67xf-fx93-jxw5/GHSA-67xf-fx93-jxw5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6hjh-xx5m-jf35/GHSA-6hjh-xx5m-jf35.json b/advisories/unreviewed/2024/04/GHSA-6hjh-xx5m-jf35/GHSA-6hjh-xx5m-jf35.json index 03fc5f89681..22e802f27d7 100644 --- a/advisories/unreviewed/2024/04/GHSA-6hjh-xx5m-jf35/GHSA-6hjh-xx5m-jf35.json +++ b/advisories/unreviewed/2024/04/GHSA-6hjh-xx5m-jf35/GHSA-6hjh-xx5m-jf35.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6hjj-7r3r-92p5/GHSA-6hjj-7r3r-92p5.json b/advisories/unreviewed/2024/04/GHSA-6hjj-7r3r-92p5/GHSA-6hjj-7r3r-92p5.json index 4f1edaa437f..77d051c0ea5 100644 --- a/advisories/unreviewed/2024/04/GHSA-6hjj-7r3r-92p5/GHSA-6hjj-7r3r-92p5.json +++ b/advisories/unreviewed/2024/04/GHSA-6hjj-7r3r-92p5/GHSA-6hjj-7r3r-92p5.json @@ -7,12 +7,8 @@ "CVE-2023-52546" ], "details": "Vulnerability of package name verification being bypassed in the Calendar app.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-6m86-m75c-rj5c/GHSA-6m86-m75c-rj5c.json b/advisories/unreviewed/2024/04/GHSA-6m86-m75c-rj5c/GHSA-6m86-m75c-rj5c.json index 1b42bac942b..f82575f7c9c 100644 --- a/advisories/unreviewed/2024/04/GHSA-6m86-m75c-rj5c/GHSA-6m86-m75c-rj5c.json +++ b/advisories/unreviewed/2024/04/GHSA-6m86-m75c-rj5c/GHSA-6m86-m75c-rj5c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6p2g-wx5c-v95j/GHSA-6p2g-wx5c-v95j.json b/advisories/unreviewed/2024/04/GHSA-6p2g-wx5c-v95j/GHSA-6p2g-wx5c-v95j.json index 1b2a6cd7d0f..a7387d34b64 100644 --- a/advisories/unreviewed/2024/04/GHSA-6p2g-wx5c-v95j/GHSA-6p2g-wx5c-v95j.json +++ b/advisories/unreviewed/2024/04/GHSA-6p2g-wx5c-v95j/GHSA-6p2g-wx5c-v95j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6q5m-66wv-m3p2/GHSA-6q5m-66wv-m3p2.json b/advisories/unreviewed/2024/04/GHSA-6q5m-66wv-m3p2/GHSA-6q5m-66wv-m3p2.json index 3c96457a025..028154644fd 100644 --- a/advisories/unreviewed/2024/04/GHSA-6q5m-66wv-m3p2/GHSA-6q5m-66wv-m3p2.json +++ b/advisories/unreviewed/2024/04/GHSA-6q5m-66wv-m3p2/GHSA-6q5m-66wv-m3p2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6qcj-8j88-4gxg/GHSA-6qcj-8j88-4gxg.json b/advisories/unreviewed/2024/04/GHSA-6qcj-8j88-4gxg/GHSA-6qcj-8j88-4gxg.json index bca42e38991..5489dbbfdf7 100644 --- a/advisories/unreviewed/2024/04/GHSA-6qcj-8j88-4gxg/GHSA-6qcj-8j88-4gxg.json +++ b/advisories/unreviewed/2024/04/GHSA-6qcj-8j88-4gxg/GHSA-6qcj-8j88-4gxg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6vjq-3xr5-4jh8/GHSA-6vjq-3xr5-4jh8.json b/advisories/unreviewed/2024/04/GHSA-6vjq-3xr5-4jh8/GHSA-6vjq-3xr5-4jh8.json index d0afd7680fc..acac7cb4d2a 100644 --- a/advisories/unreviewed/2024/04/GHSA-6vjq-3xr5-4jh8/GHSA-6vjq-3xr5-4jh8.json +++ b/advisories/unreviewed/2024/04/GHSA-6vjq-3xr5-4jh8/GHSA-6vjq-3xr5-4jh8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-73p8-jp88-9jjm/GHSA-73p8-jp88-9jjm.json b/advisories/unreviewed/2024/04/GHSA-73p8-jp88-9jjm/GHSA-73p8-jp88-9jjm.json index e41ca7956dd..f0fb64f0079 100644 --- a/advisories/unreviewed/2024/04/GHSA-73p8-jp88-9jjm/GHSA-73p8-jp88-9jjm.json +++ b/advisories/unreviewed/2024/04/GHSA-73p8-jp88-9jjm/GHSA-73p8-jp88-9jjm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-7678-c58q-5pw3/GHSA-7678-c58q-5pw3.json b/advisories/unreviewed/2024/04/GHSA-7678-c58q-5pw3/GHSA-7678-c58q-5pw3.json index cae9af27a04..00bcf709dbb 100644 --- a/advisories/unreviewed/2024/04/GHSA-7678-c58q-5pw3/GHSA-7678-c58q-5pw3.json +++ b/advisories/unreviewed/2024/04/GHSA-7678-c58q-5pw3/GHSA-7678-c58q-5pw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-77wg-f3wm-v858/GHSA-77wg-f3wm-v858.json b/advisories/unreviewed/2024/04/GHSA-77wg-f3wm-v858/GHSA-77wg-f3wm-v858.json index 0d53a3a20d8..6665f5bcbb9 100644 --- a/advisories/unreviewed/2024/04/GHSA-77wg-f3wm-v858/GHSA-77wg-f3wm-v858.json +++ b/advisories/unreviewed/2024/04/GHSA-77wg-f3wm-v858/GHSA-77wg-f3wm-v858.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-78v4-x94j-xvq4/GHSA-78v4-x94j-xvq4.json b/advisories/unreviewed/2024/04/GHSA-78v4-x94j-xvq4/GHSA-78v4-x94j-xvq4.json index 477a705661d..f18175a68bb 100644 --- a/advisories/unreviewed/2024/04/GHSA-78v4-x94j-xvq4/GHSA-78v4-x94j-xvq4.json +++ b/advisories/unreviewed/2024/04/GHSA-78v4-x94j-xvq4/GHSA-78v4-x94j-xvq4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-7fjf-mf75-27gg/GHSA-7fjf-mf75-27gg.json b/advisories/unreviewed/2024/04/GHSA-7fjf-mf75-27gg/GHSA-7fjf-mf75-27gg.json index b9cb6cb2b80..f41ebaceb2c 100644 --- a/advisories/unreviewed/2024/04/GHSA-7fjf-mf75-27gg/GHSA-7fjf-mf75-27gg.json +++ b/advisories/unreviewed/2024/04/GHSA-7fjf-mf75-27gg/GHSA-7fjf-mf75-27gg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-7g9p-6w9q-wc84/GHSA-7g9p-6w9q-wc84.json b/advisories/unreviewed/2024/04/GHSA-7g9p-6w9q-wc84/GHSA-7g9p-6w9q-wc84.json index 499bcf80481..847cc53f298 100644 --- a/advisories/unreviewed/2024/04/GHSA-7g9p-6w9q-wc84/GHSA-7g9p-6w9q-wc84.json +++ b/advisories/unreviewed/2024/04/GHSA-7g9p-6w9q-wc84/GHSA-7g9p-6w9q-wc84.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-7gvv-9m7c-r39r/GHSA-7gvv-9m7c-r39r.json b/advisories/unreviewed/2024/04/GHSA-7gvv-9m7c-r39r/GHSA-7gvv-9m7c-r39r.json index 9c33ee66084..34ad1e1f0b1 100644 --- a/advisories/unreviewed/2024/04/GHSA-7gvv-9m7c-r39r/GHSA-7gvv-9m7c-r39r.json +++ b/advisories/unreviewed/2024/04/GHSA-7gvv-9m7c-r39r/GHSA-7gvv-9m7c-r39r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-7jq6-7f95-hv67/GHSA-7jq6-7f95-hv67.json b/advisories/unreviewed/2024/04/GHSA-7jq6-7f95-hv67/GHSA-7jq6-7f95-hv67.json index cbed6f23dbe..8bba25ff1f5 100644 --- a/advisories/unreviewed/2024/04/GHSA-7jq6-7f95-hv67/GHSA-7jq6-7f95-hv67.json +++ b/advisories/unreviewed/2024/04/GHSA-7jq6-7f95-hv67/GHSA-7jq6-7f95-hv67.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-7m2v-r87h-vhc2/GHSA-7m2v-r87h-vhc2.json b/advisories/unreviewed/2024/04/GHSA-7m2v-r87h-vhc2/GHSA-7m2v-r87h-vhc2.json index 27b4c472c46..0bd3454a516 100644 --- a/advisories/unreviewed/2024/04/GHSA-7m2v-r87h-vhc2/GHSA-7m2v-r87h-vhc2.json +++ b/advisories/unreviewed/2024/04/GHSA-7m2v-r87h-vhc2/GHSA-7m2v-r87h-vhc2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-7qfq-cp9v-rc33/GHSA-7qfq-cp9v-rc33.json b/advisories/unreviewed/2024/04/GHSA-7qfq-cp9v-rc33/GHSA-7qfq-cp9v-rc33.json index c9cdacb9269..f7b012cd94a 100644 --- a/advisories/unreviewed/2024/04/GHSA-7qfq-cp9v-rc33/GHSA-7qfq-cp9v-rc33.json +++ b/advisories/unreviewed/2024/04/GHSA-7qfq-cp9v-rc33/GHSA-7qfq-cp9v-rc33.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-8266-hvc3-3w4r/GHSA-8266-hvc3-3w4r.json b/advisories/unreviewed/2024/04/GHSA-8266-hvc3-3w4r/GHSA-8266-hvc3-3w4r.json index cc597e4c6fe..db79c355d05 100644 --- a/advisories/unreviewed/2024/04/GHSA-8266-hvc3-3w4r/GHSA-8266-hvc3-3w4r.json +++ b/advisories/unreviewed/2024/04/GHSA-8266-hvc3-3w4r/GHSA-8266-hvc3-3w4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-86p8-qv4v-vv9r/GHSA-86p8-qv4v-vv9r.json b/advisories/unreviewed/2024/04/GHSA-86p8-qv4v-vv9r/GHSA-86p8-qv4v-vv9r.json index c1cb40fc5ca..5293fb1eb60 100644 --- a/advisories/unreviewed/2024/04/GHSA-86p8-qv4v-vv9r/GHSA-86p8-qv4v-vv9r.json +++ b/advisories/unreviewed/2024/04/GHSA-86p8-qv4v-vv9r/GHSA-86p8-qv4v-vv9r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-86r8-h4wj-hhjg/GHSA-86r8-h4wj-hhjg.json b/advisories/unreviewed/2024/04/GHSA-86r8-h4wj-hhjg/GHSA-86r8-h4wj-hhjg.json index d13584085b7..6282fcce8d0 100644 --- a/advisories/unreviewed/2024/04/GHSA-86r8-h4wj-hhjg/GHSA-86r8-h4wj-hhjg.json +++ b/advisories/unreviewed/2024/04/GHSA-86r8-h4wj-hhjg/GHSA-86r8-h4wj-hhjg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-899x-gqmc-4hgm/GHSA-899x-gqmc-4hgm.json b/advisories/unreviewed/2024/04/GHSA-899x-gqmc-4hgm/GHSA-899x-gqmc-4hgm.json index a140c1c7ed6..a5ba8149f6d 100644 --- a/advisories/unreviewed/2024/04/GHSA-899x-gqmc-4hgm/GHSA-899x-gqmc-4hgm.json +++ b/advisories/unreviewed/2024/04/GHSA-899x-gqmc-4hgm/GHSA-899x-gqmc-4hgm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-89fv-9763-xj44/GHSA-89fv-9763-xj44.json b/advisories/unreviewed/2024/04/GHSA-89fv-9763-xj44/GHSA-89fv-9763-xj44.json index 68c0062f39d..6e56ed3cb6c 100644 --- a/advisories/unreviewed/2024/04/GHSA-89fv-9763-xj44/GHSA-89fv-9763-xj44.json +++ b/advisories/unreviewed/2024/04/GHSA-89fv-9763-xj44/GHSA-89fv-9763-xj44.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-89hm-2q6m-373c/GHSA-89hm-2q6m-373c.json b/advisories/unreviewed/2024/04/GHSA-89hm-2q6m-373c/GHSA-89hm-2q6m-373c.json index 4160d4b3ad6..ad6c72eaaa5 100644 --- a/advisories/unreviewed/2024/04/GHSA-89hm-2q6m-373c/GHSA-89hm-2q6m-373c.json +++ b/advisories/unreviewed/2024/04/GHSA-89hm-2q6m-373c/GHSA-89hm-2q6m-373c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-89j9-gpmp-c355/GHSA-89j9-gpmp-c355.json b/advisories/unreviewed/2024/04/GHSA-89j9-gpmp-c355/GHSA-89j9-gpmp-c355.json index 60d0f2cab63..e0269e2733a 100644 --- a/advisories/unreviewed/2024/04/GHSA-89j9-gpmp-c355/GHSA-89j9-gpmp-c355.json +++ b/advisories/unreviewed/2024/04/GHSA-89j9-gpmp-c355/GHSA-89j9-gpmp-c355.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-8g7p-mx5x-8frc/GHSA-8g7p-mx5x-8frc.json b/advisories/unreviewed/2024/04/GHSA-8g7p-mx5x-8frc/GHSA-8g7p-mx5x-8frc.json index 3eec31d1caa..0a3e46bc5af 100644 --- a/advisories/unreviewed/2024/04/GHSA-8g7p-mx5x-8frc/GHSA-8g7p-mx5x-8frc.json +++ b/advisories/unreviewed/2024/04/GHSA-8g7p-mx5x-8frc/GHSA-8g7p-mx5x-8frc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-8g89-49x9-pqr8/GHSA-8g89-49x9-pqr8.json b/advisories/unreviewed/2024/04/GHSA-8g89-49x9-pqr8/GHSA-8g89-49x9-pqr8.json index 33f210064fa..f213d4830f5 100644 --- a/advisories/unreviewed/2024/04/GHSA-8g89-49x9-pqr8/GHSA-8g89-49x9-pqr8.json +++ b/advisories/unreviewed/2024/04/GHSA-8g89-49x9-pqr8/GHSA-8g89-49x9-pqr8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-8gfv-66rm-fqmg/GHSA-8gfv-66rm-fqmg.json b/advisories/unreviewed/2024/04/GHSA-8gfv-66rm-fqmg/GHSA-8gfv-66rm-fqmg.json index 8048605fbfe..055dd97fbfb 100644 --- a/advisories/unreviewed/2024/04/GHSA-8gfv-66rm-fqmg/GHSA-8gfv-66rm-fqmg.json +++ b/advisories/unreviewed/2024/04/GHSA-8gfv-66rm-fqmg/GHSA-8gfv-66rm-fqmg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-8vf8-r7rr-h923/GHSA-8vf8-r7rr-h923.json b/advisories/unreviewed/2024/04/GHSA-8vf8-r7rr-h923/GHSA-8vf8-r7rr-h923.json index eb8c73d3954..0f8693ca1b7 100644 --- a/advisories/unreviewed/2024/04/GHSA-8vf8-r7rr-h923/GHSA-8vf8-r7rr-h923.json +++ b/advisories/unreviewed/2024/04/GHSA-8vf8-r7rr-h923/GHSA-8vf8-r7rr-h923.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-8vgx-r4c9-cvmm/GHSA-8vgx-r4c9-cvmm.json b/advisories/unreviewed/2024/04/GHSA-8vgx-r4c9-cvmm/GHSA-8vgx-r4c9-cvmm.json index 6b7cc54118b..ed19f756208 100644 --- a/advisories/unreviewed/2024/04/GHSA-8vgx-r4c9-cvmm/GHSA-8vgx-r4c9-cvmm.json +++ b/advisories/unreviewed/2024/04/GHSA-8vgx-r4c9-cvmm/GHSA-8vgx-r4c9-cvmm.json @@ -7,12 +7,8 @@ "CVE-2023-52386" ], "details": "Out-of-bounds write vulnerability in the RSMC module.\nImpact: Successful exploitation of this vulnerability will affect availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-93gm-4q6q-xv6c/GHSA-93gm-4q6q-xv6c.json b/advisories/unreviewed/2024/04/GHSA-93gm-4q6q-xv6c/GHSA-93gm-4q6q-xv6c.json index b57c401d2b8..22e7e3a98f2 100644 --- a/advisories/unreviewed/2024/04/GHSA-93gm-4q6q-xv6c/GHSA-93gm-4q6q-xv6c.json +++ b/advisories/unreviewed/2024/04/GHSA-93gm-4q6q-xv6c/GHSA-93gm-4q6q-xv6c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-93p2-rq72-j8qp/GHSA-93p2-rq72-j8qp.json b/advisories/unreviewed/2024/04/GHSA-93p2-rq72-j8qp/GHSA-93p2-rq72-j8qp.json index 07e44938572..8bac442e3c3 100644 --- a/advisories/unreviewed/2024/04/GHSA-93p2-rq72-j8qp/GHSA-93p2-rq72-j8qp.json +++ b/advisories/unreviewed/2024/04/GHSA-93p2-rq72-j8qp/GHSA-93p2-rq72-j8qp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-9954-8wq3-xgxf/GHSA-9954-8wq3-xgxf.json b/advisories/unreviewed/2024/04/GHSA-9954-8wq3-xgxf/GHSA-9954-8wq3-xgxf.json index a5b68df01df..c5b10a08348 100644 --- a/advisories/unreviewed/2024/04/GHSA-9954-8wq3-xgxf/GHSA-9954-8wq3-xgxf.json +++ b/advisories/unreviewed/2024/04/GHSA-9954-8wq3-xgxf/GHSA-9954-8wq3-xgxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-9h9f-x9hq-6x6p/GHSA-9h9f-x9hq-6x6p.json b/advisories/unreviewed/2024/04/GHSA-9h9f-x9hq-6x6p/GHSA-9h9f-x9hq-6x6p.json index fbc4de8e871..81700d86450 100644 --- a/advisories/unreviewed/2024/04/GHSA-9h9f-x9hq-6x6p/GHSA-9h9f-x9hq-6x6p.json +++ b/advisories/unreviewed/2024/04/GHSA-9h9f-x9hq-6x6p/GHSA-9h9f-x9hq-6x6p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-9x76-66cx-ppf5/GHSA-9x76-66cx-ppf5.json b/advisories/unreviewed/2024/04/GHSA-9x76-66cx-ppf5/GHSA-9x76-66cx-ppf5.json index e3f3e240542..107f5f8c70b 100644 --- a/advisories/unreviewed/2024/04/GHSA-9x76-66cx-ppf5/GHSA-9x76-66cx-ppf5.json +++ b/advisories/unreviewed/2024/04/GHSA-9x76-66cx-ppf5/GHSA-9x76-66cx-ppf5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-c274-3m34-wwp8/GHSA-c274-3m34-wwp8.json b/advisories/unreviewed/2024/04/GHSA-c274-3m34-wwp8/GHSA-c274-3m34-wwp8.json index 153339e2ef4..4f814342ba3 100644 --- a/advisories/unreviewed/2024/04/GHSA-c274-3m34-wwp8/GHSA-c274-3m34-wwp8.json +++ b/advisories/unreviewed/2024/04/GHSA-c274-3m34-wwp8/GHSA-c274-3m34-wwp8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-c2p9-p97g-7246/GHSA-c2p9-p97g-7246.json b/advisories/unreviewed/2024/04/GHSA-c2p9-p97g-7246/GHSA-c2p9-p97g-7246.json index f6ec3caa7a6..ce0781cd338 100644 --- a/advisories/unreviewed/2024/04/GHSA-c2p9-p97g-7246/GHSA-c2p9-p97g-7246.json +++ b/advisories/unreviewed/2024/04/GHSA-c2p9-p97g-7246/GHSA-c2p9-p97g-7246.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-c5fj-m6rf-9968/GHSA-c5fj-m6rf-9968.json b/advisories/unreviewed/2024/04/GHSA-c5fj-m6rf-9968/GHSA-c5fj-m6rf-9968.json index 9a86a8ada95..9c6cd03ded6 100644 --- a/advisories/unreviewed/2024/04/GHSA-c5fj-m6rf-9968/GHSA-c5fj-m6rf-9968.json +++ b/advisories/unreviewed/2024/04/GHSA-c5fj-m6rf-9968/GHSA-c5fj-m6rf-9968.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-c76r-g8q5-m4cv/GHSA-c76r-g8q5-m4cv.json b/advisories/unreviewed/2024/04/GHSA-c76r-g8q5-m4cv/GHSA-c76r-g8q5-m4cv.json index cb2efb933ad..8b71ddf60e4 100644 --- a/advisories/unreviewed/2024/04/GHSA-c76r-g8q5-m4cv/GHSA-c76r-g8q5-m4cv.json +++ b/advisories/unreviewed/2024/04/GHSA-c76r-g8q5-m4cv/GHSA-c76r-g8q5-m4cv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-cfhh-2gpx-32wx/GHSA-cfhh-2gpx-32wx.json b/advisories/unreviewed/2024/04/GHSA-cfhh-2gpx-32wx/GHSA-cfhh-2gpx-32wx.json index c0706b3a3d3..292e6f4b195 100644 --- a/advisories/unreviewed/2024/04/GHSA-cfhh-2gpx-32wx/GHSA-cfhh-2gpx-32wx.json +++ b/advisories/unreviewed/2024/04/GHSA-cfhh-2gpx-32wx/GHSA-cfhh-2gpx-32wx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-cfrx-fq8m-28pv/GHSA-cfrx-fq8m-28pv.json b/advisories/unreviewed/2024/04/GHSA-cfrx-fq8m-28pv/GHSA-cfrx-fq8m-28pv.json index 9c21b9dbef6..5d8cae9e829 100644 --- a/advisories/unreviewed/2024/04/GHSA-cfrx-fq8m-28pv/GHSA-cfrx-fq8m-28pv.json +++ b/advisories/unreviewed/2024/04/GHSA-cfrx-fq8m-28pv/GHSA-cfrx-fq8m-28pv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-cg4x-ccfp-j6q9/GHSA-cg4x-ccfp-j6q9.json b/advisories/unreviewed/2024/04/GHSA-cg4x-ccfp-j6q9/GHSA-cg4x-ccfp-j6q9.json index 43fcb454a23..317d2d833b5 100644 --- a/advisories/unreviewed/2024/04/GHSA-cg4x-ccfp-j6q9/GHSA-cg4x-ccfp-j6q9.json +++ b/advisories/unreviewed/2024/04/GHSA-cg4x-ccfp-j6q9/GHSA-cg4x-ccfp-j6q9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-cjm7-r96j-5xx3/GHSA-cjm7-r96j-5xx3.json b/advisories/unreviewed/2024/04/GHSA-cjm7-r96j-5xx3/GHSA-cjm7-r96j-5xx3.json index b9e86843e53..cb3a0c36201 100644 --- a/advisories/unreviewed/2024/04/GHSA-cjm7-r96j-5xx3/GHSA-cjm7-r96j-5xx3.json +++ b/advisories/unreviewed/2024/04/GHSA-cjm7-r96j-5xx3/GHSA-cjm7-r96j-5xx3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-cvxw-g73w-j934/GHSA-cvxw-g73w-j934.json b/advisories/unreviewed/2024/04/GHSA-cvxw-g73w-j934/GHSA-cvxw-g73w-j934.json index b1b00e4bd6a..79f5efa1425 100644 --- a/advisories/unreviewed/2024/04/GHSA-cvxw-g73w-j934/GHSA-cvxw-g73w-j934.json +++ b/advisories/unreviewed/2024/04/GHSA-cvxw-g73w-j934/GHSA-cvxw-g73w-j934.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-cw34-gw9h-rxc6/GHSA-cw34-gw9h-rxc6.json b/advisories/unreviewed/2024/04/GHSA-cw34-gw9h-rxc6/GHSA-cw34-gw9h-rxc6.json index afdbb38a3b4..d4bb91a6c14 100644 --- a/advisories/unreviewed/2024/04/GHSA-cw34-gw9h-rxc6/GHSA-cw34-gw9h-rxc6.json +++ b/advisories/unreviewed/2024/04/GHSA-cw34-gw9h-rxc6/GHSA-cw34-gw9h-rxc6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-cw6g-w5px-p549/GHSA-cw6g-w5px-p549.json b/advisories/unreviewed/2024/04/GHSA-cw6g-w5px-p549/GHSA-cw6g-w5px-p549.json index 43732344a31..1ca21f66aae 100644 --- a/advisories/unreviewed/2024/04/GHSA-cw6g-w5px-p549/GHSA-cw6g-w5px-p549.json +++ b/advisories/unreviewed/2024/04/GHSA-cw6g-w5px-p549/GHSA-cw6g-w5px-p549.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-cx5j-3q3c-fg8h/GHSA-cx5j-3q3c-fg8h.json b/advisories/unreviewed/2024/04/GHSA-cx5j-3q3c-fg8h/GHSA-cx5j-3q3c-fg8h.json index aca1ad699eb..86cbaa0b91d 100644 --- a/advisories/unreviewed/2024/04/GHSA-cx5j-3q3c-fg8h/GHSA-cx5j-3q3c-fg8h.json +++ b/advisories/unreviewed/2024/04/GHSA-cx5j-3q3c-fg8h/GHSA-cx5j-3q3c-fg8h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-fqq4-qr43-h5jq/GHSA-fqq4-qr43-h5jq.json b/advisories/unreviewed/2024/04/GHSA-fqq4-qr43-h5jq/GHSA-fqq4-qr43-h5jq.json index 7f426c38a97..5292ee09434 100644 --- a/advisories/unreviewed/2024/04/GHSA-fqq4-qr43-h5jq/GHSA-fqq4-qr43-h5jq.json +++ b/advisories/unreviewed/2024/04/GHSA-fqq4-qr43-h5jq/GHSA-fqq4-qr43-h5jq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-frjv-mxj9-42h2/GHSA-frjv-mxj9-42h2.json b/advisories/unreviewed/2024/04/GHSA-frjv-mxj9-42h2/GHSA-frjv-mxj9-42h2.json index 650e590d054..4b822435a86 100644 --- a/advisories/unreviewed/2024/04/GHSA-frjv-mxj9-42h2/GHSA-frjv-mxj9-42h2.json +++ b/advisories/unreviewed/2024/04/GHSA-frjv-mxj9-42h2/GHSA-frjv-mxj9-42h2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-fxc7-vj9h-93hg/GHSA-fxc7-vj9h-93hg.json b/advisories/unreviewed/2024/04/GHSA-fxc7-vj9h-93hg/GHSA-fxc7-vj9h-93hg.json index af5a001ff61..3c1463e401d 100644 --- a/advisories/unreviewed/2024/04/GHSA-fxc7-vj9h-93hg/GHSA-fxc7-vj9h-93hg.json +++ b/advisories/unreviewed/2024/04/GHSA-fxc7-vj9h-93hg/GHSA-fxc7-vj9h-93hg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-g2vx-prh9-62c4/GHSA-g2vx-prh9-62c4.json b/advisories/unreviewed/2024/04/GHSA-g2vx-prh9-62c4/GHSA-g2vx-prh9-62c4.json index c3b278a53c4..cb141320bad 100644 --- a/advisories/unreviewed/2024/04/GHSA-g2vx-prh9-62c4/GHSA-g2vx-prh9-62c4.json +++ b/advisories/unreviewed/2024/04/GHSA-g2vx-prh9-62c4/GHSA-g2vx-prh9-62c4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-g96r-m5m9-8hqg/GHSA-g96r-m5m9-8hqg.json b/advisories/unreviewed/2024/04/GHSA-g96r-m5m9-8hqg/GHSA-g96r-m5m9-8hqg.json index 4c2cb1ebaac..04afe200861 100644 --- a/advisories/unreviewed/2024/04/GHSA-g96r-m5m9-8hqg/GHSA-g96r-m5m9-8hqg.json +++ b/advisories/unreviewed/2024/04/GHSA-g96r-m5m9-8hqg/GHSA-g96r-m5m9-8hqg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-gcc4-7369-8cwv/GHSA-gcc4-7369-8cwv.json b/advisories/unreviewed/2024/04/GHSA-gcc4-7369-8cwv/GHSA-gcc4-7369-8cwv.json index 0c2d5766f28..30e71967cda 100644 --- a/advisories/unreviewed/2024/04/GHSA-gcc4-7369-8cwv/GHSA-gcc4-7369-8cwv.json +++ b/advisories/unreviewed/2024/04/GHSA-gcc4-7369-8cwv/GHSA-gcc4-7369-8cwv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-ghhm-r8cf-62x2/GHSA-ghhm-r8cf-62x2.json b/advisories/unreviewed/2024/04/GHSA-ghhm-r8cf-62x2/GHSA-ghhm-r8cf-62x2.json index b5750d67d87..be1237ac42a 100644 --- a/advisories/unreviewed/2024/04/GHSA-ghhm-r8cf-62x2/GHSA-ghhm-r8cf-62x2.json +++ b/advisories/unreviewed/2024/04/GHSA-ghhm-r8cf-62x2/GHSA-ghhm-r8cf-62x2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-gjhv-xhv4-pm88/GHSA-gjhv-xhv4-pm88.json b/advisories/unreviewed/2024/04/GHSA-gjhv-xhv4-pm88/GHSA-gjhv-xhv4-pm88.json index 4679be4ef60..83e1958c8e4 100644 --- a/advisories/unreviewed/2024/04/GHSA-gjhv-xhv4-pm88/GHSA-gjhv-xhv4-pm88.json +++ b/advisories/unreviewed/2024/04/GHSA-gjhv-xhv4-pm88/GHSA-gjhv-xhv4-pm88.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-gpww-pph3-m8m9/GHSA-gpww-pph3-m8m9.json b/advisories/unreviewed/2024/04/GHSA-gpww-pph3-m8m9/GHSA-gpww-pph3-m8m9.json index b388b6bb25e..88fcff0fe8c 100644 --- a/advisories/unreviewed/2024/04/GHSA-gpww-pph3-m8m9/GHSA-gpww-pph3-m8m9.json +++ b/advisories/unreviewed/2024/04/GHSA-gpww-pph3-m8m9/GHSA-gpww-pph3-m8m9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-gr3f-xv9f-q294/GHSA-gr3f-xv9f-q294.json b/advisories/unreviewed/2024/04/GHSA-gr3f-xv9f-q294/GHSA-gr3f-xv9f-q294.json index 8392fd39ebe..e62f308704d 100644 --- a/advisories/unreviewed/2024/04/GHSA-gr3f-xv9f-q294/GHSA-gr3f-xv9f-q294.json +++ b/advisories/unreviewed/2024/04/GHSA-gr3f-xv9f-q294/GHSA-gr3f-xv9f-q294.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-h3v7-q8j4-9rw9/GHSA-h3v7-q8j4-9rw9.json b/advisories/unreviewed/2024/04/GHSA-h3v7-q8j4-9rw9/GHSA-h3v7-q8j4-9rw9.json index 28a6e8f7f2b..2c22ed6d7d7 100644 --- a/advisories/unreviewed/2024/04/GHSA-h3v7-q8j4-9rw9/GHSA-h3v7-q8j4-9rw9.json +++ b/advisories/unreviewed/2024/04/GHSA-h3v7-q8j4-9rw9/GHSA-h3v7-q8j4-9rw9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-h66x-39x2-5rv8/GHSA-h66x-39x2-5rv8.json b/advisories/unreviewed/2024/04/GHSA-h66x-39x2-5rv8/GHSA-h66x-39x2-5rv8.json index dafdfc1d97e..821779fc931 100644 --- a/advisories/unreviewed/2024/04/GHSA-h66x-39x2-5rv8/GHSA-h66x-39x2-5rv8.json +++ b/advisories/unreviewed/2024/04/GHSA-h66x-39x2-5rv8/GHSA-h66x-39x2-5rv8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-h72f-rgrp-ff8g/GHSA-h72f-rgrp-ff8g.json b/advisories/unreviewed/2024/04/GHSA-h72f-rgrp-ff8g/GHSA-h72f-rgrp-ff8g.json index dd5f3443e36..7b6c5261a48 100644 --- a/advisories/unreviewed/2024/04/GHSA-h72f-rgrp-ff8g/GHSA-h72f-rgrp-ff8g.json +++ b/advisories/unreviewed/2024/04/GHSA-h72f-rgrp-ff8g/GHSA-h72f-rgrp-ff8g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hm5j-36v4-g9h6/GHSA-hm5j-36v4-g9h6.json b/advisories/unreviewed/2024/04/GHSA-hm5j-36v4-g9h6/GHSA-hm5j-36v4-g9h6.json index 0dd47476e1f..e7c4a832dad 100644 --- a/advisories/unreviewed/2024/04/GHSA-hm5j-36v4-g9h6/GHSA-hm5j-36v4-g9h6.json +++ b/advisories/unreviewed/2024/04/GHSA-hm5j-36v4-g9h6/GHSA-hm5j-36v4-g9h6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hp4q-94j3-v97q/GHSA-hp4q-94j3-v97q.json b/advisories/unreviewed/2024/04/GHSA-hp4q-94j3-v97q/GHSA-hp4q-94j3-v97q.json index 7ddef5288ea..cabd60fc32f 100644 --- a/advisories/unreviewed/2024/04/GHSA-hp4q-94j3-v97q/GHSA-hp4q-94j3-v97q.json +++ b/advisories/unreviewed/2024/04/GHSA-hp4q-94j3-v97q/GHSA-hp4q-94j3-v97q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hq3q-jwq2-6p5h/GHSA-hq3q-jwq2-6p5h.json b/advisories/unreviewed/2024/04/GHSA-hq3q-jwq2-6p5h/GHSA-hq3q-jwq2-6p5h.json index 63525020b32..c3455765ab4 100644 --- a/advisories/unreviewed/2024/04/GHSA-hq3q-jwq2-6p5h/GHSA-hq3q-jwq2-6p5h.json +++ b/advisories/unreviewed/2024/04/GHSA-hq3q-jwq2-6p5h/GHSA-hq3q-jwq2-6p5h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hqgx-pm48-7q37/GHSA-hqgx-pm48-7q37.json b/advisories/unreviewed/2024/04/GHSA-hqgx-pm48-7q37/GHSA-hqgx-pm48-7q37.json index 8b9c770310b..23f1d9ad498 100644 --- a/advisories/unreviewed/2024/04/GHSA-hqgx-pm48-7q37/GHSA-hqgx-pm48-7q37.json +++ b/advisories/unreviewed/2024/04/GHSA-hqgx-pm48-7q37/GHSA-hqgx-pm48-7q37.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hrxg-27x5-39h2/GHSA-hrxg-27x5-39h2.json b/advisories/unreviewed/2024/04/GHSA-hrxg-27x5-39h2/GHSA-hrxg-27x5-39h2.json index 769ea7acdc4..a7a2c20bc14 100644 --- a/advisories/unreviewed/2024/04/GHSA-hrxg-27x5-39h2/GHSA-hrxg-27x5-39h2.json +++ b/advisories/unreviewed/2024/04/GHSA-hrxg-27x5-39h2/GHSA-hrxg-27x5-39h2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hw4f-q5qf-mr8m/GHSA-hw4f-q5qf-mr8m.json b/advisories/unreviewed/2024/04/GHSA-hw4f-q5qf-mr8m/GHSA-hw4f-q5qf-mr8m.json index 4d5205bc401..e1ba18b06fc 100644 --- a/advisories/unreviewed/2024/04/GHSA-hw4f-q5qf-mr8m/GHSA-hw4f-q5qf-mr8m.json +++ b/advisories/unreviewed/2024/04/GHSA-hw4f-q5qf-mr8m/GHSA-hw4f-q5qf-mr8m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-j6hp-5gxf-7pf4/GHSA-j6hp-5gxf-7pf4.json b/advisories/unreviewed/2024/04/GHSA-j6hp-5gxf-7pf4/GHSA-j6hp-5gxf-7pf4.json index 2632e56d978..d6ab2ed5d23 100644 --- a/advisories/unreviewed/2024/04/GHSA-j6hp-5gxf-7pf4/GHSA-j6hp-5gxf-7pf4.json +++ b/advisories/unreviewed/2024/04/GHSA-j6hp-5gxf-7pf4/GHSA-j6hp-5gxf-7pf4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-jjch-qg3j-855w/GHSA-jjch-qg3j-855w.json b/advisories/unreviewed/2024/04/GHSA-jjch-qg3j-855w/GHSA-jjch-qg3j-855w.json index f645672e5b3..9ed67280b9a 100644 --- a/advisories/unreviewed/2024/04/GHSA-jjch-qg3j-855w/GHSA-jjch-qg3j-855w.json +++ b/advisories/unreviewed/2024/04/GHSA-jjch-qg3j-855w/GHSA-jjch-qg3j-855w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-jpmf-chch-c98m/GHSA-jpmf-chch-c98m.json b/advisories/unreviewed/2024/04/GHSA-jpmf-chch-c98m/GHSA-jpmf-chch-c98m.json index d9aae9609ef..66fd880b7d2 100644 --- a/advisories/unreviewed/2024/04/GHSA-jpmf-chch-c98m/GHSA-jpmf-chch-c98m.json +++ b/advisories/unreviewed/2024/04/GHSA-jpmf-chch-c98m/GHSA-jpmf-chch-c98m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-jrf6-frj2-w4m8/GHSA-jrf6-frj2-w4m8.json b/advisories/unreviewed/2024/04/GHSA-jrf6-frj2-w4m8/GHSA-jrf6-frj2-w4m8.json index 01e3f863b53..3db988d0856 100644 --- a/advisories/unreviewed/2024/04/GHSA-jrf6-frj2-w4m8/GHSA-jrf6-frj2-w4m8.json +++ b/advisories/unreviewed/2024/04/GHSA-jrf6-frj2-w4m8/GHSA-jrf6-frj2-w4m8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-jrgr-wxrg-4cj3/GHSA-jrgr-wxrg-4cj3.json b/advisories/unreviewed/2024/04/GHSA-jrgr-wxrg-4cj3/GHSA-jrgr-wxrg-4cj3.json index c213ff62308..6a28772bc92 100644 --- a/advisories/unreviewed/2024/04/GHSA-jrgr-wxrg-4cj3/GHSA-jrgr-wxrg-4cj3.json +++ b/advisories/unreviewed/2024/04/GHSA-jrgr-wxrg-4cj3/GHSA-jrgr-wxrg-4cj3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-m3pg-c9mv-657r/GHSA-m3pg-c9mv-657r.json b/advisories/unreviewed/2024/04/GHSA-m3pg-c9mv-657r/GHSA-m3pg-c9mv-657r.json index aca9de75e0b..cb30b29c076 100644 --- a/advisories/unreviewed/2024/04/GHSA-m3pg-c9mv-657r/GHSA-m3pg-c9mv-657r.json +++ b/advisories/unreviewed/2024/04/GHSA-m3pg-c9mv-657r/GHSA-m3pg-c9mv-657r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-m52g-q6h9-ggm5/GHSA-m52g-q6h9-ggm5.json b/advisories/unreviewed/2024/04/GHSA-m52g-q6h9-ggm5/GHSA-m52g-q6h9-ggm5.json index 6a5250aa0b4..45122aaf4f6 100644 --- a/advisories/unreviewed/2024/04/GHSA-m52g-q6h9-ggm5/GHSA-m52g-q6h9-ggm5.json +++ b/advisories/unreviewed/2024/04/GHSA-m52g-q6h9-ggm5/GHSA-m52g-q6h9-ggm5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-mcv4-77gg-xfvp/GHSA-mcv4-77gg-xfvp.json b/advisories/unreviewed/2024/04/GHSA-mcv4-77gg-xfvp/GHSA-mcv4-77gg-xfvp.json index de2bcc079a3..ab2667f4630 100644 --- a/advisories/unreviewed/2024/04/GHSA-mcv4-77gg-xfvp/GHSA-mcv4-77gg-xfvp.json +++ b/advisories/unreviewed/2024/04/GHSA-mcv4-77gg-xfvp/GHSA-mcv4-77gg-xfvp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-mj6g-39xm-96q9/GHSA-mj6g-39xm-96q9.json b/advisories/unreviewed/2024/04/GHSA-mj6g-39xm-96q9/GHSA-mj6g-39xm-96q9.json index 4dfa3cd69c1..a617f9062a1 100644 --- a/advisories/unreviewed/2024/04/GHSA-mj6g-39xm-96q9/GHSA-mj6g-39xm-96q9.json +++ b/advisories/unreviewed/2024/04/GHSA-mj6g-39xm-96q9/GHSA-mj6g-39xm-96q9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-mpmm-hvxp-c3m8/GHSA-mpmm-hvxp-c3m8.json b/advisories/unreviewed/2024/04/GHSA-mpmm-hvxp-c3m8/GHSA-mpmm-hvxp-c3m8.json index 8a43b76d3b0..354c115c787 100644 --- a/advisories/unreviewed/2024/04/GHSA-mpmm-hvxp-c3m8/GHSA-mpmm-hvxp-c3m8.json +++ b/advisories/unreviewed/2024/04/GHSA-mpmm-hvxp-c3m8/GHSA-mpmm-hvxp-c3m8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-mw2h-9mqr-794q/GHSA-mw2h-9mqr-794q.json b/advisories/unreviewed/2024/04/GHSA-mw2h-9mqr-794q/GHSA-mw2h-9mqr-794q.json index df551c0514b..2c2c7529d19 100644 --- a/advisories/unreviewed/2024/04/GHSA-mw2h-9mqr-794q/GHSA-mw2h-9mqr-794q.json +++ b/advisories/unreviewed/2024/04/GHSA-mw2h-9mqr-794q/GHSA-mw2h-9mqr-794q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-mwxw-jp9c-r89r/GHSA-mwxw-jp9c-r89r.json b/advisories/unreviewed/2024/04/GHSA-mwxw-jp9c-r89r/GHSA-mwxw-jp9c-r89r.json index 713768929ec..635c451a274 100644 --- a/advisories/unreviewed/2024/04/GHSA-mwxw-jp9c-r89r/GHSA-mwxw-jp9c-r89r.json +++ b/advisories/unreviewed/2024/04/GHSA-mwxw-jp9c-r89r/GHSA-mwxw-jp9c-r89r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-mxpv-g3w9-rggw/GHSA-mxpv-g3w9-rggw.json b/advisories/unreviewed/2024/04/GHSA-mxpv-g3w9-rggw/GHSA-mxpv-g3w9-rggw.json index d68d2800940..066c8e172fc 100644 --- a/advisories/unreviewed/2024/04/GHSA-mxpv-g3w9-rggw/GHSA-mxpv-g3w9-rggw.json +++ b/advisories/unreviewed/2024/04/GHSA-mxpv-g3w9-rggw/GHSA-mxpv-g3w9-rggw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-p5vg-cxw5-p93v/GHSA-p5vg-cxw5-p93v.json b/advisories/unreviewed/2024/04/GHSA-p5vg-cxw5-p93v/GHSA-p5vg-cxw5-p93v.json index 379deb84cf9..1a9e8612640 100644 --- a/advisories/unreviewed/2024/04/GHSA-p5vg-cxw5-p93v/GHSA-p5vg-cxw5-p93v.json +++ b/advisories/unreviewed/2024/04/GHSA-p5vg-cxw5-p93v/GHSA-p5vg-cxw5-p93v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-p6rw-7v7m-xm65/GHSA-p6rw-7v7m-xm65.json b/advisories/unreviewed/2024/04/GHSA-p6rw-7v7m-xm65/GHSA-p6rw-7v7m-xm65.json index 265012cf974..5d3955045e8 100644 --- a/advisories/unreviewed/2024/04/GHSA-p6rw-7v7m-xm65/GHSA-p6rw-7v7m-xm65.json +++ b/advisories/unreviewed/2024/04/GHSA-p6rw-7v7m-xm65/GHSA-p6rw-7v7m-xm65.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-p854-chwv-28c2/GHSA-p854-chwv-28c2.json b/advisories/unreviewed/2024/04/GHSA-p854-chwv-28c2/GHSA-p854-chwv-28c2.json index 4b262689570..e70df867e3d 100644 --- a/advisories/unreviewed/2024/04/GHSA-p854-chwv-28c2/GHSA-p854-chwv-28c2.json +++ b/advisories/unreviewed/2024/04/GHSA-p854-chwv-28c2/GHSA-p854-chwv-28c2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-p8w6-cvmc-rg5g/GHSA-p8w6-cvmc-rg5g.json b/advisories/unreviewed/2024/04/GHSA-p8w6-cvmc-rg5g/GHSA-p8w6-cvmc-rg5g.json index 863b3afe542..35fe16f9d68 100644 --- a/advisories/unreviewed/2024/04/GHSA-p8w6-cvmc-rg5g/GHSA-p8w6-cvmc-rg5g.json +++ b/advisories/unreviewed/2024/04/GHSA-p8w6-cvmc-rg5g/GHSA-p8w6-cvmc-rg5g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-p9h2-24g6-pg7j/GHSA-p9h2-24g6-pg7j.json b/advisories/unreviewed/2024/04/GHSA-p9h2-24g6-pg7j/GHSA-p9h2-24g6-pg7j.json index 630b1312f78..a86e1e1a652 100644 --- a/advisories/unreviewed/2024/04/GHSA-p9h2-24g6-pg7j/GHSA-p9h2-24g6-pg7j.json +++ b/advisories/unreviewed/2024/04/GHSA-p9h2-24g6-pg7j/GHSA-p9h2-24g6-pg7j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-ph38-v5mc-q38p/GHSA-ph38-v5mc-q38p.json b/advisories/unreviewed/2024/04/GHSA-ph38-v5mc-q38p/GHSA-ph38-v5mc-q38p.json index ac3b17e3e8c..602a2c83760 100644 --- a/advisories/unreviewed/2024/04/GHSA-ph38-v5mc-q38p/GHSA-ph38-v5mc-q38p.json +++ b/advisories/unreviewed/2024/04/GHSA-ph38-v5mc-q38p/GHSA-ph38-v5mc-q38p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-phmv-qjxc-9jxj/GHSA-phmv-qjxc-9jxj.json b/advisories/unreviewed/2024/04/GHSA-phmv-qjxc-9jxj/GHSA-phmv-qjxc-9jxj.json index 4d46b841289..01ab6007a00 100644 --- a/advisories/unreviewed/2024/04/GHSA-phmv-qjxc-9jxj/GHSA-phmv-qjxc-9jxj.json +++ b/advisories/unreviewed/2024/04/GHSA-phmv-qjxc-9jxj/GHSA-phmv-qjxc-9jxj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-prqm-j32h-gr46/GHSA-prqm-j32h-gr46.json b/advisories/unreviewed/2024/04/GHSA-prqm-j32h-gr46/GHSA-prqm-j32h-gr46.json index e4b5ed8d08f..29ae0ec644b 100644 --- a/advisories/unreviewed/2024/04/GHSA-prqm-j32h-gr46/GHSA-prqm-j32h-gr46.json +++ b/advisories/unreviewed/2024/04/GHSA-prqm-j32h-gr46/GHSA-prqm-j32h-gr46.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-pv4q-pg8h-7p42/GHSA-pv4q-pg8h-7p42.json b/advisories/unreviewed/2024/04/GHSA-pv4q-pg8h-7p42/GHSA-pv4q-pg8h-7p42.json index 41161b13f4d..933365a947f 100644 --- a/advisories/unreviewed/2024/04/GHSA-pv4q-pg8h-7p42/GHSA-pv4q-pg8h-7p42.json +++ b/advisories/unreviewed/2024/04/GHSA-pv4q-pg8h-7p42/GHSA-pv4q-pg8h-7p42.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-pwvw-3h9f-9875/GHSA-pwvw-3h9f-9875.json b/advisories/unreviewed/2024/04/GHSA-pwvw-3h9f-9875/GHSA-pwvw-3h9f-9875.json index f71b3a4e443..1a7573410b1 100644 --- a/advisories/unreviewed/2024/04/GHSA-pwvw-3h9f-9875/GHSA-pwvw-3h9f-9875.json +++ b/advisories/unreviewed/2024/04/GHSA-pwvw-3h9f-9875/GHSA-pwvw-3h9f-9875.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-pwwp-53vp-7mv3/GHSA-pwwp-53vp-7mv3.json b/advisories/unreviewed/2024/04/GHSA-pwwp-53vp-7mv3/GHSA-pwwp-53vp-7mv3.json index 2da14855a81..606e7b2d014 100644 --- a/advisories/unreviewed/2024/04/GHSA-pwwp-53vp-7mv3/GHSA-pwwp-53vp-7mv3.json +++ b/advisories/unreviewed/2024/04/GHSA-pwwp-53vp-7mv3/GHSA-pwwp-53vp-7mv3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-pxr3-23fx-4vxx/GHSA-pxr3-23fx-4vxx.json b/advisories/unreviewed/2024/04/GHSA-pxr3-23fx-4vxx/GHSA-pxr3-23fx-4vxx.json index 6cabd92ae30..88c2a284753 100644 --- a/advisories/unreviewed/2024/04/GHSA-pxr3-23fx-4vxx/GHSA-pxr3-23fx-4vxx.json +++ b/advisories/unreviewed/2024/04/GHSA-pxr3-23fx-4vxx/GHSA-pxr3-23fx-4vxx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-q6v4-gg2w-f97v/GHSA-q6v4-gg2w-f97v.json b/advisories/unreviewed/2024/04/GHSA-q6v4-gg2w-f97v/GHSA-q6v4-gg2w-f97v.json index b60dc2eb61b..1cc69aedb27 100644 --- a/advisories/unreviewed/2024/04/GHSA-q6v4-gg2w-f97v/GHSA-q6v4-gg2w-f97v.json +++ b/advisories/unreviewed/2024/04/GHSA-q6v4-gg2w-f97v/GHSA-q6v4-gg2w-f97v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-q8c2-3rhw-wc9h/GHSA-q8c2-3rhw-wc9h.json b/advisories/unreviewed/2024/04/GHSA-q8c2-3rhw-wc9h/GHSA-q8c2-3rhw-wc9h.json index 1c79de51465..f8ede40915d 100644 --- a/advisories/unreviewed/2024/04/GHSA-q8c2-3rhw-wc9h/GHSA-q8c2-3rhw-wc9h.json +++ b/advisories/unreviewed/2024/04/GHSA-q8c2-3rhw-wc9h/GHSA-q8c2-3rhw-wc9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-q9gh-68qf-6p2r/GHSA-q9gh-68qf-6p2r.json b/advisories/unreviewed/2024/04/GHSA-q9gh-68qf-6p2r/GHSA-q9gh-68qf-6p2r.json index 7d48d32ff42..69c80ccb0a2 100644 --- a/advisories/unreviewed/2024/04/GHSA-q9gh-68qf-6p2r/GHSA-q9gh-68qf-6p2r.json +++ b/advisories/unreviewed/2024/04/GHSA-q9gh-68qf-6p2r/GHSA-q9gh-68qf-6p2r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-qc8v-ph93-7gqw/GHSA-qc8v-ph93-7gqw.json b/advisories/unreviewed/2024/04/GHSA-qc8v-ph93-7gqw/GHSA-qc8v-ph93-7gqw.json index 0bdb0e45b8e..d8f646f01d3 100644 --- a/advisories/unreviewed/2024/04/GHSA-qc8v-ph93-7gqw/GHSA-qc8v-ph93-7gqw.json +++ b/advisories/unreviewed/2024/04/GHSA-qc8v-ph93-7gqw/GHSA-qc8v-ph93-7gqw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-qqv3-2v93-cwjw/GHSA-qqv3-2v93-cwjw.json b/advisories/unreviewed/2024/04/GHSA-qqv3-2v93-cwjw/GHSA-qqv3-2v93-cwjw.json index 726a1e5531a..5b7447cf3df 100644 --- a/advisories/unreviewed/2024/04/GHSA-qqv3-2v93-cwjw/GHSA-qqv3-2v93-cwjw.json +++ b/advisories/unreviewed/2024/04/GHSA-qqv3-2v93-cwjw/GHSA-qqv3-2v93-cwjw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-qvqf-5w2r-xjgr/GHSA-qvqf-5w2r-xjgr.json b/advisories/unreviewed/2024/04/GHSA-qvqf-5w2r-xjgr/GHSA-qvqf-5w2r-xjgr.json index d38f17768fa..fbb57487369 100644 --- a/advisories/unreviewed/2024/04/GHSA-qvqf-5w2r-xjgr/GHSA-qvqf-5w2r-xjgr.json +++ b/advisories/unreviewed/2024/04/GHSA-qvqf-5w2r-xjgr/GHSA-qvqf-5w2r-xjgr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-r4cp-3jcm-fv88/GHSA-r4cp-3jcm-fv88.json b/advisories/unreviewed/2024/04/GHSA-r4cp-3jcm-fv88/GHSA-r4cp-3jcm-fv88.json index 767255996e1..6a7e4a1ccdc 100644 --- a/advisories/unreviewed/2024/04/GHSA-r4cp-3jcm-fv88/GHSA-r4cp-3jcm-fv88.json +++ b/advisories/unreviewed/2024/04/GHSA-r4cp-3jcm-fv88/GHSA-r4cp-3jcm-fv88.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-r68q-m8c2-v4c3/GHSA-r68q-m8c2-v4c3.json b/advisories/unreviewed/2024/04/GHSA-r68q-m8c2-v4c3/GHSA-r68q-m8c2-v4c3.json index b4178e9571d..7aad04a0172 100644 --- a/advisories/unreviewed/2024/04/GHSA-r68q-m8c2-v4c3/GHSA-r68q-m8c2-v4c3.json +++ b/advisories/unreviewed/2024/04/GHSA-r68q-m8c2-v4c3/GHSA-r68q-m8c2-v4c3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rfj2-jrc4-h4mr/GHSA-rfj2-jrc4-h4mr.json b/advisories/unreviewed/2024/04/GHSA-rfj2-jrc4-h4mr/GHSA-rfj2-jrc4-h4mr.json index 0d26de7d8a4..284f71bbea2 100644 --- a/advisories/unreviewed/2024/04/GHSA-rfj2-jrc4-h4mr/GHSA-rfj2-jrc4-h4mr.json +++ b/advisories/unreviewed/2024/04/GHSA-rfj2-jrc4-h4mr/GHSA-rfj2-jrc4-h4mr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rgmx-cc87-595r/GHSA-rgmx-cc87-595r.json b/advisories/unreviewed/2024/04/GHSA-rgmx-cc87-595r/GHSA-rgmx-cc87-595r.json index 64d590b9ebd..44bc6af6119 100644 --- a/advisories/unreviewed/2024/04/GHSA-rgmx-cc87-595r/GHSA-rgmx-cc87-595r.json +++ b/advisories/unreviewed/2024/04/GHSA-rgmx-cc87-595r/GHSA-rgmx-cc87-595r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rh4m-vg7c-86x5/GHSA-rh4m-vg7c-86x5.json b/advisories/unreviewed/2024/04/GHSA-rh4m-vg7c-86x5/GHSA-rh4m-vg7c-86x5.json index 43344cfbe9c..7b23c44f36c 100644 --- a/advisories/unreviewed/2024/04/GHSA-rh4m-vg7c-86x5/GHSA-rh4m-vg7c-86x5.json +++ b/advisories/unreviewed/2024/04/GHSA-rh4m-vg7c-86x5/GHSA-rh4m-vg7c-86x5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rhxw-9g9h-jr2x/GHSA-rhxw-9g9h-jr2x.json b/advisories/unreviewed/2024/04/GHSA-rhxw-9g9h-jr2x/GHSA-rhxw-9g9h-jr2x.json index 136a5ca4254..527d66ac407 100644 --- a/advisories/unreviewed/2024/04/GHSA-rhxw-9g9h-jr2x/GHSA-rhxw-9g9h-jr2x.json +++ b/advisories/unreviewed/2024/04/GHSA-rhxw-9g9h-jr2x/GHSA-rhxw-9g9h-jr2x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rjmx-4pf7-6fpx/GHSA-rjmx-4pf7-6fpx.json b/advisories/unreviewed/2024/04/GHSA-rjmx-4pf7-6fpx/GHSA-rjmx-4pf7-6fpx.json index eb6c77cab1b..27e643eb54e 100644 --- a/advisories/unreviewed/2024/04/GHSA-rjmx-4pf7-6fpx/GHSA-rjmx-4pf7-6fpx.json +++ b/advisories/unreviewed/2024/04/GHSA-rjmx-4pf7-6fpx/GHSA-rjmx-4pf7-6fpx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rpxx-wr6g-h998/GHSA-rpxx-wr6g-h998.json b/advisories/unreviewed/2024/04/GHSA-rpxx-wr6g-h998/GHSA-rpxx-wr6g-h998.json index 98144e42b9e..490fe0d815e 100644 --- a/advisories/unreviewed/2024/04/GHSA-rpxx-wr6g-h998/GHSA-rpxx-wr6g-h998.json +++ b/advisories/unreviewed/2024/04/GHSA-rpxx-wr6g-h998/GHSA-rpxx-wr6g-h998.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rvh5-mpf7-h5hf/GHSA-rvh5-mpf7-h5hf.json b/advisories/unreviewed/2024/04/GHSA-rvh5-mpf7-h5hf/GHSA-rvh5-mpf7-h5hf.json index e57425e4d2c..c00fbf9ee95 100644 --- a/advisories/unreviewed/2024/04/GHSA-rvh5-mpf7-h5hf/GHSA-rvh5-mpf7-h5hf.json +++ b/advisories/unreviewed/2024/04/GHSA-rvh5-mpf7-h5hf/GHSA-rvh5-mpf7-h5hf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rwg6-5v43-7mq2/GHSA-rwg6-5v43-7mq2.json b/advisories/unreviewed/2024/04/GHSA-rwg6-5v43-7mq2/GHSA-rwg6-5v43-7mq2.json index 75c5aace3ab..4e55c46056b 100644 --- a/advisories/unreviewed/2024/04/GHSA-rwg6-5v43-7mq2/GHSA-rwg6-5v43-7mq2.json +++ b/advisories/unreviewed/2024/04/GHSA-rwg6-5v43-7mq2/GHSA-rwg6-5v43-7mq2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-v4p3-mv8c-jvgx/GHSA-v4p3-mv8c-jvgx.json b/advisories/unreviewed/2024/04/GHSA-v4p3-mv8c-jvgx/GHSA-v4p3-mv8c-jvgx.json index 7d0f7acd32f..739df6c56cb 100644 --- a/advisories/unreviewed/2024/04/GHSA-v4p3-mv8c-jvgx/GHSA-v4p3-mv8c-jvgx.json +++ b/advisories/unreviewed/2024/04/GHSA-v4p3-mv8c-jvgx/GHSA-v4p3-mv8c-jvgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-v832-7hv6-458x/GHSA-v832-7hv6-458x.json b/advisories/unreviewed/2024/04/GHSA-v832-7hv6-458x/GHSA-v832-7hv6-458x.json index 1f37c9d8480..4dc5edd65f6 100644 --- a/advisories/unreviewed/2024/04/GHSA-v832-7hv6-458x/GHSA-v832-7hv6-458x.json +++ b/advisories/unreviewed/2024/04/GHSA-v832-7hv6-458x/GHSA-v832-7hv6-458x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-vf3j-xp87-c8f3/GHSA-vf3j-xp87-c8f3.json b/advisories/unreviewed/2024/04/GHSA-vf3j-xp87-c8f3/GHSA-vf3j-xp87-c8f3.json index 39b8303a2f8..06ad65d0d44 100644 --- a/advisories/unreviewed/2024/04/GHSA-vf3j-xp87-c8f3/GHSA-vf3j-xp87-c8f3.json +++ b/advisories/unreviewed/2024/04/GHSA-vf3j-xp87-c8f3/GHSA-vf3j-xp87-c8f3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-vjh4-v73g-fc8r/GHSA-vjh4-v73g-fc8r.json b/advisories/unreviewed/2024/04/GHSA-vjh4-v73g-fc8r/GHSA-vjh4-v73g-fc8r.json index fec773888ed..142bfd7468a 100644 --- a/advisories/unreviewed/2024/04/GHSA-vjh4-v73g-fc8r/GHSA-vjh4-v73g-fc8r.json +++ b/advisories/unreviewed/2024/04/GHSA-vjh4-v73g-fc8r/GHSA-vjh4-v73g-fc8r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-w27w-5f55-hf65/GHSA-w27w-5f55-hf65.json b/advisories/unreviewed/2024/04/GHSA-w27w-5f55-hf65/GHSA-w27w-5f55-hf65.json index 3dd9d65e199..1939de450bd 100644 --- a/advisories/unreviewed/2024/04/GHSA-w27w-5f55-hf65/GHSA-w27w-5f55-hf65.json +++ b/advisories/unreviewed/2024/04/GHSA-w27w-5f55-hf65/GHSA-w27w-5f55-hf65.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-w4pg-xm2c-w4wj/GHSA-w4pg-xm2c-w4wj.json b/advisories/unreviewed/2024/04/GHSA-w4pg-xm2c-w4wj/GHSA-w4pg-xm2c-w4wj.json index 1a08cb54de4..ed5d568c313 100644 --- a/advisories/unreviewed/2024/04/GHSA-w4pg-xm2c-w4wj/GHSA-w4pg-xm2c-w4wj.json +++ b/advisories/unreviewed/2024/04/GHSA-w4pg-xm2c-w4wj/GHSA-w4pg-xm2c-w4wj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-wmx4-3g32-fg7m/GHSA-wmx4-3g32-fg7m.json b/advisories/unreviewed/2024/04/GHSA-wmx4-3g32-fg7m/GHSA-wmx4-3g32-fg7m.json index e483fcfa32e..b2ef62f1834 100644 --- a/advisories/unreviewed/2024/04/GHSA-wmx4-3g32-fg7m/GHSA-wmx4-3g32-fg7m.json +++ b/advisories/unreviewed/2024/04/GHSA-wmx4-3g32-fg7m/GHSA-wmx4-3g32-fg7m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-wprh-m7mq-qhfq/GHSA-wprh-m7mq-qhfq.json b/advisories/unreviewed/2024/04/GHSA-wprh-m7mq-qhfq/GHSA-wprh-m7mq-qhfq.json index d25afb2f839..7375dfc5662 100644 --- a/advisories/unreviewed/2024/04/GHSA-wprh-m7mq-qhfq/GHSA-wprh-m7mq-qhfq.json +++ b/advisories/unreviewed/2024/04/GHSA-wprh-m7mq-qhfq/GHSA-wprh-m7mq-qhfq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-wq6m-mcm5-qhcj/GHSA-wq6m-mcm5-qhcj.json b/advisories/unreviewed/2024/04/GHSA-wq6m-mcm5-qhcj/GHSA-wq6m-mcm5-qhcj.json index 96fc709b40b..0fe835ff2aa 100644 --- a/advisories/unreviewed/2024/04/GHSA-wq6m-mcm5-qhcj/GHSA-wq6m-mcm5-qhcj.json +++ b/advisories/unreviewed/2024/04/GHSA-wq6m-mcm5-qhcj/GHSA-wq6m-mcm5-qhcj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-wvjq-4p9q-4q7p/GHSA-wvjq-4p9q-4q7p.json b/advisories/unreviewed/2024/04/GHSA-wvjq-4p9q-4q7p/GHSA-wvjq-4p9q-4q7p.json index ce55dcf0667..2b06590fd10 100644 --- a/advisories/unreviewed/2024/04/GHSA-wvjq-4p9q-4q7p/GHSA-wvjq-4p9q-4q7p.json +++ b/advisories/unreviewed/2024/04/GHSA-wvjq-4p9q-4q7p/GHSA-wvjq-4p9q-4q7p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-ww88-jw5q-2479/GHSA-ww88-jw5q-2479.json b/advisories/unreviewed/2024/04/GHSA-ww88-jw5q-2479/GHSA-ww88-jw5q-2479.json index 70d89ba87bf..a47125d7818 100644 --- a/advisories/unreviewed/2024/04/GHSA-ww88-jw5q-2479/GHSA-ww88-jw5q-2479.json +++ b/advisories/unreviewed/2024/04/GHSA-ww88-jw5q-2479/GHSA-ww88-jw5q-2479.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-wx98-g485-pgfr/GHSA-wx98-g485-pgfr.json b/advisories/unreviewed/2024/04/GHSA-wx98-g485-pgfr/GHSA-wx98-g485-pgfr.json index c685ad6a9f1..dbdf7fa6aff 100644 --- a/advisories/unreviewed/2024/04/GHSA-wx98-g485-pgfr/GHSA-wx98-g485-pgfr.json +++ b/advisories/unreviewed/2024/04/GHSA-wx98-g485-pgfr/GHSA-wx98-g485-pgfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-x767-6775-vv77/GHSA-x767-6775-vv77.json b/advisories/unreviewed/2024/04/GHSA-x767-6775-vv77/GHSA-x767-6775-vv77.json index 1234817a009..816ed8c2063 100644 --- a/advisories/unreviewed/2024/04/GHSA-x767-6775-vv77/GHSA-x767-6775-vv77.json +++ b/advisories/unreviewed/2024/04/GHSA-x767-6775-vv77/GHSA-x767-6775-vv77.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-x866-v2pc-mx93/GHSA-x866-v2pc-mx93.json b/advisories/unreviewed/2024/04/GHSA-x866-v2pc-mx93/GHSA-x866-v2pc-mx93.json index 0586051aaf4..b5eb8f76150 100644 --- a/advisories/unreviewed/2024/04/GHSA-x866-v2pc-mx93/GHSA-x866-v2pc-mx93.json +++ b/advisories/unreviewed/2024/04/GHSA-x866-v2pc-mx93/GHSA-x866-v2pc-mx93.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-xcx5-wxfr-wq9r/GHSA-xcx5-wxfr-wq9r.json b/advisories/unreviewed/2024/04/GHSA-xcx5-wxfr-wq9r/GHSA-xcx5-wxfr-wq9r.json index 549508cf336..d9b01881818 100644 --- a/advisories/unreviewed/2024/04/GHSA-xcx5-wxfr-wq9r/GHSA-xcx5-wxfr-wq9r.json +++ b/advisories/unreviewed/2024/04/GHSA-xcx5-wxfr-wq9r/GHSA-xcx5-wxfr-wq9r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-xcxv-67v8-jc88/GHSA-xcxv-67v8-jc88.json b/advisories/unreviewed/2024/04/GHSA-xcxv-67v8-jc88/GHSA-xcxv-67v8-jc88.json index c4539e4f85e..bc90f05071a 100644 --- a/advisories/unreviewed/2024/04/GHSA-xcxv-67v8-jc88/GHSA-xcxv-67v8-jc88.json +++ b/advisories/unreviewed/2024/04/GHSA-xcxv-67v8-jc88/GHSA-xcxv-67v8-jc88.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-xhh7-pjwc-jm9m/GHSA-xhh7-pjwc-jm9m.json b/advisories/unreviewed/2024/04/GHSA-xhh7-pjwc-jm9m/GHSA-xhh7-pjwc-jm9m.json index 2ca75a56062..779e3beef56 100644 --- a/advisories/unreviewed/2024/04/GHSA-xhh7-pjwc-jm9m/GHSA-xhh7-pjwc-jm9m.json +++ b/advisories/unreviewed/2024/04/GHSA-xhh7-pjwc-jm9m/GHSA-xhh7-pjwc-jm9m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-xjx3-j32m-446r/GHSA-xjx3-j32m-446r.json b/advisories/unreviewed/2024/04/GHSA-xjx3-j32m-446r/GHSA-xjx3-j32m-446r.json index 2a48d324fdb..14ca705bbbe 100644 --- a/advisories/unreviewed/2024/04/GHSA-xjx3-j32m-446r/GHSA-xjx3-j32m-446r.json +++ b/advisories/unreviewed/2024/04/GHSA-xjx3-j32m-446r/GHSA-xjx3-j32m-446r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-xx2r-2w7h-qwpc/GHSA-xx2r-2w7h-qwpc.json b/advisories/unreviewed/2024/04/GHSA-xx2r-2w7h-qwpc/GHSA-xx2r-2w7h-qwpc.json index 6c17aaa6673..ae48eb2182e 100644 --- a/advisories/unreviewed/2024/04/GHSA-xx2r-2w7h-qwpc/GHSA-xx2r-2w7h-qwpc.json +++ b/advisories/unreviewed/2024/04/GHSA-xx2r-2w7h-qwpc/GHSA-xx2r-2w7h-qwpc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5xmq-m54x-chjm/GHSA-5xmq-m54x-chjm.json b/advisories/unreviewed/2024/08/GHSA-5xmq-m54x-chjm/GHSA-5xmq-m54x-chjm.json index d72c54720ce..9cdc0656283 100644 --- a/advisories/unreviewed/2024/08/GHSA-5xmq-m54x-chjm/GHSA-5xmq-m54x-chjm.json +++ b/advisories/unreviewed/2024/08/GHSA-5xmq-m54x-chjm/GHSA-5xmq-m54x-chjm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-296q-fx3q-6h3p/GHSA-296q-fx3q-6h3p.json b/advisories/unreviewed/2024/09/GHSA-296q-fx3q-6h3p/GHSA-296q-fx3q-6h3p.json index c788b897b28..2c83aa9d2de 100644 --- a/advisories/unreviewed/2024/09/GHSA-296q-fx3q-6h3p/GHSA-296q-fx3q-6h3p.json +++ b/advisories/unreviewed/2024/09/GHSA-296q-fx3q-6h3p/GHSA-296q-fx3q-6h3p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-2q4v-rwhp-9rxj/GHSA-2q4v-rwhp-9rxj.json b/advisories/unreviewed/2024/09/GHSA-2q4v-rwhp-9rxj/GHSA-2q4v-rwhp-9rxj.json index 3c7069cd990..873f3376f03 100644 --- a/advisories/unreviewed/2024/09/GHSA-2q4v-rwhp-9rxj/GHSA-2q4v-rwhp-9rxj.json +++ b/advisories/unreviewed/2024/09/GHSA-2q4v-rwhp-9rxj/GHSA-2q4v-rwhp-9rxj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-2wg5-pqfg-hvj9/GHSA-2wg5-pqfg-hvj9.json b/advisories/unreviewed/2024/09/GHSA-2wg5-pqfg-hvj9/GHSA-2wg5-pqfg-hvj9.json index 587d1701172..b9675f8b055 100644 --- a/advisories/unreviewed/2024/09/GHSA-2wg5-pqfg-hvj9/GHSA-2wg5-pqfg-hvj9.json +++ b/advisories/unreviewed/2024/09/GHSA-2wg5-pqfg-hvj9/GHSA-2wg5-pqfg-hvj9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-3j25-9c38-888w/GHSA-3j25-9c38-888w.json b/advisories/unreviewed/2024/09/GHSA-3j25-9c38-888w/GHSA-3j25-9c38-888w.json index 4e992a4281d..de146a6e0d6 100644 --- a/advisories/unreviewed/2024/09/GHSA-3j25-9c38-888w/GHSA-3j25-9c38-888w.json +++ b/advisories/unreviewed/2024/09/GHSA-3j25-9c38-888w/GHSA-3j25-9c38-888w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-3m4m-vgvw-3q25/GHSA-3m4m-vgvw-3q25.json b/advisories/unreviewed/2024/09/GHSA-3m4m-vgvw-3q25/GHSA-3m4m-vgvw-3q25.json index 1444106e8aa..1c3362c54ad 100644 --- a/advisories/unreviewed/2024/09/GHSA-3m4m-vgvw-3q25/GHSA-3m4m-vgvw-3q25.json +++ b/advisories/unreviewed/2024/09/GHSA-3m4m-vgvw-3q25/GHSA-3m4m-vgvw-3q25.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-3x9f-3c9h-x7gj/GHSA-3x9f-3c9h-x7gj.json b/advisories/unreviewed/2024/09/GHSA-3x9f-3c9h-x7gj/GHSA-3x9f-3c9h-x7gj.json index 691bbf443cb..dedd56d2760 100644 --- a/advisories/unreviewed/2024/09/GHSA-3x9f-3c9h-x7gj/GHSA-3x9f-3c9h-x7gj.json +++ b/advisories/unreviewed/2024/09/GHSA-3x9f-3c9h-x7gj/GHSA-3x9f-3c9h-x7gj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-49px-m4gc-wgg2/GHSA-49px-m4gc-wgg2.json b/advisories/unreviewed/2024/09/GHSA-49px-m4gc-wgg2/GHSA-49px-m4gc-wgg2.json index 8ab39ed4806..5a1c3136195 100644 --- a/advisories/unreviewed/2024/09/GHSA-49px-m4gc-wgg2/GHSA-49px-m4gc-wgg2.json +++ b/advisories/unreviewed/2024/09/GHSA-49px-m4gc-wgg2/GHSA-49px-m4gc-wgg2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-4c22-xgpq-qfxw/GHSA-4c22-xgpq-qfxw.json b/advisories/unreviewed/2024/09/GHSA-4c22-xgpq-qfxw/GHSA-4c22-xgpq-qfxw.json index a12fb16fb72..af06233edeb 100644 --- a/advisories/unreviewed/2024/09/GHSA-4c22-xgpq-qfxw/GHSA-4c22-xgpq-qfxw.json +++ b/advisories/unreviewed/2024/09/GHSA-4c22-xgpq-qfxw/GHSA-4c22-xgpq-qfxw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-4c2x-v4q9-wm44/GHSA-4c2x-v4q9-wm44.json b/advisories/unreviewed/2024/09/GHSA-4c2x-v4q9-wm44/GHSA-4c2x-v4q9-wm44.json index 0d2d8d811d4..27e16df085f 100644 --- a/advisories/unreviewed/2024/09/GHSA-4c2x-v4q9-wm44/GHSA-4c2x-v4q9-wm44.json +++ b/advisories/unreviewed/2024/09/GHSA-4c2x-v4q9-wm44/GHSA-4c2x-v4q9-wm44.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-534f-hj89-3j8f/GHSA-534f-hj89-3j8f.json b/advisories/unreviewed/2024/09/GHSA-534f-hj89-3j8f/GHSA-534f-hj89-3j8f.json index de4bda87bb2..a9f0d230941 100644 --- a/advisories/unreviewed/2024/09/GHSA-534f-hj89-3j8f/GHSA-534f-hj89-3j8f.json +++ b/advisories/unreviewed/2024/09/GHSA-534f-hj89-3j8f/GHSA-534f-hj89-3j8f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-53qj-7827-7xqp/GHSA-53qj-7827-7xqp.json b/advisories/unreviewed/2024/09/GHSA-53qj-7827-7xqp/GHSA-53qj-7827-7xqp.json index c3329288315..0137013c164 100644 --- a/advisories/unreviewed/2024/09/GHSA-53qj-7827-7xqp/GHSA-53qj-7827-7xqp.json +++ b/advisories/unreviewed/2024/09/GHSA-53qj-7827-7xqp/GHSA-53qj-7827-7xqp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-5536-r29g-pv75/GHSA-5536-r29g-pv75.json b/advisories/unreviewed/2024/09/GHSA-5536-r29g-pv75/GHSA-5536-r29g-pv75.json index 0391cfd591a..18294febe73 100644 --- a/advisories/unreviewed/2024/09/GHSA-5536-r29g-pv75/GHSA-5536-r29g-pv75.json +++ b/advisories/unreviewed/2024/09/GHSA-5536-r29g-pv75/GHSA-5536-r29g-pv75.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-587h-34w2-xgxr/GHSA-587h-34w2-xgxr.json b/advisories/unreviewed/2024/09/GHSA-587h-34w2-xgxr/GHSA-587h-34w2-xgxr.json index 11921379c59..10737415e49 100644 --- a/advisories/unreviewed/2024/09/GHSA-587h-34w2-xgxr/GHSA-587h-34w2-xgxr.json +++ b/advisories/unreviewed/2024/09/GHSA-587h-34w2-xgxr/GHSA-587h-34w2-xgxr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-5f48-j349-fj3m/GHSA-5f48-j349-fj3m.json b/advisories/unreviewed/2024/09/GHSA-5f48-j349-fj3m/GHSA-5f48-j349-fj3m.json index 2a7f03de62b..87a90713f4f 100644 --- a/advisories/unreviewed/2024/09/GHSA-5f48-j349-fj3m/GHSA-5f48-j349-fj3m.json +++ b/advisories/unreviewed/2024/09/GHSA-5f48-j349-fj3m/GHSA-5f48-j349-fj3m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-5gvh-cqjm-hff8/GHSA-5gvh-cqjm-hff8.json b/advisories/unreviewed/2024/09/GHSA-5gvh-cqjm-hff8/GHSA-5gvh-cqjm-hff8.json index d2155c3faae..17526fad9f3 100644 --- a/advisories/unreviewed/2024/09/GHSA-5gvh-cqjm-hff8/GHSA-5gvh-cqjm-hff8.json +++ b/advisories/unreviewed/2024/09/GHSA-5gvh-cqjm-hff8/GHSA-5gvh-cqjm-hff8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-5qf6-wqm9-p35x/GHSA-5qf6-wqm9-p35x.json b/advisories/unreviewed/2024/09/GHSA-5qf6-wqm9-p35x/GHSA-5qf6-wqm9-p35x.json index e5731091d46..7205ff020a0 100644 --- a/advisories/unreviewed/2024/09/GHSA-5qf6-wqm9-p35x/GHSA-5qf6-wqm9-p35x.json +++ b/advisories/unreviewed/2024/09/GHSA-5qf6-wqm9-p35x/GHSA-5qf6-wqm9-p35x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-65qm-2w7w-w7h5/GHSA-65qm-2w7w-w7h5.json b/advisories/unreviewed/2024/09/GHSA-65qm-2w7w-w7h5/GHSA-65qm-2w7w-w7h5.json index e04617e1eac..fb02662a877 100644 --- a/advisories/unreviewed/2024/09/GHSA-65qm-2w7w-w7h5/GHSA-65qm-2w7w-w7h5.json +++ b/advisories/unreviewed/2024/09/GHSA-65qm-2w7w-w7h5/GHSA-65qm-2w7w-w7h5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-6jf8-wh8p-q53m/GHSA-6jf8-wh8p-q53m.json b/advisories/unreviewed/2024/09/GHSA-6jf8-wh8p-q53m/GHSA-6jf8-wh8p-q53m.json index 7a179dd0733..6c566d64e39 100644 --- a/advisories/unreviewed/2024/09/GHSA-6jf8-wh8p-q53m/GHSA-6jf8-wh8p-q53m.json +++ b/advisories/unreviewed/2024/09/GHSA-6jf8-wh8p-q53m/GHSA-6jf8-wh8p-q53m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-78v4-hxhf-xqqv/GHSA-78v4-hxhf-xqqv.json b/advisories/unreviewed/2024/09/GHSA-78v4-hxhf-xqqv/GHSA-78v4-hxhf-xqqv.json index dcab9ce3208..e62960fbd32 100644 --- a/advisories/unreviewed/2024/09/GHSA-78v4-hxhf-xqqv/GHSA-78v4-hxhf-xqqv.json +++ b/advisories/unreviewed/2024/09/GHSA-78v4-hxhf-xqqv/GHSA-78v4-hxhf-xqqv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-7c27-jcxr-97cm/GHSA-7c27-jcxr-97cm.json b/advisories/unreviewed/2024/09/GHSA-7c27-jcxr-97cm/GHSA-7c27-jcxr-97cm.json index f4930b66fd3..825c9e6f14a 100644 --- a/advisories/unreviewed/2024/09/GHSA-7c27-jcxr-97cm/GHSA-7c27-jcxr-97cm.json +++ b/advisories/unreviewed/2024/09/GHSA-7c27-jcxr-97cm/GHSA-7c27-jcxr-97cm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-7q6v-68mf-6678/GHSA-7q6v-68mf-6678.json b/advisories/unreviewed/2024/09/GHSA-7q6v-68mf-6678/GHSA-7q6v-68mf-6678.json index ae7dbb6fe83..0dee66ce922 100644 --- a/advisories/unreviewed/2024/09/GHSA-7q6v-68mf-6678/GHSA-7q6v-68mf-6678.json +++ b/advisories/unreviewed/2024/09/GHSA-7q6v-68mf-6678/GHSA-7q6v-68mf-6678.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-8722-vchq-6p72/GHSA-8722-vchq-6p72.json b/advisories/unreviewed/2024/09/GHSA-8722-vchq-6p72/GHSA-8722-vchq-6p72.json index f707515f512..9519dba277f 100644 --- a/advisories/unreviewed/2024/09/GHSA-8722-vchq-6p72/GHSA-8722-vchq-6p72.json +++ b/advisories/unreviewed/2024/09/GHSA-8722-vchq-6p72/GHSA-8722-vchq-6p72.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-8gx2-fcjg-wfjv/GHSA-8gx2-fcjg-wfjv.json b/advisories/unreviewed/2024/09/GHSA-8gx2-fcjg-wfjv/GHSA-8gx2-fcjg-wfjv.json index 916ee616340..1aadd88f77f 100644 --- a/advisories/unreviewed/2024/09/GHSA-8gx2-fcjg-wfjv/GHSA-8gx2-fcjg-wfjv.json +++ b/advisories/unreviewed/2024/09/GHSA-8gx2-fcjg-wfjv/GHSA-8gx2-fcjg-wfjv.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-8jqv-r4vx-8fp4/GHSA-8jqv-r4vx-8fp4.json b/advisories/unreviewed/2024/09/GHSA-8jqv-r4vx-8fp4/GHSA-8jqv-r4vx-8fp4.json index eea1eb03ed1..cf44abd9c0d 100644 --- a/advisories/unreviewed/2024/09/GHSA-8jqv-r4vx-8fp4/GHSA-8jqv-r4vx-8fp4.json +++ b/advisories/unreviewed/2024/09/GHSA-8jqv-r4vx-8fp4/GHSA-8jqv-r4vx-8fp4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-8mc9-3vv7-xwf3/GHSA-8mc9-3vv7-xwf3.json b/advisories/unreviewed/2024/09/GHSA-8mc9-3vv7-xwf3/GHSA-8mc9-3vv7-xwf3.json index 9bf70dc4d3e..83939bd78b8 100644 --- a/advisories/unreviewed/2024/09/GHSA-8mc9-3vv7-xwf3/GHSA-8mc9-3vv7-xwf3.json +++ b/advisories/unreviewed/2024/09/GHSA-8mc9-3vv7-xwf3/GHSA-8mc9-3vv7-xwf3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-8vgr-3wf8-f94v/GHSA-8vgr-3wf8-f94v.json b/advisories/unreviewed/2024/09/GHSA-8vgr-3wf8-f94v/GHSA-8vgr-3wf8-f94v.json index 17faf5aa16c..c5b236025ee 100644 --- a/advisories/unreviewed/2024/09/GHSA-8vgr-3wf8-f94v/GHSA-8vgr-3wf8-f94v.json +++ b/advisories/unreviewed/2024/09/GHSA-8vgr-3wf8-f94v/GHSA-8vgr-3wf8-f94v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-9rp7-83cj-89pw/GHSA-9rp7-83cj-89pw.json b/advisories/unreviewed/2024/09/GHSA-9rp7-83cj-89pw/GHSA-9rp7-83cj-89pw.json index 46982521c90..71a3f52f1b0 100644 --- a/advisories/unreviewed/2024/09/GHSA-9rp7-83cj-89pw/GHSA-9rp7-83cj-89pw.json +++ b/advisories/unreviewed/2024/09/GHSA-9rp7-83cj-89pw/GHSA-9rp7-83cj-89pw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-9wg2-mhm9-jgvc/GHSA-9wg2-mhm9-jgvc.json b/advisories/unreviewed/2024/09/GHSA-9wg2-mhm9-jgvc/GHSA-9wg2-mhm9-jgvc.json index fe880a19beb..25ddbcff42a 100644 --- a/advisories/unreviewed/2024/09/GHSA-9wg2-mhm9-jgvc/GHSA-9wg2-mhm9-jgvc.json +++ b/advisories/unreviewed/2024/09/GHSA-9wg2-mhm9-jgvc/GHSA-9wg2-mhm9-jgvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-c665-2rvm-477f/GHSA-c665-2rvm-477f.json b/advisories/unreviewed/2024/09/GHSA-c665-2rvm-477f/GHSA-c665-2rvm-477f.json index 66812e82154..f39bc0ebf71 100644 --- a/advisories/unreviewed/2024/09/GHSA-c665-2rvm-477f/GHSA-c665-2rvm-477f.json +++ b/advisories/unreviewed/2024/09/GHSA-c665-2rvm-477f/GHSA-c665-2rvm-477f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-crg8-qm9j-p9f5/GHSA-crg8-qm9j-p9f5.json b/advisories/unreviewed/2024/09/GHSA-crg8-qm9j-p9f5/GHSA-crg8-qm9j-p9f5.json index 0128ef63c25..1a5bb1eadb1 100644 --- a/advisories/unreviewed/2024/09/GHSA-crg8-qm9j-p9f5/GHSA-crg8-qm9j-p9f5.json +++ b/advisories/unreviewed/2024/09/GHSA-crg8-qm9j-p9f5/GHSA-crg8-qm9j-p9f5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-f2w3-qvqc-x7rq/GHSA-f2w3-qvqc-x7rq.json b/advisories/unreviewed/2024/09/GHSA-f2w3-qvqc-x7rq/GHSA-f2w3-qvqc-x7rq.json index 7c2a9d76f14..92dd6b97adb 100644 --- a/advisories/unreviewed/2024/09/GHSA-f2w3-qvqc-x7rq/GHSA-f2w3-qvqc-x7rq.json +++ b/advisories/unreviewed/2024/09/GHSA-f2w3-qvqc-x7rq/GHSA-f2w3-qvqc-x7rq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-fj4c-4j79-r43g/GHSA-fj4c-4j79-r43g.json b/advisories/unreviewed/2024/09/GHSA-fj4c-4j79-r43g/GHSA-fj4c-4j79-r43g.json index c47b9e81217..2fe63e227f7 100644 --- a/advisories/unreviewed/2024/09/GHSA-fj4c-4j79-r43g/GHSA-fj4c-4j79-r43g.json +++ b/advisories/unreviewed/2024/09/GHSA-fj4c-4j79-r43g/GHSA-fj4c-4j79-r43g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-fv7g-cg7m-qjrp/GHSA-fv7g-cg7m-qjrp.json b/advisories/unreviewed/2024/09/GHSA-fv7g-cg7m-qjrp/GHSA-fv7g-cg7m-qjrp.json index 3859d06418f..37d5437d141 100644 --- a/advisories/unreviewed/2024/09/GHSA-fv7g-cg7m-qjrp/GHSA-fv7g-cg7m-qjrp.json +++ b/advisories/unreviewed/2024/09/GHSA-fv7g-cg7m-qjrp/GHSA-fv7g-cg7m-qjrp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-g5r8-9p9v-pqjx/GHSA-g5r8-9p9v-pqjx.json b/advisories/unreviewed/2024/09/GHSA-g5r8-9p9v-pqjx/GHSA-g5r8-9p9v-pqjx.json index 841745bde47..dcf6cada342 100644 --- a/advisories/unreviewed/2024/09/GHSA-g5r8-9p9v-pqjx/GHSA-g5r8-9p9v-pqjx.json +++ b/advisories/unreviewed/2024/09/GHSA-g5r8-9p9v-pqjx/GHSA-g5r8-9p9v-pqjx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-gwj7-4qx3-h44c/GHSA-gwj7-4qx3-h44c.json b/advisories/unreviewed/2024/09/GHSA-gwj7-4qx3-h44c/GHSA-gwj7-4qx3-h44c.json index 793afa231a8..719e2949fa6 100644 --- a/advisories/unreviewed/2024/09/GHSA-gwj7-4qx3-h44c/GHSA-gwj7-4qx3-h44c.json +++ b/advisories/unreviewed/2024/09/GHSA-gwj7-4qx3-h44c/GHSA-gwj7-4qx3-h44c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-h59m-8f5f-h863/GHSA-h59m-8f5f-h863.json b/advisories/unreviewed/2024/09/GHSA-h59m-8f5f-h863/GHSA-h59m-8f5f-h863.json index a62756093a4..97a15701c69 100644 --- a/advisories/unreviewed/2024/09/GHSA-h59m-8f5f-h863/GHSA-h59m-8f5f-h863.json +++ b/advisories/unreviewed/2024/09/GHSA-h59m-8f5f-h863/GHSA-h59m-8f5f-h863.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-j5j6-f7rx-wf55/GHSA-j5j6-f7rx-wf55.json b/advisories/unreviewed/2024/09/GHSA-j5j6-f7rx-wf55/GHSA-j5j6-f7rx-wf55.json index 68c0d3596e6..11ff26e5102 100644 --- a/advisories/unreviewed/2024/09/GHSA-j5j6-f7rx-wf55/GHSA-j5j6-f7rx-wf55.json +++ b/advisories/unreviewed/2024/09/GHSA-j5j6-f7rx-wf55/GHSA-j5j6-f7rx-wf55.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-j7fx-rmf6-crmw/GHSA-j7fx-rmf6-crmw.json b/advisories/unreviewed/2024/09/GHSA-j7fx-rmf6-crmw/GHSA-j7fx-rmf6-crmw.json index abe14204c64..f0f31f7d427 100644 --- a/advisories/unreviewed/2024/09/GHSA-j7fx-rmf6-crmw/GHSA-j7fx-rmf6-crmw.json +++ b/advisories/unreviewed/2024/09/GHSA-j7fx-rmf6-crmw/GHSA-j7fx-rmf6-crmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-jhm7-8qm3-8x49/GHSA-jhm7-8qm3-8x49.json b/advisories/unreviewed/2024/09/GHSA-jhm7-8qm3-8x49/GHSA-jhm7-8qm3-8x49.json index e9627aad8c9..21a4c61ab92 100644 --- a/advisories/unreviewed/2024/09/GHSA-jhm7-8qm3-8x49/GHSA-jhm7-8qm3-8x49.json +++ b/advisories/unreviewed/2024/09/GHSA-jhm7-8qm3-8x49/GHSA-jhm7-8qm3-8x49.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-jww9-vwpc-6qmf/GHSA-jww9-vwpc-6qmf.json b/advisories/unreviewed/2024/09/GHSA-jww9-vwpc-6qmf/GHSA-jww9-vwpc-6qmf.json index 5da1e9ae040..40e7dbdb678 100644 --- a/advisories/unreviewed/2024/09/GHSA-jww9-vwpc-6qmf/GHSA-jww9-vwpc-6qmf.json +++ b/advisories/unreviewed/2024/09/GHSA-jww9-vwpc-6qmf/GHSA-jww9-vwpc-6qmf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-m4jv-p2cx-9g8r/GHSA-m4jv-p2cx-9g8r.json b/advisories/unreviewed/2024/09/GHSA-m4jv-p2cx-9g8r/GHSA-m4jv-p2cx-9g8r.json index af042f89cd1..3c9f818ae5b 100644 --- a/advisories/unreviewed/2024/09/GHSA-m4jv-p2cx-9g8r/GHSA-m4jv-p2cx-9g8r.json +++ b/advisories/unreviewed/2024/09/GHSA-m4jv-p2cx-9g8r/GHSA-m4jv-p2cx-9g8r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-m882-rgxp-c7jh/GHSA-m882-rgxp-c7jh.json b/advisories/unreviewed/2024/09/GHSA-m882-rgxp-c7jh/GHSA-m882-rgxp-c7jh.json index f4c3e8f03f0..b1199fc4c70 100644 --- a/advisories/unreviewed/2024/09/GHSA-m882-rgxp-c7jh/GHSA-m882-rgxp-c7jh.json +++ b/advisories/unreviewed/2024/09/GHSA-m882-rgxp-c7jh/GHSA-m882-rgxp-c7jh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-mhc8-f455-fqc9/GHSA-mhc8-f455-fqc9.json b/advisories/unreviewed/2024/09/GHSA-mhc8-f455-fqc9/GHSA-mhc8-f455-fqc9.json index 5c660c3ee2b..ce6f82613a1 100644 --- a/advisories/unreviewed/2024/09/GHSA-mhc8-f455-fqc9/GHSA-mhc8-f455-fqc9.json +++ b/advisories/unreviewed/2024/09/GHSA-mhc8-f455-fqc9/GHSA-mhc8-f455-fqc9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-mp72-mr55-299x/GHSA-mp72-mr55-299x.json b/advisories/unreviewed/2024/09/GHSA-mp72-mr55-299x/GHSA-mp72-mr55-299x.json index d2533e6bd19..f0853a7183d 100644 --- a/advisories/unreviewed/2024/09/GHSA-mp72-mr55-299x/GHSA-mp72-mr55-299x.json +++ b/advisories/unreviewed/2024/09/GHSA-mp72-mr55-299x/GHSA-mp72-mr55-299x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-mp7m-vrr7-g6gw/GHSA-mp7m-vrr7-g6gw.json b/advisories/unreviewed/2024/09/GHSA-mp7m-vrr7-g6gw/GHSA-mp7m-vrr7-g6gw.json index 81559ea1030..bf3995405d9 100644 --- a/advisories/unreviewed/2024/09/GHSA-mp7m-vrr7-g6gw/GHSA-mp7m-vrr7-g6gw.json +++ b/advisories/unreviewed/2024/09/GHSA-mp7m-vrr7-g6gw/GHSA-mp7m-vrr7-g6gw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-mphg-33v9-x9g5/GHSA-mphg-33v9-x9g5.json b/advisories/unreviewed/2024/09/GHSA-mphg-33v9-x9g5/GHSA-mphg-33v9-x9g5.json index d13da6ae405..df93d69a5f6 100644 --- a/advisories/unreviewed/2024/09/GHSA-mphg-33v9-x9g5/GHSA-mphg-33v9-x9g5.json +++ b/advisories/unreviewed/2024/09/GHSA-mphg-33v9-x9g5/GHSA-mphg-33v9-x9g5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-mvjr-3jgq-45rj/GHSA-mvjr-3jgq-45rj.json b/advisories/unreviewed/2024/09/GHSA-mvjr-3jgq-45rj/GHSA-mvjr-3jgq-45rj.json index ed7627611a6..291119dcfaa 100644 --- a/advisories/unreviewed/2024/09/GHSA-mvjr-3jgq-45rj/GHSA-mvjr-3jgq-45rj.json +++ b/advisories/unreviewed/2024/09/GHSA-mvjr-3jgq-45rj/GHSA-mvjr-3jgq-45rj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-p5j4-6jm5-6fj9/GHSA-p5j4-6jm5-6fj9.json b/advisories/unreviewed/2024/09/GHSA-p5j4-6jm5-6fj9/GHSA-p5j4-6jm5-6fj9.json index af5e15728ba..31a58f9ac03 100644 --- a/advisories/unreviewed/2024/09/GHSA-p5j4-6jm5-6fj9/GHSA-p5j4-6jm5-6fj9.json +++ b/advisories/unreviewed/2024/09/GHSA-p5j4-6jm5-6fj9/GHSA-p5j4-6jm5-6fj9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-pm59-739h-g5cv/GHSA-pm59-739h-g5cv.json b/advisories/unreviewed/2024/09/GHSA-pm59-739h-g5cv/GHSA-pm59-739h-g5cv.json index d226168a40b..e10a38e8f3f 100644 --- a/advisories/unreviewed/2024/09/GHSA-pm59-739h-g5cv/GHSA-pm59-739h-g5cv.json +++ b/advisories/unreviewed/2024/09/GHSA-pm59-739h-g5cv/GHSA-pm59-739h-g5cv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-pxwm-r9vq-x573/GHSA-pxwm-r9vq-x573.json b/advisories/unreviewed/2024/09/GHSA-pxwm-r9vq-x573/GHSA-pxwm-r9vq-x573.json index 212127f6208..19fcff54c99 100644 --- a/advisories/unreviewed/2024/09/GHSA-pxwm-r9vq-x573/GHSA-pxwm-r9vq-x573.json +++ b/advisories/unreviewed/2024/09/GHSA-pxwm-r9vq-x573/GHSA-pxwm-r9vq-x573.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-r3q3-7r4r-xv74/GHSA-r3q3-7r4r-xv74.json b/advisories/unreviewed/2024/09/GHSA-r3q3-7r4r-xv74/GHSA-r3q3-7r4r-xv74.json index 3d6cb6ba26b..700d23add32 100644 --- a/advisories/unreviewed/2024/09/GHSA-r3q3-7r4r-xv74/GHSA-r3q3-7r4r-xv74.json +++ b/advisories/unreviewed/2024/09/GHSA-r3q3-7r4r-xv74/GHSA-r3q3-7r4r-xv74.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-r9w3-4w3v-h5x6/GHSA-r9w3-4w3v-h5x6.json b/advisories/unreviewed/2024/09/GHSA-r9w3-4w3v-h5x6/GHSA-r9w3-4w3v-h5x6.json index 12a48cdfe07..e5bf7439815 100644 --- a/advisories/unreviewed/2024/09/GHSA-r9w3-4w3v-h5x6/GHSA-r9w3-4w3v-h5x6.json +++ b/advisories/unreviewed/2024/09/GHSA-r9w3-4w3v-h5x6/GHSA-r9w3-4w3v-h5x6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rf2v-qj9w-x393/GHSA-rf2v-qj9w-x393.json b/advisories/unreviewed/2024/09/GHSA-rf2v-qj9w-x393/GHSA-rf2v-qj9w-x393.json index 3327612f739..fa275ae9847 100644 --- a/advisories/unreviewed/2024/09/GHSA-rf2v-qj9w-x393/GHSA-rf2v-qj9w-x393.json +++ b/advisories/unreviewed/2024/09/GHSA-rf2v-qj9w-x393/GHSA-rf2v-qj9w-x393.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rjw7-qg6g-6c2j/GHSA-rjw7-qg6g-6c2j.json b/advisories/unreviewed/2024/09/GHSA-rjw7-qg6g-6c2j/GHSA-rjw7-qg6g-6c2j.json index 438a0bf8789..9f1f7935781 100644 --- a/advisories/unreviewed/2024/09/GHSA-rjw7-qg6g-6c2j/GHSA-rjw7-qg6g-6c2j.json +++ b/advisories/unreviewed/2024/09/GHSA-rjw7-qg6g-6c2j/GHSA-rjw7-qg6g-6c2j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rqjr-fpm9-pwx5/GHSA-rqjr-fpm9-pwx5.json b/advisories/unreviewed/2024/09/GHSA-rqjr-fpm9-pwx5/GHSA-rqjr-fpm9-pwx5.json index 0ea3e01fb04..753b8051bfa 100644 --- a/advisories/unreviewed/2024/09/GHSA-rqjr-fpm9-pwx5/GHSA-rqjr-fpm9-pwx5.json +++ b/advisories/unreviewed/2024/09/GHSA-rqjr-fpm9-pwx5/GHSA-rqjr-fpm9-pwx5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rqjx-229x-7jmc/GHSA-rqjx-229x-7jmc.json b/advisories/unreviewed/2024/09/GHSA-rqjx-229x-7jmc/GHSA-rqjx-229x-7jmc.json index b07a9ff67a3..6140b4c6c6e 100644 --- a/advisories/unreviewed/2024/09/GHSA-rqjx-229x-7jmc/GHSA-rqjx-229x-7jmc.json +++ b/advisories/unreviewed/2024/09/GHSA-rqjx-229x-7jmc/GHSA-rqjx-229x-7jmc.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-wggm-rx98-f2mr/GHSA-wggm-rx98-f2mr.json b/advisories/unreviewed/2024/09/GHSA-wggm-rx98-f2mr/GHSA-wggm-rx98-f2mr.json index 6e9d270af8d..2c4c68e9ef2 100644 --- a/advisories/unreviewed/2024/09/GHSA-wggm-rx98-f2mr/GHSA-wggm-rx98-f2mr.json +++ b/advisories/unreviewed/2024/09/GHSA-wggm-rx98-f2mr/GHSA-wggm-rx98-f2mr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-wpwg-4rvh-5q27/GHSA-wpwg-4rvh-5q27.json b/advisories/unreviewed/2024/09/GHSA-wpwg-4rvh-5q27/GHSA-wpwg-4rvh-5q27.json index 26896e37819..d68dbdecf38 100644 --- a/advisories/unreviewed/2024/09/GHSA-wpwg-4rvh-5q27/GHSA-wpwg-4rvh-5q27.json +++ b/advisories/unreviewed/2024/09/GHSA-wpwg-4rvh-5q27/GHSA-wpwg-4rvh-5q27.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-x996-vwrq-5c5f/GHSA-x996-vwrq-5c5f.json b/advisories/unreviewed/2024/09/GHSA-x996-vwrq-5c5f/GHSA-x996-vwrq-5c5f.json index 74a13de396f..c56ac1faf70 100644 --- a/advisories/unreviewed/2024/09/GHSA-x996-vwrq-5c5f/GHSA-x996-vwrq-5c5f.json +++ b/advisories/unreviewed/2024/09/GHSA-x996-vwrq-5c5f/GHSA-x996-vwrq-5c5f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-x9x8-4xvf-mwjp/GHSA-x9x8-4xvf-mwjp.json b/advisories/unreviewed/2024/09/GHSA-x9x8-4xvf-mwjp/GHSA-x9x8-4xvf-mwjp.json index 435aa681846..b337d108fba 100644 --- a/advisories/unreviewed/2024/09/GHSA-x9x8-4xvf-mwjp/GHSA-x9x8-4xvf-mwjp.json +++ b/advisories/unreviewed/2024/09/GHSA-x9x8-4xvf-mwjp/GHSA-x9x8-4xvf-mwjp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-xmv4-684g-76jm/GHSA-xmv4-684g-76jm.json b/advisories/unreviewed/2024/09/GHSA-xmv4-684g-76jm/GHSA-xmv4-684g-76jm.json index 1a910de86c3..ed349e5e8a7 100644 --- a/advisories/unreviewed/2024/09/GHSA-xmv4-684g-76jm/GHSA-xmv4-684g-76jm.json +++ b/advisories/unreviewed/2024/09/GHSA-xmv4-684g-76jm/GHSA-xmv4-684g-76jm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-xvc5-jg6r-264j/GHSA-xvc5-jg6r-264j.json b/advisories/unreviewed/2024/09/GHSA-xvc5-jg6r-264j/GHSA-xvc5-jg6r-264j.json index aed95504473..18729a59755 100644 --- a/advisories/unreviewed/2024/09/GHSA-xvc5-jg6r-264j/GHSA-xvc5-jg6r-264j.json +++ b/advisories/unreviewed/2024/09/GHSA-xvc5-jg6r-264j/GHSA-xvc5-jg6r-264j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",