Publish Advisories

GHSA-v2rr-hhf4-8739
GHSA-3wcf-84jq-4rxx
GHSA-46w7-w3p6-27qr
GHSA-crqv-wqx6-5f5r

advisories/unreviewed/2024/01/GHSA-v2rr-hhf4-8739/GHSA-v2rr-hhf4-8739.json

@@ -40,7 +40,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-287"
+      "CWE-287",
+      "CWE-367"
     ],
     "severity": "HIGH",
     "github_reviewed": false,

advisories/unreviewed/2024/02/GHSA-3wcf-84jq-4rxx/GHSA-3wcf-84jq-4rxx.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3wcf-84jq-4rxx",
+  "modified": "2024-02-29T18:30:59Z",
+  "published": "2024-02-29T18:30:59Z",
+  "aliases": [
+    "CVE-2024-25180"
+  ],
+  "details": "An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the path '/pdf'.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25180"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/joaoviictorti/My-CVES/blob/main/CVE-2024-25180/README.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-29T18:15:16Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-46w7-w3p6-27qr/GHSA-46w7-w3p6-27qr.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-46w7-w3p6-27qr",
+  "modified": "2024-02-29T18:30:59Z",
+  "published": "2024-02-29T18:30:59Z",
+  "aliases": [
+    "CVE-2024-20765"
+  ],
+  "details": "Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20765"
+    },
+    {
+      "type": "WEB",
+      "url": "https://helpx.adobe.com/security/products/acrobat/apsb24-07.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-29T17:15:07Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-crqv-wqx6-5f5r/GHSA-crqv-wqx6-5f5r.json

@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-crqv-wqx6-5f5r",
+  "modified": "2024-02-29T18:30:59Z",
+  "published": "2024-02-29T18:30:59Z",
+  "aliases": [
+    "CVE-2023-6132"
+  ],
+  "details": "\nThe vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6132"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.aveva.com/en/support-and-success/cyber-security-updates"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-032-03"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-427"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-29T18:15:16Z"
+  }
+}