From ee97aec02f71eba65d7036069f6b4916842a46a1 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Thu, 29 Feb 2024 18:32:20 +0000
Subject: [PATCH] Publish Advisories

GHSA-v2rr-hhf4-8739
GHSA-3wcf-84jq-4rxx
GHSA-46w7-w3p6-27qr
GHSA-crqv-wqx6-5f5r
---
 .../GHSA-v2rr-hhf4-8739.json                  |  3 +-
 .../GHSA-3wcf-84jq-4rxx.json                  | 35 ++++++++++++++++
 .../GHSA-46w7-w3p6-27qr.json                  | 38 +++++++++++++++++
 .../GHSA-crqv-wqx6-5f5r.json                  | 42 +++++++++++++++++++
 4 files changed, 117 insertions(+), 1 deletion(-)
 create mode 100644 advisories/unreviewed/2024/02/GHSA-3wcf-84jq-4rxx/GHSA-3wcf-84jq-4rxx.json
 create mode 100644 advisories/unreviewed/2024/02/GHSA-46w7-w3p6-27qr/GHSA-46w7-w3p6-27qr.json
 create mode 100644 advisories/unreviewed/2024/02/GHSA-crqv-wqx6-5f5r/GHSA-crqv-wqx6-5f5r.json

diff --git a/advisories/unreviewed/2024/01/GHSA-v2rr-hhf4-8739/GHSA-v2rr-hhf4-8739.json b/advisories/unreviewed/2024/01/GHSA-v2rr-hhf4-8739/GHSA-v2rr-hhf4-8739.json
index f5c1381e753..f32b974998f 100644
--- a/advisories/unreviewed/2024/01/GHSA-v2rr-hhf4-8739/GHSA-v2rr-hhf4-8739.json
+++ b/advisories/unreviewed/2024/01/GHSA-v2rr-hhf4-8739/GHSA-v2rr-hhf4-8739.json
@@ -40,7 +40,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-287"
+      "CWE-287",
+      "CWE-367"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/02/GHSA-3wcf-84jq-4rxx/GHSA-3wcf-84jq-4rxx.json b/advisories/unreviewed/2024/02/GHSA-3wcf-84jq-4rxx/GHSA-3wcf-84jq-4rxx.json
new file mode 100644
index 00000000000..612b90dc3eb
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-3wcf-84jq-4rxx/GHSA-3wcf-84jq-4rxx.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3wcf-84jq-4rxx",
+  "modified": "2024-02-29T18:30:59Z",
+  "published": "2024-02-29T18:30:59Z",
+  "aliases": [
+    "CVE-2024-25180"
+  ],
+  "details": "An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the path '/pdf'.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25180"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/joaoviictorti/My-CVES/blob/main/CVE-2024-25180/README.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-29T18:15:16Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-46w7-w3p6-27qr/GHSA-46w7-w3p6-27qr.json b/advisories/unreviewed/2024/02/GHSA-46w7-w3p6-27qr/GHSA-46w7-w3p6-27qr.json
new file mode 100644
index 00000000000..a5482d7af5b
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-46w7-w3p6-27qr/GHSA-46w7-w3p6-27qr.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-46w7-w3p6-27qr",
+  "modified": "2024-02-29T18:30:59Z",
+  "published": "2024-02-29T18:30:59Z",
+  "aliases": [
+    "CVE-2024-20765"
+  ],
+  "details": "Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20765"
+    },
+    {
+      "type": "WEB",
+      "url": "https://helpx.adobe.com/security/products/acrobat/apsb24-07.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-29T17:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-crqv-wqx6-5f5r/GHSA-crqv-wqx6-5f5r.json b/advisories/unreviewed/2024/02/GHSA-crqv-wqx6-5f5r/GHSA-crqv-wqx6-5f5r.json
new file mode 100644
index 00000000000..c01505ba35a
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-crqv-wqx6-5f5r/GHSA-crqv-wqx6-5f5r.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-crqv-wqx6-5f5r",
+  "modified": "2024-02-29T18:30:59Z",
+  "published": "2024-02-29T18:30:59Z",
+  "aliases": [
+    "CVE-2023-6132"
+  ],
+  "details": "\nThe vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6132"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.aveva.com/en/support-and-success/cyber-security-updates"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-032-03"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-427"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-29T18:15:16Z"
+  }
+}
\ No newline at end of file