netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-16 21:33:39 +00:00
parent dd77ed64de
commit eeeede4cad
59 changed files with 651 additions and 121 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/02/GHSA-4g72-g685-8cc9/GHSA-4g72-g685-8cc9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4g72-g685-8cc9",
"modified": "2024-02-20T18:30:34Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-02-20T18:30:34Z",
"aliases": [
"CVE-2024-25366"
],
"details": "Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleGetNameListRequest function to the mms_getnamelist_service component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-20T16:15:10Z"
advisories/unreviewed/2024/02/GHSA-4rwq-456r-x2vq/GHSA-4rwq-456r-x2vq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4rwq-456r-x2vq",
"modified": "2024-02-24T00:30:20Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-02-24T00:30:20Z",
"aliases": [
"CVE-2024-25730"
],
"details": "Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a \"Hitron\" substring, resulting in insufficient entropy (only about one million possibilities).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -49,9 +52,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-331"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-23T22:15:55Z"
advisories/unreviewed/2024/02/GHSA-67vv-989w-hhr5/GHSA-67vv-989w-hhr5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-67vv-989w-hhr5",
"modified": "2024-02-22T21:30:33Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-02-22T21:30:32Z",
"aliases": [
"CVE-2024-25385"
],
"details": "An issue in flvmeta v.1.2.2 allows a local attacker to cause a denial of service via the flvmeta/src/flv.c:375:21 function in flv_close.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T19:15:09Z"
advisories/unreviewed/2024/02/GHSA-7pg4-9277-v46w/GHSA-7pg4-9277-v46w.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7pg4-9277-v46w",
"modified": "2024-02-16T03:30:51Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-02-16T03:30:51Z",
"aliases": [
"CVE-2024-0033"
],
"details": "In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T02:15:50Z"
advisories/unreviewed/2024/02/GHSA-9hcj-pv58-28wg/GHSA-9hcj-pv58-28wg.json
+1 -1
View File
@@ -33,7 +33,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-pw65-h7gx-qh35/GHSA-pw65-h7gx-qh35.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pw65-h7gx-qh35",
"modified": "2024-02-22T03:30:35Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-02-22T03:30:35Z",
"aliases": [
"CVE-2024-25251"
],
"details": "code-projects Agro-School Management System 1.0 is suffers from Incorrect Access Control.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T01:15:08Z"
advisories/unreviewed/2024/02/GHSA-vhx9-pxpc-mp7q/GHSA-vhx9-pxpc-mp7q.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vhx9-pxpc-mp7q",
"modified": "2024-02-15T00:30:32Z",
"modified": "2024-08-16T21:32:34Z",
"published": "2024-02-15T00:30:32Z",
"aliases": [
"CVE-2024-24300"
],
"details": "4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set of credentials, regardless of how many times a user logs in, the content of the cookie remains unchanged.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-14T23:15:08Z"
advisories/unreviewed/2024/02/GHSA-xmmg-4cv8-23px/GHSA-xmmg-4cv8-23px.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xmmg-4cv8-23px",
"modified": "2024-02-16T09:30:25Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-02-16T09:30:25Z",
"aliases": [
"CVE-2024-22854"
],
"details": "DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 (bundle version 61050) and before has been identified. A URL, crafted by a remote attacker and visited by an authenticated user, allows open redirect and potential credential stealing using an injected HTML form.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-601"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T09:15:08Z"
advisories/unreviewed/2024/03/GHSA-3rwq-vmr7-cggq/GHSA-3rwq-vmr7-cggq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3rwq-vmr7-cggq",
"modified": "2024-03-29T15:30:32Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-03-29T15:30:32Z",
"aliases": [
"CVE-2024-30636"
],
"details": "Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T14:15:14Z"
advisories/unreviewed/2024/03/GHSA-57rg-p28x-x2f6/GHSA-57rg-p28x-x2f6.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-57rg-p28x-x2f6",
"modified": "2024-03-05T18:31:14Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-03-05T18:31:14Z",
"aliases": [
"CVE-2024-22253"
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-94r9-cwgw-rpvq/GHSA-94r9-cwgw-rpvq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-94r9-cwgw-rpvq",
"modified": "2024-03-12T09:30:40Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-03-12T09:30:40Z",
"aliases": [
"CVE-2023-49453"
],
"details": "Reflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and obtain sensitive information via the search component in index.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-12T08:15:45Z"
advisories/unreviewed/2024/03/GHSA-chh2-528g-gx39/GHSA-chh2-528g-gx39.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-chh2-528g-gx39",
"modified": "2024-03-11T18:31:08Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-03-11T18:31:08Z",
"aliases": [
"CVE-2024-23717"
],
"details": "In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T17:15:46Z"
advisories/unreviewed/2024/03/GHSA-gm7f-4r42-pg7c/GHSA-gm7f-4r42-pg7c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gm7f-4r42-pg7c",
"modified": "2024-03-04T03:30:26Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-03-04T03:30:26Z",
"aliases": [
"CVE-2024-20031"
],
"details": "In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541742.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-04T03:15:07Z"
advisories/unreviewed/2024/03/GHSA-m2f4-hwvj-h9rj/GHSA-m2f4-hwvj-h9rj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m2f4-hwvj-h9rj",
"modified": "2024-03-12T09:30:41Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-03-12T09:30:41Z",
"aliases": [
"CVE-2024-27121"
],
"details": "Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary file in the affected product may be accessed or arbitrary code may be executed by processing a specially crafted request sent from a remote attacker with an administrative privilege. As for the details of the affected product names/versions, see the information provided by the vendor under [References] section.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-12T08:15:45Z"
advisories/unreviewed/2024/03/GHSA-p5w7-h2h4-299j/GHSA-p5w7-h2h4-299j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p5w7-h2h4-299j",
"modified": "2024-03-28T15:30:32Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-03-28T15:30:32Z",
"aliases": [
"CVE-2024-30594"
],
"details": "Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T13:15:48Z"
advisories/unreviewed/2024/03/GHSA-qw5g-qccp-wchw/GHSA-qw5g-qccp-wchw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qw5g-qccp-wchw",
"modified": "2024-03-28T15:30:32Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-03-28T15:30:32Z",
"aliases": [
"CVE-2024-30586"
],
"details": "Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T14:15:15Z"
advisories/unreviewed/2024/03/GHSA-vf4p-5p2r-42wm/GHSA-vf4p-5p2r-42wm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vf4p-5p2r-42wm",
"modified": "2024-03-07T03:30:40Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-03-07T03:30:40Z",
"aliases": [
"CVE-2023-49988"
],
"details": "Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-07T01:15:52Z"
advisories/unreviewed/2024/04/GHSA-4x7j-vfwq-rj38/GHSA-4x7j-vfwq-rj38.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4x7j-vfwq-rj38",
"modified": "2024-04-04T21:30:32Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-04-04T21:30:32Z",
"aliases": [
"CVE-2024-29387"
],
"details": "projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-04T20:15:08Z"
advisories/unreviewed/2024/04/GHSA-68vw-2c55-r944/GHSA-68vw-2c55-r944.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-68vw-2c55-r944",
"modified": "2024-04-01T18:30:56Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-04-01T18:30:56Z",
"aliases": [
"CVE-2024-30859"
],
"details": "netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-01T16:15:20Z"
advisories/unreviewed/2024/04/GHSA-7vmw-frjx-p3mg/GHSA-7vmw-frjx-p3mg.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7vmw-frjx-p3mg",
"modified": "2024-04-01T15:30:29Z",
"modified": "2024-08-16T21:32:35Z",
"published": "2024-04-01T15:30:29Z",
"aliases": [
"CVE-2024-30870"
],
"details": "netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-01T13:17:28Z"

Some files were not shown because too many files have changed in this diff Show More