Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2024-09-20 15:32:05 +00:00
parent 87371e5bd1
commit f1474f9d5f
34 changed files with 359 additions and 74 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rxjp-mfm9-w4wr",
-  "modified": "2024-04-22T22:53:38Z",
+  "modified": "2024-09-20T15:30:29Z",
  "published": "2021-06-04T21:15:56Z",
  "aliases": [
    "CVE-2021-31542"
@@ -12,6 +12,10 @@
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
    }
  ],
  "affected": [
@@ -25,7 +29,7 @@
          "type": "ECOSYSTEM",
          "events": [
            {
-              "introduced": "2.2.0"
+              "introduced": "2.2"
            },
            {
              "fixed": "2.2.21"
@@ -44,7 +48,7 @@
          "type": "ECOSYSTEM",
          "events": [
            {
-              "introduced": "3.0.0"
+              "introduced": "3.0"
            },
            {
              "fixed": "3.1.9"
@@ -63,7 +67,7 @@
          "type": "ECOSYSTEM",
          "events": [
            {
-              "introduced": "3.2.0"
+              "introduced": "3.2"
            },
            {
              "fixed": "3.2.1"
@@ -92,39 +96,7 @@
    },
    {
      "type": "WEB",
-      "url": "https://docs.djangoproject.com/en/3.2/releases/security"
-    },
-    {
-      "type": "PACKAGE",
-      "url": "https://github.com/django/django"
-    },
-    {
-      "type": "WEB",
-      "url": "https://groups.google.com/forum/#!forum/django-announce"
-    },
-    {
-      "type": "WEB",
-      "url": "https://groups.google.com/forum/#%21forum/django-announce"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00005.html"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE"
+      "url": "https://www.djangoproject.com/weblog/2021/may/04/security-releases"
    },
    {
      "type": "WEB",
@@ -132,7 +104,47 @@
    },
    {
      "type": "WEB",
-      "url": "https://www.djangoproject.com/weblog/2021/may/04/security-releases"
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00005.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://groups.google.com/forum/#%21forum/django-announce"
+    },
+    {
+      "type": "WEB",
+      "url": "https://groups.google.com/forum/#!forum/django-announce"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-7.yaml"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/django/django"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-rxjp-mfm9-w4wr"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.djangoproject.com/en/3.2/releases/security"
    },
    {
      "type": "WEB",
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-284"
+      "CWE-284",
+      "CWE-426"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-45cq-w2jp-hqp4",
-  "modified": "2024-04-04T06:43:37Z",
+  "modified": "2024-09-20T15:30:35Z",
  "published": "2023-08-09T09:30:33Z",
  "aliases": [
    "CVE-2023-24477"
@@ -11,6 +11,10 @@
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  ],
  "affected": [
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-c36w-mp78-5hh7",
-  "modified": "2024-04-04T07:43:52Z",
+  "modified": "2024-09-20T15:30:35Z",
  "published": "2023-09-19T12:30:30Z",
  "aliases": [
    "CVE-2023-2567"
@@ -11,6 +11,10 @@
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  ],
  "affected": [
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-284"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -40,7 +40,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-114"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-287"
+      "CWE-287",
+      "CWE-288"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-gg49-9gcv-q853",
-  "modified": "2023-11-15T00:31:08Z",
+  "modified": "2024-09-20T15:30:35Z",
  "published": "2023-11-15T00:31:08Z",
  "aliases": [
    "CVE-2023-43588"
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-449",
      "CWE-691"
    ],
    "severity": "LOW",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-786h-39x7-jgmj",
-  "modified": "2023-12-14T00:30:26Z",
+  "modified": "2024-09-20T15:30:35Z",
  "published": "2023-12-14T00:30:26Z",
  "aliases": [
    "CVE-2023-49646"
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-287"
+      "CWE-287",
+      "CWE-347"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5h3m-5ghj-mxmp",
-  "modified": "2024-01-13T00:30:25Z",
+  "modified": "2024-09-20T15:30:35Z",
  "published": "2024-01-13T00:30:25Z",
  "aliases": [
    "CVE-2023-49647"
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-266",
      "CWE-284"
    ],
    "severity": "HIGH",
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-176",
      "CWE-20"
    ],
    "severity": "CRITICAL",
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1284",
      "CWE-20"
    ],
    "severity": "MODERATE",
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-284"
+      "CWE-284",
+      "CWE-379"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-269"
+      "CWE-269",
+      "CWE-347"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-35m6-rf3v-8cxx",
-  "modified": "2024-04-10T18:30:47Z",
+  "modified": "2024-09-20T15:30:36Z",
  "published": "2024-04-10T18:30:47Z",
  "aliases": [
    "CVE-2024-0218"
@@ -11,6 +11,10 @@
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  ],
  "affected": [
@@ -28,6 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1286",
      "CWE-20"
    ],
    "severity": "HIGH",
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-269"
+      "CWE-269",
+      "CWE-347"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4qgh-57c7-qfq2",
-  "modified": "2024-05-15T21:31:26Z",
+  "modified": "2024-09-20T15:30:35Z",
  "published": "2024-05-15T21:31:26Z",
  "aliases": [
    "CVE-2024-27243"
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-122"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-345"
+      "CWE-345",
+      "CWE-347"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-22"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2jgc-rcc5-7q6j",
-  "modified": "2024-09-18T18:30:51Z",
+  "modified": "2024-09-20T15:30:37Z",
  "published": "2024-09-18T18:30:51Z",
  "aliases": [
    "CVE-2024-46959"
  ],
  "details": "runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account. This allows access to the /stream1 URI via the rtsp:// protocol to receive the video and audio stream.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
  ],
  "affected": [

@@ -25,9 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-259"
    ],
-    "severity": null,
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-09-18T18:15:06Z"
--- a/Show More
+++ b/Show More