netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-47qg-3w6c-7g7q
GHSA-wwfq-hcph-q6fg
GHSA-879f-87ww-wcv6
GHSA-279p-8h87-pr33
GHSA-4jfc-52v4-6x58
GHSA-8539-9wvx-7jmj
GHSA-jgg6-4c26-32v5
GHSA-3w9h-5fv2-f86j
GHSA-5mjm-rg7p-q2rg
GHSA-6vw3-qjc8-x8j8
GHSA-rwxw-p86h-g9q6
GHSA-vm99-jjc2-8hw5
This commit is contained in:
advisory-database[bot]
2024-09-09 12:33:24 +00:00
parent 68a2de6387
commit f17be1ab14
12 changed files with 87 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/09/GHSA-47qg-3w6c-7g7q/GHSA-47qg-3w6c-7g7q.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122",
"CWE-787"
],
"severity": "LOW",
advisories/unreviewed/2022/10/GHSA-wwfq-hcph-q6fg/GHSA-wwfq-hcph-q6fg.json
+2 -1
View File
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
"CWE-125",
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/12/GHSA-879f-87ww-wcv6/GHSA-879f-87ww-wcv6.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120",
"CWE-787"
],
"severity": "LOW",
advisories/unreviewed/2023/01/GHSA-279p-8h87-pr33/GHSA-279p-8h87-pr33.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-287",
"CWE-294"
],
"severity": "HIGH",
advisories/unreviewed/2023/01/GHSA-4jfc-52v4-6x58/GHSA-4jfc-52v4-6x58.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-287",
"CWE-294"
],
"severity": "HIGH",
advisories/unreviewed/2023/01/GHSA-8539-9wvx-7jmj/GHSA-8539-9wvx-7jmj.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120",
"CWE-787"
],
"severity": "HIGH",
advisories/unreviewed/2023/01/GHSA-jgg6-4c26-32v5/GHSA-jgg6-4c26-32v5.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120",
"CWE-787"
],
"severity": "HIGH",
advisories/unreviewed/2023/03/GHSA-3w9h-5fv2-f86j/GHSA-3w9h-5fv2-f86j.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/03/GHSA-5mjm-rg7p-q2rg/GHSA-5mjm-rg7p-q2rg.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20",
"CWE-476"
],
"severity": "MODERATE",
advisories/unreviewed/2023/03/GHSA-6vw3-qjc8-x8j8/GHSA-6vw3-qjc8-x8j8.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-190",
"CWE-416"
],
"severity": "HIGH",
advisories/unreviewed/2024/09/GHSA-rwxw-p86h-g9q6/GHSA-rwxw-p86h-g9q6.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rwxw-p86h-g9q6",
"modified": "2024-09-09T12:31:57Z",
"published": "2024-09-09T12:31:57Z",
"aliases": [
"CVE-2024-6572"
],
"details": "Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6572"
},
{
"type": "WEB",
"url": "https://checkmk.com/werk/17148"
}
],
"database_specific": {
"cwe_ids": [
"CWE-322"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-09T10:15:01Z"
}
}
advisories/unreviewed/2024/09/GHSA-vm99-jjc2-8hw5/GHSA-vm99-jjc2-8hw5.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vm99-jjc2-8hw5",
"modified": "2024-09-09T12:31:57Z",
"published": "2024-09-09T12:31:57Z",
"aliases": [
"CVE-2024-8601"
],
"details": "This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to unauthorized access to sensitive information belonging to other users.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8601"
},
{
"type": "WEB",
"url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0285"
}
],
"database_specific": {
"cwe_ids": [
"CWE-639"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-09T10:15:03Z"
}
}