netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-07-17 15:32:36 +00:00
parent 53962c2afa
commit f625ee3438
32 changed files with 730 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/06/GHSA-7wrh-gvmc-wrjp/GHSA-7wrh-gvmc-wrjp.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7wrh-gvmc-wrjp",
"modified": "2024-06-20T06:30:54Z",
"modified": "2024-07-17T15:30:47Z",
"published": "2024-06-20T06:30:54Z",
"aliases": [
"CVE-2024-5686"
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-grp4-qf6x-8325/GHSA-grp4-qf6x-8325.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-grp4-qf6x-8325",
"modified": "2024-06-21T06:31:12Z",
"modified": "2024-07-17T15:30:47Z",
"published": "2024-06-21T06:31:12Z",
"aliases": [
"CVE-2024-5756"
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-m9v7-79rj-pq3w/GHSA-m9v7-79rj-pq3w.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-863"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-mhjr-7mqj-rp86/GHSA-mhjr-7mqj-rp86.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mhjr-7mqj-rp86",
"modified": "2024-06-20T06:30:54Z",
"modified": "2024-07-17T15:30:47Z",
"published": "2024-06-20T06:30:54Z",
"aliases": [
"CVE-2024-5605"
@@ -40,7 +40,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-w495-r927-3gp6/GHSA-w495-r927-3gp6.json
+1 -1
View File
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-x26g-933q-fggm/GHSA-x26g-933q-fggm.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x26g-933q-fggm",
"modified": "2024-06-21T06:31:12Z",
"modified": "2024-07-17T15:30:47Z",
"published": "2024-06-21T06:31:12Z",
"aliases": [
"CVE-2024-3961"
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-29rm-j4cx-hmc5/GHSA-29rm-j4cx-hmc5.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-29rm-j4cx-hmc5",
"modified": "2024-07-17T09:30:49Z",
"modified": "2024-07-17T15:30:49Z",
"published": "2024-07-17T09:30:49Z",
"aliases": [
"CVE-2024-6220"
advisories/unreviewed/2024/07/GHSA-2rwm-xv5j-777p/GHSA-2rwm-xv5j-777p.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2rwm-xv5j-777p",
"modified": "2024-07-17T15:30:50Z",
"published": "2024-07-17T15:30:50Z",
"aliases": [
"CVE-2023-7272"
],
"details": "In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7272"
},
{
"type": "WEB",
"url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/12"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:10Z"
}
}
advisories/unreviewed/2024/07/GHSA-2wg4-c3jx-83f5/GHSA-2wg4-c3jx-83f5.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2wg4-c3jx-83f5",
"modified": "2024-07-17T15:30:51Z",
"published": "2024-07-17T15:30:51Z",
"aliases": [
"CVE-2024-23474"
],
"details": "The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23474"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:12Z"
}
}
advisories/unreviewed/2024/07/GHSA-2x53-jv7f-c2x5/GHSA-2x53-jv7f-c2x5.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2x53-jv7f-c2x5",
"modified": "2024-07-17T15:30:51Z",
"published": "2024-07-17T15:30:51Z",
"aliases": [
"CVE-2024-28992"
],
"details": "The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28992"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-287"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:13Z"
}
}
advisories/unreviewed/2024/07/GHSA-4w6x-hxgr-c3q5/GHSA-4w6x-hxgr-c3q5.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4w6x-hxgr-c3q5",
"modified": "2024-07-17T15:30:50Z",
"published": "2024-07-17T15:30:50Z",
"aliases": [
"CVE-2024-23468"
],
"details": "The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23468"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:11Z"
}
}
advisories/unreviewed/2024/07/GHSA-4ww9-x3qp-vcwc/GHSA-4ww9-x3qp-vcwc.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4ww9-x3qp-vcwc",
"modified": "2024-07-17T15:30:51Z",
"published": "2024-07-17T15:30:51Z",
"aliases": [
"CVE-2024-23471"
],
"details": "The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution. ",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23471"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-287"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:12Z"
}
}
advisories/unreviewed/2024/07/GHSA-5v69-92vw-fmjh/GHSA-5v69-92vw-fmjh.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5v69-92vw-fmjh",
"modified": "2024-07-17T09:30:49Z",
"modified": "2024-07-17T15:30:49Z",
"published": "2024-07-17T09:30:49Z",
"aliases": [
"CVE-2024-29737"
@@ -21,6 +21,10 @@
{
"type": "WEB",
"url": "https://lists.apache.org/thread/xhx7jt1t24s6d7o435wxng8t0ojfbfh5"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/07/17/2"
}
],
"database_specific": {
advisories/unreviewed/2024/07/GHSA-7g94-hfqc-q993/GHSA-7g94-hfqc-q993.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7g94-hfqc-q993",
"modified": "2024-07-17T09:30:49Z",
"modified": "2024-07-17T15:30:49Z",
"published": "2024-07-17T09:30:49Z",
"aliases": [
"CVE-2023-52291"
@@ -21,6 +21,10 @@
{
"type": "WEB",
"url": "https://lists.apache.org/thread/pl6xgzoqrl4kcn0nt55zjbsx8dn80mkf"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/07/17/1"
}
],
"database_specific": {
advisories/unreviewed/2024/07/GHSA-7r67-crqq-3693/GHSA-7r67-crqq-3693.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7r67-crqq-3693",
"modified": "2024-07-17T15:30:51Z",
"published": "2024-07-17T15:30:51Z",
"aliases": [
"CVE-2024-28074"
],
"details": "It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28074"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:13Z"
}
}
advisories/unreviewed/2024/07/GHSA-86xc-mwv4-f994/GHSA-86xc-mwv4-f994.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-86xc-mwv4-f994",
"modified": "2024-07-17T15:30:50Z",
"published": "2024-07-17T15:30:50Z",
"aliases": [
"CVE-2024-23465"
],
"details": "The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.   ",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23465"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-287"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:10Z"
}
}
advisories/unreviewed/2024/07/GHSA-8pgq-57fj-h74q/GHSA-8pgq-57fj-h74q.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8pgq-57fj-h74q",
"modified": "2024-07-17T15:30:50Z",
"published": "2024-07-17T15:30:50Z",
"aliases": [
"CVE-2024-23469"
],
"details": "SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges. ",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23469"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:11Z"
}
}
advisories/unreviewed/2024/07/GHSA-99mg-hh47-f9qh/GHSA-99mg-hh47-f9qh.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-99mg-hh47-f9qh",
"modified": "2024-07-17T15:30:51Z",
"published": "2024-07-17T15:30:51Z",
"aliases": [
"CVE-2024-23475"
],
"details": "The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23475"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:13Z"
}
}
advisories/unreviewed/2024/07/GHSA-9g4r-89hx-hv6j/GHSA-9g4r-89hx-hv6j.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9g4r-89hx-hv6j",
"modified": "2024-07-17T15:30:51Z",
"published": "2024-07-17T15:30:51Z",
"aliases": [
"CVE-2024-23472"
],
"details": "SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23472"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-17T15:15:12Z"
}
}
advisories/unreviewed/2024/07/GHSA-9hmq-8gj3-9hvq/GHSA-9hmq-8gj3-9hvq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9hmq-8gj3-9hvq",
"modified": "2024-07-15T06:30:55Z",
"modified": "2024-07-17T15:30:47Z",
"published": "2024-07-15T06:30:55Z",
"aliases": [
"CVE-2024-6074"
],
"details": "The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-15T06:15:02Z"

Some files were not shown because too many files have changed in this diff Show More