Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2024-09-20 21:33:07 +00:00
parent bacfdf0e6e
commit f7696f4122
64 changed files with 554 additions and 88 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7x48-7466-3g33",
-  "modified": "2022-03-24T23:25:23Z",
+  "modified": "2024-09-20T21:32:41Z",
  "published": "2022-03-18T00:01:11Z",
  "aliases": [
    "CVE-2021-23556"
@@ -12,6 +12,10 @@
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N"
    }
  ],
  "affected": [
@@ -50,7 +54,7 @@
    },
    {
      "type": "WEB",
-      "url": "https://github.com/Guake/guake/pull/2017/commits/e3d671120bfe7ba28f50e256cc5e8a629781b888"
+      "url": "https://github.com/Guake/guake/commit/b769b3a5fd71a107c58679d217cccc971b4196b4"
    },
    {
      "type": "PACKAGE",
@@ -60,6 +64,10 @@
      "type": "WEB",
      "url": "https://github.com/Guake/guake/releases"
    },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-7x48-7466-3g33"
+    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/guake/PYSEC-2022-165.yaml"
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-200"
+      "CWE-200",
+      "CWE-327"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-285"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -41,6 +41,7 @@
  "database_specific": {
    "cwe_ids": [
      "CWE-200",
+      "CWE-327",
      "CWE-384"
    ],
    "severity": "MODERATE",
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-863"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-269"
+      "CWE-269",
+      "CWE-312"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-427"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -32,7 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-863"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -32,6 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-295",
      "CWE-300"
    ],
    "severity": "MODERATE",
@@ -32,6 +32,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-295",
      "CWE-599"
    ],
    "severity": "HIGH",
@@ -32,7 +32,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-282"
+      "CWE-282",
+      "CWE-732"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-84mh-m38q-m9vh",
-  "modified": "2024-06-18T21:30:36Z",
+  "modified": "2024-09-20T21:31:37Z",
  "published": "2024-06-18T21:30:36Z",
  "aliases": [
    "CVE-2024-6129"
@@ -11,6 +11,10 @@
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  ],
  "affected": [
@@ -40,6 +44,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-203",
      "CWE-205"
    ],
    "severity": "LOW",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2gmp-x9r7-xp6q",
-  "modified": "2024-09-18T15:30:52Z",
+  "modified": "2024-09-20T21:31:39Z",
  "published": "2024-09-18T15:30:52Z",
  "aliases": [
    "CVE-2024-31197"
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2hj6-cwhm-rfg9",
+  "modified": "2024-09-20T21:31:39Z",
+  "published": "2024-09-20T21:31:39Z",
+  "aliases": [
+    "CVE-2024-46103"
+  ],
+  "details": "SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46103"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/N0zoM1z0/MY-CVE/blob/main/CVE-2024-46103.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-20T21:15:12Z"
+  }
+}
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2mj9-cv5h-vqxp",
-  "modified": "2024-09-18T09:30:36Z",
+  "modified": "2024-09-20T21:31:38Z",
  "published": "2024-09-18T09:30:36Z",
  "aliases": [
    "CVE-2024-46741"
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: Fix double free of 'buf' in error path\n\nsmatch warning:\ndrivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf'\n\nIn fastrpc_req_mmap() error path, the fastrpc buffer is freed in\nfastrpc_req_munmap_impl() if unmap is successful.\n\nBut in the end, there is an unconditional call to fastrpc_buf_free().\nSo the above case triggers the double free of fastrpc buf.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -33,9 +36,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-415"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-09-18T08:15:03Z"
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2x56-wxfv-qqrm",
+  "modified": "2024-09-20T21:31:39Z",
+  "published": "2024-09-20T21:31:39Z",
+  "aliases": [
+    "CVE-2024-46645"
+  ],
+  "details": "eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46645"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/skit-cyber-security/eNMS_vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-20T21:15:12Z"
+  }
+}
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3mxv-x893-5542",
-  "modified": "2024-09-18T15:30:51Z",
+  "modified": "2024-09-20T21:31:38Z",
  "published": "2024-09-18T15:30:51Z",
  "aliases": [
    "CVE-2024-31174"
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-458x-pm5m-qh42",
+  "modified": "2024-09-20T21:31:39Z",
+  "published": "2024-09-20T21:31:39Z",
+  "aliases": [
+    "CVE-2024-46644"
+  ],
+  "details": "eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46644"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/skit-cyber-security/eNMS_vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-20T21:15:12Z"
+  }
+}
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4pwx-m3xw-8xj9",
-  "modified": "2024-09-18T15:30:51Z",
+  "modified": "2024-09-20T21:31:38Z",
  "published": "2024-09-18T15:30:51Z",
  "aliases": [
    "CVE-2024-31175"
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-476",
      "CWE-690"
    ],
    "severity": "MODERATE",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4qrv-8qq4-m334",
-  "modified": "2024-09-18T15:30:51Z",
+  "modified": "2024-09-20T21:31:39Z",
  "published": "2024-09-18T15:30:51Z",
  "aliases": [
    "CVE-2024-31185"
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-476",
      "CWE-690"
    ],
    "severity": "MODERATE",
--- a/Show More
+++ b/Show More