netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-14 18:34:09 +00:00
parent b7914ad4a5
commit f8c6339267
48 changed files with 1080 additions and 68 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/07/GHSA-3w2f-j9r3-9h89/GHSA-3w2f-j9r3-9h89.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-367"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/01/GHSA-vfhc-4q79-wvf9/GHSA-vfhc-4q79-wvf9.json
+17 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vfhc-4q79-wvf9",
"modified": "2024-01-09T21:30:28Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-01-01T18:30:25Z",
"aliases": [
"CVE-2023-50094"
@@ -17,10 +17,26 @@
],
"references": [
{
"type": "WEB",
"url": "https://github.com/yogeshojha/rengine/security/advisories/GHSA-fx7f-f735-vgh4"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50094"
},
{
"type": "WEB",
"url": "https://github.com/yogeshojha/rengine/commit/3d5f1724dd12cf9861443742e7d7c02ff8c75a6f"
},
{
"type": "WEB",
"url": "https://github.com/yogeshojha/rengine/commit/edd3c85ee16f93804ad38dac5602549d2d30a93e"
},
{
"type": "WEB",
"url": "https://github.com/yogeshojha/rengine/blob/53d9f505f04861a5040195ea71f20907ff90577a/web/api/views.py#L268-L275"
},
{
"type": "WEB",
"url": "https://github.com/yogeshojha/rengine/blob/5e120bd5f9dfbd1da82a193e8c9702e483d38d22/web/api/views.py#L195"
advisories/unreviewed/2024/02/GHSA-2v9x-x358-276j/GHSA-2v9x-x358-276j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2v9x-x358-276j",
"modified": "2024-02-22T21:30:32Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-22T21:30:32Z",
"aliases": [
"CVE-2024-22547"
],
"details": "WayOS IBR-7150 <17.06.23 is vulnerable to Cross Site Scripting (XSS).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T19:15:08Z"
advisories/unreviewed/2024/02/GHSA-4498-28jp-m89x/GHSA-4498-28jp-m89x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4498-28jp-m89x",
"modified": "2024-02-22T00:31:01Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-22T00:31:01Z",
"aliases": [
"CVE-2023-52155"
],
"details": "A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T22:15:49Z"
advisories/unreviewed/2024/02/GHSA-4847-mppj-fwhp/GHSA-4847-mppj-fwhp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4847-mppj-fwhp",
"modified": "2024-02-21T18:31:02Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-21T18:31:02Z",
"aliases": [
"CVE-2024-25892"
],
"details": "ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection (Time-based) via the familyId GET parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T18:15:51Z"
advisories/unreviewed/2024/02/GHSA-8cpv-pp42-ppmr/GHSA-8cpv-pp42-ppmr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8cpv-pp42-ppmr",
"modified": "2024-05-02T18:30:50Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-27T03:31:02Z",
"aliases": [
"CVE-2024-24720"
],
"details": "An issue was discovered on Innovaphone PBX before 14r1 devices. It provides different responses to incoming requests in a way that reveals information to an attacker.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-27T01:15:07Z"
advisories/unreviewed/2024/02/GHSA-gm42-r9cp-95fh/GHSA-gm42-r9cp-95fh.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gm42-r9cp-95fh",
"modified": "2024-02-22T15:30:39Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-22T15:30:39Z",
"aliases": [
"CVE-2024-26349"
],
"details": "flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_translation.php",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T14:15:47Z"
advisories/unreviewed/2024/02/GHSA-jc8v-q399-gfq9/GHSA-jc8v-q399-gfq9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jc8v-q399-gfq9",
"modified": "2024-05-14T15:32:40Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-29T03:33:18Z",
"aliases": [
"CVE-2024-26461"
],
"details": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-770"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-29T01:44:18Z"
advisories/unreviewed/2024/02/GHSA-m3q9-44rg-xw34/GHSA-m3q9-44rg-xw34.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m3q9-44rg-xw34",
"modified": "2024-03-03T03:30:23Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-26T18:30:28Z",
"aliases": [
"CVE-2023-49114"
],
"details": "A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
"CWE-427"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-26T16:27:47Z"
advisories/unreviewed/2024/02/GHSA-pr57-r6pp-3h3h/GHSA-pr57-r6pp-3h3h.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pr57-r6pp-3h3h",
"modified": "2024-02-20T12:31:00Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-20T12:31:00Z",
"aliases": [
"CVE-2023-7245"
],
"details": "The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
"CWE-95"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-20T11:15:07Z"
advisories/unreviewed/2024/02/GHSA-qmvm-mg94-c39p/GHSA-qmvm-mg94-c39p.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qmvm-mg94-c39p",
"modified": "2024-02-26T18:30:31Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-26T18:30:31Z",
"aliases": [
"CVE-2024-27455"
],
"details": "In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.02.03 and Assetwise Information Integrity Server 23.00.04.04.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-488"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-26T16:28:00Z"
advisories/unreviewed/2024/02/GHSA-vmh4-jjxc-hgm4/GHSA-vmh4-jjxc-hgm4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vmh4-jjxc-hgm4",
"modified": "2024-02-21T21:30:25Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-21T21:30:25Z",
"aliases": [
"CVE-2023-24332"
],
"details": "A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T21:15:08Z"
advisories/unreviewed/2024/02/GHSA-xq2h-vm9v-fgph/GHSA-xq2h-vm9v-fgph.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xq2h-vm9v-fgph",
"modified": "2024-02-23T15:30:37Z",
"modified": "2024-08-14T18:32:36Z",
"published": "2024-02-23T15:30:37Z",
"aliases": [
"CVE-2024-22776"
],
"details": "Wallos 0.9 is vulnerable to Cross Site Scripting (XSS) in all text-based input fields without proper validation, excluding those requiring specific formats like date fields.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-23T15:15:09Z"
advisories/unreviewed/2024/04/GHSA-w9xx-xhpg-c678/GHSA-w9xx-xhpg-c678.json
+2 -1
View File
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-280"
"CWE-280",
"CWE-755"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-hwrp-v8fj-7p9x/GHSA-hwrp-v8fj-7p9x.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22",
"CWE-31"
],
"severity": "MODERATE",
advisories/unreviewed/2024/07/GHSA-pf95-r93p-c3p6/GHSA-pf95-r93p-c3p6.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pf95-r93p-c3p6",
"modified": "2024-07-22T18:31:48Z",
"modified": "2024-08-14T18:32:37Z",
"published": "2024-07-22T18:31:48Z",
"aliases": [
"CVE-2024-40051"
],
"details": "IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-22T18:15:03Z"
advisories/unreviewed/2024/08/GHSA-2mxh-j9g4-gj85/GHSA-2mxh-j9g4-gj85.json
+1
View File
@@ -32,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269",
"CWE-665"
],
"severity": "CRITICAL",
advisories/unreviewed/2024/08/GHSA-3xxg-9vrr-9g96/GHSA-3xxg-9vrr-9g96.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3xxg-9vrr-9g96",
"modified": "2024-08-14T18:32:43Z",
"published": "2024-08-14T18:32:43Z",
"aliases": [
"CVE-2024-39825"
],
"details": "Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39825"
},
{
"type": "WEB",
"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-24022"
}
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-14T17:15:15Z"
}
}
advisories/unreviewed/2024/08/GHSA-475c-8mw8-7m88/GHSA-475c-8mw8-7m88.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-475c-8mw8-7m88",
"modified": "2024-08-14T18:32:43Z",
"published": "2024-08-14T18:32:43Z",
"aliases": [
"CVE-2024-42437"
],
"details": "Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42437"
},
{
"type": "WEB",
"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-24031"
}
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-14T17:15:17Z"
}
}
advisories/unreviewed/2024/08/GHSA-4m5j-3mr3-cv42/GHSA-4m5j-3mr3-cv42.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4m5j-3mr3-cv42",
"modified": "2024-08-14T18:32:43Z",
"published": "2024-08-14T18:32:43Z",
"aliases": [
"CVE-2024-42440"
],
"details": "Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42440"
},
{
"type": "WEB",
"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-24034"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-14T17:15:17Z"
}
}

Some files were not shown because too many files have changed in this diff Show More