netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-01-28 00:33:15 +00:00
parent 3f5f849ddf
commit fb2a843a72
121 changed files with 4119 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-782f-h7v4-m7wc/GHSA-782f-h7v4-m7wc.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-782f-h7v4-m7wc",
"modified": "2022-05-13T01:32:10Z",
"modified": "2025-01-28T00:32:06Z",
"published": "2022-05-13T01:32:10Z",
"aliases": [
"CVE-2018-5430"
advisories/unreviewed/2022/05/GHSA-cmgc-v5fc-wx68/GHSA-cmgc-v5fc-wx68.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cmgc-v5fc-wx68",
"modified": "2022-05-14T03:09:02Z",
"modified": "2025-01-28T00:32:06Z",
"published": "2022-05-14T03:09:02Z",
"aliases": [
"CVE-2016-9079"
advisories/unreviewed/2022/05/GHSA-cw7c-4r65-xf9h/GHSA-cw7c-4r65-xf9h.json
+2 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cw7c-4r65-xf9h",
"modified": "2022-05-13T01:20:24Z",
"modified": "2025-01-28T00:32:07Z",
"published": "2022-05-13T01:20:24Z",
"aliases": [
"CVE-2018-6065"
@@ -50,6 +50,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-190",
"CWE-787"
],
"severity": "HIGH",
advisories/unreviewed/2022/05/GHSA-h2mj-pqgp-xmmj/GHSA-h2mj-pqgp-xmmj.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h2mj-pqgp-xmmj",
"modified": "2022-05-13T01:17:37Z",
"modified": "2025-01-28T00:32:06Z",
"published": "2022-05-13T01:17:37Z",
"aliases": [
"CVE-2018-0296"
advisories/unreviewed/2022/05/GHSA-rvjq-qp5f-gvx6/GHSA-rvjq-qp5f-gvx6.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rvjq-qp5f-gvx6",
"modified": "2022-05-13T01:53:14Z",
"modified": "2025-01-28T00:32:06Z",
"published": "2022-05-13T01:53:14Z",
"aliases": [
"CVE-2018-6961"
advisories/unreviewed/2023/10/GHSA-9h42-3pgf-qjc8/GHSA-9h42-3pgf-qjc8.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9h42-3pgf-qjc8",
"modified": "2023-11-16T03:30:20Z",
"modified": "2025-01-28T00:32:08Z",
"published": "2023-10-26T21:30:22Z",
"aliases": [
"CVE-2023-46748"
advisories/unreviewed/2023/10/GHSA-pq6p-fc96-wc5w/GHSA-pq6p-fc96-wc5w.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pq6p-fc96-wc5w",
"modified": "2024-02-01T03:30:22Z",
"modified": "2025-01-28T00:32:08Z",
"published": "2023-10-26T21:30:22Z",
"aliases": [
"CVE-2023-46747"
advisories/unreviewed/2023/10/GHSA-qf8f-27cp-gw76/GHSA-qf8f-27cp-gw76.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qf8f-27cp-gw76",
"modified": "2023-11-01T06:30:20Z",
"modified": "2025-01-28T00:32:07Z",
"published": "2023-10-18T15:30:24Z",
"aliases": [
"CVE-2023-5631"
advisories/unreviewed/2023/12/GHSA-3c85-mx4x-435c/GHSA-3c85-mx4x-435c.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3c85-mx4x-435c",
"modified": "2024-05-05T15:30:28Z",
"modified": "2025-01-28T00:32:12Z",
"published": "2023-12-25T00:30:17Z",
"aliases": [
"CVE-2023-7101"
advisories/unreviewed/2024/05/GHSA-cw5c-xm7f-wx63/GHSA-cw5c-xm7f-wx63.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cw5c-xm7f-wx63",
"modified": "2024-06-07T18:30:37Z",
"modified": "2025-01-28T00:32:12Z",
"published": "2024-05-31T12:30:49Z",
"aliases": [
"CVE-2024-23692"
@@ -30,6 +30,10 @@
{
"type": "WEB",
"url": "https://vulncheck.com/advisories/rejetto-unauth-rce"
},
{
"type": "WEB",
"url": "https://www.vicarius.io/vsociety/posts/unauthenticated-rce-flaw-in-rejetto-http-file-server-cve-2024-23692"
}
],
"database_specific": {
advisories/unreviewed/2024/05/GHSA-wf54-f8v9-v72v/GHSA-wf54-f8v9-v72v.json
+15 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wf54-f8v9-v72v",
"modified": "2024-05-23T03:30:41Z",
"modified": "2025-01-28T00:32:12Z",
"published": "2024-05-23T03:30:41Z",
"aliases": [
"CVE-2024-4978"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
@@ -22,11 +26,20 @@
{
"type": "WEB",
"url": "https://twitter.com/2RunJack2/status/1775052981966377148"
},
{
"type": "WEB",
"url": "https://www.javs.com/downloads"
},
{
"type": "WEB",
"url": "https://www.rapid7.com/blog/post/2024/05/23/cve-2024-4978-backdoored-justice-av-solutions-viewer-software-used-in-apparent-supply-chain-attack"
}
],
"database_specific": {
"cwe_ids": [
"CWE-502"
"CWE-502",
"CWE-506"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-78v4-hxhf-xqqv/GHSA-78v4-hxhf-xqqv.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-78v4-hxhf-xqqv",
"modified": "2024-09-10T18:30:45Z",
"modified": "2025-01-28T00:32:12Z",
"published": "2024-09-10T18:30:45Z",
"aliases": [
"CVE-2024-38217"
@@ -22,6 +22,10 @@
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38217"
},
{
"type": "WEB",
"url": "https://www.elastic.co/security-labs/dismantling-smart-app-control"
}
],
"database_specific": {
advisories/unreviewed/2024/09/GHSA-mvx5-3q3c-pr6w/GHSA-mvx5-3q3c-pr6w.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mvx5-3q3c-pr6w",
"modified": "2024-09-10T18:30:45Z",
"modified": "2025-01-28T00:32:12Z",
"published": "2024-09-10T18:30:45Z",
"aliases": [
"CVE-2024-38014"
@@ -22,6 +22,10 @@
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38014"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Sep/43"
}
],
"database_specific": {
advisories/unreviewed/2025/01/GHSA-23h2-xx79-4xwr/GHSA-23h2-xx79-4xwr.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-23h2-xx79-4xwr",
"modified": "2025-01-28T00:32:14Z",
"published": "2025-01-28T00:32:14Z",
"aliases": [
"CVE-2025-24145"
],
"details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. An app may be able to view a contact's phone number in system logs.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24145"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122066"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122068"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-27T22:15:18Z"
}
}
advisories/unreviewed/2025/01/GHSA-23h9-xj7q-3m7r/GHSA-23h9-xj7q-3m7r.json
+41
View File
@@ -0,0 +1,41 @@
{
"schema_version": "1.4.0",
"id": "GHSA-23h9-xj7q-3m7r",
"modified": "2025-01-28T00:32:14Z",
"published": "2025-01-28T00:32:14Z",
"aliases": [
"CVE-2025-24143"
],
"details": "The issue was addressed with improved access restrictions to the file system. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24143"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122066"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122068"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122073"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122074"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-27T22:15:18Z"
}
}
advisories/unreviewed/2025/01/GHSA-25gv-4h88-97v2/GHSA-25gv-4h88-97v2.json
+37
View File
@@ -0,0 +1,37 @@
{
"schema_version": "1.4.0",
"id": "GHSA-25gv-4h88-97v2",
"modified": "2025-01-28T00:32:13Z",
"published": "2025-01-28T00:32:13Z",
"aliases": [
"CVE-2024-54520"
],
"details": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54520"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121839"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121840"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121842"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-27T22:15:13Z"
}
}
advisories/unreviewed/2025/01/GHSA-2f5q-2vvh-mm3g/GHSA-2f5q-2vvh-mm3g.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2f5q-2vvh-mm3g",
"modified": "2025-01-22T15:32:34Z",
"modified": "2025-01-28T00:32:13Z",
"published": "2025-01-22T15:32:34Z",
"aliases": [
"CVE-2023-37011"
],
"details": "Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `Handover Required` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-617"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-22T15:15:10Z"
advisories/unreviewed/2025/01/GHSA-2f87-7wqp-6j6j/GHSA-2f87-7wqp-6j6j.json
+53
View File
@@ -0,0 +1,53 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2f87-7wqp-6j6j",
"modified": "2025-01-28T00:32:14Z",
"published": "2025-01-28T00:32:14Z",
"aliases": [
"CVE-2025-24127"
],
"details": "The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24127"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122066"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122067"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122068"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122069"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122070"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122072"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122073"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-27T22:15:17Z"
}
}
advisories/unreviewed/2025/01/GHSA-2gv2-58w9-6q94/GHSA-2gv2-58w9-6q94.json
+57
View File
@@ -0,0 +1,57 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2gv2-58w9-6q94",
"modified": "2025-01-28T00:32:14Z",
"published": "2025-01-28T00:32:14Z",
"aliases": [
"CVE-2025-24149"
],
"details": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to disclosure of user information.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24149"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122066"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122067"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122068"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122069"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122070"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122071"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122072"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122073"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-27T22:15:19Z"
}
}
advisories/unreviewed/2025/01/GHSA-2mcv-q3q8-h36j/GHSA-2mcv-q3q8-h36j.json
+37
View File
@@ -0,0 +1,37 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2mcv-q3q8-h36j",
"modified": "2025-01-28T00:32:14Z",
"published": "2025-01-28T00:32:14Z",
"aliases": [
"CVE-2025-24139"
],
"details": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a maliciously crafted file may lead to an unexpected app termination.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24139"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122068"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122069"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122070"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-27T22:15:18Z"
}
}

Some files were not shown because too many files have changed in this diff Show More