Publish Advisories

GHSA-gx69-h78g-vjrh
GHSA-98m6-r63j-q88q
GHSA-fj8j-gcxq-9rvv

advisories/unreviewed/2024/05/GHSA-gx69-h78g-vjrh/GHSA-gx69-h78g-vjrh.json

@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gx69-h78g-vjrh",
-  "modified": "2024-05-21T18:31:21Z",
+  "modified": "2024-11-14T09:30:26Z",
   "published": "2024-05-21T18:31:21Z",
   "aliases": [
     "CVE-2023-52798"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: fix dfs radar event locking\n\nThe ath11k active pdevs are protected by RCU but the DFS radar event\nhandling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a\nread-side critical section.\n\nMark the code in question as an RCU read-side critical section to avoid\nany potential use-after-free issues.\n\nCompile tested only.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -45,9 +48,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-416"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-05-21T16:15:18Z"

advisories/unreviewed/2024/11/GHSA-98m6-r63j-q88q/GHSA-98m6-r63j-q88q.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-98m6-r63j-q88q",
+  "modified": "2024-11-14T09:30:26Z",
+  "published": "2024-11-14T09:30:26Z",
+  "aliases": [
+    "CVE-2024-11206"
+  ],
+  "details": "Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11206"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.tecno.com/SRC/blogdetail/340?lang=en_US"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.tecno.com/SRC/securityUpdates"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-269"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-14T07:15:17Z"
+  }
+}

advisories/unreviewed/2024/11/GHSA-fj8j-gcxq-9rvv/GHSA-fj8j-gcxq-9rvv.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fj8j-gcxq-9rvv",
+  "modified": "2024-11-14T09:30:26Z",
+  "published": "2024-11-14T09:30:26Z",
+  "aliases": [
+    "CVE-2024-7787"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ITG Computer Technology vSRM Supplier Relationship Management System allows Reflected XSS, Cross-Site Scripting (XSS).This issue affects vSRM Supplier Relationship Management System: before 28.08.2024.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7787"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.usom.gov.tr/bildirim/tr-24-1853"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-14T09:15:28Z"
+  }
+}