Publish Advisories

GHSA-pf3p-v9xp-mrvf
GHSA-q5h6-49gg-2wfg
This commit is contained in:
advisory-database[bot]
2024-05-02 05:07:18 +00:00
parent 954284ffb8
commit ffb4c092ff
2 changed files with 5 additions and 5 deletions
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pf3p-v9xp-mrvf",
"modified": "2024-04-22T22:36:09Z",
"modified": "2024-04-22T22:36:30Z",
"published": "2022-05-24T22:00:30Z",
"aliases": [
"CVE-2019-16227"
],
"summary": "py_lmdb Invalid write operation",
"summary": "py-lmdb Invalid write operation",
"details": "An issue was discovered in py-lmdb 0.97. For certain values of `mn_flags`, `mdb_cursor_set` triggers a memcpy with an invalid write operation within `mdb_xcursor_init1`. NOTE: this outcome occurs when accessing a `data.mdb` file supplied by an attacker.",
"severity": [
{
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q5h6-49gg-2wfg",
"modified": "2024-04-22T22:12:57Z",
"modified": "2024-04-22T22:14:03Z",
"published": "2022-05-24T17:42:31Z",
"aliases": [
"CVE-2020-36245"
],
"summary": "GramAddict bot uses dependency with reverse tcp backdoor",
"details": "GramAddict through 2.0.0 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.",
"details": "GramAddict before 1.2.5 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.",
"severity": [
{
"type": "CVSS_V3",
@@ -28,7 +28,7 @@
"introduced": "0"
},
{
"last_affected": "2.0.0"
"fixed": "1.2.5"
}
]
}