admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-08 11:37:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-08-20T20:00:29.595789+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2023-08-20 20:00:33 +00:00
parent 28baffdd24
commit 329b144ca0
3 changed files with 62 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
CVE-2022/CVE-2022-249xx/CVE-2022-24989.json Normal file
View File

@ -0,0 +1,36 @@
{
"id": "CVE-2022-24989",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-08-20T18:15:09.523",
"lastModified": "2023-08-20T18:15:09.523",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used."
}
],
"metrics": {},
"references": [
{
"url": "https://attackerkb.com/topics/h8YKVKx21t/cve-2022-24990",
"source": "cve@mitre.org"
},
{
"url": "https://forum.terra-master.com/en/viewforum.php?f=28",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/0xf4n9x/CVE-2022-24990",
"source": "cve@mitre.org"
},
{
"url": "https://octagon.net/blog/2022/03/07/cve-2022-24990-terrmaster-tos-unauthenticated-remote-command-execution-via-php-object-instantiation",
"source": "cve@mitre.org"
},
{
"url": "https://packetstormsecurity.com/files/172904",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-366xx/CVE-2023-36674.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-36674",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-08-20T18:15:09.930",
"lastModified": "2023-08-20T18:15:09.930",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. It is possible to bypass the Bad image list (aka badFile) by using the thumb parameter (aka Manualthumb) of the File syntax."
}
],
"metrics": {},
"references": [
{
"url": "https://phabricator.wikimedia.org/T335612",
"source": "cve@mitre.org"
}
]
}

11
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-08-20T16:00:27.752757+00:00
2023-08-20T20:00:29.595789+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-08-20T15:15:29.760000+00:00
2023-08-20T18:15:09.930000+00:00
```
### Last Data Feed Release
@ -29,14 +29,15 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
223015
223017
```
### CVEs added in the last Commit
Recently added CVEs: `1`
Recently added CVEs: `2`
* [CVE-2023-4451](CVE-2023/CVE-2023-44xx/CVE-2023-4451.json) (`2023-08-20T15:15:29.760`)
* [CVE-2022-24989](CVE-2022/CVE-2022-249xx/CVE-2022-24989.json) (`2023-08-20T18:15:09.523`)
* [CVE-2023-36674](CVE-2023/CVE-2023-366xx/CVE-2023-36674.json) (`2023-08-20T18:15:09.930`)
### CVEs modified in the last Commit