Auto-Update: 2024-09-06T10:00:17.514676+00:00

This commit is contained in:
cad-safe-bot 2024-09-06 10:03:16 +00:00
parent d2b9d5a91b
commit 360f283a04
6 changed files with 93 additions and 18 deletions

View File

@ -0,0 +1,49 @@
{
"id": "CVE-2023-52915",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-09-06T09:15:02.787",
"lastModified": "2024-09-06T09:15:02.787",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer\n\nIn af9035_i2c_master_xfer, msg is controlled by user. When msg[i].buf\nis null and msg[i].len is zero, former checks on msg[i].buf would be\npassed. Malicious data finally reach af9035_i2c_master_xfer. If accessing\nmsg[i].buf[0] without sanity check, null ptr deref would happen.\nWe add check on msg[i].len to prevent crash.\n\nSimilar commit:\ncommit 0ed554fd769a\n(\"media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()\")"
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/0143f282b15f7cedc0392ea10050fb6000fd16e6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/41b7181a40af84448a2b144fb02d8bf32b7e9a23",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6c01ef65de0b321b2db1ef9abf8f1d15862b937e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/7bf744f2de0a848fb1d717f5831b03db96feae89",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/b2f54ed7739dfdf42c4df0a11131aad7c8635464",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/b49c6e5dd236787f13a062ec528d724169f11152",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d9ef84a7c222497ecb5fdf93361c76931804825e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fa58d9db5cad4bb7bb694b6837e3b96d87554f2b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}

View File

@ -0,0 +1,21 @@
{
"id": "CVE-2023-52916",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-09-06T09:15:03.327",
"lastModified": "2024-09-06T09:15:03.327",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: aspeed: Fix memory overwrite if timing is 1600x900\n\nWhen capturing 1600x900, system could crash when system memory usage is\ntight.\n\nThe way to reproduce this issue:\n1. Use 1600x900 to display on host\n2. Mount ISO through 'Virtual media' on OpenBMC's web\n3. Run script as below on host to do sha continuously\n #!/bin/bash\n while [ [1] ];\n do\n\tfind /media -type f -printf '\"%h/%f\"\\n' | xargs sha256sum\n done\n4. Open KVM on OpenBMC's web\n\nThe size of macro block captured is 8x8. Therefore, we should make sure\nthe height of src-buf is 8 aligned to fix this issue."
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/c281355068bc258fd619c5aefd978595bede7bfe",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}

View File

@ -2,7 +2,7 @@
"id": "CVE-2024-0323",
"sourceIdentifier": "cybersecurity@ch.abb.com",
"published": "2024-02-05T16:15:54.980",
"lastModified": "2024-05-27T08:15:09.220",
"lastModified": "2024-09-06T08:15:02.187",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@ -66,7 +66,7 @@
"description": [
{
"lang": "en",
"value": "CWE-327"
"value": "CWE-1240"
}
]
}

View File

@ -9,6 +9,10 @@
{
"lang": "en",
"value": "The Frontend Post Submission Manager Lite \u2013 Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_global_settings and process_form_edit functions in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings and forms."
},
{
"lang": "es",
"value": "El complemento Frontend Post Submission Manager Lite \u2013 Frontend Posting WordPress Plugin para WordPress es vulnerable a la modificaci\u00f3n no autorizada de datos debido a una verificaci\u00f3n de capacidad faltante en las funciones save_global_settings y process_form_edit en todas las versiones hasta la 1.2.2 incluida. Esto permite que atacantes autenticados, con acceso de nivel de suscriptor y superior, actualicen la configuraci\u00f3n y los formularios del complemento."
}
],
"metrics": {

View File

@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2024-09-06T08:00:16.705413+00:00
2024-09-06T10:00:17.514676+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2024-09-06T07:15:03.730000+00:00
2024-09-06T09:15:03.327000+00:00
```
### Last Data Feed Release
@ -33,24 +33,23 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
262050
262052
```
### CVEs added in the last Commit
Recently added CVEs: `5`
Recently added CVEs: `2`
- [CVE-2024-6792](CVE-2024/CVE-2024-67xx/CVE-2024-6792.json) (`2024-09-06T06:15:02.870`)
- [CVE-2024-7349](CVE-2024/CVE-2024-73xx/CVE-2024-7349.json) (`2024-09-06T07:15:02.427`)
- [CVE-2024-8292](CVE-2024/CVE-2024-82xx/CVE-2024-8292.json) (`2024-09-06T07:15:03.010`)
- [CVE-2024-8317](CVE-2024/CVE-2024-83xx/CVE-2024-8317.json) (`2024-09-06T07:15:03.367`)
- [CVE-2024-8427](CVE-2024/CVE-2024-84xx/CVE-2024-8427.json) (`2024-09-06T07:15:03.730`)
- [CVE-2023-52915](CVE-2023/CVE-2023-529xx/CVE-2023-52915.json) (`2024-09-06T09:15:02.787`)
- [CVE-2023-52916](CVE-2023/CVE-2023-529xx/CVE-2023-52916.json) (`2024-09-06T09:15:03.327`)
### CVEs modified in the last Commit
Recently modified CVEs: `0`
Recently modified CVEs: `2`
- [CVE-2024-0323](CVE-2024/CVE-2024-03xx/CVE-2024-0323.json) (`2024-09-06T08:15:02.187`)
- [CVE-2024-8427](CVE-2024/CVE-2024-84xx/CVE-2024-8427.json) (`2024-09-06T07:15:03.730`)
## Download and Usage

View File

@ -239350,6 +239350,8 @@ CVE-2023-52911,0,0,d583bf0c3994a5cde3f25badb72d8404d832e6fe0d8e110e053203df0effa
CVE-2023-52912,0,0,76d151333b77b2bd9a44e2c7429e02509b46f2a3384c99f9d0812059fa9223aa,2024-08-21T12:30:33.697000
CVE-2023-52913,0,0,e1054c26f9dea56ffd68b68caf0b3e79a17694aea6f3abb40c24e04a641898c2,2024-08-21T12:30:33.697000
CVE-2023-52914,0,0,ea9dbf463cbd5598879fed8b6374213941d18b44baa0478af4d6ebdab43bbea1,2024-08-21T12:30:33.697000
CVE-2023-52915,1,1,560a33ca833c5008ad79310df72489ae89ae89d7ee73192cbfd19001662338d7,2024-09-06T09:15:02.787000
CVE-2023-52916,1,1,7188a94eed0c047f7063c587d7aaef2c15321eae9d730bdadf656b2147f30ff9,2024-09-06T09:15:03.327000
CVE-2023-5292,0,0,214d7ae5654e29ed0e372211abf39e379cdbd830eab553609e162ffb791fd787,2023-11-07T04:23:48.910000
CVE-2023-5293,0,0,37b5570c94c226fac17bbeba13451e285dd87937cebf55577645a70e3fbcf851,2024-05-17T02:32:58.843000
CVE-2023-5294,0,0,91871d88408d7e2bcaad4b05fb484ac2315248d3665cd88ba6ae47f2da8d5f16,2024-05-17T02:32:58.950000
@ -241369,7 +241371,7 @@ CVE-2024-0319,0,0,2bc36d0efa73c85b6202a06a77918ee2f648e57ac536f2042b74db66c5108d
CVE-2024-0320,0,0,64cf09c501c10205e973849d40d90dbb1b6f2db05c7d32c590a12a7ef16c5107,2024-01-19T18:15:14.547000
CVE-2024-0321,0,0,8fef86b868399b10992f1d435a5d694e3f6ea802619c3452069d3cc796e0c9ff,2024-01-11T20:50:46.433000
CVE-2024-0322,0,0,b90cc499637562a6466f9c80b6820aa99de9026e0e21b1142a4ddffb560e74fc,2024-01-11T17:36:34.290000
CVE-2024-0323,0,0,b3bed006f433732346228bbec3a3b62066fb0a3abba7abdaab604d7bd54645be,2024-05-27T08:15:09.220000
CVE-2024-0323,0,1,fffa5927d86d72aa4b81476fe04568f9dcb24aa73ab6b5c4e2620ac0ecc5f43d,2024-09-06T08:15:02.187000
CVE-2024-0324,0,0,7cfebbb273b8905e8e010392b8d4920581b0352aaa5ac10550b08be940325ca7,2024-02-13T18:53:03.170000
CVE-2024-0325,0,0,b11f466ff4ff08fafe0e1564b77e877f7ef01996631763e0cca61be78af48cfb,2024-02-09T19:48:49.967000
CVE-2024-0326,0,0,46531da0f2066fdd9f046a34fce12789358ed55a6f22b205eff42d5de697942f,2024-03-13T18:16:18.563000
@ -261039,7 +261041,7 @@ CVE-2024-6783,0,0,6f1f4a0fa578d50da4a4853fdfd24c63ba19a8604300ab142edf0f6cb8d9a8
CVE-2024-6788,0,0,55fb0d510962e755b83a0ccc2efad4312001b246df777a622c08f48560e29a88,2024-08-13T17:11:53.553000
CVE-2024-6789,0,0,231bd77c8db40b763ff18cdedd6d2a472872c681c24ea5a4e63b0563b010d2cc,2024-08-27T13:01:37.913000
CVE-2024-6791,0,0,530a9e011d938f884a817484b487117900f43c2f83e7c51084019bfb404fc80f,2024-07-24T12:55:13.223000
CVE-2024-6792,1,1,9c2bd3a4fbbdddb70c80ad581a2122a6df07456cd7e61f4bed1857dfd8577db9,2024-09-06T06:15:02.870000
CVE-2024-6792,0,0,9c2bd3a4fbbdddb70c80ad581a2122a6df07456cd7e61f4bed1857dfd8577db9,2024-09-06T06:15:02.870000
CVE-2024-6793,0,0,d3b7076c1491770aa57006b0fda0ca29233a316fd768110e179dab36334b145c,2024-07-24T12:55:13.223000
CVE-2024-6794,0,0,deb0448edb68525192d212a4a5bb7cd3beda8036c6e71adf051ab04617417890,2024-07-24T12:55:13.223000
CVE-2024-6799,0,0,4139a727efc5bbba878823dd77da7ecbccc0d31113ed4001d69cc00c0e6e86e7,2024-07-19T13:01:44.567000
@ -261407,7 +261409,7 @@ CVE-2024-7345,0,0,c89352b78a1b7efddda76024ace56eb1677600f94378ef8d33d34c3c91ac18
CVE-2024-7346,0,0,cef11b112b151333dc0322cebc750df5acd76278a7b270f016213e5f5d953fa0,2024-09-05T14:03:24.040000
CVE-2024-7347,0,0,bf8562cb670939d7931c5691727a53bfc7fe78942e30ee3ed14dd0e17a8cc5f7,2024-08-20T19:25:17.513000
CVE-2024-7348,0,0,3d1228f3ad08ea7cfe68d4df8a31a5ae3b9df9b86e858b3756b13b4b2c220a8e,2024-08-12T15:54:52.320000
CVE-2024-7349,1,1,e93583feabf9830482df39d1bafc72f95139cf7754f39b144f8dd2e142c1be12,2024-09-06T07:15:02.427000
CVE-2024-7349,0,0,e93583feabf9830482df39d1bafc72f95139cf7754f39b144f8dd2e142c1be12,2024-09-06T07:15:02.427000
CVE-2024-7350,0,0,d4174556ac92d5e9a2a8dc8d5eec461477866543996df72c5d41b5df846ab0dc,2024-08-08T13:04:18.753000
CVE-2024-7351,0,0,46112fbe28a33af24a9aafee0e565b5b19cc9895d9dd5029b9f8903f830d37b0,2024-08-26T12:47:20.187000
CVE-2024-7353,0,0,41679b571aeb0f65d12733ad6909f06c490b83d168f3a79e42cd0098d7b4bdde,2024-08-07T15:17:46.717000
@ -261962,7 +261964,7 @@ CVE-2024-8274,0,0,81f15088246893eaf3249a3304ee5d5199071263c8883a7f9f22c293a16a37
CVE-2024-8276,0,0,6d091b531458424cc4635f6e051f410dabbe91d1101fd761130b66815a93f34d,2024-09-03T12:59:02.453000
CVE-2024-8285,0,0,3b0be068594bf7034dac9ef4fa68f5d83c55fdc692ee8082bd0a6e0eca73c78a,2024-09-03T12:59:02.453000
CVE-2024-8289,0,0,900bfbd861154484ed59254bdbec992d28a9742381ab830cf631e50b7fa985ab,2024-09-05T17:41:58.350000
CVE-2024-8292,1,1,4009a682cec21e495630393f4f375c014b2e369959beefbca4f329b8da052df1,2024-09-06T07:15:03.010000
CVE-2024-8292,0,0,4009a682cec21e495630393f4f375c014b2e369959beefbca4f329b8da052df1,2024-09-06T07:15:03.010000
CVE-2024-8294,0,0,76cafe7a1838d9cd0244706a299f12cd4ba69ef653952654db2fa070ca07bd0d,2024-08-30T15:38:13.437000
CVE-2024-8295,0,0,907331a3a97a6618443e3aff92f4e758c3135b25ca0d9fb01d74d067e9cd6716,2024-08-30T15:37:41.510000
CVE-2024-8296,0,0,e31c225486c181d770097ee2f86386b9a5d776a033c8c4a5860d3ba550c9de51,2024-08-30T15:36:36.383000
@ -261972,7 +261974,7 @@ CVE-2024-8301,0,0,517ca402c22af2219c7d5e72c26f25471bc06be609f1fc004544a29726452f
CVE-2024-8302,0,0,bda50b555854cd31882c0ef2167f779bd3ff1746a67f4e225a03fe8a32f42f3f,2024-08-30T13:00:05.390000
CVE-2024-8303,0,0,7d291660edacb98ef58ef33c4f7785c68c1ad74e546b2f9d99bc765dad9ef6ed,2024-08-30T13:00:05.390000
CVE-2024-8304,0,0,02fe3479f6e17fb07e472eabe123127bcfa4991aa0aa38b065a739eef0a9393c,2024-08-30T13:00:05.390000
CVE-2024-8317,1,1,3cb000bbb75ee8c17760f18090bb630c50f2fcee48151def5a8f7e675bfb284d,2024-09-06T07:15:03.367000
CVE-2024-8317,0,0,3cb000bbb75ee8c17760f18090bb630c50f2fcee48151def5a8f7e675bfb284d,2024-09-06T07:15:03.367000
CVE-2024-8318,0,0,5a1c058346165498258e6a0dbcca1e25ab26db572376e8715726de97a7feed6e,2024-09-04T13:05:36.067000
CVE-2024-8319,0,0,19bee7e43deb1719502aef7eb4c05b0fb28cffea0ae04999821f01ddbcc0e265,2024-09-03T14:43:13.787000
CVE-2024-8325,0,0,6acbe28b7e23bada826026212a2fb1b0115adaa2c5e690e584f377990b0f6742,2024-09-04T13:05:36.067000
@ -262032,7 +262034,7 @@ CVE-2024-8415,0,0,d8c5585e64bc4323fcda510a16df97bcb1ec11253c5d38c080bb7195e38687
CVE-2024-8416,0,0,c7d13bc001a0210b2e719e08e8651ac5ae2e4ed0ee9e6e0088ac4a7e467de1ca,2024-09-05T12:53:21.110000
CVE-2024-8417,0,0,a9619e26c595954087d9c9b458e78703071fbd5bf87ff4a22ec6d8ecc7076fcb,2024-09-05T12:53:21.110000
CVE-2024-8418,0,0,f7342b1aaf36f471815aa50c659bed6ce97deba1a8dc8297ac025dec31c9e421,2024-09-05T14:18:49.537000
CVE-2024-8427,1,1,581d5c4bf704c71393eb65bb553ddd176e063505e33cb27fb43385569ea41f58,2024-09-06T07:15:03.730000
CVE-2024-8427,0,1,1d50102d24d8ed8471d2cb6f8fc447b6fe7f5b0370e286ec2d09b8df1e8889ab,2024-09-06T07:15:03.730000
CVE-2024-8445,0,0,11be885f11a2f2b8a202932b0e16edeb442a7212afe3a0c8e195900656f3fddf,2024-09-05T17:44:56.007000
CVE-2024-8460,0,0,9f3f8eceb3112773f2710cd04ce3ea02c4b8eea37add051a54caa5d3f11f68a4,2024-09-05T12:53:21.110000
CVE-2024-8461,0,0,e49804a708251a77ac276dc2c87288b6f990bf8f9a9704c388f55d96a1de96d3,2024-09-05T17:45:07.877000

Can't render this file because it is too large.