admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-07 11:07:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-05-11T04:00:23.658848+00:00

Browse Source
This commit is contained in:
René Helmke 2023-05-11 06:00:26 +02:00
parent aa42755b69
commit 45d1d94965
8 changed files with 122 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
CVE-2023/CVE-2023-299xx/CVE-2023-29986.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-29986",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-05-11T02:15:08.780",
"lastModified": "2023-05-11T02:15:08.780",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/lukashinsch/spring-boot-actuator-logview/issues/33",
"source": "cve@mitre.org"
}
]
}

24
CVE-2023/CVE-2023-301xx/CVE-2023-30172.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-30172",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-05-11T02:15:08.880",
"lastModified": "2023-05-11T02:15:08.880",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/mlflow/mlflow/issues/7166",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/mlflow/mlflow/issues/7166#issuecomment-1541543234",
"source": "cve@mitre.org"
}
]
}

8
CVE-2023/CVE-2023-309xx/CVE-2023-30943.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-30943",
"sourceIdentifier": "patrick@puiterwijk.org",
"published": "2023-05-02T20:15:10.943",
"lastModified": "2023-05-10T16:45:38.793",
"vulnStatus": "Analyzed",
"lastModified": "2023-05-11T03:15:09.633",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
@ -122,6 +122,10 @@
"Third Party Advisory"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBFSXRYLT4ICKJVQSRBAOUDMDRVSVBLS/",
"source": "patrick@puiterwijk.org"
},
{
"url": "https://moodle.org/mod/forum/discuss.php?d=446285",
"source": "patrick@puiterwijk.org",

8
CVE-2023/CVE-2023-309xx/CVE-2023-30944.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-30944",
"sourceIdentifier": "patrick@puiterwijk.org",
"published": "2023-05-02T20:15:11.013",
"lastModified": "2023-05-10T16:45:56.060",
"vulnStatus": "Analyzed",
"lastModified": "2023-05-11T03:15:09.887",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
@ -143,6 +143,10 @@
"Third Party Advisory"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBFSXRYLT4ICKJVQSRBAOUDMDRVSVBLS/",
"source": "patrick@puiterwijk.org"
},
{
"url": "https://moodle.org/mod/forum/discuss.php?d=446286",
"source": "patrick@puiterwijk.org",

8
CVE-2023/CVE-2023-312xx/CVE-2023-31223.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-31223",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-04-25T23:15:09.090",
"lastModified": "2023-05-04T19:47:24.003",
"vulnStatus": "Analyzed",
"lastModified": "2023-05-11T02:15:08.937",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
@ -91,6 +91,10 @@
"tags": [
"Release Notes"
]
},
{
"url": "https://excellium-services.com/cert-xlm-advisory/cve-2023-31223/",
"source": "cve@mitre.org"
}
]
}

24
CVE-2023/CVE-2023-314xx/CVE-2023-31442.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-31442",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-05-11T02:15:09.060",
"lastModified": "2023-05-11T02:15:09.060",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootstrap) uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to poisoning by an attacker. If the application performing discovery does not validate (e.g., via TLS) the authenticity of the discovered service, this may result in exfiltration of application data (e.g., persistence events may be published to an unintended Kafka broker). If such validation is performed, then the poisoning constitutes a denial of access to the intended service. This affects Akka 2.5.14 through 2.8.0, and Akka Discovery through 2.8.0."
}
],
"metrics": {},
"references": [
{
"url": "https://akka.io/security/akka-async-dns-2023-31442.html",
"source": "cve@mitre.org"
},
{
"url": "https://lightbend.com",
"source": "cve@mitre.org"
}
]
}

24
CVE-2023/CVE-2023-314xx/CVE-2023-31477.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-31477",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-05-11T02:15:09.103",
"lastModified": "2023-05-11T02:15:09.103",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/gl-inet/CVE-issues/blob/main/3.215/Path_Traversal.md",
"source": "cve@mitre.org"
},
{
"url": "https://www.gl-inet.com",
"source": "cve@mitre.org"
}
]
}

26
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-05-11T02:00:24.256997+00:00
2023-05-11T04:00:23.658848+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-05-11T01:49:39.893000+00:00
2023-05-11T03:15:09.887000+00:00
```
### Last Data Feed Release
@ -29,28 +29,26 @@ Download and Changelog: [Click](releases/latest)
### Total Number of included CVEs
```plain
214872
214876
```
### CVEs added in the last Commit
Recently added CVEs: `0`
Recently added CVEs: `4`
* [CVE-2023-29986](CVE-2023/CVE-2023-299xx/CVE-2023-29986.json) (`2023-05-11T02:15:08.780`)
* [CVE-2023-30172](CVE-2023/CVE-2023-301xx/CVE-2023-30172.json) (`2023-05-11T02:15:08.880`)
* [CVE-2023-31442](CVE-2023/CVE-2023-314xx/CVE-2023-31442.json) (`2023-05-11T02:15:09.060`)
* [CVE-2023-31477](CVE-2023/CVE-2023-314xx/CVE-2023-31477.json) (`2023-05-11T02:15:09.103`)
### CVEs modified in the last Commit
Recently modified CVEs: `9`
Recently modified CVEs: `3`
* [CVE-2023-21499](CVE-2023/CVE-2023-214xx/CVE-2023-21499.json) (`2023-05-11T01:49:39.893`)
* [CVE-2023-21503](CVE-2023/CVE-2023-215xx/CVE-2023-21503.json) (`2023-05-11T01:41:48.227`)
* [CVE-2023-21504](CVE-2023/CVE-2023-215xx/CVE-2023-21504.json) (`2023-05-11T01:46:19.507`)
* [CVE-2023-21508](CVE-2023/CVE-2023-215xx/CVE-2023-21508.json) (`2023-05-11T01:29:01.450`)
* [CVE-2023-21509](CVE-2023/CVE-2023-215xx/CVE-2023-21509.json) (`2023-05-11T01:17:07.223`)
* [CVE-2023-21510](CVE-2023/CVE-2023-215xx/CVE-2023-21510.json) (`2023-05-11T01:11:12.747`)
* [CVE-2023-21511](CVE-2023/CVE-2023-215xx/CVE-2023-21511.json) (`2023-05-11T01:19:13.570`)
* [CVE-2023-30094](CVE-2023/CVE-2023-300xx/CVE-2023-30094.json) (`2023-05-11T00:59:41.957`)
* [CVE-2023-30095](CVE-2023/CVE-2023-300xx/CVE-2023-30095.json) (`2023-05-11T00:55:48.617`)
* [CVE-2023-30943](CVE-2023/CVE-2023-309xx/CVE-2023-30943.json) (`2023-05-11T03:15:09.633`)
* [CVE-2023-30944](CVE-2023/CVE-2023-309xx/CVE-2023-30944.json) (`2023-05-11T03:15:09.887`)
* [CVE-2023-31223](CVE-2023/CVE-2023-312xx/CVE-2023-31223.json) (`2023-05-11T02:15:08.937`)
## Download and Usage