diff --git a/CVE-2023/CVE-2023-299xx/CVE-2023-29986.json b/CVE-2023/CVE-2023-299xx/CVE-2023-29986.json new file mode 100644 index 00000000000..0bd6d0b62da --- /dev/null +++ b/CVE-2023/CVE-2023-299xx/CVE-2023-29986.json @@ -0,0 +1,20 @@ +{ + "id": "CVE-2023-29986", + "sourceIdentifier": "cve@mitre.org", + "published": "2023-05-11T02:15:08.780", + "lastModified": "2023-05-11T02:15:08.780", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/lukashinsch/spring-boot-actuator-logview/issues/33", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-301xx/CVE-2023-30172.json b/CVE-2023/CVE-2023-301xx/CVE-2023-30172.json new file mode 100644 index 00000000000..cb4cec1a6d9 --- /dev/null +++ b/CVE-2023/CVE-2023-301xx/CVE-2023-30172.json @@ -0,0 +1,24 @@ +{ + "id": "CVE-2023-30172", + "sourceIdentifier": "cve@mitre.org", + "published": "2023-05-11T02:15:08.880", + "lastModified": "2023-05-11T02:15:08.880", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/mlflow/mlflow/issues/7166", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/mlflow/mlflow/issues/7166#issuecomment-1541543234", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-309xx/CVE-2023-30943.json b/CVE-2023/CVE-2023-309xx/CVE-2023-30943.json index 529c48eff1a..3a4792c615b 100644 --- a/CVE-2023/CVE-2023-309xx/CVE-2023-30943.json +++ b/CVE-2023/CVE-2023-309xx/CVE-2023-30943.json @@ -2,8 +2,8 @@ "id": "CVE-2023-30943", "sourceIdentifier": "patrick@puiterwijk.org", "published": "2023-05-02T20:15:10.943", - "lastModified": "2023-05-10T16:45:38.793", - "vulnStatus": "Analyzed", + "lastModified": "2023-05-11T03:15:09.633", + "vulnStatus": "Modified", "descriptions": [ { "lang": "en", @@ -122,6 +122,10 @@ "Third Party Advisory" ] }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBFSXRYLT4ICKJVQSRBAOUDMDRVSVBLS/", + "source": "patrick@puiterwijk.org" + }, { "url": "https://moodle.org/mod/forum/discuss.php?d=446285", "source": "patrick@puiterwijk.org", diff --git a/CVE-2023/CVE-2023-309xx/CVE-2023-30944.json b/CVE-2023/CVE-2023-309xx/CVE-2023-30944.json index 61bf61be838..d3a20b4fff9 100644 --- a/CVE-2023/CVE-2023-309xx/CVE-2023-30944.json +++ b/CVE-2023/CVE-2023-309xx/CVE-2023-30944.json @@ -2,8 +2,8 @@ "id": "CVE-2023-30944", "sourceIdentifier": "patrick@puiterwijk.org", "published": "2023-05-02T20:15:11.013", - "lastModified": "2023-05-10T16:45:56.060", - "vulnStatus": "Analyzed", + "lastModified": "2023-05-11T03:15:09.887", + "vulnStatus": "Modified", "descriptions": [ { "lang": "en", @@ -143,6 +143,10 @@ "Third Party Advisory" ] }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBFSXRYLT4ICKJVQSRBAOUDMDRVSVBLS/", + "source": "patrick@puiterwijk.org" + }, { "url": "https://moodle.org/mod/forum/discuss.php?d=446286", "source": "patrick@puiterwijk.org", diff --git a/CVE-2023/CVE-2023-312xx/CVE-2023-31223.json b/CVE-2023/CVE-2023-312xx/CVE-2023-31223.json index 3eb45d4c45b..9b70ecc00d9 100644 --- a/CVE-2023/CVE-2023-312xx/CVE-2023-31223.json +++ b/CVE-2023/CVE-2023-312xx/CVE-2023-31223.json @@ -2,8 +2,8 @@ "id": "CVE-2023-31223", "sourceIdentifier": "cve@mitre.org", "published": "2023-04-25T23:15:09.090", - "lastModified": "2023-05-04T19:47:24.003", - "vulnStatus": "Analyzed", + "lastModified": "2023-05-11T02:15:08.937", + "vulnStatus": "Modified", "descriptions": [ { "lang": "en", @@ -91,6 +91,10 @@ "tags": [ "Release Notes" ] + }, + { + "url": "https://excellium-services.com/cert-xlm-advisory/cve-2023-31223/", + "source": "cve@mitre.org" } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-314xx/CVE-2023-31442.json b/CVE-2023/CVE-2023-314xx/CVE-2023-31442.json new file mode 100644 index 00000000000..cd45939ff53 --- /dev/null +++ b/CVE-2023/CVE-2023-314xx/CVE-2023-31442.json @@ -0,0 +1,24 @@ +{ + "id": "CVE-2023-31442", + "sourceIdentifier": "cve@mitre.org", + "published": "2023-05-11T02:15:09.060", + "lastModified": "2023-05-11T02:15:09.060", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootstrap) uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to poisoning by an attacker. If the application performing discovery does not validate (e.g., via TLS) the authenticity of the discovered service, this may result in exfiltration of application data (e.g., persistence events may be published to an unintended Kafka broker). If such validation is performed, then the poisoning constitutes a denial of access to the intended service. This affects Akka 2.5.14 through 2.8.0, and Akka Discovery through 2.8.0." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://akka.io/security/akka-async-dns-2023-31442.html", + "source": "cve@mitre.org" + }, + { + "url": "https://lightbend.com", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-314xx/CVE-2023-31477.json b/CVE-2023/CVE-2023-314xx/CVE-2023-31477.json new file mode 100644 index 00000000000..8303ce5d43b --- /dev/null +++ b/CVE-2023/CVE-2023-314xx/CVE-2023-31477.json @@ -0,0 +1,24 @@ +{ + "id": "CVE-2023-31477", + "sourceIdentifier": "cve@mitre.org", + "published": "2023-05-11T02:15:09.103", + "lastModified": "2023-05-11T02:15:09.103", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/gl-inet/CVE-issues/blob/main/3.215/Path_Traversal.md", + "source": "cve@mitre.org" + }, + { + "url": "https://www.gl-inet.com", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 2fdc9ee632f..50ec0ed2a8a 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2023-05-11T02:00:24.256997+00:00 +2023-05-11T04:00:23.658848+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2023-05-11T01:49:39.893000+00:00 +2023-05-11T03:15:09.887000+00:00 ``` ### Last Data Feed Release @@ -29,28 +29,26 @@ Download and Changelog: [Click](releases/latest) ### Total Number of included CVEs ```plain -214872 +214876 ``` ### CVEs added in the last Commit -Recently added CVEs: `0` +Recently added CVEs: `4` +* [CVE-2023-29986](CVE-2023/CVE-2023-299xx/CVE-2023-29986.json) (`2023-05-11T02:15:08.780`) +* [CVE-2023-30172](CVE-2023/CVE-2023-301xx/CVE-2023-30172.json) (`2023-05-11T02:15:08.880`) +* [CVE-2023-31442](CVE-2023/CVE-2023-314xx/CVE-2023-31442.json) (`2023-05-11T02:15:09.060`) +* [CVE-2023-31477](CVE-2023/CVE-2023-314xx/CVE-2023-31477.json) (`2023-05-11T02:15:09.103`) ### CVEs modified in the last Commit -Recently modified CVEs: `9` +Recently modified CVEs: `3` -* [CVE-2023-21499](CVE-2023/CVE-2023-214xx/CVE-2023-21499.json) (`2023-05-11T01:49:39.893`) -* [CVE-2023-21503](CVE-2023/CVE-2023-215xx/CVE-2023-21503.json) (`2023-05-11T01:41:48.227`) -* [CVE-2023-21504](CVE-2023/CVE-2023-215xx/CVE-2023-21504.json) (`2023-05-11T01:46:19.507`) -* [CVE-2023-21508](CVE-2023/CVE-2023-215xx/CVE-2023-21508.json) (`2023-05-11T01:29:01.450`) -* [CVE-2023-21509](CVE-2023/CVE-2023-215xx/CVE-2023-21509.json) (`2023-05-11T01:17:07.223`) -* [CVE-2023-21510](CVE-2023/CVE-2023-215xx/CVE-2023-21510.json) (`2023-05-11T01:11:12.747`) -* [CVE-2023-21511](CVE-2023/CVE-2023-215xx/CVE-2023-21511.json) (`2023-05-11T01:19:13.570`) -* [CVE-2023-30094](CVE-2023/CVE-2023-300xx/CVE-2023-30094.json) (`2023-05-11T00:59:41.957`) -* [CVE-2023-30095](CVE-2023/CVE-2023-300xx/CVE-2023-30095.json) (`2023-05-11T00:55:48.617`) +* [CVE-2023-30943](CVE-2023/CVE-2023-309xx/CVE-2023-30943.json) (`2023-05-11T03:15:09.633`) +* [CVE-2023-30944](CVE-2023/CVE-2023-309xx/CVE-2023-30944.json) (`2023-05-11T03:15:09.887`) +* [CVE-2023-31223](CVE-2023/CVE-2023-312xx/CVE-2023-31223.json) (`2023-05-11T02:15:08.937`) ## Download and Usage