Auto-Update: 2023-08-29T14:00:25.414935+00:00

This commit is contained in:
cad-safe-bot 2023-08-29 14:00:28 +00:00
parent 9066d46f7b
commit 7aedc43f87
11 changed files with 222 additions and 27 deletions

View File

@ -2,8 +2,8 @@
"id": "CVE-2023-23770", "id": "CVE-2023-23770",
"sourceIdentifier": "cert@ncsc.nl", "sourceIdentifier": "cert@ncsc.nl",
"published": "2023-08-29T09:15:07.993", "published": "2023-08-29T09:15:07.993",
"lastModified": "2023-08-29T09:15:07.993", "lastModified": "2023-08-29T13:34:55.187",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",

View File

@ -2,8 +2,8 @@
"id": "CVE-2023-23771", "id": "CVE-2023-23771",
"sourceIdentifier": "cert@ncsc.nl", "sourceIdentifier": "cert@ncsc.nl",
"published": "2023-08-29T09:15:08.910", "published": "2023-08-29T09:15:08.910",
"lastModified": "2023-08-29T09:15:08.910", "lastModified": "2023-08-29T13:34:55.187",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",

View File

@ -2,8 +2,8 @@
"id": "CVE-2023-23772", "id": "CVE-2023-23772",
"sourceIdentifier": "cert@ncsc.nl", "sourceIdentifier": "cert@ncsc.nl",
"published": "2023-08-29T09:15:09.193", "published": "2023-08-29T09:15:09.193",
"lastModified": "2023-08-29T09:15:09.193", "lastModified": "2023-08-29T13:34:55.187",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",

View File

@ -2,8 +2,8 @@
"id": "CVE-2023-23773", "id": "CVE-2023-23773",
"sourceIdentifier": "cert@ncsc.nl", "sourceIdentifier": "cert@ncsc.nl",
"published": "2023-08-29T09:15:09.330", "published": "2023-08-29T09:15:09.330",
"lastModified": "2023-08-29T09:15:09.330", "lastModified": "2023-08-29T13:34:55.187",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",

View File

@ -2,8 +2,8 @@
"id": "CVE-2023-23774", "id": "CVE-2023-23774",
"sourceIdentifier": "cert@ncsc.nl", "sourceIdentifier": "cert@ncsc.nl",
"published": "2023-08-29T09:15:09.403", "published": "2023-08-29T09:15:09.403",
"lastModified": "2023-08-29T09:15:09.403", "lastModified": "2023-08-29T13:34:55.187",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",

View File

@ -2,8 +2,8 @@
"id": "CVE-2023-32457", "id": "CVE-2023-32457",
"sourceIdentifier": "security_alert@emc.com", "sourceIdentifier": "security_alert@emc.com",
"published": "2023-08-29T08:15:34.120", "published": "2023-08-29T08:15:34.120",
"lastModified": "2023-08-29T08:15:34.120", "lastModified": "2023-08-29T13:34:55.187",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",

View File

@ -2,8 +2,8 @@
"id": "CVE-2023-37435", "id": "CVE-2023-37435",
"sourceIdentifier": "security-alert@hpe.com", "sourceIdentifier": "security-alert@hpe.com",
"published": "2023-08-22T19:16:38.450", "published": "2023-08-22T19:16:38.450",
"lastModified": "2023-08-22T20:10:36.537", "lastModified": "2023-08-29T12:58:20.970",
"vulnStatus": "Awaiting Analysis", "vulnStatus": "Analyzed",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",
@ -12,6 +12,26 @@
], ],
"metrics": { "metrics": {
"cvssMetricV31": [ "cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.2,
"impactScore": 5.2
},
{ {
"source": "security-alert@hpe.com", "source": "security-alert@hpe.com",
"type": "Secondary", "type": "Secondary",
@ -34,10 +54,44 @@
} }
] ]
}, },
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.3.1",
"matchCriteriaId": "1EB5B1A1-792C-4AA9-AB5D-99B14DB57E66"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt", "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt",
"source": "security-alert@hpe.com" "source": "security-alert@hpe.com",
"tags": [
"Mitigation",
"Vendor Advisory"
]
} }
] ]
} }

View File

@ -2,8 +2,8 @@
"id": "CVE-2023-37436", "id": "CVE-2023-37436",
"sourceIdentifier": "security-alert@hpe.com", "sourceIdentifier": "security-alert@hpe.com",
"published": "2023-08-22T19:16:38.543", "published": "2023-08-22T19:16:38.543",
"lastModified": "2023-08-22T20:10:36.537", "lastModified": "2023-08-29T13:19:12.480",
"vulnStatus": "Awaiting Analysis", "vulnStatus": "Analyzed",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",
@ -12,6 +12,26 @@
], ],
"metrics": { "metrics": {
"cvssMetricV31": [ "cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.2,
"impactScore": 5.2
},
{ {
"source": "security-alert@hpe.com", "source": "security-alert@hpe.com",
"type": "Secondary", "type": "Secondary",
@ -34,10 +54,44 @@
} }
] ]
}, },
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.3.1",
"matchCriteriaId": "1EB5B1A1-792C-4AA9-AB5D-99B14DB57E66"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt", "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt",
"source": "security-alert@hpe.com" "source": "security-alert@hpe.com",
"tags": [
"Mitigation",
"Vendor Advisory"
]
} }
] ]
} }

View File

@ -2,8 +2,8 @@
"id": "CVE-2023-37437", "id": "CVE-2023-37437",
"sourceIdentifier": "security-alert@hpe.com", "sourceIdentifier": "security-alert@hpe.com",
"published": "2023-08-22T19:16:38.640", "published": "2023-08-22T19:16:38.640",
"lastModified": "2023-08-22T20:10:36.537", "lastModified": "2023-08-29T13:32:27.810",
"vulnStatus": "Awaiting Analysis", "vulnStatus": "Analyzed",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",
@ -12,6 +12,26 @@
], ],
"metrics": { "metrics": {
"cvssMetricV31": [ "cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.2,
"impactScore": 5.2
},
{ {
"source": "security-alert@hpe.com", "source": "security-alert@hpe.com",
"type": "Secondary", "type": "Secondary",
@ -34,10 +54,44 @@
} }
] ]
}, },
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.3.1",
"matchCriteriaId": "1EB5B1A1-792C-4AA9-AB5D-99B14DB57E66"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt", "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt",
"source": "security-alert@hpe.com" "source": "security-alert@hpe.com",
"tags": [
"Mitigation",
"Vendor Advisory"
]
} }
] ]
} }

View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-40787",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-08-29T13:15:53.267",
"lastModified": "2023-08-29T13:34:55.187",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection."
}
],
"metrics": {},
"references": [
{
"url": "https://gist.github.com/kaliwin/9d6cf58bb6ec06765cdf7b75e13ee460",
"source": "cve@mitre.org"
},
{
"url": "https://sword.bladex.cn/",
"source": "cve@mitre.org"
}
]
}

View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update ### Last Repository Update
```plain ```plain
2023-08-29T12:00:25.255134+00:00 2023-08-29T14:00:25.414935+00:00
``` ```
### Most recent CVE Modification Timestamp synchronized with NVD ### Most recent CVE Modification Timestamp synchronized with NVD
```plain ```plain
2023-08-29T10:15:08.697000+00:00 2023-08-29T13:34:55.187000+00:00
``` ```
### Last Data Feed Release ### Last Data Feed Release
@ -29,20 +29,29 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs ### Total Number of included CVEs
```plain ```plain
223602 223603
``` ```
### CVEs added in the last Commit ### CVEs added in the last Commit
Recently added CVEs: `0` Recently added CVEs: `1`
* [CVE-2023-40787](CVE-2023/CVE-2023-407xx/CVE-2023-40787.json) (`2023-08-29T13:15:53.267`)
### CVEs modified in the last Commit ### CVEs modified in the last Commit
Recently modified CVEs: `1` Recently modified CVEs: `9`
* [CVE-2023-3348](CVE-2023/CVE-2023-33xx/CVE-2023-3348.json) (`2023-08-29T10:15:08.697`) * [CVE-2023-37435](CVE-2023/CVE-2023-374xx/CVE-2023-37435.json) (`2023-08-29T12:58:20.970`)
* [CVE-2023-37436](CVE-2023/CVE-2023-374xx/CVE-2023-37436.json) (`2023-08-29T13:19:12.480`)
* [CVE-2023-37437](CVE-2023/CVE-2023-374xx/CVE-2023-37437.json) (`2023-08-29T13:32:27.810`)
* [CVE-2023-32457](CVE-2023/CVE-2023-324xx/CVE-2023-32457.json) (`2023-08-29T13:34:55.187`)
* [CVE-2023-23770](CVE-2023/CVE-2023-237xx/CVE-2023-23770.json) (`2023-08-29T13:34:55.187`)
* [CVE-2023-23771](CVE-2023/CVE-2023-237xx/CVE-2023-23771.json) (`2023-08-29T13:34:55.187`)
* [CVE-2023-23772](CVE-2023/CVE-2023-237xx/CVE-2023-23772.json) (`2023-08-29T13:34:55.187`)
* [CVE-2023-23773](CVE-2023/CVE-2023-237xx/CVE-2023-23773.json) (`2023-08-29T13:34:55.187`)
* [CVE-2023-23774](CVE-2023/CVE-2023-237xx/CVE-2023-23774.json) (`2023-08-29T13:34:55.187`)
## Download and Usage ## Download and Usage