admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-07 19:16:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-09-06T22:00:25.087782+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2023-09-06 22:00:28 +00:00
parent 08ab252776
commit 99e9c18af3
54 changed files with 2560 additions and 149 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
CVE-2022/CVE-2022-39xx/CVE-2022-3970.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2022-3970",
"sourceIdentifier": "cna@vuldb.com",
"published": "2022-11-13T08:15:16.047",
"lastModified": "2023-03-01T16:35:15.663",
"vulnStatus": "Analyzed",
"lastModified": "2023-09-06T21:15:07.490",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
@ -157,6 +157,10 @@
"Third Party Advisory"
]
},
{
"url": "https://support.apple.com/kb/HT213843",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.213549",
"source": "cna@vuldb.com",

8
CVE-2022/CVE-2022-410xx/CVE-2022-41073.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2022-41073",
"sourceIdentifier": "secure@microsoft.com",
"published": "2022-11-09T22:15:21.207",
"lastModified": "2023-03-10T18:15:12.557",
"lastModified": "2023-09-06T21:15:08.197",
"vulnStatus": "Modified",
"cisaExploitAdd": "2022-11-08",
"cisaActionDue": "2022-12-09",
@ -45,7 +45,7 @@
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
"value": "CWE-787"
}
]
}
@ -173,6 +173,10 @@
}
],
"references": [
{
"url": "http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html",
"source": "secure@microsoft.com"
},
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073",
"source": "secure@microsoft.com"

68
CVE-2022/CVE-2022-443xx/CVE-2022-44349.json
View File

@ -2,23 +2,81 @@
"id": "CVE-2022-44349",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-09-01T10:15:07.677",
"lastModified": "2023-09-01T11:47:50.290",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:58:14.480",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "NAVBLUE S.A.S N-Ops & Crew 22.5-rc.50 is vulnerable to Cross Site Scripting (XSS)."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:navblue:s.a.s_n-ops_\\&_crew:22.5:rc_.50:*:*:*:*:*:*",
"matchCriteriaId": "21D493A9-2010-41F5-819C-E365B0D7F08C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/MVRC-ITSEC/CVEs/blob/main/CVE-2022-44349",
"source": "cve@mitre.org"
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.navblue.aero/product/n-crew-planning/",
"source": "cve@mitre.org"
"source": "cve@mitre.org",
"tags": [
"Product"
]
}
]
}

90
CVE-2022/CVE-2022-473xx/CVE-2022-47352.json
View File

@ -2,19 +2,101 @@
"id": "CVE-2022-47352",
"sourceIdentifier": "security@unisoc.com",
"published": "2023-09-04T02:15:07.697",
"lastModified": "2023-09-04T03:51:45.317",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:30:38.280",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 4.4,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 0.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:11.0:-:*:*:*:*:*:*",
"matchCriteriaId": "F120D280-287A-474F-9DC5-CBBC4B4C7237"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*",
"matchCriteriaId": "16820CAF-0A8A-45C8-B5A8-979EA0407389"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*",
"matchCriteriaId": "08A26AC2-409E-499A-B0D5-8C2B5038947D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CDC980D6-B797-4AE1-B553-35395AE80D07"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*",
"matchCriteriaId": "39002ECE-636A-4FEB-9A0B-8127E8AAC844"
}
]
}
]
}
],
"references": [
{
"url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434",
"source": "security@unisoc.com"
"source": "security@unisoc.com",
"tags": [
"Broken Link"
]
}
]
}

8
CVE-2023/CVE-2023-233xx/CVE-2023-23333.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-23333",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-02-06T22:15:09.630",
"lastModified": "2023-02-14T20:15:24.277",
"vulnStatus": "Analyzed",
"lastModified": "2023-09-06T21:15:08.640",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
@ -77,6 +77,10 @@
}
],
"references": [
{
"url": "http://packetstormsecurity.com/files/174537/SolarView-Compact-6.00-Remote-Command-Execution.html",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/Timorlover/CVE-2023-23333",
"source": "cve@mitre.org",

55
CVE-2023/CVE-2023-236xx/CVE-2023-23623.json Normal file
View File

@ -0,0 +1,55 @@
{
"id": "CVE-2023-23623",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-09-06T21:15:08.977",
"lastModified": "2023-09-06T21:15:08.977",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. A Content-Security-Policy that disables eval, specifically setting a `script-src` directive and _not_ providing `unsafe-eval` in that directive, is not respected in renderers that have sandbox disabled. i.e. `sandbox: false` in the `webPreferences` object. This allows usage of methods like `eval()` and `new Function` unexpectedly which can result in an expanded attack surface. This issue only ever affected the 22 and 23 major versions of Electron and has been fixed in the latest versions of those release lines. Specifically, these versions contain the fixes: 22.0.1 and 23.0.0-alpha.2 We recommend all apps upgrade to the latest stable version of Electron. If upgrading isn't possible, this issue can be addressed without upgrading by enabling `sandbox: true` on all renderers."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 1.6,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-670"
}
]
}
],
"references": [
{
"url": "https://github.com/electron/electron/security/advisories/GHSA-gxh7-wv9q-fwfr",
"source": "security-advisories@github.com"
}
]
}

6
CVE-2023/CVE-2023-279xx/CVE-2023-27950.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-27950",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.280",
"lastModified": "2023-09-06T02:15:08.280",
"lastModified": "2023-09-06T21:15:09.183",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-281xx/CVE-2023-28187.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28187",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.340",
"lastModified": "2023-09-06T02:15:08.340",
"lastModified": "2023-09-06T21:15:09.387",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-281xx/CVE-2023-28188.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28188",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.393",
"lastModified": "2023-09-06T02:15:08.393",
"lastModified": "2023-09-06T21:15:09.597",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-281xx/CVE-2023-28195.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28195",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.447",
"lastModified": "2023-09-06T02:15:08.447",
"lastModified": "2023-09-06T21:15:09.690",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-282xx/CVE-2023-28200.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28200",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-05-08T20:15:19.687",
"lastModified": "2023-07-27T04:15:22.640",
"lastModified": "2023-09-06T21:15:09.937",
"vulnStatus": "Modified",
"descriptions": [
{
@ -119,6 +119,10 @@
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/kb/HT213843",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-282xx/CVE-2023-28209.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28209",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.550",
"lastModified": "2023-09-06T02:15:08.550",
"lastModified": "2023-09-06T21:15:10.227",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-282xx/CVE-2023-28210.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28210",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.600",
"lastModified": "2023-09-06T02:15:08.600",
"lastModified": "2023-09-06T21:15:10.473",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-282xx/CVE-2023-28211.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28211",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.653",
"lastModified": "2023-09-06T02:15:08.653",
"lastModified": "2023-09-06T21:15:10.647",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-282xx/CVE-2023-28212.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28212",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.703",
"lastModified": "2023-09-06T02:15:08.703",
"lastModified": "2023-09-06T21:15:10.893",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-282xx/CVE-2023-28213.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28213",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.757",
"lastModified": "2023-09-06T02:15:08.757",
"lastModified": "2023-09-06T21:15:11.093",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-282xx/CVE-2023-28214.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28214",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.807",
"lastModified": "2023-09-06T02:15:08.807",
"lastModified": "2023-09-06T21:15:11.227",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-282xx/CVE-2023-28215.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-28215",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.857",
"lastModified": "2023-09-06T02:15:08.857",
"lastModified": "2023-09-06T21:15:11.387",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

59
CVE-2023/CVE-2023-291xx/CVE-2023-29198.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-29198",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-09-06T21:15:11.560",
"lastModified": "2023-09-06T21:15:11.560",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps using `contextIsolation` and `contextBridge` are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. This issue is only exploitable if an API exposed to the main world via `contextBridge` can return an object or array that contains a javascript object which cannot be serialized, for instance, a canvas rendering context. This would normally result in an exception being thrown `Error: object could not be cloned`. The app side workaround is to ensure that such a case is not possible. Ensure all values returned from a function exposed over the context bridge are supported. This issue has been fixed in versions `25.0.0-alpha.2`, `24.0.1`, `23.2.3`, and `22.3.6`."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 6.0,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.8,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-754"
}
]
}
],
"references": [
{
"url": "https://github.com/electron/electron/security/advisories/GHSA-p7v2-p9m8-qqg7",
"source": "security-advisories@github.com"
},
{
"url": "https://www.electronjs.org/docs/latest/api/context-bridge#parameter--error--return-type-support",
"source": "security-advisories@github.com"
}
]
}

6
CVE-2023/CVE-2023-294xx/CVE-2023-29491.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-29491",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-04-14T01:15:08.570",
"lastModified": "2023-05-17T20:15:10.203",
"lastModified": "2023-09-06T21:15:11.787",
"vulnStatus": "Modified",
"descriptions": [
{
@ -95,6 +95,10 @@
"url": "https://security.netapp.com/advisory/ntap-20230517-0009/",
"source": "cve@mitre.org"
},
{
"url": "https://support.apple.com/kb/HT213843",
"source": "cve@mitre.org"
},
{
"url": "https://www.openwall.com/lists/oss-security/2023/04/12/5",
"source": "cve@mitre.org",

6
CVE-2023/CVE-2023-323xx/CVE-2023-32356.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-32356",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:08.967",
"lastModified": "2023-09-06T02:15:08.967",
"lastModified": "2023-09-06T21:15:11.873",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-323xx/CVE-2023-32362.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-32362",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:09.017",
"lastModified": "2023-09-06T02:15:09.017",
"lastModified": "2023-09-06T21:15:11.933",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

6
CVE-2023/CVE-2023-324xx/CVE-2023-32426.json
View File

@ -2,7 +2,7 @@
"id": "CVE-2023-32426",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T02:15:09.223",
"lastModified": "2023-09-06T02:15:09.223",
"lastModified": "2023-09-06T21:15:12.130",
"vulnStatus": "Received",
"descriptions": [
{
@ -15,6 +15,10 @@
{
"url": "https://support.apple.com/en-us/HT213670",
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT213670",
"source": "product-security@apple.com"
}
]
}

8
CVE-2023/CVE-2023-353xx/CVE-2023-35359.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-35359",
"sourceIdentifier": "secure@microsoft.com",
"published": "2023-08-08T18:15:12.123",
"lastModified": "2023-08-10T18:33:26.320",
"vulnStatus": "Analyzed",
"lastModified": "2023-09-06T21:15:12.427",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
@ -136,6 +136,10 @@
}
],
"references": [
{
"url": "http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html",
"source": "secure@microsoft.com"
},
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35359",
"source": "secure@microsoft.com",

20
CVE-2023/CVE-2023-386xx/CVE-2023-38605.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-38605",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T21:15:12.783",
"lastModified": "2023-09-06T21:15:12.783",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user\u2019s current location."
}
],
"metrics": {},
"references": [
{
"url": "https://support.apple.com/en-us/HT213843",
"source": "product-security@apple.com"
}
]
}

20
CVE-2023/CVE-2023-386xx/CVE-2023-38616.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-38616",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T21:15:13.063",
"lastModified": "2023-09-06T21:15:13.063",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges."
}
],
"metrics": {},
"references": [
{
"url": "https://support.apple.com/en-us/HT213843",
"source": "product-security@apple.com"
}
]
}

63
CVE-2023/CVE-2023-393xx/CVE-2023-39353.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-39353",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-31T21:15:08.213",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:47:06.693",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -12,6 +12,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
},
{
"source": "security-advisories@github.com",
"type": "Secondary",
@ -46,14 +66,49 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.11.0",
"matchCriteriaId": "80B02150-FC4E-43F5-A3DF-D8E585200977"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:3.0.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "D8720D61-0B0D-40ED-B3C4-B452D83BF3C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:3.0.0:beta2:*:*:*:*:*:*",
"matchCriteriaId": "18A75D02-0E7A-4AAF-8E23-0CDCB1733FEA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/FreeRDP/FreeRDP/blob/63a2f65618748c12f79ff7450d46c6e194f2db76/libfreerdp/codec/rfx.c#L994-L996",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Issue Tracking"
]
},
{
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hg53-9j9h-3c8f",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}

63
CVE-2023/CVE-2023-393xx/CVE-2023-39354.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-39354",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-31T20:15:08.367",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:06:45.500",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -12,6 +12,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "security-advisories@github.com",
"type": "Secondary",
@ -46,14 +66,49 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.11.0",
"matchCriteriaId": "80B02150-FC4E-43F5-A3DF-D8E585200977"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:3.0.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "D8720D61-0B0D-40ED-B3C4-B452D83BF3C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:3.0.0:beta2:*:*:*:*:*:*",
"matchCriteriaId": "18A75D02-0E7A-4AAF-8E23-0CDCB1733FEA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/FreeRDP/FreeRDP/commit/cd1da25a87358eb3b5512fd259310e95b19a05ec",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c3r2-pxxp-f8r6",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}

57
CVE-2023/CVE-2023-393xx/CVE-2023-39355.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-39355",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-31T20:15:08.457",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:35:16.717",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -12,6 +12,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "security-advisories@github.com",
"type": "Secondary",
@ -46,14 +66,43 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:3.0.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "D8720D61-0B0D-40ED-B3C4-B452D83BF3C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:3.0.0:beta2:*:*:*:*:*:*",
"matchCriteriaId": "18A75D02-0E7A-4AAF-8E23-0CDCB1733FEA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/FreeRDP/FreeRDP/commit/d6f9d33a7db0b346195b6a15b5b99944ba41beee",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hvwj-vmg6-2f5h",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}

66
CVE-2023/CVE-2023-396xx/CVE-2023-39685.json
View File

@ -2,19 +2,77 @@
"id": "CVE-2023-39685",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-09-01T10:15:08.217",
"lastModified": "2023-09-01T11:47:50.290",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T21:05:35.420",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted JSON string."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hjson:hjson:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.0.0",
"matchCriteriaId": "213D947D-3AF3-4D5B-8503-AFE86807AEB6"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/hjson/hjson-java/issues/27",
"source": "cve@mitre.org"
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Issue Tracking",
"Vendor Advisory"
]
}
]
}

69
CVE-2023/CVE-2023-399xx/CVE-2023-39912.json
View File

@ -2,23 +2,82 @@
"id": "CVE-2023-39912",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-08-31T23:15:26.297",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:24:15.537",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "Zoho ManageEngine ADManager Plus through 7202 allows admin users to download any file from the server machine via directory traversal."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*",
"versionEndIncluding": "7202",
"matchCriteriaId": "11647C4A-2824-49C7-9660-EB1D9BE748EA"
}
]
}
]
}
],
"references": [
{
"url": "https://manageengine.com",
"source": "cve@mitre.org"
"source": "cve@mitre.org",
"tags": [
"Product"
]
},
{
"url": "https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-39912.html",
"source": "cve@mitre.org"
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
]
}
]
}

55
CVE-2023/CVE-2023-399xx/CVE-2023-39956.json Normal file
View File

@ -0,0 +1,55 @@
{
"id": "CVE-2023-39956",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-09-06T21:15:13.217",
"lastModified": "2023-09-06T21:15:13.217",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps that are launched as command line executables are impacted. Specifically this issue can only be exploited if the following conditions are met: 1. The app is launched with an attacker-controlled working directory and 2. The attacker has the ability to write files to that working directory. This makes the risk quite low, in fact normally issues of this kind are considered outside of our threat model as similar to Chromium we exclude Physically Local Attacks but given the ability for this issue to bypass certain protections like ASAR Integrity it is being treated with higher importance. This issue has been fixed in versions:`26.0.0-beta.13`, `25.4.1`, `24.7.1`, `23.3.13`, and `22.3.19`. There are no app side workarounds, users must update to a patched version of Electron."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW",
"baseScore": 6.1,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.3,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/electron/electron/security/advisories/GHSA-7x97-j373-85x5",
"source": "security-advisories@github.com"
}
]
}

55
CVE-2023/CVE-2023-399xx/CVE-2023-39967.json Normal file
View File

@ -0,0 +1,55 @@
{
"id": "CVE-2023-39967",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-09-06T21:15:13.320",
"lastModified": "2023-09-06T21:15:13.320",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "WireMock is a tool for mocking HTTP services. When certain request URLs like \u201c@127.0.0.1:1234\" are used in WireMock Studio configuration fields, the request might be forwarded to an arbitrary service reachable from WireMock\u2019s instance. There are 3 identified potential attack vectors: via \u201cTestRequester\u201d functionality, webhooks and the proxy mode. As we can control HTTP Method, HTTP Headers, HTTP Data, it allows sending requests with the default level of credentials for the WireMock instance. The vendor has discontinued the affected Wiremock studio product and there will be no fix. Users are advised to find alternatives."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 10.0,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://github.com/wiremock/wiremock/security/advisories/GHSA-676j-xrv3-73vc",
"source": "security-advisories@github.com"
}
]
}

20
CVE-2023/CVE-2023-403xx/CVE-2023-40392.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-40392",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T21:15:13.560",
"lastModified": "2023-09-06T21:15:13.560",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.5. An app may be able to read sensitive location information."
}
],
"metrics": {},
"references": [
{
"url": "https://support.apple.com/en-us/HT213843",
"source": "product-security@apple.com"
}
]
}

20
CVE-2023/CVE-2023-403xx/CVE-2023-40397.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-40397",
"sourceIdentifier": "product-security@apple.com",
"published": "2023-09-06T21:15:13.850",
"lastModified": "2023-09-06T21:15:13.850",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execution."
}
],
"metrics": {},
"references": [
{
"url": "https://support.apple.com/en-us/HT213843",
"source": "product-security@apple.com"
}
]
}

63
CVE-2023/CVE-2023-405xx/CVE-2023-40569.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-40569",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-31T22:15:08.707",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:31:55.160",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -12,6 +12,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "security-advisories@github.com",
"type": "Secondary",
@ -46,14 +66,49 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.11.0",
"matchCriteriaId": "80B02150-FC4E-43F5-A3DF-D8E585200977"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:3.0.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "D8720D61-0B0D-40ED-B3C4-B452D83BF3C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freerdp:freerdp:3.0.0:beta2:*:*:*:*:*:*",
"matchCriteriaId": "18A75D02-0E7A-4AAF-8E23-0CDCB1733FEA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/FreeRDP/FreeRDP/blob/5be5553e0da72178a4b94cc1ffbdace9ceb153e5/libfreerdp/codec/progressive.c#L2598-L2616",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Issue Tracking"
]
},
{
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hm8c-rcjg-c8qp",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}

65
CVE-2023/CVE-2023-410xx/CVE-2023-41045.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-41045",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-31T18:15:09.280",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:02:28.163",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -12,6 +12,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "security-advisories@github.com",
"type": "Secondary",
@ -46,18 +66,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:graylog:graylog:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.0.9",
"matchCriteriaId": "F94DC8EE-E1C4-472F-B479-12A35C92D2C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:graylog:graylog:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.1.0",
"versionEndExcluding": "5.1.3",
"matchCriteriaId": "E213B603-847C-439D-86AA-D77E59653492"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Graylog2/graylog2-server/commit/466af814523cffae9fbc7e77bab7472988f03c3e",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Graylog2/graylog2-server/commit/a101f4f12180fd3dfa7d3345188a099877a3c327",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-g96c-x7rh-99r3",
"source": "security-advisories@github.com"
"source": "security-advisories@github.com",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}

59
CVE-2023/CVE-2023-410xx/CVE-2023-41053.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-41053",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-09-06T21:15:14.137",
"lastModified": "2023-09-06T21:15:14.137",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"references": [
{
"url": "https://github.com/redis/redis/commit/9e505e6cd842338424e05883521ca1fb7d0f47f6",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/redis/redis/security/advisories/GHSA-q4jr-5p56-4xwc",
"source": "security-advisories@github.com"
}
]
}

63
CVE-2023/CVE-2023-413xx/CVE-2023-41327.json Normal file
View File

@ -0,0 +1,63 @@
{
"id": "CVE-2023-41327",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-09-06T21:15:14.323",
"lastModified": "2023-09-06T21:15:14.323",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "WireMock is a tool for mocking HTTP services. WireMock can be configured to only permit proxying (and therefore recording) to certain addresses. This is achieved via a list of allowed address rules and a list of denied address rules, where the allowed list is evaluated first. \n\nUntil WireMock Webhooks Extension 3.0.0-beta-15, the filtering of target addresses from the proxy mode DID NOT work for Webhooks, so the users were potentially vulnerable regardless of the `limitProxyTargets` settings. Via the WireMock webhooks configuration, POST requests from a webhook might be forwarded to an arbitrary service reachable from WireMock\u2019s instance. For example, If someone is running the WireMock docker Container inside a private cluster, they can trigger internal POST requests against unsecured APIs or even against secure ones by passing a token, discovered using another exploit, via authentication headers. This issue has been addressed in versions 2.35.1 and 3.0.3 of wiremock. Wiremock studio has been discontinued and will not see a fix. Users unable to upgrade should use external firewall rules to define the list of permitted destinations."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 4.6,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.1,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://github.com/wiremock/wiremock/releases/tag/3.0.0-beta-15",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/wiremock/wiremock/security/advisories/GHSA-hq8w-9w8w-pmx7",
"source": "security-advisories@github.com"
},
{
"url": "https://wiremock.org/docs/configuration/#preventing-proxying-to-and-recording-from-specific-target-addresses",
"source": "security-advisories@github.com"
}
]
}

59
CVE-2023/CVE-2023-413xx/CVE-2023-41329.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-41329",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-09-06T21:15:14.517",
"lastModified": "2023-09-06T21:15:14.517",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a case the configuration is vulnerable to the DNS rebinding attacks. A similar patch was applied in WireMock 3.0.0-beta-15 for the WireMock Webhook Extensions. The root cause of the attack is a defect in the logic which allows for a race condition triggered by a DNS server whose address expires in between the initial validation and the outbound network request that might go to a domain that was supposed to be prohibited. Control over a DNS service is required to exploit this attack, so it has high execution complexity and limited impact. This issue has been addressed in version 2.35.1 of wiremock-jre8 and wiremock-jre8-standalone, version 3.0.3 of wiremock and wiremock-standalone, version 2.6.1 of the python version of wiremock, and versions 2.35.1-1 and 3.0.3-1 of the wiremock/wiremock Docker container. Users are advised to upgrade. Users unable to upgrade should either configure firewall rules to define the list of permitted destinations or to configure WireMock to use IP addresses instead of the domain names."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 3.9,
"baseSeverity": "LOW"
},
"exploitabilityScore": 0.5,
"impactScore": 3.4
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-290"
}
]
}
],
"references": [
{
"url": "https://github.com/wiremock/wiremock/security/advisories/GHSA-pmxq-pj47-j8j4",
"source": "security-advisories@github.com"
},
{
"url": "https://wiremock.org/docs/configuration/#preventing-proxying-to-and-recording-from-specific-target-addresses",
"source": "security-advisories@github.com"
}
]
}

24
CVE-2023/CVE-2023-416xx/CVE-2023-41601.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-41601",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-09-06T20:15:07.857",
"lastModified": "2023-09-06T20:15:07.857",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/al3zx/csz_cms_1_3_0_xss_in_install_page/blob/main/README.md",
"source": "cve@mitre.org"
},
{
"url": "https://www.cszcms.com/",
"source": "cve@mitre.org"
}
]
}

101
CVE-2023/CVE-2023-417xx/CVE-2023-41749.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-41749",
"sourceIdentifier": "security@acronis.com",
"published": "2023-08-31T21:15:08.583",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:50:56.357",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -11,6 +11,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"cvssMetricV30": [
{
"source": "security@acronis.com",
@ -35,6 +57,16 @@
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "security@acronis.com",
"type": "Secondary",
@ -46,10 +78,73 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*",
"versionEndExcluding": "c23.03",
"matchCriteriaId": "9483096A-532A-45C4-925A-657C8B4C5FCF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*",
"matchCriteriaId": "89899D10-1343-4276-919A-9C1DF2DB8B55"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*",
"matchCriteriaId": "A77B2499-B3A4-4278-BA0D-59AB59C60352"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*",
"matchCriteriaId": "BAF6A576-C320-4550-B7F8-4FCAE82FB06A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*",
"matchCriteriaId": "9740A956-D589-4846-8717-B6182EB65F8B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:*",
"matchCriteriaId": "9AB8B19B-2B40-4F1B-AE24-1C43D362E4BC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:cyber_protect:15:update5:*:*:*:*:*:*",
"matchCriteriaId": "69506F27-DEF8-4317-9E54-D79CA430AD4B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://security-advisory.acronis.com/advisories/SEC-5287",
"source": "security@acronis.com"
"source": "security@acronis.com",
"tags": [
"Vendor Advisory"
]
}
]
}

82
CVE-2023/CVE-2023-417xx/CVE-2023-41750.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-41750",
"sourceIdentifier": "security@acronis.com",
"published": "2023-08-31T21:15:08.790",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:46:05.583",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -11,6 +11,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"cvssMetricV30": [
{
"source": "security@acronis.com",
@ -35,6 +57,16 @@
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
},
{
"source": "security@acronis.com",
"type": "Secondary",
@ -46,10 +78,54 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*",
"versionEndExcluding": "c23.03",
"matchCriteriaId": "9483096A-532A-45C4-925A-657C8B4C5FCF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://security-advisory.acronis.com/advisories/SEC-5382",
"source": "security@acronis.com"
"source": "security@acronis.com",
"tags": [
"Release Notes",
"Vendor Advisory"
]
}
]
}

71
CVE-2023/CVE-2023-417xx/CVE-2023-41751.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-41751",
"sourceIdentifier": "security@acronis.com",
"published": "2023-08-31T21:15:08.963",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:45:46.590",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -11,6 +11,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"cvssMetricV30": [
{
"source": "security@acronis.com",
@ -35,6 +57,16 @@
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
},
{
"source": "security@acronis.com",
"type": "Secondary",
@ -46,10 +78,43 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*",
"versionEndExcluding": "c23.03",
"matchCriteriaId": "9483096A-532A-45C4-925A-657C8B4C5FCF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://security-advisory.acronis.com/advisories/SEC-5615",
"source": "security@acronis.com"
"source": "security@acronis.com",
"tags": [
"Vendor Advisory"
]
}
]
}

579
CVE-2023/CVE-2023-42xx/CVE-2023-4299.json
View File

@ -2,16 +2,40 @@
"id": "CVE-2023-4299",
"sourceIdentifier": "ics-cert@hq.dhs.gov",
"published": "2023-08-31T21:15:09.183",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:13:32.917",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "\nDigi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.\n\n"
},
{
"lang": "es",
"value": "El protocolo Digi RealPort es vulnerable a un ataque de repetici\u00f3n que puede permitir a un atacante saltarse la autenticaci\u00f3n para acceder a los equipos conectados. "
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
},
{
"source": "ics-cert@hq.dhs.gov",
"type": "Secondary",
@ -46,14 +70,561 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:digi:realport:*:*:*:*:*:linux:*:*",
"versionEndIncluding": "1.9-40",
"matchCriteriaId": "D59A75BB-9159-4631-BC71-39969604EB41"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:digi:realport:*:*:*:*:*:windows:*:*",
"versionEndIncluding": "4.8.488.0",
"matchCriteriaId": "4051C215-7A7D-44AF-8194-ABB054C8C0AA"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:connectport_ts_8\\/16_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.26.2.4",
"matchCriteriaId": "140FCBA8-D74A-4889-9581-2A1E354DE70B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:connectport_ts_8\\/16:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E90551D8-A6FF-40EE-BE92-C60D3CCF9FD6"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:passport_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "42EC9732-7287-4295-9A45-BAEB9C3D7D52"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:passport:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C6129E3F-BB64-47B1-8041-F955CAD1A139"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:connectport_lts_8\\/16\\/32_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.4.9",
"matchCriteriaId": "4974BD84-B144-45C6-BA1D-E651FA93F8C1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:connectport_lts_8\\/16\\/32:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E0620D1B-2856-4EDC-9BD4-F450375EF2B6"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:cm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "580B6AD7-98A4-4656-BC4B-EEBC15D86BFA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:cm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1A9DDFA4-8F21-47E4-97D0-3B135072E273"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:portserver_ts_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "89CC1603-A6ED-48A2-AC9B-EC11F00E0C02"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:portserver_ts:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FE6377CC-097B-4775-9964-338A3CFA87CA"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:portserver_ts_mei_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ACE660D5-F5D8-4449-9A11-61A290E8B6A5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:portserver_ts_mei:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C8206DA8-2823-4116-9E76-975C9A3F2EF7"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:portserver_ts_mei_hardened_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7A1C8BFC-EA8C-45A9-8391-A578BD2129BB"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:portserver_ts_mei_hardened:-:*:*:*:*:*:*:*",
"matchCriteriaId": "817E2152-5A72-4B88-A1A1-8CFEFA134979"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:portserver_ts_m_mei_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "70583280-A89A-470B-B8C3-DF8151F43D79"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:portserver_ts_m_mei:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8FC7BF4B-3C56-44B2-8933-E24ACCA000E1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:portserver_ts_p_mei_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "07964E3F-C71E-455C-90C1-E59350924F92"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:portserver_ts_p_mei:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C711FEFA-0A37-4B97-AAC0-D0330D9F5E55"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:one_iap_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "01501047-CD6D-490C-984E-441939D077A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:one_iap:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0CF501FC-E102-4D8D-A2B7-6F9D0F444959"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:one_ia_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1E409760-A00D-4485-BACD-5EE5453BA1BA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:one_ia:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7BE8C4FB-9DB5-4A32-8EFC-69B746BF2E33"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:one_sp_ia_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1AB7FF5F-02DE-4848-AA66-9F71CEBEDB5B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:one_sp_ia:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A6B2D2BF-01FA-4F15-A747-CB315E27E94E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:one_sp_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "61E623C5-610E-4B76-81DE-94B9783E3B17"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:one_sp:-:*:*:*:*:*:*:*",
"matchCriteriaId": "85CDFA6C-067B-4D3B-8448-034286F36E69"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:wr31_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "24D3E7C4-92B1-4C98-A9EE-0D1B0F00914D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:wr31:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A9F02872-5C53-419B-902C-4906E546C8B7"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:transport_wr11_xt_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "76684195-7836-4EDF-AE59-CB4A5CE938AD"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:transport_wr11_xt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "10850ACB-E28F-4AC7-ABA0-EDFF2D2F9EF6"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:wr44_r_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4D08ACA8-BF3A-4401-AB11-1D92CA7933A1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:wr44_r:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8F5E08FD-5872-4E42-BDA7-2B15CF49C06D"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:wr21_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4FE33679-08C1-4133-8D51-05B1EBC21B99"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:wr21:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3EC0E5E9-FBFE-4C99-9C68-6322B255BE88"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:connect_es_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.26.2.4",
"matchCriteriaId": "36063F6A-E10E-45FF-98D4-F90A995428C5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:connect_es:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7EF02532-005E-4246-AA51-DAC2EA1726FF"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:digi:connect_sp_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9732CC2E-BD0F-4528-819C-A214B4810C2B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:digi:connect_sp:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EAF15AE4-A3AD-4AB2-AFCA-05C1946972F6"
}
]
}
]
}
],
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04",
"source": "ics-cert@hq.dhs.gov"
"source": "ics-cert@hq.dhs.gov",
"tags": [
"Third Party Advisory",
"US Government Resource"
]
},
{
"url": "https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf",
"source": "ics-cert@hq.dhs.gov"
"source": "ics-cert@hq.dhs.gov",
"tags": [
"Vendor Advisory"
]
}
]
}

82
CVE-2023/CVE-2023-46xx/CVE-2023-4688.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-4688",
"sourceIdentifier": "security@acronis.com",
"published": "2023-08-31T21:15:09.417",
"lastModified": "2023-09-01T07:32:13.003",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:45:12.027",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -11,6 +11,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"cvssMetricV30": [
{
"source": "security@acronis.com",
@ -35,6 +57,16 @@
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-532"
}
]
},
{
"source": "security@acronis.com",
"type": "Secondary",
@ -46,10 +78,54 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*",
"versionEndExcluding": "c23.05",
"matchCriteriaId": "D139E506-047D-40BB-9685-15E1CB842065"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://security-advisory.acronis.com/advisories/SEC-5782",
"source": "security@acronis.com"
"source": "security@acronis.com",
"tags": [
"Release Notes",
"Vendor Advisory"
]
}
]
}

83
CVE-2023/CVE-2023-47xx/CVE-2023-4744.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-4744",
"sourceIdentifier": "cna@vuldb.com",
"published": "2023-09-04T00:15:07.463",
"lastModified": "2023-09-04T03:51:45.317",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:32:35.220",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -11,6 +11,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV30": [
{
"source": "cna@vuldb.com",
@ -61,8 +83,18 @@
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
},
{
"source": "cna@vuldb.com",
"type": "Secondary",
"description": [
{
"lang": "en",
@ -71,18 +103,57 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:ac8_firmware:16.03.34.06:*:*:*:*:*:*:*",
"matchCriteriaId": "9C1D64DC-1EDC-4F62-8D22-E1890B71843C"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:tenda:ac8:4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "655619B2-6E8B-4D2E-98E7-028E69597E80"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/GleamingEyes/vul/blob/main/tenda_ac8/ac8_1.md",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.238633",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?id.238633",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Third Party Advisory"
]
}
]
}

83
CVE-2023/CVE-2023-47xx/CVE-2023-4746.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-4746",
"sourceIdentifier": "cna@vuldb.com",
"published": "2023-09-04T01:15:07.437",
"lastModified": "2023-09-04T03:51:45.317",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:32:05.507",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -11,6 +11,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV30": [
{
"source": "cna@vuldb.com",
@ -61,7 +83,7 @@
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
@ -69,20 +91,69 @@
"value": "CWE-134"
}
]
},
{
"source": "cna@vuldb.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-134"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:totolink:n200re-v5_firmware:9.3.5u.6437_b20230519:*:*:*:*:*:*:*",
"matchCriteriaId": "6F64A20D-3C1D-4D03-8627-0AAA29E8CCA7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:totolink:n200re-v5:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7042003A-B948-4357-ABDE-8B43DE0BE156"
}
]
}
]
}
],
"references": [
{
"url": "https://gist.github.com/dmknght/8f3b6aa65e9d08f45b5236c6e9ab8d80",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.238635",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?id.238635",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Third Party Advisory"
]
}
]
}

63
CVE-2023/CVE-2023-47xx/CVE-2023-4747.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-4747",
"sourceIdentifier": "cna@vuldb.com",
"published": "2023-09-04T01:15:07.790",
"lastModified": "2023-09-04T03:51:45.317",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:31:10.193",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -11,6 +11,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV30": [
{
"source": "cna@vuldb.com",
@ -71,22 +93,51 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:dedecms:dedecms:5.7.110:*:*:*:*:*:*:*",
"matchCriteriaId": "5C52D30B-A841-4C4A-A297-AC907A58E335"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/laoquanshi/cve",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Broken Link"
]
},
{
"url": "https://github.com/laoquanshi/cve/blob/main/dedecms%20%20sql%20%20injection",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.238636",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?id.238636",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Third Party Advisory"
]
}
]
}

75
CVE-2023/CVE-2023-47xx/CVE-2023-4749.json
View File

@ -2,15 +2,41 @@
"id": "CVE-2023-4749",
"sourceIdentifier": "cna@vuldb.com",
"published": "2023-09-04T01:15:07.890",
"lastModified": "2023-09-04T03:51:45.317",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:30:58.383",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238638 is the identifier assigned to this vulnerability."
},
{
"lang": "es",
"value": "Se ha encontrado una vulnerabilidad, clasificada como cr\u00edtica, en SourceCodester Inventory Management System v1.0. Es afectada una funci\u00f3n desconocida del archivo \"index.php\". La manipulaci\u00f3n de la p\u00e1gina de argumentos conduce a la inclusi\u00f3n de archivos. Es posible lanzar el ataque de forma remota. El exploit ha sido revelado al p\u00fablico y puede ser utilizado. VDB-238638 es el identificador asignado a esta vulnerabilidad. "
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV30": [
{
"source": "cna@vuldb.com",
@ -61,8 +87,18 @@
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
},
{
"source": "cna@vuldb.com",
"type": "Secondary",
"description": [
{
"lang": "en",
@ -71,18 +107,45 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mayurik:inventory_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "92A0265A-E1A5-4424-8D30-EC76231AEE53"
}
]
}
]
}
],
"references": [
{
"url": "https://skypoc.wordpress.com/2023/09/03/%e3%80%90code-audit%e3%80%91open-source-ample-inventory-management-system-v1-0-by-mayuri_k-has-a-file-inclusion-vulnerability/",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.238638",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?id.238638",
"source": "cna@vuldb.com"
"source": "cna@vuldb.com",
"tags": [
"Third Party Advisory"
]
}
]
}

69
CVE-2023/CVE-2023-47xx/CVE-2023-4755.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-4755",
"sourceIdentifier": "security@huntr.dev",
"published": "2023-09-04T14:15:08.593",
"lastModified": "2023-09-05T06:50:39.603",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:43:56.003",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -11,6 +11,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"cvssMetricV30": [
{
"source": "security@huntr.dev",
@ -36,7 +58,7 @@
},
"weaknesses": [
{
"source": "security@huntr.dev",
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
@ -44,16 +66,53 @@
"value": "CWE-416"
}
]
},
{
"source": "security@huntr.dev",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3",
"matchCriteriaId": "422EDAFD-56FE-49AE-ADCF-7D33CFA0C56B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/gpac/gpac/commit/895ac12da168435eb8db3f96978ffa4c69d66c3a",
"source": "security@huntr.dev"
"source": "security@huntr.dev",
"tags": [
"Patch"
]
},
{
"url": "https://huntr.dev/bounties/463474b7-a4e8-42b6-8b30-e648a77ee6b3",
"source": "security@huntr.dev"
"source": "security@huntr.dev",
"tags": [
"Exploit",
"Issue Tracking",
"Patch",
"Third Party Advisory"
]
}
]
}

69
CVE-2023/CVE-2023-47xx/CVE-2023-4758.json
View File

@ -2,8 +2,8 @@
"id": "CVE-2023-4758",
"sourceIdentifier": "security@huntr.dev",
"published": "2023-09-04T16:15:08.143",
"lastModified": "2023-09-05T06:50:39.603",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2023-09-06T20:43:43.440",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
@ -11,6 +11,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"cvssMetricV30": [
{
"source": "security@huntr.dev",
@ -36,8 +58,18 @@
},
"weaknesses": [
{
"source": "security@huntr.dev",
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
},
{
"source": "security@huntr.dev",
"type": "Secondary",
"description": [
{
"lang": "en",
@ -46,14 +78,41 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3",
"matchCriteriaId": "422EDAFD-56FE-49AE-ADCF-7D33CFA0C56B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/gpac/gpac/commit/193633b1648582444fc99776cd741d7ba0125e86",
"source": "security@huntr.dev"
"source": "security@huntr.dev",
"tags": [
"Patch"
]
},
{
"url": "https://huntr.dev/bounties/2f496261-1090-45ac-bc89-cc93c82090d6",
"source": "security@huntr.dev"
"source": "security@huntr.dev",
"tags": [
"Exploit",
"Issue Tracking",
"Patch",
"Third Party Advisory"
]
}
]
}

32
CVE-2023/CVE-2023-48xx/CVE-2023-4809.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-4809",
"sourceIdentifier": "secteam@freebsd.org",
"published": "2023-09-06T20:15:08.080",
"lastModified": "2023-09-06T20:15:08.080",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is.\n\n\n\n\nAs a result, IPv6 fragments may bypass pf firewall rules written on the assumption all fragments have been reassembled and, as a result, be forwarded or processed by the host.\n\n"
}
],
"metrics": {},
"weaknesses": [
{
"source": "secteam@freebsd.org",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-167"
}
]
}
],
"references": [
{
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:10.pf.asc",
"source": "secteam@freebsd.org"
}
]
}

79
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-09-06T20:00:24.513007+00:00
2023-09-06T22:00:25.087782+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-09-06T19:49:14.563000+00:00
2023-09-06T21:15:14.517000+00:00
```
### Last Data Feed Release
@ -29,50 +29,57 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
224408
224421
```
### CVEs added in the last Commit
Recently added CVEs: `18`
Recently added CVEs: `13`
* [CVE-2020-10129](CVE-2020/CVE-2020-101xx/CVE-2020-10129.json) (`2023-09-06T19:15:43.727`)
* [CVE-2020-10130](CVE-2020/CVE-2020-101xx/CVE-2020-10130.json) (`2023-09-06T19:15:43.847`)
* [CVE-2020-10131](CVE-2020/CVE-2020-101xx/CVE-2020-10131.json) (`2023-09-06T19:15:43.913`)
* [CVE-2020-10132](CVE-2020/CVE-2020-101xx/CVE-2020-10132.json) (`2023-09-06T19:15:43.987`)
* [CVE-2023-0925](CVE-2023/CVE-2023-09xx/CVE-2023-0925.json) (`2023-09-06T18:15:07.897`)
* [CVE-2023-20238](CVE-2023/CVE-2023-202xx/CVE-2023-20238.json) (`2023-09-06T18:15:08.043`)
* [CVE-2023-20243](CVE-2023/CVE-2023-202xx/CVE-2023-20243.json) (`2023-09-06T18:15:08.133`)
* [CVE-2023-20263](CVE-2023/CVE-2023-202xx/CVE-2023-20263.json) (`2023-09-06T18:15:08.217`)
* [CVE-2023-20269](CVE-2023/CVE-2023-202xx/CVE-2023-20269.json) (`2023-09-06T18:15:08.303`)
* [CVE-2023-38484](CVE-2023/CVE-2023-384xx/CVE-2023-38484.json) (`2023-09-06T18:15:08.393`)
* [CVE-2023-38485](CVE-2023/CVE-2023-384xx/CVE-2023-38485.json) (`2023-09-06T18:15:08.480`)
* [CVE-2023-38486](CVE-2023/CVE-2023-384xx/CVE-2023-38486.json) (`2023-09-06T18:15:08.547`)
* [CVE-2023-39511](CVE-2023/CVE-2023-395xx/CVE-2023-39511.json) (`2023-09-06T18:15:08.627`)
* [CVE-2023-41050](CVE-2023/CVE-2023-410xx/CVE-2023-41050.json) (`2023-09-06T18:15:08.847`)
* [CVE-2023-41319](CVE-2023/CVE-2023-413xx/CVE-2023-41319.json) (`2023-09-06T18:15:08.937`)
* [CVE-2023-41328](CVE-2023/CVE-2023-413xx/CVE-2023-41328.json) (`2023-09-06T18:15:09.047`)
* [CVE-2023-41330](CVE-2023/CVE-2023-413xx/CVE-2023-41330.json) (`2023-09-06T18:15:09.153`)
* [CVE-2023-40591](CVE-2023/CVE-2023-405xx/CVE-2023-40591.json) (`2023-09-06T19:15:44.100`)
* [CVE-2023-41601](CVE-2023/CVE-2023-416xx/CVE-2023-41601.json) (`2023-09-06T20:15:07.857`)
* [CVE-2023-4809](CVE-2023/CVE-2023-48xx/CVE-2023-4809.json) (`2023-09-06T20:15:08.080`)
* [CVE-2023-23623](CVE-2023/CVE-2023-236xx/CVE-2023-23623.json) (`2023-09-06T21:15:08.977`)
* [CVE-2023-29198](CVE-2023/CVE-2023-291xx/CVE-2023-29198.json) (`2023-09-06T21:15:11.560`)
* [CVE-2023-38605](CVE-2023/CVE-2023-386xx/CVE-2023-38605.json) (`2023-09-06T21:15:12.783`)
* [CVE-2023-38616](CVE-2023/CVE-2023-386xx/CVE-2023-38616.json) (`2023-09-06T21:15:13.063`)
* [CVE-2023-39956](CVE-2023/CVE-2023-399xx/CVE-2023-39956.json) (`2023-09-06T21:15:13.217`)
* [CVE-2023-39967](CVE-2023/CVE-2023-399xx/CVE-2023-39967.json) (`2023-09-06T21:15:13.320`)
* [CVE-2023-40392](CVE-2023/CVE-2023-403xx/CVE-2023-40392.json) (`2023-09-06T21:15:13.560`)
* [CVE-2023-40397](CVE-2023/CVE-2023-403xx/CVE-2023-40397.json) (`2023-09-06T21:15:13.850`)
* [CVE-2023-41053](CVE-2023/CVE-2023-410xx/CVE-2023-41053.json) (`2023-09-06T21:15:14.137`)
* [CVE-2023-41327](CVE-2023/CVE-2023-413xx/CVE-2023-41327.json) (`2023-09-06T21:15:14.323`)
* [CVE-2023-41329](CVE-2023/CVE-2023-413xx/CVE-2023-41329.json) (`2023-09-06T21:15:14.517`)
### CVEs modified in the last Commit
Recently modified CVEs: `13`
Recently modified CVEs: `40`
* [CVE-2023-41040](CVE-2023/CVE-2023-410xx/CVE-2023-41040.json) (`2023-09-06T18:15:08.720`)
* [CVE-2023-41741](CVE-2023/CVE-2023-417xx/CVE-2023-41741.json) (`2023-09-06T18:34:28.687`)
* [CVE-2023-41740](CVE-2023/CVE-2023-417xx/CVE-2023-41740.json) (`2023-09-06T18:35:58.047`)
* [CVE-2023-41742](CVE-2023/CVE-2023-417xx/CVE-2023-41742.json) (`2023-09-06T18:44:03.223`)
* [CVE-2023-41034](CVE-2023/CVE-2023-410xx/CVE-2023-41034.json) (`2023-09-06T19:02:03.790`)
* [CVE-2023-41745](CVE-2023/CVE-2023-417xx/CVE-2023-41745.json) (`2023-09-06T19:07:18.077`)
* [CVE-2023-41746](CVE-2023/CVE-2023-417xx/CVE-2023-41746.json) (`2023-09-06T19:14:18.157`)
* [CVE-2023-41747](CVE-2023/CVE-2023-417xx/CVE-2023-41747.json) (`2023-09-06T19:16:34.043`)
* [CVE-2023-41748](CVE-2023/CVE-2023-417xx/CVE-2023-41748.json) (`2023-09-06T19:20:31.677`)
* [CVE-2023-40589](CVE-2023/CVE-2023-405xx/CVE-2023-40589.json) (`2023-09-06T19:35:13.987`)
* [CVE-2023-39350](CVE-2023/CVE-2023-393xx/CVE-2023-39350.json) (`2023-09-06T19:39:44.343`)
* [CVE-2023-41044](CVE-2023/CVE-2023-410xx/CVE-2023-41044.json) (`2023-09-06T19:48:09.783`)
* [CVE-2023-39351](CVE-2023/CVE-2023-393xx/CVE-2023-39351.json) (`2023-09-06T19:49:14.563`)
* [CVE-2023-4755](CVE-2023/CVE-2023-47xx/CVE-2023-4755.json) (`2023-09-06T20:43:56.003`)
* [CVE-2023-4688](CVE-2023/CVE-2023-46xx/CVE-2023-4688.json) (`2023-09-06T20:45:12.027`)
* [CVE-2023-41751](CVE-2023/CVE-2023-417xx/CVE-2023-41751.json) (`2023-09-06T20:45:46.590`)
* [CVE-2023-41750](CVE-2023/CVE-2023-417xx/CVE-2023-41750.json) (`2023-09-06T20:46:05.583`)
* [CVE-2023-39353](CVE-2023/CVE-2023-393xx/CVE-2023-39353.json) (`2023-09-06T20:47:06.693`)
* [CVE-2023-41749](CVE-2023/CVE-2023-417xx/CVE-2023-41749.json) (`2023-09-06T20:50:56.357`)
* [CVE-2023-39685](CVE-2023/CVE-2023-396xx/CVE-2023-39685.json) (`2023-09-06T21:05:35.420`)
* [CVE-2023-23333](CVE-2023/CVE-2023-233xx/CVE-2023-23333.json) (`2023-09-06T21:15:08.640`)
* [CVE-2023-27950](CVE-2023/CVE-2023-279xx/CVE-2023-27950.json) (`2023-09-06T21:15:09.183`)
* [CVE-2023-28187](CVE-2023/CVE-2023-281xx/CVE-2023-28187.json) (`2023-09-06T21:15:09.387`)
* [CVE-2023-28188](CVE-2023/CVE-2023-281xx/CVE-2023-28188.json) (`2023-09-06T21:15:09.597`)
* [CVE-2023-28195](CVE-2023/CVE-2023-281xx/CVE-2023-28195.json) (`2023-09-06T21:15:09.690`)
* [CVE-2023-28200](CVE-2023/CVE-2023-282xx/CVE-2023-28200.json) (`2023-09-06T21:15:09.937`)
* [CVE-2023-28209](CVE-2023/CVE-2023-282xx/CVE-2023-28209.json) (`2023-09-06T21:15:10.227`)
* [CVE-2023-28210](CVE-2023/CVE-2023-282xx/CVE-2023-28210.json) (`2023-09-06T21:15:10.473`)
* [CVE-2023-28211](CVE-2023/CVE-2023-282xx/CVE-2023-28211.json) (`2023-09-06T21:15:10.647`)
* [CVE-2023-28212](CVE-2023/CVE-2023-282xx/CVE-2023-28212.json) (`2023-09-06T21:15:10.893`)
* [CVE-2023-28213](CVE-2023/CVE-2023-282xx/CVE-2023-28213.json) (`2023-09-06T21:15:11.093`)
* [CVE-2023-28214](CVE-2023/CVE-2023-282xx/CVE-2023-28214.json) (`2023-09-06T21:15:11.227`)
* [CVE-2023-28215](CVE-2023/CVE-2023-282xx/CVE-2023-28215.json) (`2023-09-06T21:15:11.387`)
* [CVE-2023-29491](CVE-2023/CVE-2023-294xx/CVE-2023-29491.json) (`2023-09-06T21:15:11.787`)
* [CVE-2023-32356](CVE-2023/CVE-2023-323xx/CVE-2023-32356.json) (`2023-09-06T21:15:11.873`)
* [CVE-2023-32362](CVE-2023/CVE-2023-323xx/CVE-2023-32362.json) (`2023-09-06T21:15:11.933`)
* [CVE-2023-32426](CVE-2023/CVE-2023-324xx/CVE-2023-32426.json) (`2023-09-06T21:15:12.130`)
* [CVE-2023-35359](CVE-2023/CVE-2023-353xx/CVE-2023-35359.json) (`2023-09-06T21:15:12.427`)
## Download and Usage