admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-08 19:47:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-08-14T22:00:27.247060+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2023-08-14 22:00:31 +00:00
parent 057a93ef85
commit a7cd4a4918
30 changed files with 1032 additions and 45 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
CVE-2022/CVE-2022-49xx/CVE-2022-4953.json Normal file
View File

@ -0,0 +1,36 @@
{
"id": "CVE-2022-4953",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-08-14T20:15:10.193",
"lastModified": "2023-08-14T20:15:10.193",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The Elementor Website Builder WordPress plugin before 3.5.5 does not filter out user-controlled URLs from being loaded into the DOM. This could be used to inject rogue iframes that point to malicious URLs."
}
],
"metrics": {},
"weaknesses": [
{
"source": "contact@wpscan.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-80"
}
]
}
],
"references": [
{
"url": "https://github.com/elementor/elementor/commit/292fc49e0f979bd52d838f0326d1faaebfa59f5e",
"source": "contact@wpscan.com"
},
{
"url": "https://wpscan.com/vulnerability/8273357e-f9e1-44bc-8082-8faab838eda7",
"source": "contact@wpscan.com"
}
]
}

32
CVE-2023/CVE-2023-209xx/CVE-2023-20965.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-20965",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:10.320",
"lastModified": "2023-08-14T21:15:10.320",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/packages/modules/Wifi/+/0d3cb609b0851ea9e5745cc6101e57c2e5e739f2",
"source": "security@android.com"
},
{
"url": "https://android.googlesource.com/platform/packages/modules/Wifi/+/88a8a98934215f591605028e200b6eca8f7cc45a",
"source": "security@android.com"
},
{
"url": "https://android.googlesource.com/platform/packages/modules/Wifi/+/bd318b9772759546509f6fdb8648366099dd65ad",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

24
CVE-2023/CVE-2023-211xx/CVE-2023-21132.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-21132",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:11.030",
"lastModified": "2023-08-14T21:15:11.030",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

24
CVE-2023/CVE-2023-211xx/CVE-2023-21133.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-21133",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:11.107",
"lastModified": "2023-08-14T21:15:11.107",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

24
CVE-2023/CVE-2023-211xx/CVE-2023-21134.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-21134",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:11.247",
"lastModified": "2023-08-14T21:15:11.247",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

24
CVE-2023/CVE-2023-211xx/CVE-2023-21140.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-21140",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:11.487",
"lastModified": "2023-08-14T21:15:11.487",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

24
CVE-2023/CVE-2023-212xx/CVE-2023-21242.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-21242",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:11.733",
"lastModified": "2023-08-14T21:15:11.733",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/packages/modules/Wifi/+/72e903f258b5040b8f492cf18edd124b5a1ac770",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

28
CVE-2023/CVE-2023-212xx/CVE-2023-21264.json Normal file
View File

@ -0,0 +1,28 @@
{
"id": "CVE-2023-21264",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:11.893",
"lastModified": "2023-08-14T21:15:11.893",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/kernel/common/+/53625a846a7b4",
"source": "security@android.com"
},
{
"url": "https://android.googlesource.com/kernel/common/+/b35a06182451f",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

24
CVE-2023/CVE-2023-212xx/CVE-2023-21265.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-21265",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:12.067",
"lastModified": "2023-08-14T21:15:12.067",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/system/ca-certificates/+/6065b4a4c7da9cc9ee01c2f6389575647d2724c4",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

24
CVE-2023/CVE-2023-212xx/CVE-2023-21267.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-21267",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:12.243",
"lastModified": "2023-08-14T21:15:12.243",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In doKeyguardLocked of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/d18d8b350756b0e89e051736c1f28744ed31e93a",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

24
CVE-2023/CVE-2023-212xx/CVE-2023-21268.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-21268",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:12.407",
"lastModified": "2023-08-14T21:15:12.407",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

24
CVE-2023/CVE-2023-212xx/CVE-2023-21269.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-21269",
"sourceIdentifier": "security@android.com",
"published": "2023-08-14T21:15:12.460",
"lastModified": "2023-08-14T21:15:12.460",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
}
],
"metrics": {},
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/70ec64dc5a2a816d6aa324190a726a85fd749b30",
"source": "security@android.com"
},
{
"url": "https://source.android.com/security/bulletin/2023-08-01",
"source": "security@android.com"
}
]
}

32
CVE-2023/CVE-2023-26xx/CVE-2023-2606.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-2606",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-08-14T20:15:11.080",
"lastModified": "2023-08-14T20:15:11.080",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The WP Brutal AI WordPress plugin before 2.06 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
}
],
"metrics": {},
"weaknesses": [
{
"source": "contact@wpscan.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/62deb3ed-a7e4-4cdc-a615-cad2ec2e1e8f",
"source": "contact@wpscan.com"
}
]
}

32
CVE-2023/CVE-2023-28xx/CVE-2023-2802.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-2802",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-08-14T20:15:11.297",
"lastModified": "2023-08-14T20:15:11.297",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)"
}
],
"metrics": {},
"weaknesses": [
{
"source": "contact@wpscan.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/c5cc136a-2fa6-44ff-b5b5-26d367937df9",
"source": "contact@wpscan.com"
}
]
}

32
CVE-2023/CVE-2023-28xx/CVE-2023-2803.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-2803",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-08-14T20:15:11.547",
"lastModified": "2023-08-14T20:15:11.547",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
}
],
"metrics": {},
"weaknesses": [
{
"source": "contact@wpscan.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/ec640d47-bb22-478d-9668-1dab72f12f8d",
"source": "contact@wpscan.com"
}
]
}

32
CVE-2023/CVE-2023-33xx/CVE-2023-3328.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-3328",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-08-14T20:15:11.663",
"lastModified": "2023-08-14T20:15:11.663",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The Custom Field For WP Job Manager WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)"
}
],
"metrics": {},
"weaknesses": [
{
"source": "contact@wpscan.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/d8b76875-cf7f-43a9-b88b-d8aefefab131",
"source": "contact@wpscan.com"
}
]
}

32
CVE-2023/CVE-2023-34xx/CVE-2023-3435.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-3435",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-08-14T20:15:11.747",
"lastModified": "2023-08-14T20:15:11.747",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks."
}
],
"metrics": {},
"weaknesses": [
{
"source": "contact@wpscan.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/30a37a61-0d16-46f7-b9d8-721d983afc6b",
"source": "contact@wpscan.com"
}
]
}

32
CVE-2023/CVE-2023-36xx/CVE-2023-3601.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-3601",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-08-14T20:15:11.827",
"lastModified": "2023-08-14T20:15:11.827",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor."
}
],
"metrics": {},
"weaknesses": [
{
"source": "contact@wpscan.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/c0cc513e-c306-4920-9afb-e33d95a7292f",
"source": "contact@wpscan.com"
}
]
}

32
CVE-2023/CVE-2023-36xx/CVE-2023-3645.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-3645",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-08-14T20:15:12.103",
"lastModified": "2023-08-14T20:15:12.103",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)"
}
],
"metrics": {},
"weaknesses": [
{
"source": "contact@wpscan.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/58c11f1e-6ea0-468c-b974-4aea9eb94b82",
"source": "contact@wpscan.com"
}
]
}

32
CVE-2023/CVE-2023-37xx/CVE-2023-3721.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2023-3721",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-08-14T20:15:12.413",
"lastModified": "2023-08-14T20:15:12.413",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The WP-EMail WordPress plugin before 2.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)"
}
],
"metrics": {},
"weaknesses": [
{
"source": "contact@wpscan.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/3f90347a-6586-4648-9f2c-d4f321bf801a",
"source": "contact@wpscan.com"
}
]
}

55
CVE-2023/CVE-2023-386xx/CVE-2023-38687.json Normal file
View File

@ -0,0 +1,55 @@
{
"id": "CVE-2023-38687",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-14T21:15:12.607",
"lastModified": "2023-08-14T21:15:12.607",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Svelecte is a flexible autocomplete/select component written in Svelte. Svelecte item names are rendered as raw HTML with no escaping. This allows the injection of arbitrary HTML into the Svelecte dropdown. This can be exploited to execute arbitrary JavaScript whenever a Svelecte dropdown is opened. Item names given to Svelecte appear to be directly rendered as HTML by the default item renderer. This means that any HTML tags in the name are rendered as HTML elements not as text. Note that the custom item renderer shown in https://mskocik.github.io/svelecte/#item-rendering is also vulnerable to the same exploit. Any site that uses Svelecte with dynamically created items either from an external source or from user-created content could be vulnerable to an XSS attack (execution of untrusted JavaScript), clickjacking or any other attack that can be performed with arbitrary HTML injection. The actual impact of this vulnerability for a specific application depends on how trustworthy the sources that provide Svelecte items are and the steps that the application has taken to mitigate XSS attacks. XSS attacks using this vulnerability are mostly mitigated by a Content Security Policy that blocks inline JavaScript. This issue has been addressed in version 3.16.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/mskocik/svelecte/security/advisories/GHSA-7h45-grc5-89wq",
"source": "security-advisories@github.com"
}
]
}

20
CVE-2023/CVE-2023-398xx/CVE-2023-39827.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-39827",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-08-14T21:15:13.030",
"lastModified": "2023-08-14T21:15:13.030",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/formAddMacfilterRule",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-398xx/CVE-2023-39828.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-39828",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-08-14T21:15:13.197",
"lastModified": "2023-08-14T21:15:13.197",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/formWifiBasicSet",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-398xx/CVE-2023-39829.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-39829",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-08-14T21:15:13.367",
"lastModified": "2023-08-14T21:15:13.367",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/fromSetWirelessRepeat",
"source": "cve@mitre.org"
}
]
}

71
CVE-2023/CVE-2023-399xx/CVE-2023-39950.json Normal file
View File

@ -0,0 +1,71 @@
{
"id": "CVE-2023-39950",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-14T21:15:13.420",
"lastModified": "2023-08-14T21:15:13.420",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and sanitization of input from untrustworthy bootloader environment files can cause crashes and probably also code injections into `bg_setenv`) or programs using `libebgenv`. This is triggered when the affected components try to modify a manipulated environment, in particular its user variables. Furthermore, `bg_printenv` may crash over invalid read accesses or report invalid results. Not affected by this issue is EFI Boot Guard's bootloader EFI binary. EFI Boot Guard release v0.15 contains required patches to sanitize and validate the bootloader environment prior to processing it in userspace. Its library and tools should be updated, so should programs statically linked against it. An update of the bootloader EFI executable is not required. The only way to prevent the issue with an unpatched EFI Boot Guard version is to avoid accesses to user variables, specifically modifications to them."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW",
"baseScore": 6.1,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 0.9,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"references": [
{
"url": "https://github.com/siemens/efibootguard/blob/master/docs/API.md",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/siemens/efibootguard/blob/master/docs/TOOLS.md",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/siemens/efibootguard/blob/master/docs/TOOLS.md#setting-user-variables",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/siemens/efibootguard/security/advisories/GHSA-j6pp-7g99-24m7",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/siemens/efibootguard/tags",
"source": "security-advisories@github.com"
}
]
}

67
CVE-2023/CVE-2023-400xx/CVE-2023-40013.json Normal file
View File

@ -0,0 +1,67 @@
{
"id": "CVE-2023-40013",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-14T21:15:13.523",
"lastModified": "2023-08-14T21:15:13.523",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "SVG Loader is a javascript library that fetches SVGs using XMLHttpRequests and injects the SVG code in the tag's place. According to the docs, svg-loader will strip all JS code before injecting the SVG file for security reasons but the input sanitization logic is not sufficient and can be trivially bypassed. This allows an attacker to craft a malicious SVG which can result in Cross-site Scripting (XSS). When trying to sanitize the svg the lib removes event attributes such as `onmouseover`, `onclick` but the list of events is not exhaustive. Any website which uses external-svg-loader and allows its users to provide svg src, upload svg files would be susceptible to stored XSS attack. This issue has been addressed in commit `d3562fc08` which is included in releases from 1.6.9. Users are advised to upgrade. There are no known workarounds for this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 1.6,
"impactScore": 5.5
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/shubhamjain/svg-loader/blob/main/svg-loader.js#L125-L128",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/shubhamjain/svg-loader/commit/d3562fc08497aec5f33eb82017fa1417b3319e2c",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/shubhamjain/svg-loader/security/advisories/GHSA-xc2r-jf2x-gjr8",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/shubhamjain/svg-loader/tree/main#2-enable-javascript",
"source": "security-advisories@github.com"
}
]
}

59
CVE-2023/CVE-2023-400xx/CVE-2023-40020.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-40020",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-14T21:15:13.797",
"lastModified": "2023-08-14T21:15:13.797",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions `app/routes/v3/admin.controller.ts` did not correctly verify whether the user was an administrator (High Level) or moderator (Low Level) causing the request to continue processing. The response would be a 403 with ADMIN_ONLY, however, next() would call leading to any updates/changes in the route to process. This issue has been addressed in version 3.2.49. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.1,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"references": [
{
"url": "https://github.com/PrivateUploader/PrivateUploader/commit/869657d61e3c7a518177106fe63ea483082b0d3e",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/PrivateUploader/PrivateUploader/security/advisories/GHSA-vhrw-2472-rrjx",
"source": "security-advisories@github.com"
}
]
}

63
CVE-2023/CVE-2023-400xx/CVE-2023-40023.json Normal file
View File

@ -0,0 +1,63 @@
{
"id": "CVE-2023-40023",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-14T20:15:12.530",
"lastModified": "2023-08-14T20:15:12.530",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "yaklang is a programming language designed for cybersecurity. The Yak Engine has been found to contain a local file inclusion (LFI) vulnerability. This vulnerability allows attackers to include files from the server's local file system through the web application. When exploited, this can lead to the unintended exposure of sensitive data, potential remote code execution, or other security breaches. Users utilizing versions of the Yak Engine prior to 1.2.4-sp1 are impacted. This vulnerability has been patched in version 1.2.4-sp1. Users are advised to upgrade. users unable to upgrade may avoid exposing vulnerable versions to untrusted input and to closely monitor any unexpected server behavior until they can upgrade."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://github.com/yaklang/yaklang/pull/295",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/yaklang/yaklang/pull/296",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/yaklang/yaklang/security/advisories/GHSA-xvhg-w6qc-m3qq",
"source": "security-advisories@github.com"
}
]
}

59
CVE-2023/CVE-2023-400xx/CVE-2023-40024.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-40024",
"sourceIdentifier": "security-advisories@github.com",
"published": "2023-08-14T20:15:12.837",
"lastModified": "2023-08-14T20:15:12.837",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "ScanCode.io is a server to script and automate software composition analysis pipelines. In the `/license/` endpoint, the detailed view key is not properly validated and sanitized, which can result in a potential cross-site scripting (XSS) vulnerability when attempting to access a detailed license view that does not exist. Attackers can exploit this vulnerability to inject malicious scripts into the response generated by the `license_details_view` function. When unsuspecting users visit the page, their browsers will execute the injected scripts, leading to unauthorized actions, session hijacking, or stealing sensitive information. This issue has been addressed in release `32.5.2`. Users are advised to upgrade. There are no known workarounds for this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/nexB/scancode.io/blob/dd7769fbc97c84545579cebf1dc4838214098a11/CHANGELOG.rst#v3252-2023-08-14",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/nexB/scancode.io/security/advisories/GHSA-6xcx-gx7r-rccj",
"source": "security-advisories@github.com"
}
]
}

75
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-08-14T20:00:40.478585+00:00
2023-08-14T22:00:27.247060+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-08-14T19:15:14.627000+00:00
2023-08-14T21:15:13.797000+00:00
```
### Last Data Feed Release
@ -29,59 +29,44 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
222592
222621
```
### CVEs added in the last Commit
Recently added CVEs: `15`
Recently added CVEs: `29`
* [CVE-2023-0872](CVE-2023/CVE-2023-08xx/CVE-2023-0872.json) (`2023-08-14T18:15:10.730`)
* [CVE-2023-32748](CVE-2023/CVE-2023-327xx/CVE-2023-32748.json) (`2023-08-14T18:15:10.867`)
* [CVE-2023-38721](CVE-2023/CVE-2023-387xx/CVE-2023-38721.json) (`2023-08-14T18:15:11.013`)
* [CVE-2023-38741](CVE-2023/CVE-2023-387xx/CVE-2023-38741.json) (`2023-08-14T18:15:11.133`)
* [CVE-2023-40311](CVE-2023/CVE-2023-403xx/CVE-2023-40311.json) (`2023-08-14T18:15:11.247`)
* [CVE-2023-40312](CVE-2023/CVE-2023-403xx/CVE-2023-40312.json) (`2023-08-14T18:15:11.420`)
* [CVE-2023-40360](CVE-2023/CVE-2023-403xx/CVE-2023-40360.json) (`2023-08-14T18:15:11.510`)
* [CVE-2023-28480](CVE-2023/CVE-2023-284xx/CVE-2023-28480.json) (`2023-08-14T19:15:10.260`)
* [CVE-2023-28481](CVE-2023/CVE-2023-284xx/CVE-2023-28481.json) (`2023-08-14T19:15:10.413`)
* [CVE-2023-28482](CVE-2023/CVE-2023-284xx/CVE-2023-28482.json) (`2023-08-14T19:15:10.513`)
* [CVE-2023-28483](CVE-2023/CVE-2023-284xx/CVE-2023-28483.json) (`2023-08-14T19:15:10.567`)
* [CVE-2023-29468](CVE-2023/CVE-2023-294xx/CVE-2023-29468.json) (`2023-08-14T19:15:11.437`)
* [CVE-2023-39292](CVE-2023/CVE-2023-392xx/CVE-2023-39292.json) (`2023-08-14T19:15:12.897`)
* [CVE-2023-39293](CVE-2023/CVE-2023-392xx/CVE-2023-39293.json) (`2023-08-14T19:15:13.017`)
* [CVE-2023-39908](CVE-2023/CVE-2023-399xx/CVE-2023-39908.json) (`2023-08-14T19:15:13.243`)
* [CVE-2023-3328](CVE-2023/CVE-2023-33xx/CVE-2023-3328.json) (`2023-08-14T20:15:11.663`)
* [CVE-2023-3435](CVE-2023/CVE-2023-34xx/CVE-2023-3435.json) (`2023-08-14T20:15:11.747`)
* [CVE-2023-3601](CVE-2023/CVE-2023-36xx/CVE-2023-3601.json) (`2023-08-14T20:15:11.827`)
* [CVE-2023-3645](CVE-2023/CVE-2023-36xx/CVE-2023-3645.json) (`2023-08-14T20:15:12.103`)
* [CVE-2023-3721](CVE-2023/CVE-2023-37xx/CVE-2023-3721.json) (`2023-08-14T20:15:12.413`)
* [CVE-2023-40023](CVE-2023/CVE-2023-400xx/CVE-2023-40023.json) (`2023-08-14T20:15:12.530`)
* [CVE-2023-40024](CVE-2023/CVE-2023-400xx/CVE-2023-40024.json) (`2023-08-14T20:15:12.837`)
* [CVE-2023-20965](CVE-2023/CVE-2023-209xx/CVE-2023-20965.json) (`2023-08-14T21:15:10.320`)
* [CVE-2023-21132](CVE-2023/CVE-2023-211xx/CVE-2023-21132.json) (`2023-08-14T21:15:11.030`)
* [CVE-2023-21133](CVE-2023/CVE-2023-211xx/CVE-2023-21133.json) (`2023-08-14T21:15:11.107`)
* [CVE-2023-21134](CVE-2023/CVE-2023-211xx/CVE-2023-21134.json) (`2023-08-14T21:15:11.247`)
* [CVE-2023-21140](CVE-2023/CVE-2023-211xx/CVE-2023-21140.json) (`2023-08-14T21:15:11.487`)
* [CVE-2023-21242](CVE-2023/CVE-2023-212xx/CVE-2023-21242.json) (`2023-08-14T21:15:11.733`)
* [CVE-2023-21264](CVE-2023/CVE-2023-212xx/CVE-2023-21264.json) (`2023-08-14T21:15:11.893`)
* [CVE-2023-21265](CVE-2023/CVE-2023-212xx/CVE-2023-21265.json) (`2023-08-14T21:15:12.067`)
* [CVE-2023-21267](CVE-2023/CVE-2023-212xx/CVE-2023-21267.json) (`2023-08-14T21:15:12.243`)
* [CVE-2023-21268](CVE-2023/CVE-2023-212xx/CVE-2023-21268.json) (`2023-08-14T21:15:12.407`)
* [CVE-2023-21269](CVE-2023/CVE-2023-212xx/CVE-2023-21269.json) (`2023-08-14T21:15:12.460`)
* [CVE-2023-38687](CVE-2023/CVE-2023-386xx/CVE-2023-38687.json) (`2023-08-14T21:15:12.607`)
* [CVE-2023-39827](CVE-2023/CVE-2023-398xx/CVE-2023-39827.json) (`2023-08-14T21:15:13.030`)
* [CVE-2023-39828](CVE-2023/CVE-2023-398xx/CVE-2023-39828.json) (`2023-08-14T21:15:13.197`)
* [CVE-2023-39829](CVE-2023/CVE-2023-398xx/CVE-2023-39829.json) (`2023-08-14T21:15:13.367`)
* [CVE-2023-39950](CVE-2023/CVE-2023-399xx/CVE-2023-39950.json) (`2023-08-14T21:15:13.420`)
* [CVE-2023-40013](CVE-2023/CVE-2023-400xx/CVE-2023-40013.json) (`2023-08-14T21:15:13.523`)
* [CVE-2023-40020](CVE-2023/CVE-2023-400xx/CVE-2023-40020.json) (`2023-08-14T21:15:13.797`)
### CVEs modified in the last Commit
Recently modified CVEs: `30`
Recently modified CVEs: `0`
* [CVE-2023-36095](CVE-2023/CVE-2023-360xx/CVE-2023-36095.json) (`2023-08-14T18:15:10.927`)
* [CVE-2023-38941](CVE-2023/CVE-2023-389xx/CVE-2023-38941.json) (`2023-08-14T18:17:39.230`)
* [CVE-2023-22612](CVE-2023/CVE-2023-226xx/CVE-2023-22612.json) (`2023-08-14T18:21:21.537`)
* [CVE-2023-22614](CVE-2023/CVE-2023-226xx/CVE-2023-22614.json) (`2023-08-14T18:21:21.537`)
* [CVE-2023-22615](CVE-2023/CVE-2023-226xx/CVE-2023-22615.json) (`2023-08-14T18:21:21.537`)
* [CVE-2023-22613](CVE-2023/CVE-2023-226xx/CVE-2023-22613.json) (`2023-08-14T18:21:21.537`)
* [CVE-2023-0426](CVE-2023/CVE-2023-04xx/CVE-2023-0426.json) (`2023-08-14T18:28:12.797`)
* [CVE-2023-0425](CVE-2023/CVE-2023-04xx/CVE-2023-0425.json) (`2023-08-14T18:30:20.457`)
* [CVE-2023-4194](CVE-2023/CVE-2023-41xx/CVE-2023-4194.json) (`2023-08-14T18:36:39.123`)
* [CVE-2023-38942](CVE-2023/CVE-2023-389xx/CVE-2023-38942.json) (`2023-08-14T18:40:24.287`)
* [CVE-2023-38682](CVE-2023/CVE-2023-386xx/CVE-2023-38682.json) (`2023-08-14T18:53:21.687`)
* [CVE-2023-38683](CVE-2023/CVE-2023-386xx/CVE-2023-38683.json) (`2023-08-14T18:53:43.780`)
* [CVE-2023-25929](CVE-2023/CVE-2023-259xx/CVE-2023-25929.json) (`2023-08-14T19:15:09.943`)
* [CVE-2023-28530](CVE-2023/CVE-2023-285xx/CVE-2023-28530.json) (`2023-08-14T19:15:10.730`)
* [CVE-2023-28953](CVE-2023/CVE-2023-289xx/CVE-2023-28953.json) (`2023-08-14T19:15:10.920`)
* [CVE-2023-29406](CVE-2023/CVE-2023-294xx/CVE-2023-29406.json) (`2023-08-14T19:15:11.167`)
* [CVE-2023-2878](CVE-2023/CVE-2023-28xx/CVE-2023-2878.json) (`2023-08-14T19:15:11.593`)
* [CVE-2023-34034](CVE-2023/CVE-2023-340xx/CVE-2023-34034.json) (`2023-08-14T19:15:11.930`)
* [CVE-2023-34329](CVE-2023/CVE-2023-343xx/CVE-2023-34329.json) (`2023-08-14T19:15:12.097`)
* [CVE-2023-34330](CVE-2023/CVE-2023-343xx/CVE-2023-34330.json) (`2023-08-14T19:15:12.193`)
* [CVE-2023-36824](CVE-2023/CVE-2023-368xx/CVE-2023-36824.json) (`2023-08-14T19:15:12.457`)
* [CVE-2023-3526](CVE-2023/CVE-2023-35xx/CVE-2023-3526.json) (`2023-08-14T19:15:13.410`)
* [CVE-2023-3569](CVE-2023/CVE-2023-35xx/CVE-2023-3569.json) (`2023-08-14T19:15:13.793`)
* [CVE-2023-4202](CVE-2023/CVE-2023-42xx/CVE-2023-4202.json) (`2023-08-14T19:15:14.220`)
* [CVE-2023-4203](CVE-2023/CVE-2023-42xx/CVE-2023-4203.json) (`2023-08-14T19:15:14.627`)
## Download and Usage