mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-09 03:57:14 +00:00
Auto-Update: 2024-05-18T20:00:38.586206+00:00
This commit is contained in:
cad-safe-bot
parent
21a9aa9e9f
commit
ea4fa0b5a5
63
CVE-2024/CVE-2024-340xx/CVE-2024-34083.json
Normal file
63
CVE-2024/CVE-2024-340xx/CVE-2024-34083.json
Normal file
@ -0,0 +1,63 @@
|
||||
{
|
||||
"id": "CVE-2024-34083",
|
||||
"sourceIdentifier": "security-advisories@github.com",
|
||||
"published": "2024-05-18T19:15:49.190",
|
||||
"lastModified": "2024-05-18T19:15:49.190",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a man-in-the-middle attack. Version 1.4.6 contains a patch for the issue."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "security-advisories@github.com",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
|
||||
"attackVector": "ADJACENT_NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 2.5
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "security-advisories@github.com",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-349"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/aio-libs/aiosmtpd/commit/b3a4a2c6ecfd228856a20d637dc383541fcdbfda",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/aio-libs/aiosmtpd/security/advisories/GHSA-wgjv-9j3q-jhg8",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://nostarttls.secvuln.info",
|
||||
"source": "security-advisories@github.com"
|
||||
}
|
||||
]
|
||||
}
|
||||
92
CVE-2024/CVE-2024-50xx/CVE-2024-5093.json
Normal file
92
CVE-2024/CVE-2024-50xx/CVE-2024-5093.json
Normal file
@ -0,0 +1,92 @@
|
||||
{
|
||||
"id": "CVE-2024-5093",
|
||||
"sourceIdentifier": "cna@vuldb.com",
|
||||
"published": "2024-05-18T19:15:49.820",
|
||||
"lastModified": "2024-05-18T19:15:49.820",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265072."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "cna@vuldb.com",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 7.3,
|
||||
"baseSeverity": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "cna@vuldb.com",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "NONE",
|
||||
"confidentialityImpact": "PARTIAL",
|
||||
"integrityImpact": "PARTIAL",
|
||||
"availabilityImpact": "PARTIAL",
|
||||
"baseScore": 7.5
|
||||
},
|
||||
"baseSeverity": "HIGH",
|
||||
"exploitabilityScore": 10.0,
|
||||
"impactScore": 6.4,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "cna@vuldb.com",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/BurakSevben/CVEs/blob/main/House%20Rental%20Management%20System/House%20Rental%20Management%20System%20-%20Authentication%20Bypass.md",
|
||||
"source": "cna@vuldb.com"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.265072",
|
||||
"source": "cna@vuldb.com"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.265072",
|
||||
"source": "cna@vuldb.com"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.335712",
|
||||
"source": "cna@vuldb.com"
|
||||
}
|
||||
]
|
||||
}
|
||||
11
README.md
11
README.md
@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2024-05-18T18:00:37.625319+00:00
|
||||
2024-05-18T20:00:38.586206+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2024-05-18T16:15:47.253000+00:00
|
||||
2024-05-18T19:15:49.820000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@ -33,14 +33,15 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
250640
|
||||
250642
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `1`
|
||||
Recently added CVEs: `2`
|
||||
|
||||
- [CVE-2024-31879](CVE-2024/CVE-2024-318xx/CVE-2024-31879.json) (`2024-05-18T16:15:47.253`)
|
||||
- [CVE-2024-34083](CVE-2024/CVE-2024-340xx/CVE-2024-34083.json) (`2024-05-18T19:15:49.190`)
|
||||
- [CVE-2024-5093](CVE-2024/CVE-2024-50xx/CVE-2024-5093.json) (`2024-05-18T19:15:49.820`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
@ -248135,7 +248135,7 @@ CVE-2024-31871,0,0,2e9cb20a8839296f42d6bc6aa4eee6ec286fed065eef42e4971f116c0f81a
|
||||
CVE-2024-31872,0,0,7d09da772d85c1598253bebf81c543077ef995af0f84d1cf088132605a2400f9,2024-04-10T19:49:51.183000
|
||||
CVE-2024-31873,0,0,30397559953deb34a9ae192149473632dc6b2334245e920787a4c5e14fc76375,2024-04-10T19:49:51.183000
|
||||
CVE-2024-31874,0,0,1770e58d0ae5591eb931a8cdfdb054fb4d854f81849d14af250c71db6caf553c,2024-04-10T19:49:51.183000
|
||||
CVE-2024-31879,1,1,9779483717c99d509cbda3b1751715882067d645bba112c33f1e9b40597e7147,2024-05-18T16:15:47.253000
|
||||
CVE-2024-31879,0,0,9779483717c99d509cbda3b1751715882067d645bba112c33f1e9b40597e7147,2024-05-18T16:15:47.253000
|
||||
CVE-2024-3188,0,0,5d70d4884e37e1862c5503e8662fdd8be316d1df7ecad77f44114699c1426b8a,2024-04-26T12:58:17.720000
|
||||
CVE-2024-31887,0,0,e951c215b0e12b882bcc7244c98d7631ee4f4b7a3271b5f24e369f1a635cd3e5,2024-04-17T12:48:07.510000
|
||||
CVE-2024-3189,0,0,7baee910d4315e07e8608a40fcd14c4e15fd56ddce99253409bb0ee8f0c564c5,2024-05-15T16:40:19.330000
|
||||
@ -249281,6 +249281,7 @@ CVE-2024-34079,0,0,9fcb0ad4a3dfcb1ea318cd4910e18003a9a5afbe5b2fb94481c76cdbd73fa
|
||||
CVE-2024-34080,0,0,31511bc199a6f2ff58d809d178822180b69f7a01cc54f423d19f4303cc5c9823,2024-05-14T16:12:23.490000
|
||||
CVE-2024-34081,0,0,e1e1e5fa3e03beaf407cadde441648651a034f36cd3c66a34f4de6854261c6dc,2024-05-14T16:12:23.490000
|
||||
CVE-2024-34082,0,0,dfcfb42195688d761efac33b725f89283a0ee86d0d1c124a1f7eb69250a70c25,2024-05-15T18:35:11.453000
|
||||
CVE-2024-34083,1,1,ac677d6154111604689eeff97813a2a54626cf78a22f43a48bca3ac7e67f6c6c,2024-05-18T19:15:49.190000
|
||||
CVE-2024-34084,0,0,3472cf0a3060d39e1085c2356da46bf3f00aecf0dd516fa3a42f335f20a49f9d,2024-05-07T20:07:58.737000
|
||||
CVE-2024-34085,0,0,d83738fa0c2a322f0cb71130623850a2b6a31059d871027b26253eaf9e4bb5fd,2024-05-14T19:17:55.627000
|
||||
CVE-2024-34086,0,0,c2ccb7f5604719631c62cb46c494b7e7a3c3f8dacc5c8c6ad647f8150087c2bd,2024-05-14T19:17:55.627000
|
||||
@ -250639,3 +250640,4 @@ CVE-2024-5066,0,0,8fac16621e33283e42f7bac34fc769d8419a5983dc5c1895c2af5992c4f1c0
|
||||
CVE-2024-5069,0,0,83f05e6bc90dcbb38ccc8d5c9f498130d0f1f82eb57b320dfdf994e85c84b92d,2024-05-17T21:15:08.070000
|
||||
CVE-2024-5072,0,0,59f53138c9a4bd03d418fc9567d2fee910c79a79b0ffab8c9c0e99d145eda28e,2024-05-17T18:35:35.070000
|
||||
CVE-2024-5088,0,0,50667a67acfa1c1765d4964471244345a5ec274089064a9c1b8f8753a5e9ec09,2024-05-18T12:15:47.010000
|
||||
CVE-2024-5093,1,1,3c2b00d586f6a8a0649b233cdccf9a8bcc6a81454bbb74af6aa7e6290b078a76,2024-05-18T19:15:49.820000
|
||||
|
||||
|
Can't render this file because it is too large.
|
Loading…
x
Reference in New Issue
Block a user