Skip to content

Commit 1a4a2ef

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent 435a58b commit 1a4a2ef

61 files changed

Lines changed: 1526 additions & 71 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎advisories/unreviewed/2022/02/GHSA-x4cj-7x5p-w7vf/GHSA-x4cj-7x5p-w7vf.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-x4cj-7x5p-w7vf",
4-
"modified": "2023-05-29T21:30:16Z",
4+
"modified": "2026-01-26T18:31:24Z",
55
"published": "2022-02-25T00:00:59Z",
66
"aliases": [
77
"CVE-2021-3610"
@@ -27,6 +27,10 @@
2727
"type": "WEB",
2828
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1973689"
2929
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/fuzzing2026/CVE-PoCs/tree/main/imagemagick-CVE-2021-3610"
33+
},
3034
{
3135
"type": "WEB",
3236
"url": "http://www.openwall.com/lists/oss-security/2023/05/29/4"

‎advisories/unreviewed/2022/05/GHSA-4hxq-5wx8-9jq2/GHSA-4hxq-5wx8-9jq2.json‎

Lines changed: 14 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-4hxq-5wx8-9jq2",
4-
"modified": "2022-05-24T17:22:12Z",
4+
"modified": "2026-01-26T18:31:23Z",
55
"published": "2022-05-24T17:22:12Z",
66
"aliases": [
77
"CVE-2020-15471"
88
],
99
"details": "In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -17,10 +22,16 @@
1722
{
1823
"type": "WEB",
1924
"url": "https://github.com/ntop/nDPI/commit/61066fb106efa6d3d95b67e47b662de208b2b622"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/fuzzing2026/CVE-PoCs/tree/main/ndpi-CVE-2020-15471"
2029
}
2130
],
2231
"database_specific": {
23-
"cwe_ids": [],
32+
"cwe_ids": [
33+
"CWE-125"
34+
],
2435
"severity": "MODERATE",
2536
"github_reviewed": false,
2637
"github_reviewed_at": null,

‎advisories/unreviewed/2022/05/GHSA-648v-392v-p884/GHSA-648v-392v-p884.json‎

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-648v-392v-p884",
4-
"modified": "2022-05-24T17:47:38Z",
4+
"modified": "2026-01-26T18:31:24Z",
55
"published": "2022-05-24T17:47:38Z",
66
"aliases": [
77
"CVE-2021-28855"
88
],
99
"details": "In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbuf_write function (src/deark-dbuf.c).",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -21,6 +26,10 @@
2126
{
2227
"type": "WEB",
2328
"url": "https://fatihhcelik.github.io/posts/NULL-Pointer-Dereference-Deark"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/fuzzing2026/CVE-PoCs/tree/main/deark-CVE-2021-28855"
2433
}
2534
],
2635
"database_specific": {

‎advisories/unreviewed/2022/05/GHSA-7c95-7pgx-3px5/GHSA-7c95-7pgx-3px5.json‎

Lines changed: 14 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-7c95-7pgx-3px5",
4-
"modified": "2022-05-24T17:22:13Z",
4+
"modified": "2026-01-26T18:31:23Z",
55
"published": "2022-05-24T17:22:13Z",
66
"aliases": [
77
"CVE-2020-15473"
88
],
99
"details": "In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -17,10 +22,16 @@
1722
{
1823
"type": "WEB",
1924
"url": "https://github.com/ntop/nDPI/commit/8e7b1ea7a136cc4e4aa9880072ec2d69900a825e"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/fuzzing2026/CVE-PoCs/tree/main/ndpi-CVE-2020-15473"
2029
}
2130
],
2231
"database_specific": {
23-
"cwe_ids": [],
32+
"cwe_ids": [
33+
"CWE-125"
34+
],
2435
"severity": "MODERATE",
2536
"github_reviewed": false,
2637
"github_reviewed_at": null,

‎advisories/unreviewed/2022/05/GHSA-f68w-mw2g-j2g2/GHSA-f68w-mw2g-j2g2.json‎

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-f68w-mw2g-j2g2",
4-
"modified": "2022-05-24T17:47:38Z",
4+
"modified": "2026-01-26T18:31:24Z",
55
"published": "2022-05-24T17:47:38Z",
66
"aliases": [
77
"CVE-2021-28856"
88
],
99
"details": "In Deark before v1.5.8, a specially crafted input file can cause a division by zero in (src/fmtutil.c) because of the value of pixelsize.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -21,6 +26,10 @@
2126
{
2227
"type": "WEB",
2328
"url": "https://fatihhcelik.github.io/posts/Division-By-Zero-Deark"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/fuzzing2026/CVE-PoCs/tree/main/deark-CVE-2021-28856"
2433
}
2534
],
2635
"database_specific": {

‎advisories/unreviewed/2024/08/GHSA-9v3w-2474-chq6/GHSA-9v3w-2474-chq6.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-9v3w-2474-chq6",
4-
"modified": "2024-09-04T18:30:50Z",
4+
"modified": "2026-01-26T18:31:24Z",
55
"published": "2024-08-29T21:31:04Z",
66
"aliases": [
77
"CVE-2024-41349"
@@ -22,6 +22,10 @@
2222
{
2323
"type": "WEB",
2424
"url": "https://github.com/cdevroe/unmark/issues/290"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/cdevroe/unmark/commit/52342dc4a908dc6ac6878f21a5850108ac84a4b8"
2529
}
2630
],
2731
"database_specific": {

‎advisories/unreviewed/2024/08/GHSA-cmm9-5j5g-mhq5/GHSA-cmm9-5j5g-mhq5.json‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-cmm9-5j5g-mhq5",
4-
"modified": "2024-08-30T15:31:29Z",
4+
"modified": "2026-01-26T18:31:24Z",
55
"published": "2024-08-29T21:31:03Z",
66
"aliases": [
77
"CVE-2024-41348"
@@ -22,6 +22,14 @@
2222
{
2323
"type": "WEB",
2424
"url": "https://github.com/jpatokal/openflights/issues/1478"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/jpatokal/openflights/commit/d815df727a94fe98d3299873f0efddf6a81a56a3"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/jpatokal/openflights/commit/e7f5d8112d5353cc1ceb6ae92aa5ff2f3c2e35a6"
2533
}
2634
],
2735
"database_specific": {

‎advisories/unreviewed/2024/08/GHSA-hmvm-6w7r-q9wr/GHSA-hmvm-6w7r-q9wr.json‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-hmvm-6w7r-q9wr",
4-
"modified": "2025-04-16T15:34:13Z",
4+
"modified": "2026-01-26T18:31:24Z",
55
"published": "2024-08-29T21:31:03Z",
66
"aliases": [
77
"CVE-2024-41358"
@@ -23,6 +23,14 @@
2323
"type": "WEB",
2424
"url": "https://github.com/phpipam/phpipam/issues/4148"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/phpipam/phpipam/commit/3986ac1acfbf47ddd4fe05cd158aaf2cacafe36b"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/phpipam/phpipam/commit/b131fb99c9ada95b38e4cb2749ac599e42fad3d9"
33+
},
2634
{
2735
"type": "WEB",
2836
"url": "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2024-41358.md"

‎advisories/unreviewed/2024/08/GHSA-m2m3-8mcw-w486/GHSA-m2m3-8mcw-w486.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-m2m3-8mcw-w486",
4-
"modified": "2024-08-30T15:31:29Z",
4+
"modified": "2026-01-26T18:31:23Z",
55
"published": "2024-08-29T21:31:03Z",
66
"aliases": [
77
"CVE-2024-41347"
@@ -22,6 +22,10 @@
2222
{
2323
"type": "WEB",
2424
"url": "https://github.com/jpatokal/openflights/issues/1477"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/jpatokal/openflights/commit/36733f430b11a78404457a5dfc295ab1182292c0"
2529
}
2630
],
2731
"database_specific": {

‎advisories/unreviewed/2024/08/GHSA-r75v-8c97-7xvm/GHSA-r75v-8c97-7xvm.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-r75v-8c97-7xvm",
4-
"modified": "2024-08-30T15:31:29Z",
4+
"modified": "2026-01-26T18:31:23Z",
55
"published": "2024-08-29T21:31:03Z",
66
"aliases": [
77
"CVE-2024-41346"
@@ -22,6 +22,10 @@
2222
{
2323
"type": "WEB",
2424
"url": "https://github.com/jpatokal/openflights/issues/1479"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/jpatokal/openflights/commit/36733f430b11a78404457a5dfc295ab1182292c0"
2529
}
2630
],
2731
"database_specific": {

0 commit comments

Comments
 (0)