Skip to content

Commit 8a1ba06

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent b14027f commit 8a1ba06

48 files changed

Lines changed: 1751 additions & 46 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎advisories/unreviewed/2022/05/GHSA-3v2r-86vj-q55q/GHSA-3v2r-86vj-q55q.json‎

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-3v2r-86vj-q55q",
4-
"modified": "2022-05-24T17:14:28Z",
4+
"modified": "2026-02-13T00:32:50Z",
55
"published": "2022-05-24T17:14:28Z",
66
"aliases": [
77
"CVE-2020-0919"
88
],
99
"details": "An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{

‎advisories/unreviewed/2026/02/GHSA-238q-xh37-pmhj/GHSA-238q-xh37-pmhj.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-238q-xh37-pmhj",
4-
"modified": "2026-02-11T21:30:40Z",
4+
"modified": "2026-02-13T00:32:51Z",
55
"published": "2026-02-11T21:30:40Z",
66
"aliases": [
77
"CVE-2024-26477"
88
],
99
"details": "An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api parameter of the oauth, amazon_sns, export endpoints.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -32,8 +37,10 @@
3237
}
3338
],
3439
"database_specific": {
35-
"cwe_ids": [],
36-
"severity": null,
40+
"cwe_ids": [
41+
"CWE-200"
42+
],
43+
"severity": "HIGH",
3744
"github_reviewed": false,
3845
"github_reviewed_at": null,
3946
"nvd_published_at": "2026-02-11T20:16:05Z"

‎advisories/unreviewed/2026/02/GHSA-2fcc-cgw7-6rrw/GHSA-2fcc-cgw7-6rrw.json‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2fcc-cgw7-6rrw",
4+
"modified": "2026-02-13T00:32:51Z",
5+
"published": "2026-02-13T00:32:51Z",
6+
"aliases": [
7+
"CVE-2026-25828"
8+
],
9+
"details": "grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because it does not sanitize the $root parameter to resolve_device().",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25828"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://archlinux.org/packages/extra/any/grub-btrfs"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://github.com/Antynea/grub-btrfs/tree/master"
24+
},
25+
{
26+
"type": "WEB",
27+
"url": "https://github.com/cardosource/CVE-2026-25828"
28+
}
29+
],
30+
"database_specific": {
31+
"cwe_ids": [],
32+
"severity": null,
33+
"github_reviewed": false,
34+
"github_reviewed_at": null,
35+
"nvd_published_at": "2026-02-12T22:16:05Z"
36+
}
37+
}

‎advisories/unreviewed/2026/02/GHSA-2qgw-p96m-xw4g/GHSA-2qgw-p96m-xw4g.json‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2qgw-p96m-xw4g",
4+
"modified": "2026-02-13T00:32:52Z",
5+
"published": "2026-02-13T00:32:52Z",
6+
"aliases": [
7+
"CVE-2019-25335"
8+
],
9+
"details": "PRO-7070 Hazır Profesyonel Web Sitesi version 1.0 contains an authentication bypass vulnerability in the administration panel login page. Attackers can bypass authentication by using '=' 'or' as both username and password to gain unauthorized access to the administrative interface.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25335"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://www.exploit-db.com/exploits/47758"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.vulncheck.com/advisories/pro-haz%C4%B1r-profesyonel-web-sitesi-authentication-by"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.websitem.biz/hazir-site/pro-7070-hazir-mobil-tablet-uyumlu-web-sitesi"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-89"
42+
],
43+
"severity": "HIGH",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2026-02-12T23:16:06Z"
47+
}
48+
}

‎advisories/unreviewed/2026/02/GHSA-2qq2-jxgg-2w76/GHSA-2qq2-jxgg-2w76.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2qq2-jxgg-2w76",
4+
"modified": "2026-02-13T00:32:52Z",
5+
"published": "2026-02-13T00:32:52Z",
6+
"aliases": [
7+
"CVE-2024-21961"
8+
],
9+
"details": "Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual machine to potentially perform a denial of service attack against the host resulting in loss of availability.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21961"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-119"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-02-13T00:16:02Z"
39+
}
40+
}

‎advisories/unreviewed/2026/02/GHSA-3frw-32pg-5m86/GHSA-3frw-32pg-5m86.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-3frw-32pg-5m86",
4-
"modified": "2026-02-12T00:31:04Z",
4+
"modified": "2026-02-13T00:32:51Z",
55
"published": "2026-02-12T00:31:03Z",
66
"aliases": [
77
"CVE-2026-20611"
88
],
99
"details": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -48,8 +53,10 @@
4853
}
4954
],
5055
"database_specific": {
51-
"cwe_ids": [],
52-
"severity": null,
56+
"cwe_ids": [
57+
"CWE-125"
58+
],
59+
"severity": "HIGH",
5360
"github_reviewed": false,
5461
"github_reviewed_at": null,
5562
"nvd_published_at": "2026-02-11T23:16:04Z"

‎advisories/unreviewed/2026/02/GHSA-44j4-34hp-pwwr/GHSA-44j4-34hp-pwwr.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-44j4-34hp-pwwr",
4-
"modified": "2026-02-11T21:30:40Z",
4+
"modified": "2026-02-13T00:32:51Z",
55
"published": "2026-02-11T21:30:40Z",
66
"aliases": [
77
"CVE-2024-26479"
88
],
99
"details": "An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the Command execution function.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -32,8 +37,10 @@
3237
}
3338
],
3439
"database_specific": {
35-
"cwe_ids": [],
36-
"severity": null,
40+
"cwe_ids": [
41+
"CWE-200"
42+
],
43+
"severity": "MODERATE",
3744
"github_reviewed": false,
3845
"github_reviewed_at": null,
3946
"nvd_published_at": "2026-02-11T20:16:06Z"

‎advisories/unreviewed/2026/02/GHSA-4mqf-r24p-f3vh/GHSA-4mqf-r24p-f3vh.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4mqf-r24p-f3vh",
4+
"modified": "2026-02-13T00:32:52Z",
5+
"published": "2026-02-13T00:32:52Z",
6+
"aliases": [
7+
"CVE-2019-25322"
8+
],
9+
"details": "Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by using the hard-coded username 'admin' and password 'admin' in the hidden form input fields.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25322"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://web.archive.org/web/20190724160628/https://www.heatmiser.com/en"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.exploit-db.com/exploits/47823"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.vulncheck.com/advisories/heatmiser-netmonitor-hardcoded-credentials"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.zoneregeling.nl/heatmiser/netmonitor-handleiding.pdf"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-798"
46+
],
47+
"severity": "CRITICAL",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-02-12T23:16:03Z"
51+
}
52+
}

‎advisories/unreviewed/2026/02/GHSA-52hp-7f37-p36r/GHSA-52hp-7f37-p36r.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-52hp-7f37-p36r",
4+
"modified": "2026-02-13T00:32:52Z",
5+
"published": "2026-02-13T00:32:52Z",
6+
"aliases": [
7+
"CVE-2019-25330"
8+
],
9+
"details": "SurfOffline Professional 2.2.0.103 contains a structured exception handler (SEH) overflow vulnerability that allows attackers to crash the application by manipulating the project name input. Attackers can generate a malicious payload of 382 'A' characters followed by specific byte sequences to trigger a denial of service condition and overwrite SEH registers.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25330"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://web.archive.org/web/20190717003929/http://www.bimesoft.com"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.exploit-db.com/exploits/47795"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.softpedia.com/get/Internet/Offline-Browsers/SurfOffline.shtml"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.vulncheck.com/advisories/surfoffline-professional-project-name-denial-of-se"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-121"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-02-12T23:16:05Z"
51+
}
52+
}

0 commit comments

Comments
 (0)