Advisory Database Sync

Author: advisory-database[bot]

advisories/unreviewed/2023/12/GHSA-wr8p-76fm-xh64/GHSA-wr8p-76fm-xh64.json

@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-119",
       "CWE-787"
     ],
     "severity": "HIGH",

advisories/unreviewed/2024/11/GHSA-7mjf-5rrm-399r/GHSA-7mjf-5rrm-399r.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7mjf-5rrm-399r",
-  "modified": "2024-11-27T21:32:44Z",
+  "modified": "2025-10-01T21:30:37Z",
   "published": "2024-11-19T18:31:07Z",
   "aliases": [
     "CVE-2024-53084"

advisories/unreviewed/2024/11/GHSA-mhcq-hvgj-xm2h/GHSA-mhcq-hvgj-xm2h.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mhcq-hvgj-xm2h",
-  "modified": "2024-11-12T15:30:32Z",
+  "modified": "2025-10-01T21:30:28Z",
   "published": "2024-11-05T18:32:12Z",
   "aliases": [
     "CVE-2024-50102"

advisories/unreviewed/2024/11/GHSA-p9rc-m4r5-4rpr/GHSA-p9rc-m4r5-4rpr.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p9rc-m4r5-4rpr",
-  "modified": "2024-11-14T18:30:36Z",
+  "modified": "2025-10-01T21:30:34Z",
   "published": "2024-11-14T18:30:36Z",
   "aliases": [
     "CVE-2024-37285"

advisories/unreviewed/2024/11/GHSA-w4qv-rrv4-jm4w/GHSA-w4qv-rrv4-jm4w.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-w4qv-rrv4-jm4w",
-  "modified": "2024-11-27T18:34:01Z",
+  "modified": "2025-10-01T21:30:35Z",
   "published": "2024-11-19T03:31:08Z",
   "aliases": [
     "CVE-2024-50285"

advisories/unreviewed/2024/11/GHSA-xvx4-v362-295f/GHSA-xvx4-v362-295f.json

@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xvx4-v362-295f",
-  "modified": "2024-11-14T12:31:01Z",
+  "modified": "2025-10-01T21:30:34Z",
   "published": "2024-11-14T12:31:01Z",
   "aliases": [
     "CVE-2024-5918"
   ],
   "details": "An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect portal or GlobalProtect gateway as a different legitimate user. This attack is possible only if you \"Allow Authentication with User Credentials OR Client Certificate.\"",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:C/RE:M/U:Amber"

advisories/unreviewed/2024/12/GHSA-29pg-6wgv-66x3/GHSA-29pg-6wgv-66x3.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-29pg-6wgv-66x3",
-  "modified": "2025-01-09T18:32:13Z",
+  "modified": "2025-10-01T21:30:44Z",
   "published": "2024-12-29T09:30:47Z",
   "aliases": [
     "CVE-2024-56715"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nionic: Fix netdev notifier unregister on failure\n\nIf register_netdev() fails, then the driver leaks the netdev notifier.\nFix this by calling ionic_lif_unregister() on register_netdev()\nfailure. This will also call ionic_lif_unregister_phc() if it has\nalready been registered.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -36,8 +41,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-401"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-29T09:15:06Z"

advisories/unreviewed/2024/12/GHSA-4x48-ph6h-wfmf/GHSA-4x48-ph6h-wfmf.json

@@ -54,7 +54,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-193"
+      "CWE-193",
+      "CWE-401"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,

advisories/unreviewed/2024/12/GHSA-7hpx-3fcf-fxr2/GHSA-7hpx-3fcf-fxr2.json

@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-401"
+      "CWE-401",
+      "CWE-476"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,

advisories/unreviewed/2024/12/GHSA-h35x-4f36-345v/GHSA-h35x-4f36-345v.json

@@ -34,7 +34,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-362"
+      "CWE-362",
+      "CWE-476"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,