-
Notifications
You must be signed in to change notification settings - Fork 18
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Auto-Update: 2024-12-16T13:01:47.468556+00:00
- Loading branch information
1 parent
1c6037b
commit 2403ee5
Showing
7 changed files
with
176 additions
and
23 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -2,8 +2,8 @@ | |
| "id": "CVE-2023-42793", | ||
| "sourceIdentifier": "[email protected]", | ||
| "published": "2023-09-19T17:15:08.330", | ||
| "lastModified": "2024-11-29T14:47:58.587", | ||
| "vulnStatus": "Analyzed", | ||
| "lastModified": "2024-12-16T12:15:04.797", | ||
| "vulnStatus": "Modified", | ||
| "cveTags": [], | ||
| "descriptions": [ | ||
| { | ||
|
|
@@ -148,6 +148,10 @@ | |
| "Press/Media Coverage" | ||
| ] | ||
| }, | ||
| { | ||
| "url": "https://www.sonarsource.com/blog/teamcity-vulnerability/", | ||
| "source": "[email protected]" | ||
| }, | ||
| { | ||
| "url": "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html", | ||
| "source": "af854a3a-2127-422b-91ae-364da2661108", | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,145 @@ | ||
| { | ||
| "id": "CVE-2024-12478", | ||
| "sourceIdentifier": "[email protected]", | ||
| "published": "2024-12-16T11:15:04.890", | ||
| "lastModified": "2024-12-16T11:15:04.890", | ||
| "vulnStatus": "Received", | ||
| "cveTags": [], | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "A vulnerability was found in InvoicePlane up to 1.6.1. It has been declared as critical. This vulnerability affects the function upload_file of the file /index.php/upload/upload_file/1/1. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.2-beta-1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product." | ||
| } | ||
| ], | ||
| "metrics": { | ||
| "cvssMetricV40": [ | ||
| { | ||
| "source": "[email protected]", | ||
| "type": "Secondary", | ||
| "cvssData": { | ||
| "version": "4.0", | ||
| "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", | ||
| "baseScore": 5.3, | ||
| "baseSeverity": "MEDIUM", | ||
| "attackVector": "NETWORK", | ||
| "attackComplexity": "LOW", | ||
| "attackRequirements": "NONE", | ||
| "privilegesRequired": "LOW", | ||
| "userInteraction": "NONE", | ||
| "vulnerableSystemConfidentiality": "LOW", | ||
| "vulnerableSystemIntegrity": "LOW", | ||
| "vulnerableSystemAvailability": "LOW", | ||
| "subsequentSystemConfidentiality": "NONE", | ||
| "subsequentSystemIntegrity": "NONE", | ||
| "subsequentSystemAvailability": "NONE", | ||
| "exploitMaturity": "NOT_DEFINED", | ||
| "confidentialityRequirements": "NOT_DEFINED", | ||
| "integrityRequirements": "NOT_DEFINED", | ||
| "availabilityRequirements": "NOT_DEFINED", | ||
| "modifiedAttackVector": "NOT_DEFINED", | ||
| "modifiedAttackComplexity": "NOT_DEFINED", | ||
| "modifiedAttackRequirements": "NOT_DEFINED", | ||
| "modifiedPrivilegesRequired": "NOT_DEFINED", | ||
| "modifiedUserInteraction": "NOT_DEFINED", | ||
| "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED", | ||
| "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", | ||
| "modifiedVulnerableSystemAvailability": "NOT_DEFINED", | ||
| "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", | ||
| "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", | ||
| "modifiedSubsequentSystemAvailability": "NOT_DEFINED", | ||
| "safety": "NOT_DEFINED", | ||
| "automatable": "NOT_DEFINED", | ||
| "recovery": "NOT_DEFINED", | ||
| "valueDensity": "NOT_DEFINED", | ||
| "vulnerabilityResponseEffort": "NOT_DEFINED", | ||
| "providerUrgency": "NOT_DEFINED" | ||
| } | ||
| } | ||
| ], | ||
| "cvssMetricV31": [ | ||
| { | ||
| "source": "[email protected]", | ||
| "type": "Secondary", | ||
| "cvssData": { | ||
| "version": "3.1", | ||
| "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", | ||
| "baseScore": 6.3, | ||
| "baseSeverity": "MEDIUM", | ||
| "attackVector": "NETWORK", | ||
| "attackComplexity": "LOW", | ||
| "privilegesRequired": "LOW", | ||
| "userInteraction": "NONE", | ||
| "scope": "UNCHANGED", | ||
| "confidentialityImpact": "LOW", | ||
| "integrityImpact": "LOW", | ||
| "availabilityImpact": "LOW" | ||
| }, | ||
| "exploitabilityScore": 2.8, | ||
| "impactScore": 3.4 | ||
| } | ||
| ], | ||
| "cvssMetricV2": [ | ||
| { | ||
| "source": "[email protected]", | ||
| "type": "Secondary", | ||
| "cvssData": { | ||
| "version": "2.0", | ||
| "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", | ||
| "baseScore": 6.5, | ||
| "accessVector": "NETWORK", | ||
| "accessComplexity": "LOW", | ||
| "authentication": "SINGLE", | ||
| "confidentialityImpact": "PARTIAL", | ||
| "integrityImpact": "PARTIAL", | ||
| "availabilityImpact": "PARTIAL" | ||
| }, | ||
| "baseSeverity": "MEDIUM", | ||
| "exploitabilityScore": 8.0, | ||
| "impactScore": 6.4, | ||
| "acInsufInfo": false, | ||
| "obtainAllPrivilege": false, | ||
| "obtainUserPrivilege": false, | ||
| "obtainOtherPrivilege": false, | ||
| "userInteractionRequired": false | ||
| } | ||
| ] | ||
| }, | ||
| "weaknesses": [ | ||
| { | ||
| "source": "[email protected]", | ||
| "type": "Primary", | ||
| "description": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "CWE-284" | ||
| }, | ||
| { | ||
| "lang": "en", | ||
| "value": "CWE-434" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "references": [ | ||
| { | ||
| "url": "https://github.com/InvoicePlane/InvoicePlane/pull/1141", | ||
| "source": "[email protected]" | ||
| }, | ||
| { | ||
| "url": "https://github.com/InvoicePlane/InvoicePlane/releases/tag/v1.6.2-beta-1", | ||
| "source": "[email protected]" | ||
| }, | ||
| { | ||
| "url": "https://vuldb.com/?ctiid.288538", | ||
| "source": "[email protected]" | ||
| }, | ||
| { | ||
| "url": "https://vuldb.com/?id.288538", | ||
| "source": "[email protected]" | ||
| }, | ||
| { | ||
| "url": "https://vuldb.com/?submit.459910", | ||
| "source": "[email protected]" | ||
| } | ||
| ] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -2,13 +2,13 @@ | |
| "id": "CVE-2024-47484", | ||
| "sourceIdentifier": "[email protected]", | ||
| "published": "2024-12-10T11:15:07.400", | ||
| "lastModified": "2024-12-10T11:15:07.400", | ||
| "lastModified": "2024-12-16T11:15:06.110", | ||
| "vulnStatus": "Awaiting Analysis", | ||
| "cveTags": [], | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "Dell Avamar, version(s) 19.9, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution." | ||
| "value": "Dell Avamar, version(s) 19.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution." | ||
| }, | ||
| { | ||
| "lang": "es", | ||
|
|
@@ -42,7 +42,7 @@ | |
| "weaknesses": [ | ||
| { | ||
| "source": "[email protected]", | ||
| "type": "Primary", | ||
| "type": "Secondary", | ||
| "description": [ | ||
| { | ||
| "lang": "en", | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -2,13 +2,13 @@ | |
| "id": "CVE-2024-47977", | ||
| "sourceIdentifier": "[email protected]", | ||
| "published": "2024-12-10T11:15:07.550", | ||
| "lastModified": "2024-12-10T11:15:07.550", | ||
| "lastModified": "2024-12-16T11:15:06.370", | ||
| "vulnStatus": "Awaiting Analysis", | ||
| "cveTags": [], | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "Dell Avamar, version(s) 19.9, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution." | ||
| "value": "Dell Avamar, version(s) 19.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution." | ||
| }, | ||
| { | ||
| "lang": "es", | ||
|
|
@@ -42,7 +42,7 @@ | |
| "weaknesses": [ | ||
| { | ||
| "source": "[email protected]", | ||
| "type": "Primary", | ||
| "type": "Secondary", | ||
| "description": [ | ||
| { | ||
| "lang": "en", | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -2,13 +2,13 @@ | |
| "id": "CVE-2024-52538", | ||
| "sourceIdentifier": "[email protected]", | ||
| "published": "2024-12-10T11:15:07.690", | ||
| "lastModified": "2024-12-10T11:15:07.690", | ||
| "lastModified": "2024-12-16T11:15:06.523", | ||
| "vulnStatus": "Awaiting Analysis", | ||
| "cveTags": [], | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "Dell Avamar, version(s) 19.9, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection." | ||
| "value": "Dell Avamar, version(s) 19.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection." | ||
| }, | ||
| { | ||
| "lang": "es", | ||
|
|
@@ -42,7 +42,7 @@ | |
| "weaknesses": [ | ||
| { | ||
| "source": "[email protected]", | ||
| "type": "Primary", | ||
| "type": "Secondary", | ||
| "description": [ | ||
| { | ||
| "lang": "en", | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters