Skip to content

Commit 3bfa758

Browse files
aboutcode-automationaboutcode-automation
committed
Sync EUVD catalog: Sat Jul 25 00:39:31 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent 12997c3 commit 3bfa758

1,717 files changed

Lines changed: 21496 additions & 4658 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎advisories/2023/09/EUVD-2023-54713.json‎

Lines changed: 10 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -2,27 +2,30 @@
22
"id": "EUVD-2023-54713",
33
"enisaUuid": "e5943956-657d-3a44-96df-0f243e5b05d8",
44
"description": "Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12",
5-
"datePublished": "Sep 9, 2023, 3:30:13 PM",
6-
"dateUpdated": "Apr 4, 2024, 7:34:33 AM",
5+
"datePublished": "Sep 9, 2023, 2:30:29 PM",
6+
"dateUpdated": "Jul 24, 2026, 4:08:31 AM",
77
"baseScore": 4.3,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
10-
"references": "https://gitlab.com/muttmua/mutt/-/commit/452ee330e094bfc7c9a68555e5152b1826534555.patch\nhttps://gitlab.com/muttmua/mutt/-/commit/a4752eb0ae0a521eec02e59e51ae5daedf74fda0.patch\nhttps://www.debian.org/security/2023/dsa-5494\nhttps://lists.debian.org/debian-lts-announce/2023/09/msg00021.html\nhttp://www.openwall.com/lists/oss-security/2023/09/26/6\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-4874\n",
10+
"references": "https://gitlab.com/muttmua/mutt/-/commit/452ee330e094bfc7c9a68555e5152b1826534555.patch\nhttps://gitlab.com/muttmua/mutt/-/commit/a4752eb0ae0a521eec02e59e51ae5daedf74fda0.patch\n",
1111
"aliases": "CVE-2023-4874\nGHSA-q9v3-53xg-6f9p\n",
1212
"assigner": "GitLab",
13-
"epss": 0.08,
13+
"epss": 0.72,
1414
"enisaIdProduct": [
1515
{
16-
"id": "3b10843b-f8ec-34b5-94b0-4e797d20e88f",
16+
"id": "8d31aeda-0587-3158-9b35-6a9e286d807a",
1717
"product": {
18-
"name": "mutt"
18+
"name": "mutt",
19+
"vendor": {
20+
"name": "mutt"
21+
}
1922
},
2023
"product_version": "1.5.2 <2.2.12"
2124
}
2225
],
2326
"enisaIdVendor": [
2427
{
25-
"id": "86bfaf34-5dde-3f97-be26-f34ee9b8f378",
28+
"id": "933502d8-5703-3f0c-a611-1ffa62f1893d",
2629
"vendor": {
2730
"name": "mutt"
2831
}

‎advisories/2023/09/EUVD-2023-54714.json‎

Lines changed: 10 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -2,27 +2,30 @@
22
"id": "EUVD-2023-54714",
33
"enisaUuid": "a71fcba3-a69d-3512-b209-a05f81a20389",
44
"description": "Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12",
5-
"datePublished": "Sep 9, 2023, 3:30:13 PM",
6-
"dateUpdated": "Apr 4, 2024, 7:34:31 AM",
5+
"datePublished": "Sep 9, 2023, 2:30:24 PM",
6+
"dateUpdated": "Jul 24, 2026, 4:08:36 AM",
77
"baseScore": 2.2,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L",
10-
"references": "https://gitlab.com/muttmua/mutt/-/commit/452ee330e094bfc7c9a68555e5152b1826534555.patch\nhttps://gitlab.com/muttmua/mutt/-/commit/4cc3128abdf52c615911589394a03271fddeefc6.patch\nhttps://www.debian.org/security/2023/dsa-5494\nhttps://lists.debian.org/debian-lts-announce/2023/09/msg00021.html\nhttp://www.openwall.com/lists/oss-security/2023/09/26/6\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-4875\n",
10+
"references": "https://gitlab.com/muttmua/mutt/-/commit/452ee330e094bfc7c9a68555e5152b1826534555.patch\nhttps://gitlab.com/muttmua/mutt/-/commit/4cc3128abdf52c615911589394a03271fddeefc6.patch\n",
1111
"aliases": "CVE-2023-4875\nGHSA-fwwc-f8hw-qfwf\n",
1212
"assigner": "GitLab",
13-
"epss": 0.03,
13+
"epss": 0.51,
1414
"enisaIdProduct": [
1515
{
16-
"id": "3e021ac8-eba8-3598-9d8d-91a7fdb4841f",
16+
"id": "682e6a33-4494-34bc-8a50-daf2ce240ade",
1717
"product": {
18-
"name": "mutt"
18+
"name": "mutt",
19+
"vendor": {
20+
"name": "mutt"
21+
}
1922
},
2023
"product_version": "1.5.2 <2.2.12"
2124
}
2225
],
2326
"enisaIdVendor": [
2427
{
25-
"id": "00c574f5-ef26-3fa0-bf64-e4d7219d1886",
28+
"id": "70acfbae-1b63-316d-9b8a-13422864566b",
2629
"vendor": {
2730
"name": "mutt"
2831
}

‎advisories/2024/01/EUVD-2024-0440.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"enisaUuid": "1693b892-fd17-39f9-bddf-9b96dee9740a",
44
"description": "Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-controlled) user input is given to the mac_address_for function of the package, it is possible for the attacker to execute arbitrary commands on the operating system that this package is being run on.",
55
"datePublished": "Jan 30, 2024, 5:00:01 AM",
6-
"dateUpdated": "Jul 23, 2026, 3:25:09 PM",
6+
"dateUpdated": "Jul 24, 2026, 3:25:09 PM",
77
"baseScore": 7.3,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P",

‎advisories/2024/02/EUVD-2023-57119.json‎

Lines changed: 212 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,212 @@
1+
{
2+
"id": "EUVD-2023-57119",
3+
"enisaUuid": "8de54f25-57d9-3bba-9244-31f7b0e86118",
4+
"description": "In the Linux kernel, the following vulnerability has been resolved:\n\nbus: mhi: host: Add alignment check for event ring read pointer\n\nThough we do check the event ring read pointer by \"is_valid_ring_ptr\"\nto make sure it is in the buffer range, but there is another risk the\npointer may be not aligned. Since we are expecting event ring elements\nare 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer\ncould lead to multiple issues like DoS or ring buffer memory corruption.\n\nSo add a alignment check for event ring read pointer.",
5+
"datePublished": "Feb 29, 2024, 3:52:11 PM",
6+
"dateUpdated": "Jul 24, 2026, 2:33:12 PM",
7+
"baseScore": null,
8+
"references": "https://git.kernel.org/stable/c/76ed0c6f6418cec6efe6f65a0b91f84be80b72eb\nhttps://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08\nhttps://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551\nhttps://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010\nhttps://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b\nhttps://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f\n",
9+
"aliases": "GHSA-ggvx-h8v5-pm3j\nCVE-2023-52494\n",
10+
"assigner": "Linux",
11+
"epss": 0.28,
12+
"enisaIdProduct": [
13+
{
14+
"id": "0c638c60-b954-3366-8b36-36d088a8d7c1",
15+
"product": {
16+
"name": "Linux",
17+
"vendor": {
18+
"name": "Linux"
19+
}
20+
},
21+
"product_version": "patch: 6.8"
22+
},
23+
{
24+
"id": "27102247-b4fd-39fa-b2d8-23e8c1fc973e",
25+
"product": {
26+
"name": "Linux",
27+
"vendor": {
28+
"name": "Linux"
29+
}
30+
},
31+
"product_version": "patch: 6.7.3"
32+
},
33+
{
34+
"id": "4cc4306a-2817-3e99-957f-19b6dc42019a",
35+
"product": {
36+
"name": "Linux",
37+
"vendor": {
38+
"name": "Linux"
39+
}
40+
},
41+
"product_version": "patch: 5.15.149"
42+
},
43+
{
44+
"id": "509d29e6-958e-3078-b9c1-e2a380ad1cf0",
45+
"product": {
46+
"name": "Linux",
47+
"vendor": {
48+
"name": "Linux"
49+
}
50+
},
51+
"product_version": "ec32332df7645e0ba463a08d483fe97665167071 <94991728c84f8df54fd9eec9b85855ef9057ea08"
52+
},
53+
{
54+
"id": "537047fd-1eff-3339-96b7-acbf28734d87",
55+
"product": {
56+
"name": "Linux",
57+
"vendor": {
58+
"name": "Linux"
59+
}
60+
},
61+
"product_version": "ec32332df7645e0ba463a08d483fe97665167071 <eff9704f5332a13b08fbdbe0f84059c9e7051d5f"
62+
},
63+
{
64+
"id": "548f7006-5df1-399e-9914-b9467983709f",
65+
"product": {
66+
"name": "Linux",
67+
"vendor": {
68+
"name": "Linux"
69+
}
70+
},
71+
"product_version": "76879a980cd5ede4cb9a638999fb80d37bc09db5"
72+
},
73+
{
74+
"id": "728f809b-7bb6-34ac-9066-eccc9f7e6290",
75+
"product": {
76+
"name": "Linux",
77+
"vendor": {
78+
"name": "Linux"
79+
}
80+
},
81+
"product_version": "patch: 6.6.15"
82+
},
83+
{
84+
"id": "83d1b2b5-89fb-3388-94f7-8f0462475ad7",
85+
"product": {
86+
"name": "Linux",
87+
"vendor": {
88+
"name": "Linux"
89+
}
90+
},
91+
"product_version": "5.12.3 <5.13"
92+
},
93+
{
94+
"id": "858ab057-cb88-3aa5-8cf1-4f43d1fb8514",
95+
"product": {
96+
"name": "Linux",
97+
"vendor": {
98+
"name": "Linux"
99+
}
100+
},
101+
"product_version": "5.13"
102+
},
103+
{
104+
"id": "9d019536-a913-32b0-b885-30112296c604",
105+
"product": {
106+
"name": "Linux",
107+
"vendor": {
108+
"name": "Linux"
109+
}
110+
},
111+
"product_version": "patch: 0"
112+
},
113+
{
114+
"id": "a0820988-8065-3ea4-9180-05041853f699",
115+
"product": {
116+
"name": "Linux",
117+
"vendor": {
118+
"name": "Linux"
119+
}
120+
},
121+
"product_version": "ec32332df7645e0ba463a08d483fe97665167071 <a9ebfc405fe1be145f414eafadcbf09506082010"
122+
},
123+
{
124+
"id": "a2c5fe26-f954-3f2b-9928-dfb1560e46be",
125+
"product": {
126+
"name": "Linux",
127+
"vendor": {
128+
"name": "Linux"
129+
}
130+
},
131+
"product_version": "5.10.36 <5.10.261"
132+
},
133+
{
134+
"id": "bee92005-eb75-311e-9b7b-c4101da25538",
135+
"product": {
136+
"name": "Linux",
137+
"vendor": {
138+
"name": "Linux"
139+
}
140+
},
141+
"product_version": "ec32332df7645e0ba463a08d483fe97665167071 <2df39ac8f813860f79782807c3f7acff40b3c551"
142+
},
143+
{
144+
"id": "c04a828f-3883-310c-96b9-adb92785088b",
145+
"product": {
146+
"name": "Linux",
147+
"vendor": {
148+
"name": "Linux"
149+
}
150+
},
151+
"product_version": "ec32332df7645e0ba463a08d483fe97665167071 <ecf8320111822a1ae5d5fc512953eab46d543d0b"
152+
},
153+
{
154+
"id": "ce5fa5fe-8397-33fd-b9a3-113d1e596dde",
155+
"product": {
156+
"name": "Linux",
157+
"vendor": {
158+
"name": "Linux"
159+
}
160+
},
161+
"product_version": "patch: 6.1.76"
162+
},
163+
{
164+
"id": "deb645a2-832e-3909-8225-7c7145a27124",
165+
"product": {
166+
"name": "Linux",
167+
"vendor": {
168+
"name": "Linux"
169+
}
170+
},
171+
"product_version": "a1d2bd164c1c78f87968b7883964175ec41c32ae <76ed0c6f6418cec6efe6f65a0b91f84be80b72eb"
172+
},
173+
{
174+
"id": "e6c349d9-56c7-335a-ad8d-efb7131380cc",
175+
"product": {
176+
"name": "Linux",
177+
"vendor": {
178+
"name": "Linux"
179+
}
180+
},
181+
"product_version": "patch: 5.10.261"
182+
},
183+
{
184+
"id": "f5af58be-7a20-341a-8122-4ffdd6054aec",
185+
"product": {
186+
"name": "Linux",
187+
"vendor": {
188+
"name": "Linux"
189+
}
190+
},
191+
"product_version": "5.11.20 <5.12"
192+
},
193+
{
194+
"id": "f6aff504-a50e-313e-8304-689b31928db1",
195+
"product": {
196+
"name": "Linux",
197+
"vendor": {
198+
"name": "Linux"
199+
}
200+
},
201+
"product_version": "fd5f40fc887485a8b9a6806a640a0d8e0ef1afb6"
202+
}
203+
],
204+
"enisaIdVendor": [
205+
{
206+
"id": "cee81959-9271-39d3-b20d-df145d5c1297",
207+
"vendor": {
208+
"name": "Linux"
209+
}
210+
}
211+
]
212+
}

0 commit comments

Comments
 (0)