Skip to content

Commit

Permalink
1 changes (1 new | 0 updated):
Browse files Browse the repository at this point in the history
      - 1 new CVEs:  CVE-2024-46939
      - 0 updated CVEs:
  • Loading branch information
cvelistV5 Github Action committed Nov 28, 2024
1 parent 7cc7062 commit 46cbe1c
Show file tree
Hide file tree
Showing 3 changed files with 138 additions and 46 deletions.
117 changes: 117 additions & 0 deletions cves/2024/46xxx/CVE-2024-46939.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,117 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-46939",
"assignerOrgId": "c6f5cd8e-fe3d-4460-82c2-f8a4e7b272c8",
"state": "PUBLISHED",
"assignerShortName": "Vivo",
"dateReserved": "2024-09-15T22:07:33.094Z",
"datePublished": "2024-11-28T03:26:28.929Z",
"dateUpdated": "2024-11-28T03:26:28.929Z"
},
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Game Extension Engine",
"vendor": "vivo",
"versions": [
{
"status": "affected",
"version": "versions below 1.2.7.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "<span style=\"background-color: rgb(255, 255, 255);\">The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite&nbsp;local specific files</span><br>"
}
],
"value": "The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files"
}
],
"impacts": [
{
"capecId": "CAPEC-186",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-186 Malicious Software Update"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "AUTOMATIC",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 2.4,
"baseSeverity": "LOW",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/AU:N/R:A/V:D",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "c6f5cd8e-fe3d-4460-82c2-f8a4e7b272c8",
"shortName": "Vivo",
"dateUpdated": "2024-11-28T03:26:28.929Z"
},
"references": [
{
"url": "https://www.vivo.com/en/support/security-advisory-detail?id=13"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Game Extension Engine Path Traversal Vulnerability",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
}
}
39 changes: 7 additions & 32 deletions cves/delta.json
Original file line number Diff line number Diff line change
@@ -1,39 +1,14 @@
{
"fetchTime": "2024-11-28T02:42:27.230Z",
"numberOfChanges": 5,
"fetchTime": "2024-11-28T03:40:26.248Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2024-38309",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-38309",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38309.json",
"dateUpdated": "2024-11-28T02:10:32.213Z"
},
{
"cveId": "CVE-2024-38389",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-38389",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38389.json",
"dateUpdated": "2024-11-28T02:11:04.326Z"
},
{
"cveId": "CVE-2024-38658",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-38658",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38658.json",
"dateUpdated": "2024-11-28T02:11:21.840Z"
},
{
"cveId": "CVE-2024-53008",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-53008",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/53xxx/CVE-2024-53008.json",
"dateUpdated": "2024-11-28T02:10:43.901Z"
}
],
"updated": [
{
"cveId": "CVE-2024-11667",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-11667",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11667.json",
"dateUpdated": "2024-11-28T02:11:49.265Z"
"cveId": "CVE-2024-46939",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-46939",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/46xxx/CVE-2024-46939.json",
"dateUpdated": "2024-11-28T03:26:28.929Z"
}
],
"updated": [],
"error": []
}
28 changes: 14 additions & 14 deletions cves/deltaLog.json
Original file line number Diff line number Diff line change
@@ -1,4 +1,18 @@
[
{
"fetchTime": "2024-11-28T03:40:26.248Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2024-46939",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-46939",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/46xxx/CVE-2024-46939.json",
"dateUpdated": "2024-11-28T03:26:28.929Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2024-11-28T02:42:27.230Z",
"numberOfChanges": 5,
Expand Down Expand Up @@ -157765,19 +157779,5 @@
}
],
"error": []
},
{
"fetchTime": "2024-10-29T03:00:26.474Z",
"numberOfChanges": 1,
"new": [],
"updated": [
{
"cveId": "CVE-2023-6717",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-6717",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6717.json",
"dateUpdated": "2024-10-29T02:57:16.532Z"
}
],
"error": []
}
]

0 comments on commit 46cbe1c

Please sign in to comment.