search

AppThreat / vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.
MIT License
94 stars 22 forks source link

Ignore github.blog domain #167

Closed prabhu closed 3 months ago

prabhu commented 3 months ago

Needs to be added here

CVE-2022-46394  generic github.blog 2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug    vers:generic/>=r39p0|<=r41p0    pkg:generic/github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug
prabhu commented 3 months ago

It's coming from here.

https://github.com/AppThreat/vuln-list/blob/1f76dfa7f1a579dda8a2f4806ba05696ba540bb1/nvd/2022/CVE-2022-38181.json#L122

{
      "url": "https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
prabhu commented 3 months ago

github.dev from CVE-2022-42457 is another domain that can be ignored

{
      "url": "https://github.dev/hubertfarnsworth12/Generex-CS141-Authenticated-Remote-Command-Execution",
      "source": "cve@mitre.org",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ]
    },