add: AVE-1999-0215

Author: adysec

vulns/1999/AVE-1999-0215.toml

@@ -0,0 +1,29 @@
+[basic]
+description = "Linux syslogd 在处理大量网络连接时存在拒绝服务漏洞。远程攻击者可向 syslogd 服务发送大量连接请求，导致服务资源耗尽而崩溃，无法正常记录系统日志。受影响的系统包括 Caldera OpenLinux 和 Red Hat Linux 等发行版。"
+published = "1999-11-18T00:00:00Z"
+remediation = "升级 Caldera OpenLinux 或 Red Hat Linux 到包含 syslogd 补丁的最新版本。限制对 syslogd 服务端口（514/UDP）的网络访问，通过防火墙规则仅允许可信来源的连接请求，避免暴露服务到不可信网络。"
+score = 5.0
+severity = "MEDIUM"
+sources = ["redhat"]
+title = "Linux syslogd 远程拒绝服务漏洞"
+updated = "2026-06-16T00:00:00Z"
+
+[exploit]
+exp_urls = []
+poc_urls = []
+
+[id]
+aliases = ["CVE-1999-0831"]
+ave_id = "AVE-1999-0215"
+cve_id = "CVE-1999-0831"
+
+[meta]
+collected_at = "2026-07-11T00:00:00Z"
+status = "completed"
+
+[references]
+urls = [
+    "https://nvd.nist.gov/vuln/detail/CVE-1999-0831",
+    "https://access.redhat.com/security/cve/CVE-1999-0831",
+    "http://www.securityfocus.com/bid/809",
+]

vulns/2026/AVE-2026-0054.toml

@@ -0,0 +1,34 @@
+[id]
+ave_id = "AVE-2026-0054"
+cve_id = "CVE-2026-49476"
+aliases = ["GHSA-2wc2-fm75-p42x"]
+
+[basic]
+title = "Soup Sieve CSS 选择器解析器内存耗尽漏洞"
+description = "soupsieve（Beautiful Soup 4 的 CSS 选择器引擎）中的 CSS 选择器解析器在编译大型逗号分隔选择器列表时分配无界内存。攻击者可向 soupsieve.compile() 或 Beautiful Soup 的 .select()/.select_one() 提供特制的 CSS 选择器字符串，导致应用程序从约 500 KB 的输入分配约 244 MB 的堆内存（放大比约 488 倍），从而引发内存耗尽和拒绝服务。无需认证或用户交互即可发起攻击，并发请求会倍增影响。soupsieve 是 beautifulsoup4 的自动依赖项，下游影响广泛。"
+severity = "HIGH"
+score = 7.5
+cvss_v3 = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+remediation = "升级 soupsieve 至 2.8.4 或更高版本。临时缓解措施：避免将用户输入的 CSS 选择器直接传递给 soupsieve.compile() 或 Beautiful Soup 的 .select()/.select_one() 方法，并对选择器字符串长度和逗号分隔项数量实施严格限制。"
+published = "2026-06-01"
+updated = "2026-07-09"
+sources = ["ghsa", "nvd"]
+
+[affected]
+vendor = "facelessuser"
+product = "soupsieve"
+
+[exploit]
+poc_urls = ["https://github.com/advisories/GHSA-2wc2-fm75-p42x"]
+exp_urls = []
+
+[exploit.nuclei_templates]
+
+[references]
+nvd = "https://nvd.nist.gov/vuln/detail/CVE-2026-49476"
+ghsa = "https://github.com/advisories/GHSA-2wc2-fm75-p42x"
+other = ["https://github.com/facelessuser/soupsieve", "https://pypi.org/project/soupsieve/"]
+
+[meta]
+collected_at = "2026-07-11T12:00:00+00:00"
+status = "completed"