diff --git a/advisories/unreviewed/2024/04/GHSA-73jw-m44p-r46h/GHSA-73jw-m44p-r46h.json b/advisories/unreviewed/2024/04/GHSA-73jw-m44p-r46h/GHSA-73jw-m44p-r46h.json new file mode 100644 index 00000000000..0037bed01fe --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-73jw-m44p-r46h/GHSA-73jw-m44p-r46h.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-73jw-m44p-r46h", + "modified": "2024-04-11T18:30:54Z", + "published": "2024-04-11T18:30:54Z", + "aliases": [ + "CVE-2024-0881" + ], + "details": "The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0881" + }, + { + "type": "WEB", + "url": "https://wpscan.com/vulnerability/e460e926-6e9b-4e9f-b908-ba5c9c7fb290" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T16:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-9xfx-mr98-wrr3/GHSA-9xfx-mr98-wrr3.json b/advisories/unreviewed/2024/04/GHSA-9xfx-mr98-wrr3/GHSA-9xfx-mr98-wrr3.json new file mode 100644 index 00000000000..15cb1d308b0 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-9xfx-mr98-wrr3/GHSA-9xfx-mr98-wrr3.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9xfx-mr98-wrr3", + "modified": "2024-04-11T18:30:55Z", + "published": "2024-04-11T18:30:55Z", + "aliases": [ + "CVE-2024-30272" + ], + "details": "Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30272" + }, + { + "type": "WEB", + "url": "https://helpx.adobe.com/security/products/illustrator/apsb24-25.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T18:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-ch2c-p7pr-2rg8/GHSA-ch2c-p7pr-2rg8.json b/advisories/unreviewed/2024/04/GHSA-ch2c-p7pr-2rg8/GHSA-ch2c-p7pr-2rg8.json new file mode 100644 index 00000000000..5e14d891a6c --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-ch2c-p7pr-2rg8/GHSA-ch2c-p7pr-2rg8.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ch2c-p7pr-2rg8", + "modified": "2024-04-11T18:30:55Z", + "published": "2024-04-11T18:30:55Z", + "aliases": [ + "CVE-2024-30273" + ], + "details": "Illustrator versions 28.3, 27.9.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30273" + }, + { + "type": "WEB", + "url": "https://helpx.adobe.com/security/products/illustrator/apsb24-25.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T18:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-fc56-xpwv-3gp9/GHSA-fc56-xpwv-3gp9.json b/advisories/unreviewed/2024/04/GHSA-fc56-xpwv-3gp9/GHSA-fc56-xpwv-3gp9.json index c46709960ad..13715c37c57 100644 --- a/advisories/unreviewed/2024/04/GHSA-fc56-xpwv-3gp9/GHSA-fc56-xpwv-3gp9.json +++ b/advisories/unreviewed/2024/04/GHSA-fc56-xpwv-3gp9/GHSA-fc56-xpwv-3gp9.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fc56-xpwv-3gp9", - "modified": "2024-04-09T21:32:00Z", + "modified": "2024-04-11T18:30:54Z", "published": "2024-04-09T21:32:00Z", "aliases": [ "CVE-2024-2866" diff --git a/advisories/unreviewed/2024/04/GHSA-hchx-chqf-7hcp/GHSA-hchx-chqf-7hcp.json b/advisories/unreviewed/2024/04/GHSA-hchx-chqf-7hcp/GHSA-hchx-chqf-7hcp.json new file mode 100644 index 00000000000..0a537ff6f7d --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-hchx-chqf-7hcp/GHSA-hchx-chqf-7hcp.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hchx-chqf-7hcp", + "modified": "2024-04-11T18:30:55Z", + "published": "2024-04-11T18:30:55Z", + "aliases": [ + "CVE-2024-30271" + ], + "details": "Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30271" + }, + { + "type": "WEB", + "url": "https://helpx.adobe.com/security/products/illustrator/apsb24-25.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T18:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-j6qm-7hmm-gfqm/GHSA-j6qm-7hmm-gfqm.json b/advisories/unreviewed/2024/04/GHSA-j6qm-7hmm-gfqm/GHSA-j6qm-7hmm-gfqm.json new file mode 100644 index 00000000000..843a2c4be72 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-j6qm-7hmm-gfqm/GHSA-j6qm-7hmm-gfqm.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j6qm-7hmm-gfqm", + "modified": "2024-04-11T18:30:54Z", + "published": "2024-04-11T18:30:54Z", + "aliases": [ + "CVE-2024-31678" + ], + "details": "Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the \"password\" parameter in the \"login.php\" file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31678" + }, + { + "type": "WEB", + "url": "https://github.com/CveSecLook/cve/issues/10" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T16:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-jpjw-54h4-86gr/GHSA-jpjw-54h4-86gr.json b/advisories/unreviewed/2024/04/GHSA-jpjw-54h4-86gr/GHSA-jpjw-54h4-86gr.json new file mode 100644 index 00000000000..a17ee849717 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-jpjw-54h4-86gr/GHSA-jpjw-54h4-86gr.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jpjw-54h4-86gr", + "modified": "2024-04-11T18:30:54Z", + "published": "2024-04-11T18:30:54Z", + "aliases": [ + "CVE-2023-50949" + ], + "details": "IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation. IBM X-Force ID: 275706.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50949" + }, + { + "type": "WEB", + "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/275706" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7147933" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-295" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T17:15:30Z" + } +} \ No newline at end of file