diff --git a/advisories/unreviewed/2022/01/GHSA-jqwj-9jvg-583v/GHSA-jqwj-9jvg-583v.json b/advisories/unreviewed/2022/01/GHSA-jqwj-9jvg-583v/GHSA-jqwj-9jvg-583v.json
index 0c0f6156688..8083daf8d98 100644
--- a/advisories/unreviewed/2022/01/GHSA-jqwj-9jvg-583v/GHSA-jqwj-9jvg-583v.json
+++ b/advisories/unreviewed/2022/01/GHSA-jqwj-9jvg-583v/GHSA-jqwj-9jvg-583v.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jqwj-9jvg-583v",
-  "modified": "2022-01-15T00:03:33Z",
+  "modified": "2025-02-14T18:30:38Z",
   "published": "2022-01-11T00:01:34Z",
   "aliases": [
     "CVE-2021-35247"
   ],
   "details": "Serv-U web login screen was allowing characters that were not sanitized by the authentication mechanism. SolarWinds has updated the authentication mechanism to remedy this issue and prevent unauthorized parameters to be used in the Serv-U login screen With the Log4j issue in the wild, input fields across the internet have been tested for vulnerability. Although Serv-U was not affected by the log4j issue, It was discovered that better input validation could be implemented.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
diff --git a/advisories/unreviewed/2022/01/GHSA-mrwr-9wqr-6fc2/GHSA-mrwr-9wqr-6fc2.json b/advisories/unreviewed/2022/01/GHSA-mrwr-9wqr-6fc2/GHSA-mrwr-9wqr-6fc2.json
index 729723231bd..c21d067e82c 100644
--- a/advisories/unreviewed/2022/01/GHSA-mrwr-9wqr-6fc2/GHSA-mrwr-9wqr-6fc2.json
+++ b/advisories/unreviewed/2022/01/GHSA-mrwr-9wqr-6fc2/GHSA-mrwr-9wqr-6fc2.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mrwr-9wqr-6fc2",
-  "modified": "2022-01-25T00:02:18Z",
+  "modified": "2025-02-14T18:30:38Z",
   "published": "2022-01-19T00:01:07Z",
   "aliases": [
     "CVE-2021-43353"
   ],
   "details": "The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
diff --git a/advisories/unreviewed/2022/05/GHSA-4fpw-j345-q48r/GHSA-4fpw-j345-q48r.json b/advisories/unreviewed/2022/05/GHSA-4fpw-j345-q48r/GHSA-4fpw-j345-q48r.json
index 5fb93d3e1f7..c349ac89966 100644
--- a/advisories/unreviewed/2022/05/GHSA-4fpw-j345-q48r/GHSA-4fpw-j345-q48r.json
+++ b/advisories/unreviewed/2022/05/GHSA-4fpw-j345-q48r/GHSA-4fpw-j345-q48r.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4fpw-j345-q48r",
-  "modified": "2022-05-24T19:16:43Z",
+  "modified": "2025-02-14T18:30:38Z",
   "published": "2022-05-24T19:16:43Z",
   "aliases": [
     "CVE-2021-25487"
   ],
   "details": "Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
diff --git a/advisories/unreviewed/2022/05/GHSA-4g27-v2fc-m8fv/GHSA-4g27-v2fc-m8fv.json b/advisories/unreviewed/2022/05/GHSA-4g27-v2fc-m8fv/GHSA-4g27-v2fc-m8fv.json
index a4274380d7a..1082ccfb6fd 100644
--- a/advisories/unreviewed/2022/05/GHSA-4g27-v2fc-m8fv/GHSA-4g27-v2fc-m8fv.json
+++ b/advisories/unreviewed/2022/05/GHSA-4g27-v2fc-m8fv/GHSA-4g27-v2fc-m8fv.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4g27-v2fc-m8fv",
-  "modified": "2022-05-24T17:45:33Z",
+  "modified": "2025-02-14T18:30:38Z",
   "published": "2022-05-24T17:45:33Z",
   "aliases": [
     "CVE-2021-25371"
   ],
   "details": "A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-912"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2022/05/GHSA-7x25-8cjm-2rj9/GHSA-7x25-8cjm-2rj9.json b/advisories/unreviewed/2022/05/GHSA-7x25-8cjm-2rj9/GHSA-7x25-8cjm-2rj9.json
index ba89176335f..599db884224 100644
--- a/advisories/unreviewed/2022/05/GHSA-7x25-8cjm-2rj9/GHSA-7x25-8cjm-2rj9.json
+++ b/advisories/unreviewed/2022/05/GHSA-7x25-8cjm-2rj9/GHSA-7x25-8cjm-2rj9.json
@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-269",
       "CWE-863"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2022/05/GHSA-fj4w-55pf-m8j9/GHSA-fj4w-55pf-m8j9.json b/advisories/unreviewed/2022/05/GHSA-fj4w-55pf-m8j9/GHSA-fj4w-55pf-m8j9.json
index c0824201ccf..42598a924f2 100644
--- a/advisories/unreviewed/2022/05/GHSA-fj4w-55pf-m8j9/GHSA-fj4w-55pf-m8j9.json
+++ b/advisories/unreviewed/2022/05/GHSA-fj4w-55pf-m8j9/GHSA-fj4w-55pf-m8j9.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fj4w-55pf-m8j9",
-  "modified": "2022-05-24T19:05:09Z",
+  "modified": "2025-02-14T18:30:38Z",
   "published": "2022-05-24T19:05:09Z",
   "aliases": [
     "CVE-2021-25395"
   ],
   "details": "A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
diff --git a/advisories/unreviewed/2022/05/GHSA-g6pj-gc3g-pf4q/GHSA-g6pj-gc3g-pf4q.json b/advisories/unreviewed/2022/05/GHSA-g6pj-gc3g-pf4q/GHSA-g6pj-gc3g-pf4q.json
index 0cb9890c19d..63f186c525c 100644
--- a/advisories/unreviewed/2022/05/GHSA-g6pj-gc3g-pf4q/GHSA-g6pj-gc3g-pf4q.json
+++ b/advisories/unreviewed/2022/05/GHSA-g6pj-gc3g-pf4q/GHSA-g6pj-gc3g-pf4q.json
@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-200",
       "CWE-863"
     ],
     "severity": "MODERATE",
diff --git a/advisories/unreviewed/2022/05/GHSA-hhhg-3qxh-mmh3/GHSA-hhhg-3qxh-mmh3.json b/advisories/unreviewed/2022/05/GHSA-hhhg-3qxh-mmh3/GHSA-hhhg-3qxh-mmh3.json
index 1da8f3dd18c..0de3e552427 100644
--- a/advisories/unreviewed/2022/05/GHSA-hhhg-3qxh-mmh3/GHSA-hhhg-3qxh-mmh3.json
+++ b/advisories/unreviewed/2022/05/GHSA-hhhg-3qxh-mmh3/GHSA-hhhg-3qxh-mmh3.json
@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-416",
       "CWE-787"
     ],
     "severity": "MODERATE",
diff --git a/advisories/unreviewed/2022/05/GHSA-jfxr-v6vh-5957/GHSA-jfxr-v6vh-5957.json b/advisories/unreviewed/2022/05/GHSA-jfxr-v6vh-5957/GHSA-jfxr-v6vh-5957.json
index 4f82aa056c2..8f2eb846249 100644
--- a/advisories/unreviewed/2022/05/GHSA-jfxr-v6vh-5957/GHSA-jfxr-v6vh-5957.json
+++ b/advisories/unreviewed/2022/05/GHSA-jfxr-v6vh-5957/GHSA-jfxr-v6vh-5957.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jfxr-v6vh-5957",
-  "modified": "2022-05-24T19:16:46Z",
+  "modified": "2025-02-14T18:30:38Z",
   "published": "2022-05-24T19:16:46Z",
   "aliases": [
     "CVE-2021-39350"
   ],
   "details": "The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 - 7.5.2.727.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
diff --git a/advisories/unreviewed/2022/05/GHSA-qvjg-564f-22c8/GHSA-qvjg-564f-22c8.json b/advisories/unreviewed/2022/05/GHSA-qvjg-564f-22c8/GHSA-qvjg-564f-22c8.json
index 8914cef907a..45506e7de9c 100644
--- a/advisories/unreviewed/2022/05/GHSA-qvjg-564f-22c8/GHSA-qvjg-564f-22c8.json
+++ b/advisories/unreviewed/2022/05/GHSA-qvjg-564f-22c8/GHSA-qvjg-564f-22c8.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qvjg-564f-22c8",
-  "modified": "2022-05-24T17:45:33Z",
+  "modified": "2025-02-14T18:30:38Z",
   "published": "2022-05-24T17:45:33Z",
   "aliases": [
     "CVE-2021-25372"
   ],
   "details": "An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
diff --git a/advisories/unreviewed/2022/05/GHSA-v32f-c32x-pgfp/GHSA-v32f-c32x-pgfp.json b/advisories/unreviewed/2022/05/GHSA-v32f-c32x-pgfp/GHSA-v32f-c32x-pgfp.json
index 8fdd53048b0..42bf335e672 100644
--- a/advisories/unreviewed/2022/05/GHSA-v32f-c32x-pgfp/GHSA-v32f-c32x-pgfp.json
+++ b/advisories/unreviewed/2022/05/GHSA-v32f-c32x-pgfp/GHSA-v32f-c32x-pgfp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v32f-c32x-pgfp",
-  "modified": "2022-05-24T19:05:10Z",
+  "modified": "2025-02-14T18:30:38Z",
   "published": "2022-05-24T19:05:10Z",
   "aliases": [
     "CVE-2021-25394"
   ],
   "details": "A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-362"
+      "CWE-362",
+      "CWE-416"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2023/03/GHSA-gvfw-3vr2-x46g/GHSA-gvfw-3vr2-x46g.json b/advisories/unreviewed/2023/03/GHSA-gvfw-3vr2-x46g/GHSA-gvfw-3vr2-x46g.json
index db15370c7fa..bc5b1a1b535 100644
--- a/advisories/unreviewed/2023/03/GHSA-gvfw-3vr2-x46g/GHSA-gvfw-3vr2-x46g.json
+++ b/advisories/unreviewed/2023/03/GHSA-gvfw-3vr2-x46g/GHSA-gvfw-3vr2-x46g.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gvfw-3vr2-x46g",
-  "modified": "2023-04-07T15:30:39Z",
+  "modified": "2025-02-14T18:30:40Z",
   "published": "2023-03-30T21:30:20Z",
   "aliases": [
     "CVE-2023-1393"
@@ -21,39 +21,7 @@
     },
     {
       "type": "WEB",
-      "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP"
+      "url": "https://www.openwall.com/lists/oss-security/2023/03/29/1"
     },
     {
       "type": "WEB",
@@ -61,7 +29,71 @@
     },
     {
       "type": "WEB",
-      "url": "https://www.openwall.com/lists/oss-security/2023/03/29/1"
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2023/03/GHSA-h569-rw5j-mxrv/GHSA-h569-rw5j-mxrv.json b/advisories/unreviewed/2023/03/GHSA-h569-rw5j-mxrv/GHSA-h569-rw5j-mxrv.json
index 15934b43299..2a33748586b 100644
--- a/advisories/unreviewed/2023/03/GHSA-h569-rw5j-mxrv/GHSA-h569-rw5j-mxrv.json
+++ b/advisories/unreviewed/2023/03/GHSA-h569-rw5j-mxrv/GHSA-h569-rw5j-mxrv.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h569-rw5j-mxrv",
-  "modified": "2023-04-07T15:30:39Z",
+  "modified": "2025-02-14T18:30:40Z",
   "published": "2023-03-31T00:30:18Z",
   "aliases": [
     "CVE-2023-1670"
@@ -27,6 +27,10 @@
       "type": "WEB",
       "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz%40163.com"
+    },
     {
       "type": "WEB",
       "url": "https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz@163.com"
diff --git a/advisories/unreviewed/2023/04/GHSA-2jm2-q946-gq54/GHSA-2jm2-q946-gq54.json b/advisories/unreviewed/2023/04/GHSA-2jm2-q946-gq54/GHSA-2jm2-q946-gq54.json
index 97eace375c4..850e78372af 100644
--- a/advisories/unreviewed/2023/04/GHSA-2jm2-q946-gq54/GHSA-2jm2-q946-gq54.json
+++ b/advisories/unreviewed/2023/04/GHSA-2jm2-q946-gq54/GHSA-2jm2-q946-gq54.json
@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-400"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2023/04/GHSA-9875-8h62-hq8g/GHSA-9875-8h62-hq8g.json b/advisories/unreviewed/2023/04/GHSA-9875-8h62-hq8g/GHSA-9875-8h62-hq8g.json
index 4b9fd9265f6..c7f282bcd07 100644
--- a/advisories/unreviewed/2023/04/GHSA-9875-8h62-hq8g/GHSA-9875-8h62-hq8g.json
+++ b/advisories/unreviewed/2023/04/GHSA-9875-8h62-hq8g/GHSA-9875-8h62-hq8g.json
@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-276",
       "CWE-287"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2023/04/GHSA-h4w3-5jjx-jxhm/GHSA-h4w3-5jjx-jxhm.json b/advisories/unreviewed/2023/04/GHSA-h4w3-5jjx-jxhm/GHSA-h4w3-5jjx-jxhm.json
index 7a1f6a4bedd..c9eda923db9 100644
--- a/advisories/unreviewed/2023/04/GHSA-h4w3-5jjx-jxhm/GHSA-h4w3-5jjx-jxhm.json
+++ b/advisories/unreviewed/2023/04/GHSA-h4w3-5jjx-jxhm/GHSA-h4w3-5jjx-jxhm.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-434"
+      "CWE-434",
+      "CWE-94"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2023/04/GHSA-q37p-4rw5-7329/GHSA-q37p-4rw5-7329.json b/advisories/unreviewed/2023/04/GHSA-q37p-4rw5-7329/GHSA-q37p-4rw5-7329.json
index 7defb78c65f..c5407b1ef03 100644
--- a/advisories/unreviewed/2023/04/GHSA-q37p-4rw5-7329/GHSA-q37p-4rw5-7329.json
+++ b/advisories/unreviewed/2023/04/GHSA-q37p-4rw5-7329/GHSA-q37p-4rw5-7329.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-22"
+      "CWE-22",
+      "CWE-552"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2023/07/GHSA-5r2r-5wx4-7x33/GHSA-5r2r-5wx4-7x33.json b/advisories/unreviewed/2023/07/GHSA-5r2r-5wx4-7x33/GHSA-5r2r-5wx4-7x33.json
index 6584a79c7a9..055f46f0794 100644
--- a/advisories/unreviewed/2023/07/GHSA-5r2r-5wx4-7x33/GHSA-5r2r-5wx4-7x33.json
+++ b/advisories/unreviewed/2023/07/GHSA-5r2r-5wx4-7x33/GHSA-5r2r-5wx4-7x33.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5r2r-5wx4-7x33",
-  "modified": "2024-04-04T05:35:29Z",
+  "modified": "2025-02-14T18:30:39Z",
   "published": "2023-07-06T19:24:13Z",
   "aliases": [
     "CVE-2022-4744"
diff --git a/advisories/unreviewed/2024/02/GHSA-2726-63m5-f24q/GHSA-2726-63m5-f24q.json b/advisories/unreviewed/2024/02/GHSA-2726-63m5-f24q/GHSA-2726-63m5-f24q.json
index fa8202029d4..b8734414d71 100644
--- a/advisories/unreviewed/2024/02/GHSA-2726-63m5-f24q/GHSA-2726-63m5-f24q.json
+++ b/advisories/unreviewed/2024/02/GHSA-2726-63m5-f24q/GHSA-2726-63m5-f24q.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2726-63m5-f24q",
-  "modified": "2024-02-27T00:32:04Z",
+  "modified": "2025-02-14T18:30:42Z",
   "published": "2024-02-27T00:32:04Z",
   "aliases": [
     "CVE-2024-25248"
   ],
   "details": "SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-26T22:15:07Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-69jc-r7p8-4cpg/GHSA-69jc-r7p8-4cpg.json b/advisories/unreviewed/2024/02/GHSA-69jc-r7p8-4cpg/GHSA-69jc-r7p8-4cpg.json
index 0400729727e..147f282c9d0 100644
--- a/advisories/unreviewed/2024/02/GHSA-69jc-r7p8-4cpg/GHSA-69jc-r7p8-4cpg.json
+++ b/advisories/unreviewed/2024/02/GHSA-69jc-r7p8-4cpg/GHSA-69jc-r7p8-4cpg.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-69jc-r7p8-4cpg",
-  "modified": "2024-02-29T00:30:23Z",
+  "modified": "2025-02-14T18:30:43Z",
   "published": "2024-02-29T00:30:23Z",
   "aliases": [
     "CVE-2023-5617"
   ],
-  "details": "\nHitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.\n\n\n\n",
+  "details": "Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -26,6 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-209",
       "CWE-550"
     ],
     "severity": "MODERATE",
diff --git a/advisories/unreviewed/2024/02/GHSA-768f-hg28-693m/GHSA-768f-hg28-693m.json b/advisories/unreviewed/2024/02/GHSA-768f-hg28-693m/GHSA-768f-hg28-693m.json
index a69d5555993..fd13b8541ee 100644
--- a/advisories/unreviewed/2024/02/GHSA-768f-hg28-693m/GHSA-768f-hg28-693m.json
+++ b/advisories/unreviewed/2024/02/GHSA-768f-hg28-693m/GHSA-768f-hg28-693m.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-768f-hg28-693m",
-  "modified": "2024-02-27T09:31:16Z",
+  "modified": "2025-02-14T18:30:43Z",
   "published": "2024-02-27T09:31:16Z",
   "aliases": [
     "CVE-2023-7115"
   ],
   "details": "The Page Builder: Pagelayer WordPress plugin before 1.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-27T09:15:37Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-7r9f-99vw-hx7g/GHSA-7r9f-99vw-hx7g.json b/advisories/unreviewed/2024/02/GHSA-7r9f-99vw-hx7g/GHSA-7r9f-99vw-hx7g.json
index 5601d04d7ee..3f7ccb213d1 100644
--- a/advisories/unreviewed/2024/02/GHSA-7r9f-99vw-hx7g/GHSA-7r9f-99vw-hx7g.json
+++ b/advisories/unreviewed/2024/02/GHSA-7r9f-99vw-hx7g/GHSA-7r9f-99vw-hx7g.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7r9f-99vw-hx7g",
-  "modified": "2024-02-22T18:30:27Z",
+  "modified": "2025-02-14T18:30:42Z",
   "published": "2024-02-22T06:30:33Z",
   "aliases": [
     "CVE-2024-25801"
   ],
   "details": "An arbitrary file upload vulnerability in the Add Media function of SKINsoft S-Museum v7.02.3 allows attackers to execute arbitrary code via a crafted PDF file.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-22T05:15:09Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-843c-j8jj-h425/GHSA-843c-j8jj-h425.json b/advisories/unreviewed/2024/02/GHSA-843c-j8jj-h425/GHSA-843c-j8jj-h425.json
index 36ab3587f98..82eaedcdff9 100644
--- a/advisories/unreviewed/2024/02/GHSA-843c-j8jj-h425/GHSA-843c-j8jj-h425.json
+++ b/advisories/unreviewed/2024/02/GHSA-843c-j8jj-h425/GHSA-843c-j8jj-h425.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-843c-j8jj-h425",
-  "modified": "2024-02-29T00:30:23Z",
+  "modified": "2025-02-14T18:30:43Z",
   "published": "2024-02-29T00:30:23Z",
   "aliases": [
     "CVE-2024-25422"
   ],
   "details": "SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-28T23:15:09Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-93vc-xxjx-g2p3/GHSA-93vc-xxjx-g2p3.json b/advisories/unreviewed/2024/02/GHSA-93vc-xxjx-g2p3/GHSA-93vc-xxjx-g2p3.json
index db165a4b1bf..3b387d80d9d 100644
--- a/advisories/unreviewed/2024/02/GHSA-93vc-xxjx-g2p3/GHSA-93vc-xxjx-g2p3.json
+++ b/advisories/unreviewed/2024/02/GHSA-93vc-xxjx-g2p3/GHSA-93vc-xxjx-g2p3.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-93vc-xxjx-g2p3",
-  "modified": "2024-02-29T03:33:12Z",
+  "modified": "2025-02-14T18:30:43Z",
   "published": "2024-02-29T03:33:12Z",
   "aliases": [
     "CVE-2023-34198"
   ],
   "details": "In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24 before 3.11.25, 4.0.0 through 4.3.18 before 4.3.19, 4.4.0 through 4.6.5 before 4.6.6, and 4.7.0 before 4.7.1, the usage of a Network object created from an inactive DHCP interface in the filtering slot results in the usage of an object of the :any\" type, which may have unexpected results for access control.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-29T01:39:48Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-fq7p-h4wc-54h8/GHSA-fq7p-h4wc-54h8.json b/advisories/unreviewed/2024/02/GHSA-fq7p-h4wc-54h8/GHSA-fq7p-h4wc-54h8.json
index 191c5ff3f1c..57cac2522f1 100644
--- a/advisories/unreviewed/2024/02/GHSA-fq7p-h4wc-54h8/GHSA-fq7p-h4wc-54h8.json
+++ b/advisories/unreviewed/2024/02/GHSA-fq7p-h4wc-54h8/GHSA-fq7p-h4wc-54h8.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fq7p-h4wc-54h8",
-  "modified": "2024-02-29T03:33:17Z",
+  "modified": "2025-02-14T18:30:43Z",
   "published": "2024-02-29T03:33:17Z",
   "aliases": [
     "CVE-2024-21724"
   ],
   "details": "Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -23,7 +28,7 @@
     "cwe_ids": [
       "CWE-79"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-29T01:44:03Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-g66m-2gg5-929w/GHSA-g66m-2gg5-929w.json b/advisories/unreviewed/2024/02/GHSA-g66m-2gg5-929w/GHSA-g66m-2gg5-929w.json
index 57b2af6ba90..ee5f20ad3c9 100644
--- a/advisories/unreviewed/2024/02/GHSA-g66m-2gg5-929w/GHSA-g66m-2gg5-929w.json
+++ b/advisories/unreviewed/2024/02/GHSA-g66m-2gg5-929w/GHSA-g66m-2gg5-929w.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g66m-2gg5-929w",
-  "modified": "2024-02-29T03:33:17Z",
+  "modified": "2025-02-14T18:30:43Z",
   "published": "2024-02-29T03:33:17Z",
   "aliases": [
     "CVE-2024-1470"
   ],
-  "details": "Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue \n\nonly \n\naffects NetIQ Client Login Extension: 4.6.\n\n",
+  "details": "Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue \n\nonly \n\naffects NetIQ Client Login Extension: 4.6.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/unreviewed/2024/02/GHSA-h4jm-gjjm-3ffr/GHSA-h4jm-gjjm-3ffr.json b/advisories/unreviewed/2024/02/GHSA-h4jm-gjjm-3ffr/GHSA-h4jm-gjjm-3ffr.json
index 6d24ae23d50..4a86ab64602 100644
--- a/advisories/unreviewed/2024/02/GHSA-h4jm-gjjm-3ffr/GHSA-h4jm-gjjm-3ffr.json
+++ b/advisories/unreviewed/2024/02/GHSA-h4jm-gjjm-3ffr/GHSA-h4jm-gjjm-3ffr.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h4jm-gjjm-3ffr",
-  "modified": "2024-02-22T06:30:34Z",
+  "modified": "2025-02-14T18:30:42Z",
   "published": "2024-02-22T06:30:34Z",
   "aliases": [
     "CVE-2024-26489"
   ],
   "details": "A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Profile Name text field.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-22T06:15:57Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-hg82-gwpx-6h36/GHSA-hg82-gwpx-6h36.json b/advisories/unreviewed/2024/02/GHSA-hg82-gwpx-6h36/GHSA-hg82-gwpx-6h36.json
index 65146592d35..69e942b7ac2 100644
--- a/advisories/unreviewed/2024/02/GHSA-hg82-gwpx-6h36/GHSA-hg82-gwpx-6h36.json
+++ b/advisories/unreviewed/2024/02/GHSA-hg82-gwpx-6h36/GHSA-hg82-gwpx-6h36.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hg82-gwpx-6h36",
-  "modified": "2024-02-27T03:31:03Z",
+  "modified": "2025-02-14T18:30:42Z",
   "published": "2024-02-27T03:31:03Z",
   "aliases": [
     "CVE-2024-24100"
   ],
   "details": "Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-27T02:15:06Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-pp3r-rxpr-h8mc/GHSA-pp3r-rxpr-h8mc.json b/advisories/unreviewed/2024/02/GHSA-pp3r-rxpr-h8mc/GHSA-pp3r-rxpr-h8mc.json
index 55dcd0048f6..beefd250dec 100644
--- a/advisories/unreviewed/2024/02/GHSA-pp3r-rxpr-h8mc/GHSA-pp3r-rxpr-h8mc.json
+++ b/advisories/unreviewed/2024/02/GHSA-pp3r-rxpr-h8mc/GHSA-pp3r-rxpr-h8mc.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pp3r-rxpr-h8mc",
-  "modified": "2024-02-29T03:33:14Z",
+  "modified": "2025-02-14T18:30:43Z",
   "published": "2024-02-29T03:33:14Z",
   "aliases": [
     "CVE-2023-45874"
   ],
   "details": "An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads).",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -29,7 +34,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-29T01:41:20Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-rfw9-hv5h-2w85/GHSA-rfw9-hv5h-2w85.json b/advisories/unreviewed/2024/02/GHSA-rfw9-hv5h-2w85/GHSA-rfw9-hv5h-2w85.json
index 9b2b0560b37..1bc2aff3022 100644
--- a/advisories/unreviewed/2024/02/GHSA-rfw9-hv5h-2w85/GHSA-rfw9-hv5h-2w85.json
+++ b/advisories/unreviewed/2024/02/GHSA-rfw9-hv5h-2w85/GHSA-rfw9-hv5h-2w85.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rfw9-hv5h-2w85",
-  "modified": "2024-02-29T03:33:14Z",
+  "modified": "2025-02-14T18:30:43Z",
   "published": "2024-02-29T03:33:14Z",
   "aliases": [
     "CVE-2023-49930"
   ],
   "details": "An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not sufficiently restricted.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -29,7 +34,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-29T01:41:40Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-rgrc-qmj6-x9mf/GHSA-rgrc-qmj6-x9mf.json b/advisories/unreviewed/2024/02/GHSA-rgrc-qmj6-x9mf/GHSA-rgrc-qmj6-x9mf.json
index 89decc9c6cb..4b845abb9b8 100644
--- a/advisories/unreviewed/2024/02/GHSA-rgrc-qmj6-x9mf/GHSA-rgrc-qmj6-x9mf.json
+++ b/advisories/unreviewed/2024/02/GHSA-rgrc-qmj6-x9mf/GHSA-rgrc-qmj6-x9mf.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rgrc-qmj6-x9mf",
-  "modified": "2024-05-14T15:32:40Z",
+  "modified": "2025-02-14T18:30:44Z",
   "published": "2024-02-29T03:33:18Z",
   "aliases": [
     "CVE-2024-26462"
   ],
   "details": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-401"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-29T01:44:18Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-vwgp-x2rf-chq4/GHSA-vwgp-x2rf-chq4.json b/advisories/unreviewed/2024/02/GHSA-vwgp-x2rf-chq4/GHSA-vwgp-x2rf-chq4.json
index 8c5c3183ed8..1bbdfb65a2f 100644
--- a/advisories/unreviewed/2024/02/GHSA-vwgp-x2rf-chq4/GHSA-vwgp-x2rf-chq4.json
+++ b/advisories/unreviewed/2024/02/GHSA-vwgp-x2rf-chq4/GHSA-vwgp-x2rf-chq4.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vwgp-x2rf-chq4",
-  "modified": "2024-02-29T03:33:13Z",
+  "modified": "2025-02-14T18:30:43Z",
   "published": "2024-02-29T03:33:13Z",
   "aliases": [
     "CVE-2023-41165"
   ],
   "details": "An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.38 before 3.7.39, 3.10.0 through 3.11.26 before 3.11.27, 4.0 through 4.3.21 before 4.3.22, and 4.4.0 through 4.6.8 before 4.6.9. An administrator with write access to the SNS firewall can configure a login disclaimer with malicious JavaScript elements that can result in data theft.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-29T01:40:58Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-2689-83hc-5vvp/GHSA-2689-83hc-5vvp.json b/advisories/unreviewed/2024/03/GHSA-2689-83hc-5vvp/GHSA-2689-83hc-5vvp.json
index e4ea2dfe560..940b2334139 100644
--- a/advisories/unreviewed/2024/03/GHSA-2689-83hc-5vvp/GHSA-2689-83hc-5vvp.json
+++ b/advisories/unreviewed/2024/03/GHSA-2689-83hc-5vvp/GHSA-2689-83hc-5vvp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2689-83hc-5vvp",
-  "modified": "2024-03-05T15:32:40Z",
+  "modified": "2025-02-14T18:30:44Z",
   "published": "2024-03-05T12:30:31Z",
   "aliases": [
     "CVE-2022-48629"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qcom-rng - ensure buffer for generate is completely filled\n\nThe generate function in struct rng_alg expects that the destination\nbuffer is completely filled if the function returns 0. qcom_rng_read()\ncan run into a situation where the buffer is partially filled with\nrandomness and the remaining part of the buffer is zeroed since\nqcom_rng_generate() doesn't check the return value. This issue can\nbe reproduced by running the following from libkcapi:\n\n    kcapi-rng -b 9000000 > OUTFILE\n\nThe generated OUTFILE will have three huge sections that contain all\nzeros, and this is caused by the code where the test\n'val & PRNG_STATUS_DATA_AVAIL' fails.\n\nLet's fix this issue by ensuring that qcom_rng_read() always returns\nwith a full buffer if the function returns success. Let's also have\nqcom_rng_generate() return the correct value.\n\nHere's some statistics from the ent project\n(https://www.fourmilab.ch/random/) that shows information about the\nquality of the generated numbers:\n\n    $ ent -c qcom-random-before\n    Value Char Occurrences Fraction\n      0           606748   0.067416\n      1            33104   0.003678\n      2            33001   0.003667\n    ...\n    253   �        32883   0.003654\n    254   �        33035   0.003671\n    255   �        33239   0.003693\n\n    Total:       9000000   1.000000\n\n    Entropy = 7.811590 bits per byte.\n\n    Optimum compression would reduce the size\n    of this 9000000 byte file by 2 percent.\n\n    Chi square distribution for 9000000 samples is 9329962.81, and\n    randomly would exceed this value less than 0.01 percent of the\n    times.\n\n    Arithmetic mean value of data bytes is 119.3731 (127.5 = random).\n    Monte Carlo value for Pi is 3.197293333 (error 1.77 percent).\n    Serial correlation coefficient is 0.159130 (totally uncorrelated =\n    0.0).\n\nWithout this patch, the results of the chi-square test is 0.01%, and\nthe numbers are certainly not random according to ent's project page.\nThe results improve with this patch:\n\n    $ ent -c qcom-random-after\n    Value Char Occurrences Fraction\n      0            35432   0.003937\n      1            35127   0.003903\n      2            35424   0.003936\n    ...\n    253   �        35201   0.003911\n    254   �        34835   0.003871\n    255   �        35368   0.003930\n\n    Total:       9000000   1.000000\n\n    Entropy = 7.999979 bits per byte.\n\n    Optimum compression would reduce the size\n    of this 9000000 byte file by 0 percent.\n\n    Chi square distribution for 9000000 samples is 258.77, and randomly\n    would exceed this value 42.24 percent of the times.\n\n    Arithmetic mean value of data bytes is 127.5006 (127.5 = random).\n    Monte Carlo value for Pi is 3.141277333 (error 0.01 percent).\n    Serial correlation coefficient is 0.000468 (totally uncorrelated =\n    0.0).\n\nThis change was tested on a Nexus 5 phone (msm8974 SoC).",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -41,7 +46,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-05T12:15:45Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-28q7-ffc5-gfjp/GHSA-28q7-ffc5-gfjp.json b/advisories/unreviewed/2024/03/GHSA-28q7-ffc5-gfjp/GHSA-28q7-ffc5-gfjp.json
index 7a9a952902f..58699291d05 100644
--- a/advisories/unreviewed/2024/03/GHSA-28q7-ffc5-gfjp/GHSA-28q7-ffc5-gfjp.json
+++ b/advisories/unreviewed/2024/03/GHSA-28q7-ffc5-gfjp/GHSA-28q7-ffc5-gfjp.json
@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-276"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-3fv7-f54h-j866/GHSA-3fv7-f54h-j866.json b/advisories/unreviewed/2024/03/GHSA-3fv7-f54h-j866/GHSA-3fv7-f54h-j866.json
index 7c9327a3ea7..c378975b89e 100644
--- a/advisories/unreviewed/2024/03/GHSA-3fv7-f54h-j866/GHSA-3fv7-f54h-j866.json
+++ b/advisories/unreviewed/2024/03/GHSA-3fv7-f54h-j866/GHSA-3fv7-f54h-j866.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3fv7-f54h-j866",
-  "modified": "2024-03-06T09:30:29Z",
+  "modified": "2025-02-14T18:30:45Z",
   "published": "2024-03-06T09:30:29Z",
   "aliases": [
     "CVE-2024-26623"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npds_core: Prevent race issues involving the adminq\n\nThere are multiple paths that can result in using the pdsc's\nadminq.\n\n[1] pdsc_adminq_isr and the resulting work from queue_work(),\n    i.e. pdsc_work_thread()->pdsc_process_adminq()\n\n[2] pdsc_adminq_post()\n\nWhen the device goes through reset via PCIe reset and/or\na fw_down/fw_up cycle due to bad PCIe state or bad device\nstate the adminq is destroyed and recreated.\n\nA NULL pointer dereference can happen if [1] or [2] happens\nafter the adminq is already destroyed.\n\nIn order to fix this, add some further state checks and\nimplement reference counting for adminq uses. Reference\ncounting was used because multiple threads can attempt to\naccess the adminq at the same time via [1] or [2]. Additionally,\nmultiple clients (i.e. pds-vfio-pci) can be using [2]\nat the same time.\n\nThe adminq_refcnt is initialized to 1 when the adminq has been\nallocated and is ready to use. Users/clients of the adminq\n(i.e. [1] and [2]) will increment the refcnt when they are using\nthe adminq. When the driver goes into a fw_down cycle it will\nset the PDSC_S_FW_DEAD bit and then wait for the adminq_refcnt\nto hit 1. Setting the PDSC_S_FW_DEAD before waiting will prevent\nany further adminq_refcnt increments. Waiting for the\nadminq_refcnt to hit 1 allows for any current users of the adminq\nto finish before the driver frees the adminq. Once the\nadminq_refcnt hits 1 the driver clears the refcnt to signify that\nthe adminq is deleted and cannot be used. On the fw_up cycle the\ndriver will once again initialize the adminq_refcnt to 1 allowing\nthe adminq to be used again.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:12Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-43w7-7gwv-35rc/GHSA-43w7-7gwv-35rc.json b/advisories/unreviewed/2024/03/GHSA-43w7-7gwv-35rc/GHSA-43w7-7gwv-35rc.json
index 619039b8acc..deee4acac8a 100644
--- a/advisories/unreviewed/2024/03/GHSA-43w7-7gwv-35rc/GHSA-43w7-7gwv-35rc.json
+++ b/advisories/unreviewed/2024/03/GHSA-43w7-7gwv-35rc/GHSA-43w7-7gwv-35rc.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-43w7-7gwv-35rc",
-  "modified": "2024-03-11T18:31:09Z",
+  "modified": "2025-02-14T18:30:46Z",
   "published": "2024-03-11T18:31:09Z",
   "aliases": [
     "CVE-2024-26620"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/vfio-ap: always filter entire AP matrix\n\nThe vfio_ap_mdev_filter_matrix function is called whenever a new adapter or\ndomain is assigned to the mdev. The purpose of the function is to update\nthe guest's AP configuration by filtering the matrix of adapters and\ndomains assigned to the mdev. When an adapter or domain is assigned, only\nthe APQNs associated with the APID of the new adapter or APQI of the new\ndomain are inspected. If an APQN does not reference a queue device bound to\nthe vfio_ap device driver, then it's APID will be filtered from the mdev's\nmatrix when updating the guest's AP configuration.\n\nInspecting only the APID of the new adapter or APQI of the new domain will\nresult in passing AP queues through to a guest that are not bound to the\nvfio_ap device driver under certain circumstances. Consider the following:\n\nguest's AP configuration (all also assigned to the mdev's matrix):\n14.0004\n14.0005\n14.0006\n16.0004\n16.0005\n16.0006\n\nunassign domain 4\nunbind queue 16.0005\nassign domain 4\n\nWhen domain 4 is re-assigned, since only domain 4 will be inspected, the\nAPQNs that will be examined will be:\n14.0004\n16.0004\n\nSince both of those APQNs reference queue devices that are bound to the\nvfio_ap device driver, nothing will get filtered from the mdev's matrix\nwhen updating the guest's AP configuration. Consequently, queue 16.0005\nwill get passed through despite not being bound to the driver. This\nviolates the linux device model requirement that a guest shall only be\ngiven access to devices bound to the device driver facilitating their\npass-through.\n\nTo resolve this problem, every adapter and domain assigned to the mdev will\nbe inspected when filtering the mdev's matrix.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-11T18:15:19Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-444h-7m84-gc93/GHSA-444h-7m84-gc93.json b/advisories/unreviewed/2024/03/GHSA-444h-7m84-gc93/GHSA-444h-7m84-gc93.json
index b56f6878b45..dfde32bd413 100644
--- a/advisories/unreviewed/2024/03/GHSA-444h-7m84-gc93/GHSA-444h-7m84-gc93.json
+++ b/advisories/unreviewed/2024/03/GHSA-444h-7m84-gc93/GHSA-444h-7m84-gc93.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-444h-7m84-gc93",
-  "modified": "2024-03-06T09:30:27Z",
+  "modified": "2025-02-14T18:30:44Z",
   "published": "2024-03-06T09:30:27Z",
   "aliases": [
     "CVE-2023-52588"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to tag gcing flag on page during block migration\n\nIt needs to add missing gcing flag on page during block migration,\nin order to garantee migrated data be persisted during checkpoint,\notherwise out-of-order persistency between data and node may cause\ndata corruption after SPOR.\n\nSimilar issue was fixed by commit 2d1fe8a86bf5 (\"f2fs: fix to tag\ngcing flag on page during file defragment\").",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -37,7 +42,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:07Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-55wg-fv83-2v8j/GHSA-55wg-fv83-2v8j.json b/advisories/unreviewed/2024/03/GHSA-55wg-fv83-2v8j/GHSA-55wg-fv83-2v8j.json
index 3154aa1a799..a5e23e022cb 100644
--- a/advisories/unreviewed/2024/03/GHSA-55wg-fv83-2v8j/GHSA-55wg-fv83-2v8j.json
+++ b/advisories/unreviewed/2024/03/GHSA-55wg-fv83-2v8j/GHSA-55wg-fv83-2v8j.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-55wg-fv83-2v8j",
-  "modified": "2024-03-06T09:30:27Z",
+  "modified": "2025-02-14T18:30:45Z",
   "published": "2024-03-06T09:30:27Z",
   "aliases": [
     "CVE-2023-52590"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: Avoid touching renamed directory if parent does not change\n\nThe VFS will not be locking moved directory if its parent does not\nchange. Change ocfs2 rename code to avoid touching renamed directory if\nits parent does not change as without locking that can corrupt the\nfilesystem.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-667"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-6fvm-vq2v-pwgq/GHSA-6fvm-vq2v-pwgq.json b/advisories/unreviewed/2024/03/GHSA-6fvm-vq2v-pwgq/GHSA-6fvm-vq2v-pwgq.json
index f9352322380..1635ff2fd8c 100644
--- a/advisories/unreviewed/2024/03/GHSA-6fvm-vq2v-pwgq/GHSA-6fvm-vq2v-pwgq.json
+++ b/advisories/unreviewed/2024/03/GHSA-6fvm-vq2v-pwgq/GHSA-6fvm-vq2v-pwgq.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6fvm-vq2v-pwgq",
-  "modified": "2024-03-11T18:31:09Z",
+  "modified": "2025-02-14T18:30:46Z",
   "published": "2024-03-11T18:31:09Z",
   "aliases": [
     "CVE-2024-26618"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/sme: Always exit sme_alloc() early with existing storage\n\nWhen sme_alloc() is called with existing storage and we are not flushing we\nwill always allocate new storage, both leaking the existing storage and\ncorrupting the state. Fix this by separating the checks for flushing and\nfor existing storage as we do for SVE.\n\nCallers that reallocate (eg, due to changing the vector length) should\ncall sme_free() themselves.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-11T18:15:19Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-8522-pjcf-fhc2/GHSA-8522-pjcf-fhc2.json b/advisories/unreviewed/2024/03/GHSA-8522-pjcf-fhc2/GHSA-8522-pjcf-fhc2.json
index b332b25a6df..54d42e78dbe 100644
--- a/advisories/unreviewed/2024/03/GHSA-8522-pjcf-fhc2/GHSA-8522-pjcf-fhc2.json
+++ b/advisories/unreviewed/2024/03/GHSA-8522-pjcf-fhc2/GHSA-8522-pjcf-fhc2.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8522-pjcf-fhc2",
-  "modified": "2024-03-06T00:31:26Z",
+  "modified": "2025-02-14T18:30:44Z",
   "published": "2024-03-06T00:31:26Z",
   "aliases": [
     "CVE-2024-1898"
   ],
-  "details": "Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileged user to change notifications settings configured by an administrator.\n\n\n",
-  "severity": [],
+  "details": "Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileged user to change notifications settings configured by an administrator.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-05T22:15:47Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-857w-h46r-9g9g/GHSA-857w-h46r-9g9g.json b/advisories/unreviewed/2024/03/GHSA-857w-h46r-9g9g/GHSA-857w-h46r-9g9g.json
index dff04c772cd..911a69cf96c 100644
--- a/advisories/unreviewed/2024/03/GHSA-857w-h46r-9g9g/GHSA-857w-h46r-9g9g.json
+++ b/advisories/unreviewed/2024/03/GHSA-857w-h46r-9g9g/GHSA-857w-h46r-9g9g.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-857w-h46r-9g9g",
-  "modified": "2024-06-26T00:31:35Z",
+  "modified": "2025-02-14T18:30:46Z",
   "published": "2024-03-11T18:31:08Z",
   "aliases": [
     "CVE-2023-52488"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO\n\nThe SC16IS7XX IC supports a burst mode to access the FIFOs where the\ninitial register address is sent ($00), followed by all the FIFO data\nwithout having to resend the register address each time. In this mode, the\nIC doesn't increment the register address for each R/W byte.\n\nThe regmap_raw_read() and regmap_raw_write() are functions which can\nperform IO over multiple registers. They are currently used to read/write\nfrom/to the FIFO, and although they operate correctly in this burst mode on\nthe SPI bus, they would corrupt the regmap cache if it was not disabled\nmanually. The reason is that when the R/W size is more than 1 byte, these\nfunctions assume that the register address is incremented and handle the\ncache accordingly.\n\nConvert FIFO R/W functions to use the regmap _noinc_ versions in order to\nremove the manual cache control which was a workaround when using the\n_raw_ versions. FIFO registers are properly declared as volatile so\ncache will not be used/updated for FIFO accesses.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -45,7 +50,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-11T18:15:16Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-92qh-fghq-p65v/GHSA-92qh-fghq-p65v.json b/advisories/unreviewed/2024/03/GHSA-92qh-fghq-p65v/GHSA-92qh-fghq-p65v.json
index 5492356e8c2..6652a769083 100644
--- a/advisories/unreviewed/2024/03/GHSA-92qh-fghq-p65v/GHSA-92qh-fghq-p65v.json
+++ b/advisories/unreviewed/2024/03/GHSA-92qh-fghq-p65v/GHSA-92qh-fghq-p65v.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-92qh-fghq-p65v",
-  "modified": "2024-03-06T09:30:27Z",
+  "modified": "2025-02-14T18:30:45Z",
   "published": "2024-03-06T09:30:27Z",
   "aliases": [
     "CVE-2023-52589"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rkisp1: Fix IRQ disable race issue\n\nIn rkisp1_isp_stop() and rkisp1_csi_disable() the driver masks the\ninterrupts and then apparently assumes that the interrupt handler won't\nbe running, and proceeds in the stop procedure. This is not the case, as\nthe interrupt handler can already be running, which would lead to the\nISP being disabled while the interrupt handler handling a captured\nframe.\n\nThis brings up two issues: 1) the ISP could be powered off while the\ninterrupt handler is still running and accessing registers, leading to\nboard lockup, and 2) the interrupt handler code and the code that\ndisables the streaming might do things that conflict.\n\nIt is not clear to me if 2) causes a real issue, but 1) can be seen with\na suitable delay (or printk in my case) in the interrupt handler,\nleading to board lockup.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-362"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-9397-pxm9-3w6r/GHSA-9397-pxm9-3w6r.json b/advisories/unreviewed/2024/03/GHSA-9397-pxm9-3w6r/GHSA-9397-pxm9-3w6r.json
index 9ed99809284..ba79ae542e7 100644
--- a/advisories/unreviewed/2024/03/GHSA-9397-pxm9-3w6r/GHSA-9397-pxm9-3w6r.json
+++ b/advisories/unreviewed/2024/03/GHSA-9397-pxm9-3w6r/GHSA-9397-pxm9-3w6r.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9397-pxm9-3w6r",
-  "modified": "2024-03-21T18:32:03Z",
+  "modified": "2025-02-14T18:30:48Z",
   "published": "2024-03-21T18:32:03Z",
   "aliases": [
     "CVE-2024-27965"
   ],
-  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPFunnels allows Stored XSS.This issue affects WPFunnels: from n/a through 3.0.6.\n\n",
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPFunnels allows Stored XSS.This issue affects WPFunnels: from n/a through 3.0.6.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/unreviewed/2024/03/GHSA-9pxg-gf82-j5w9/GHSA-9pxg-gf82-j5w9.json b/advisories/unreviewed/2024/03/GHSA-9pxg-gf82-j5w9/GHSA-9pxg-gf82-j5w9.json
index 68a26c68e8d..d2999c2f330 100644
--- a/advisories/unreviewed/2024/03/GHSA-9pxg-gf82-j5w9/GHSA-9pxg-gf82-j5w9.json
+++ b/advisories/unreviewed/2024/03/GHSA-9pxg-gf82-j5w9/GHSA-9pxg-gf82-j5w9.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9pxg-gf82-j5w9",
-  "modified": "2024-03-21T18:32:03Z",
+  "modified": "2025-02-14T18:30:48Z",
   "published": "2024-03-21T18:32:03Z",
   "aliases": [
     "CVE-2024-27962"
   ],
-  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Florian 'fkrauthan' Krauthan allows Reflected XSS.This issue affects wp-mpdf: from n/a through 3.7.1.\n\n",
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Florian 'fkrauthan' Krauthan allows Reflected XSS.This issue affects wp-mpdf: from n/a through 3.7.1.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/unreviewed/2024/03/GHSA-c4rp-h96r-7xm9/GHSA-c4rp-h96r-7xm9.json b/advisories/unreviewed/2024/03/GHSA-c4rp-h96r-7xm9/GHSA-c4rp-h96r-7xm9.json
index e7e7f37f917..d43ca11cf1b 100644
--- a/advisories/unreviewed/2024/03/GHSA-c4rp-h96r-7xm9/GHSA-c4rp-h96r-7xm9.json
+++ b/advisories/unreviewed/2024/03/GHSA-c4rp-h96r-7xm9/GHSA-c4rp-h96r-7xm9.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c4rp-h96r-7xm9",
-  "modified": "2024-06-26T00:31:35Z",
+  "modified": "2025-02-14T18:30:45Z",
   "published": "2024-03-06T09:30:28Z",
   "aliases": [
     "CVE-2023-52598"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/ptrace: handle setting of fpc register correctly\n\nIf the content of the floating point control (fpc) register of a traced\nprocess is modified with the ptrace interface the new value is tested for\nvalidity by temporarily loading it into the fpc register.\n\nThis may lead to corruption of the fpc register of the tracing process:\nif an interrupt happens while the value is temporarily loaded into the\nfpc register, and within interrupt context floating point or vector\nregisters are used, the current fp/vx registers are saved with\nsave_fpu_regs() assuming they belong to user space and will be loaded into\nfp/vx registers when returning to user space.\n\ntest_fp_ctl() restores the original user space fpc register value, however\nit will be discarded, when returning to user space.\n\nIn result the tracer will incorrectly continue to run with the value that\nwas supposed to be used for the traced process.\n\nFix this by saving fpu register contents with save_fpu_regs() before using\ntest_fp_ctl().",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -52,8 +57,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-125"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:09Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-cv5f-f45r-4cqf/GHSA-cv5f-f45r-4cqf.json b/advisories/unreviewed/2024/03/GHSA-cv5f-f45r-4cqf/GHSA-cv5f-f45r-4cqf.json
index ee70ca2edad..61adada35f1 100644
--- a/advisories/unreviewed/2024/03/GHSA-cv5f-f45r-4cqf/GHSA-cv5f-f45r-4cqf.json
+++ b/advisories/unreviewed/2024/03/GHSA-cv5f-f45r-4cqf/GHSA-cv5f-f45r-4cqf.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cv5f-f45r-4cqf",
-  "modified": "2024-03-06T09:30:26Z",
+  "modified": "2025-02-14T18:30:44Z",
   "published": "2024-03-06T09:30:26Z",
   "aliases": [
     "CVE-2023-52586"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dpu: Add mutex lock in control vblank irq\n\nAdd a mutex lock to control vblank irq to synchronize vblank\nenable/disable operations happening from different threads to prevent\nrace conditions while registering/unregistering the vblank irq callback.\n\nv4: -Removed vblank_ctl_lock from dpu_encoder_virt, so it is only a\n    parameter of dpu_encoder_phys.\n    -Switch from atomic refcnt to a simple int counter as mutex has\n    now been added\nv3: Mistakenly did not change wording in last version. It is done now.\nv2: Slightly changed wording of commit message\n\nPatchwork: https://patchwork.freedesktop.org/patch/571854/",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-362"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:07Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-ffqx-hmw2-p5jv/GHSA-ffqx-hmw2-p5jv.json b/advisories/unreviewed/2024/03/GHSA-ffqx-hmw2-p5jv/GHSA-ffqx-hmw2-p5jv.json
index b758261d5f9..8973516df90 100644
--- a/advisories/unreviewed/2024/03/GHSA-ffqx-hmw2-p5jv/GHSA-ffqx-hmw2-p5jv.json
+++ b/advisories/unreviewed/2024/03/GHSA-ffqx-hmw2-p5jv/GHSA-ffqx-hmw2-p5jv.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ffqx-hmw2-p5jv",
-  "modified": "2024-03-06T09:30:28Z",
+  "modified": "2025-02-14T18:30:45Z",
   "published": "2024-03-06T09:30:28Z",
   "aliases": [
     "CVE-2023-52596"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsysctl: Fix out of bounds access for empty sysctl registers\n\nWhen registering tables to the sysctl subsystem there is a check to see\nif header is a permanently empty directory (used for mounts). This check\nevaluates the first element of the ctl_table. This results in an out of\nbounds evaluation when registering empty directories.\n\nThe function register_sysctl_mount_point now passes a ctl_table of size\n1 instead of size 0. It now relies solely on the type to identify\na permanently empty register.\n\nMake sure that the ctl_table has at least one element before testing for\npermanent emptiness.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:09Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-ggvx-h8v5-pm3j/GHSA-ggvx-h8v5-pm3j.json b/advisories/unreviewed/2024/03/GHSA-ggvx-h8v5-pm3j/GHSA-ggvx-h8v5-pm3j.json
index 0abbe3cfec0..58bef05027b 100644
--- a/advisories/unreviewed/2024/03/GHSA-ggvx-h8v5-pm3j/GHSA-ggvx-h8v5-pm3j.json
+++ b/advisories/unreviewed/2024/03/GHSA-ggvx-h8v5-pm3j/GHSA-ggvx-h8v5-pm3j.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ggvx-h8v5-pm3j",
-  "modified": "2024-03-11T18:31:09Z",
+  "modified": "2025-02-14T18:30:46Z",
   "published": "2024-03-11T18:31:09Z",
   "aliases": [
     "CVE-2023-52494"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbus: mhi: host: Add alignment check for event ring read pointer\n\nThough we do check the event ring read pointer by \"is_valid_ring_ptr\"\nto make sure it is in the buffer range, but there is another risk the\npointer may be not aligned.  Since we are expecting event ring elements\nare 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer\ncould lead to multiple issues like DoS or ring buffer memory corruption.\n\nSo add a alignment check for event ring read pointer.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -36,8 +41,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-11T18:15:17Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-hh6q-pgh2-779f/GHSA-hh6q-pgh2-779f.json b/advisories/unreviewed/2024/03/GHSA-hh6q-pgh2-779f/GHSA-hh6q-pgh2-779f.json
index f3b9050240a..984e7ebdb2e 100644
--- a/advisories/unreviewed/2024/03/GHSA-hh6q-pgh2-779f/GHSA-hh6q-pgh2-779f.json
+++ b/advisories/unreviewed/2024/03/GHSA-hh6q-pgh2-779f/GHSA-hh6q-pgh2-779f.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hh6q-pgh2-779f",
-  "modified": "2024-06-27T12:30:43Z",
+  "modified": "2025-02-14T18:30:44Z",
   "published": "2024-03-06T09:30:27Z",
   "aliases": [
     "CVE-2023-52587"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/ipoib: Fix mcast list locking\n\nReleasing the `priv->lock` while iterating the `priv->multicast_list` in\n`ipoib_mcast_join_task()` opens a window for `ipoib_mcast_dev_flush()` to\nremove the items while in the middle of iteration. If the mcast is removed\nwhile the lock was dropped, the for loop spins forever resulting in a hard\nlockup (as was reported on RHEL 4.18.0-372.75.1.el8_6 kernel):\n\n    Task A (kworker/u72:2 below)       | Task B (kworker/u72:0 below)\n    -----------------------------------+-----------------------------------\n    ipoib_mcast_join_task(work)        | ipoib_ib_dev_flush_light(work)\n      spin_lock_irq(&priv->lock)       | __ipoib_ib_dev_flush(priv, ...)\n      list_for_each_entry(mcast,       | ipoib_mcast_dev_flush(dev = priv->dev)\n          &priv->multicast_list, list) |\n        ipoib_mcast_join(dev, mcast)   |\n          spin_unlock_irq(&priv->lock) |\n                                       |   spin_lock_irqsave(&priv->lock, flags)\n                                       |   list_for_each_entry_safe(mcast, tmcast,\n                                       |                  &priv->multicast_list, list)\n                                       |     list_del(&mcast->list);\n                                       |     list_add_tail(&mcast->list, &remove_list)\n                                       |   spin_unlock_irqrestore(&priv->lock, flags)\n          spin_lock_irq(&priv->lock)   |\n                                       |   ipoib_mcast_remove_list(&remove_list)\n   (Here, `mcast` is no longer on the  |     list_for_each_entry_safe(mcast, tmcast,\n    `priv->multicast_list` and we keep |                            remove_list, list)\n    spinning on the `remove_list` of   |  >>>  wait_for_completion(&mcast->done)\n    the other thread which is blocked  |\n    and the list is still valid on     |\n    it's stack.)\n\nFix this by keeping the lock held and changing to GFP_ATOMIC to prevent\neventual sleeps.\nUnfortunately we could not reproduce the lockup and confirm this fix but\nbased on the code review I think this fix should address such lockups.\n\ncrash> bc 31\nPID: 747      TASK: ff1c6a1a007e8000  CPU: 31   COMMAND: \"kworker/u72:2\"\n--\n    [exception RIP: ipoib_mcast_join_task+0x1b1]\n    RIP: ffffffffc0944ac1  RSP: ff646f199a8c7e00  RFLAGS: 00000002\n    RAX: 0000000000000000  RBX: ff1c6a1a04dc82f8  RCX: 0000000000000000\n                                  work (&priv->mcast_task{,.work})\n    RDX: ff1c6a192d60ac68  RSI: 0000000000000286  RDI: ff1c6a1a04dc8000\n           &mcast->list\n    RBP: ff646f199a8c7e90   R8: ff1c699980019420   R9: ff1c6a1920c9a000\n    R10: ff646f199a8c7e00  R11: ff1c6a191a7d9800  R12: ff1c6a192d60ac00\n                                                         mcast\n    R13: ff1c6a1d82200000  R14: ff1c6a1a04dc8000  R15: ff1c6a1a04dc82d8\n           dev                    priv (&priv->lock)     &priv->multicast_list (aka head)\n    ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018\n--- <NMI exception stack> ---\n #5 [ff646f199a8c7e00] ipoib_mcast_join_task+0x1b1 at ffffffffc0944ac1 [ib_ipoib]\n #6 [ff646f199a8c7e98] process_one_work+0x1a7 at ffffffff9bf10967\n\ncrash> rx ff646f199a8c7e68\nff646f199a8c7e68:  ff1c6a1a04dc82f8 <<< work = &priv->mcast_task.work\n\ncrash> list -hO ipoib_dev_priv.multicast_list ff1c6a1a04dc8000\n(empty)\n\ncrash> ipoib_dev_priv.mcast_task.work.func,mcast_mutex.owner.counter ff1c6a1a04dc8000\n  mcast_task.work.func = 0xffffffffc0944910 <ipoib_mcast_join_task>,\n  mcast_mutex.owner.counter = 0xff1c69998efec000\n\ncrash> b 8\nPID: 8        TASK: ff1c69998efec000  CPU: 33   COMMAND: \"kworker/u72:0\"\n--\n #3 [ff646f1980153d50] wait_for_completion+0x96 at ffffffff9c7d7646\n #4 [ff646f1980153d90] ipoib_mcast_remove_list+0x56 at ffffffffc0944dc6 [ib_ipoib]\n #5 [ff646f1980153de8] ipoib_mcast_dev_flush+0x1a7 at ffffffffc09455a7 [ib_ipoib]\n #6 [ff646f1980153e58] __ipoib_ib_dev_flush+0x1a4 at ffffffffc09431a4 [ib_ipoib]\n #7 [ff\n---truncated---",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -56,8 +61,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-667"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:07Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-qfvj-334p-gg47/GHSA-qfvj-334p-gg47.json b/advisories/unreviewed/2024/03/GHSA-qfvj-334p-gg47/GHSA-qfvj-334p-gg47.json
index 84acaa6bbb9..d48c8502881 100644
--- a/advisories/unreviewed/2024/03/GHSA-qfvj-334p-gg47/GHSA-qfvj-334p-gg47.json
+++ b/advisories/unreviewed/2024/03/GHSA-qfvj-334p-gg47/GHSA-qfvj-334p-gg47.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qfvj-334p-gg47",
-  "modified": "2024-03-21T18:32:03Z",
+  "modified": "2025-02-14T18:30:48Z",
   "published": "2024-03-21T18:32:03Z",
   "aliases": [
     "CVE-2024-27190"
   ],
-  "details": "Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a through 1.4.2.\n\n",
+  "details": "Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a through 1.4.2.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/unreviewed/2024/03/GHSA-r8h7-q43f-c88r/GHSA-r8h7-q43f-c88r.json b/advisories/unreviewed/2024/03/GHSA-r8h7-q43f-c88r/GHSA-r8h7-q43f-c88r.json
index 4497bb07c21..500463045c1 100644
--- a/advisories/unreviewed/2024/03/GHSA-r8h7-q43f-c88r/GHSA-r8h7-q43f-c88r.json
+++ b/advisories/unreviewed/2024/03/GHSA-r8h7-q43f-c88r/GHSA-r8h7-q43f-c88r.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-r8h7-q43f-c88r",
-  "modified": "2024-03-21T18:32:03Z",
+  "modified": "2025-02-14T18:30:48Z",
   "published": "2024-03-21T18:32:03Z",
   "aliases": [
     "CVE-2024-27963"
   ],
-  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crisp allows Stored XSS.This issue affects Crisp: from n/a through 0.44.\n\n",
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crisp allows Stored XSS.This issue affects Crisp: from n/a through 0.44.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/unreviewed/2024/03/GHSA-vcwv-jw38-8hqp/GHSA-vcwv-jw38-8hqp.json b/advisories/unreviewed/2024/03/GHSA-vcwv-jw38-8hqp/GHSA-vcwv-jw38-8hqp.json
index 12e6fc4a12f..51171d568db 100644
--- a/advisories/unreviewed/2024/03/GHSA-vcwv-jw38-8hqp/GHSA-vcwv-jw38-8hqp.json
+++ b/advisories/unreviewed/2024/03/GHSA-vcwv-jw38-8hqp/GHSA-vcwv-jw38-8hqp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vcwv-jw38-8hqp",
-  "modified": "2024-06-26T00:31:35Z",
+  "modified": "2025-02-14T18:30:45Z",
   "published": "2024-03-06T09:30:29Z",
   "aliases": [
     "CVE-2023-52606"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/lib: Validate size for vector operations\n\nSome of the fp/vmx code in sstep.c assume a certain maximum size for the\ninstructions being emulated. The size of those operations however is\ndetermined separately in analyse_instr().\n\nAdd a check to validate the assumption on the maximum size of the\noperations, so as to prevent any unintended kernel stack corruption.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -52,8 +57,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:11Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-whgx-jw4g-48ph/GHSA-whgx-jw4g-48ph.json b/advisories/unreviewed/2024/03/GHSA-whgx-jw4g-48ph/GHSA-whgx-jw4g-48ph.json
index 2d666a052d8..28c1b087226 100644
--- a/advisories/unreviewed/2024/03/GHSA-whgx-jw4g-48ph/GHSA-whgx-jw4g-48ph.json
+++ b/advisories/unreviewed/2024/03/GHSA-whgx-jw4g-48ph/GHSA-whgx-jw4g-48ph.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-whgx-jw4g-48ph",
-  "modified": "2024-03-11T18:31:09Z",
+  "modified": "2025-02-14T18:30:46Z",
   "published": "2024-03-11T18:31:09Z",
   "aliases": [
     "CVE-2023-52495"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: pmic_glink_altmode: fix port sanity check\n\nThe PMIC GLINK altmode driver currently supports at most two ports.\n\nFix the incomplete port sanity check on notifications to avoid\naccessing and corrupting memory beyond the port array if we ever get a\nnotification for an unsupported port.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-11T18:15:17Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-xfm9-cv4j-c74m/GHSA-xfm9-cv4j-c74m.json b/advisories/unreviewed/2024/03/GHSA-xfm9-cv4j-c74m/GHSA-xfm9-cv4j-c74m.json
index a8e75d5506a..0c040e04911 100644
--- a/advisories/unreviewed/2024/03/GHSA-xfm9-cv4j-c74m/GHSA-xfm9-cv4j-c74m.json
+++ b/advisories/unreviewed/2024/03/GHSA-xfm9-cv4j-c74m/GHSA-xfm9-cv4j-c74m.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xfm9-cv4j-c74m",
-  "modified": "2024-06-26T00:31:35Z",
+  "modified": "2025-02-14T18:30:46Z",
   "published": "2024-03-11T18:31:08Z",
   "aliases": [
     "CVE-2023-52489"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/sparsemem: fix race in accessing memory_section->usage\n\nThe below race is observed on a PFN which falls into the device memory\nregion with the system memory configuration where PFN's are such that\n[ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL].  Since normal zone start and end\npfn contains the device memory PFN's as well, the compaction triggered\nwill try on the device memory PFN's too though they end up in NOP(because\npfn_to_online_page() returns NULL for ZONE_DEVICE memory sections).  When\nfrom other core, the section mappings are being removed for the\nZONE_DEVICE region, that the PFN in question belongs to, on which\ncompaction is currently being operated is resulting into the kernel crash\nwith CONFIG_SPASEMEM_VMEMAP enabled.  The crash logs can be seen at [1].\n\ncompact_zone()\t\t\tmemunmap_pages\n-------------\t\t\t---------------\n__pageblock_pfn_to_page\n   ......\n (a)pfn_valid():\n     valid_section()//return true\n\t\t\t      (b)__remove_pages()->\n\t\t\t\t  sparse_remove_section()->\n\t\t\t\t    section_deactivate():\n\t\t\t\t    [Free the array ms->usage and set\n\t\t\t\t     ms->usage = NULL]\n     pfn_section_valid()\n     [Access ms->usage which\n     is NULL]\n\nNOTE: From the above it can be said that the race is reduced to between\nthe pfn_valid()/pfn_section_valid() and the section deactivate with\nSPASEMEM_VMEMAP enabled.\n\nThe commit b943f045a9af(\"mm/sparse: fix kernel crash with\npfn_section_valid check\") tried to address the same problem by clearing\nthe SECTION_HAS_MEM_MAP with the expectation of valid_section() returns\nfalse thus ms->usage is not accessed.\n\nFix this issue by the below steps:\n\na) Clear SECTION_HAS_MEM_MAP before freeing the ->usage.\n\nb) RCU protected read side critical section will either return NULL\n   when SECTION_HAS_MEM_MAP is cleared or can successfully access ->usage.\n\nc) Free the ->usage with kfree_rcu() and set ms->usage = NULL.  No\n   attempt will be made to access ->usage after this as the\n   SECTION_HAS_MEM_MAP is cleared thus valid_section() return false.\n\nThanks to David/Pavan for their inputs on this patch.\n\n[1] https://lore.kernel.org/linux-mm/994410bb-89aa-d987-1f50-f514903c55aa@quicinc.com/\n\nOn Snapdragon SoC, with the mentioned memory configuration of PFN's as\n[ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL], we are able to see bunch of\nissues daily while testing on a device farm.\n\nFor this particular issue below is the log.  Though the below log is\nnot directly pointing to the pfn_section_valid(){ ms->usage;}, when we\nloaded this dump on T32 lauterbach tool, it is pointing.\n\n[  540.578056] Unable to handle kernel NULL pointer dereference at\nvirtual address 0000000000000000\n[  540.578068] Mem abort info:\n[  540.578070]   ESR = 0x0000000096000005\n[  540.578073]   EC = 0x25: DABT (current EL), IL = 32 bits\n[  540.578077]   SET = 0, FnV = 0\n[  540.578080]   EA = 0, S1PTW = 0\n[  540.578082]   FSC = 0x05: level 1 translation fault\n[  540.578085] Data abort info:\n[  540.578086]   ISV = 0, ISS = 0x00000005\n[  540.578088]   CM = 0, WnR = 0\n[  540.579431] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBSBTYPE=--)\n[  540.579436] pc : __pageblock_pfn_to_page+0x6c/0x14c\n[  540.579454] lr : compact_zone+0x994/0x1058\n[  540.579460] sp : ffffffc03579b510\n[  540.579463] x29: ffffffc03579b510 x28: 0000000000235800 x27:000000000000000c\n[  540.579470] x26: 0000000000235c00 x25: 0000000000000068 x24:ffffffc03579b640\n[  540.579477] x23: 0000000000000001 x22: ffffffc03579b660 x21:0000000000000000\n[  540.579483] x20: 0000000000235bff x19: ffffffdebf7e3940 x18:ffffffdebf66d140\n[  540.579489] x17: 00000000739ba063 x16: 00000000739ba063 x15:00000000009f4bff\n[  540.579495] x14: 0000008000000000 x13: 0000000000000000 x12:0000000000000001\n[  540.579501] x11: 0000000000000000 x10: 0000000000000000 x9 :ffffff897d2cd440\n[  540.579507] x8 : 0000000000000000 x7 : 0000000000000000 x6 :ffffffc03579b5b4\n[  540.579512] x5 : 0000000000027f25 x4 : ffffffc03579b5b8 x3 :0000000000000\n---truncated---",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -44,8 +49,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-362"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-11T18:15:16Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-xv4r-44qp-78wm/GHSA-xv4r-44qp-78wm.json b/advisories/unreviewed/2024/03/GHSA-xv4r-44qp-78wm/GHSA-xv4r-44qp-78wm.json
index b002a753396..f0f0a9ea8fd 100644
--- a/advisories/unreviewed/2024/03/GHSA-xv4r-44qp-78wm/GHSA-xv4r-44qp-78wm.json
+++ b/advisories/unreviewed/2024/03/GHSA-xv4r-44qp-78wm/GHSA-xv4r-44qp-78wm.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xv4r-44qp-78wm",
-  "modified": "2024-04-29T09:31:52Z",
+  "modified": "2025-02-14T18:30:48Z",
   "published": "2024-03-21T18:32:03Z",
   "aliases": [
     "CVE-2024-27956"
   ],
-  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.\n\n",
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/unreviewed/2024/03/GHSA-xxg7-9g5c-hjq7/GHSA-xxg7-9g5c-hjq7.json b/advisories/unreviewed/2024/03/GHSA-xxg7-9g5c-hjq7/GHSA-xxg7-9g5c-hjq7.json
index b5ad02ca4e5..68ffd27ef08 100644
--- a/advisories/unreviewed/2024/03/GHSA-xxg7-9g5c-hjq7/GHSA-xxg7-9g5c-hjq7.json
+++ b/advisories/unreviewed/2024/03/GHSA-xxg7-9g5c-hjq7/GHSA-xxg7-9g5c-hjq7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xxg7-9g5c-hjq7",
-  "modified": "2024-03-07T21:30:21Z",
+  "modified": "2025-02-14T18:30:45Z",
   "published": "2024-03-07T21:30:21Z",
   "aliases": [
     "CVE-2024-2127"
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2025/02/GHSA-3cr7-mfmj-jrxj/GHSA-3cr7-mfmj-jrxj.json b/advisories/unreviewed/2025/02/GHSA-3cr7-mfmj-jrxj/GHSA-3cr7-mfmj-jrxj.json
index 4c5d57d2763..1d7ef619da4 100644
--- a/advisories/unreviewed/2025/02/GHSA-3cr7-mfmj-jrxj/GHSA-3cr7-mfmj-jrxj.json
+++ b/advisories/unreviewed/2025/02/GHSA-3cr7-mfmj-jrxj/GHSA-3cr7-mfmj-jrxj.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3cr7-mfmj-jrxj",
-  "modified": "2025-02-14T00:30:44Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-14T00:30:44Z",
   "aliases": [
     "CVE-2024-54951"
   ],
   "details": "Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the \"HOW YOU MET\" customization options to trigger the XSS.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T23:15:10Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-3pm4-j65g-c8hx/GHSA-3pm4-j65g-c8hx.json b/advisories/unreviewed/2025/02/GHSA-3pm4-j65g-c8hx/GHSA-3pm4-j65g-c8hx.json
index 078710f17cd..aed6ba0d7bd 100644
--- a/advisories/unreviewed/2025/02/GHSA-3pm4-j65g-c8hx/GHSA-3pm4-j65g-c8hx.json
+++ b/advisories/unreviewed/2025/02/GHSA-3pm4-j65g-c8hx/GHSA-3pm4-j65g-c8hx.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3pm4-j65g-c8hx",
-  "modified": "2025-02-14T06:30:36Z",
+  "modified": "2025-02-14T18:30:51Z",
   "published": "2025-02-14T06:30:36Z",
   "aliases": [
     "CVE-2024-7052"
   ],
   "details": "The Forminator Forms  WordPress plugin before 1.38.3 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-14T06:15:20Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-3wf7-83q3-948c/GHSA-3wf7-83q3-948c.json b/advisories/unreviewed/2025/02/GHSA-3wf7-83q3-948c/GHSA-3wf7-83q3-948c.json
index d50f5f4d828..954ec70a2cf 100644
--- a/advisories/unreviewed/2025/02/GHSA-3wf7-83q3-948c/GHSA-3wf7-83q3-948c.json
+++ b/advisories/unreviewed/2025/02/GHSA-3wf7-83q3-948c/GHSA-3wf7-83q3-948c.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3wf7-83q3-948c",
-  "modified": "2025-02-13T00:33:07Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-13T00:33:07Z",
   "aliases": [
     "CVE-2024-57601"
   ],
   "details": "Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T22:15:40Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-45qm-3p86-7499/GHSA-45qm-3p86-7499.json b/advisories/unreviewed/2025/02/GHSA-45qm-3p86-7499/GHSA-45qm-3p86-7499.json
new file mode 100644
index 00000000000..4572f54d1b3
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-45qm-3p86-7499/GHSA-45qm-3p86-7499.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-45qm-3p86-7499",
+  "modified": "2025-02-14T18:30:51Z",
+  "published": "2025-02-14T18:30:51Z",
+  "aliases": [
+    "CVE-2024-56973"
+  ],
+  "details": "Insecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2 allows a remote attacker to execute arbitrary code via the source and filename parameters to the ProcessUploadFromURL.jsp component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56973"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/VAMorales/1092a29ac7d0b4b80d5c853b9a22a65d"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T16:15:34Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-4994-gjh6-5rmr/GHSA-4994-gjh6-5rmr.json b/advisories/unreviewed/2025/02/GHSA-4994-gjh6-5rmr/GHSA-4994-gjh6-5rmr.json
new file mode 100644
index 00000000000..9119cc723de
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-4994-gjh6-5rmr/GHSA-4994-gjh6-5rmr.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4994-gjh6-5rmr",
+  "modified": "2025-02-14T18:30:52Z",
+  "published": "2025-02-14T18:30:52Z",
+  "aliases": [
+    "CVE-2025-25994"
+  ],
+  "details": "SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25994"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FeMiner/wms/issues/20"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-4gcq-fhhf-j285/GHSA-4gcq-fhhf-j285.json b/advisories/unreviewed/2025/02/GHSA-4gcq-fhhf-j285/GHSA-4gcq-fhhf-j285.json
new file mode 100644
index 00000000000..608264b108e
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-4gcq-fhhf-j285/GHSA-4gcq-fhhf-j285.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4gcq-fhhf-j285",
+  "modified": "2025-02-14T18:30:52Z",
+  "published": "2025-02-14T18:30:52Z",
+  "aliases": [
+    "CVE-2025-25992"
+  ],
+  "details": "SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquire_inout_item.php component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25992"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FeMiner/wms/issues/19"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-4xph-hcw4-77x7/GHSA-4xph-hcw4-77x7.json b/advisories/unreviewed/2025/02/GHSA-4xph-hcw4-77x7/GHSA-4xph-hcw4-77x7.json
new file mode 100644
index 00000000000..7ef38f93f5f
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-4xph-hcw4-77x7/GHSA-4xph-hcw4-77x7.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4xph-hcw4-77x7",
+  "modified": "2025-02-14T18:30:51Z",
+  "published": "2025-02-14T18:30:51Z",
+  "aliases": [
+    "CVE-2024-57778"
+  ],
+  "details": "An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57778"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/KUK3N4N/CVE-2024-57778"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T16:15:34Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-5j5f-9wh9-hfj9/GHSA-5j5f-9wh9-hfj9.json b/advisories/unreviewed/2025/02/GHSA-5j5f-9wh9-hfj9/GHSA-5j5f-9wh9-hfj9.json
index e9a71d0da3a..da8a1440f34 100644
--- a/advisories/unreviewed/2025/02/GHSA-5j5f-9wh9-hfj9/GHSA-5j5f-9wh9-hfj9.json
+++ b/advisories/unreviewed/2025/02/GHSA-5j5f-9wh9-hfj9/GHSA-5j5f-9wh9-hfj9.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5j5f-9wh9-hfj9",
-  "modified": "2025-02-12T15:31:59Z",
+  "modified": "2025-02-14T18:30:48Z",
   "published": "2025-02-12T15:31:59Z",
   "aliases": [
     "CVE-2024-57951"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nhrtimers: Handle CPU state correctly on hotplug\n\nConsider a scenario where a CPU transitions from CPUHP_ONLINE to halfway\nthrough a CPU hotunplug down to CPUHP_HRTIMERS_PREPARE, and then back to\nCPUHP_ONLINE:\n\nSince hrtimers_prepare_cpu() does not run, cpu_base.hres_active remains set\nto 1 throughout. However, during a CPU unplug operation, the tick and the\nclockevents are shut down at CPUHP_AP_TICK_DYING. On return to the online\nstate, for instance CFS incorrectly assumes that the hrtick is already\nactive, and the chance of the clockevent device to transition to oneshot\nmode is also lost forever for the CPU, unless it goes back to a lower state\nthan CPUHP_HRTIMERS_PREPARE once.\n\nThis round-trip reveals another issue; cpu_base.online is not set to 1\nafter the transition, which appears as a WARN_ON_ONCE in enqueue_hrtimer().\n\nAside of that, the bulk of the per CPU state is not reset either, which\nmeans there are dangling pointers in the worst case.\n\nAddress this by adding a corresponding startup() callback, which resets the\nstale per CPU state and sets the online flag.\n\n[ tglx: Make the new callback unconditionally available, remove the online\n  \tmodification in the prepare() callback and clear the remaining\n  \tstate in the starting callback instead of the prepare callback ]",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -44,8 +49,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T14:15:31Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-5p7x-h37p-q967/GHSA-5p7x-h37p-q967.json b/advisories/unreviewed/2025/02/GHSA-5p7x-h37p-q967/GHSA-5p7x-h37p-q967.json
index 801062c9fff..14010cfeb7b 100644
--- a/advisories/unreviewed/2025/02/GHSA-5p7x-h37p-q967/GHSA-5p7x-h37p-q967.json
+++ b/advisories/unreviewed/2025/02/GHSA-5p7x-h37p-q967/GHSA-5p7x-h37p-q967.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5p7x-h37p-q967",
-  "modified": "2025-02-14T00:30:44Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-14T00:30:44Z",
   "aliases": [
     "CVE-2023-34399"
   ],
   "details": "Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-190"
+    ],
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T22:15:10Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-64gc-vjfp-q9cj/GHSA-64gc-vjfp-q9cj.json b/advisories/unreviewed/2025/02/GHSA-64gc-vjfp-q9cj/GHSA-64gc-vjfp-q9cj.json
index 2ee2a25b65f..e8b8972504b 100644
--- a/advisories/unreviewed/2025/02/GHSA-64gc-vjfp-q9cj/GHSA-64gc-vjfp-q9cj.json
+++ b/advisories/unreviewed/2025/02/GHSA-64gc-vjfp-q9cj/GHSA-64gc-vjfp-q9cj.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-64gc-vjfp-q9cj",
-  "modified": "2025-02-13T00:33:07Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-13T00:33:07Z",
   "aliases": [
     "CVE-2024-46922"
   ],
   "details": "An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parser_bos in the Xclipse Driver.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T22:15:39Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-6q8c-8rxm-f6fh/GHSA-6q8c-8rxm-f6fh.json b/advisories/unreviewed/2025/02/GHSA-6q8c-8rxm-f6fh/GHSA-6q8c-8rxm-f6fh.json
index 0616773ad37..f48c0660a22 100644
--- a/advisories/unreviewed/2025/02/GHSA-6q8c-8rxm-f6fh/GHSA-6q8c-8rxm-f6fh.json
+++ b/advisories/unreviewed/2025/02/GHSA-6q8c-8rxm-f6fh/GHSA-6q8c-8rxm-f6fh.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6q8c-8rxm-f6fh",
-  "modified": "2025-02-12T15:31:59Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-12T15:31:59Z",
   "aliases": [
     "CVE-2025-21696"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: clear uffd-wp PTE/PMD state on mremap()\n\nWhen mremap()ing a memory region previously registered with userfaultfd as\nwrite-protected but without UFFD_FEATURE_EVENT_REMAP, an inconsistency in\nflag clearing leads to a mismatch between the vma flags (which have\nuffd-wp cleared) and the pte/pmd flags (which do not have uffd-wp\ncleared).  This mismatch causes a subsequent mprotect(PROT_WRITE) to\ntrigger a warning in page_table_check_pte_flags() due to setting the pte\nto writable while uffd-wp is still set.\n\nFix this by always explicitly clearing the uffd-wp pte/pmd flags on any\nsuch mremap() so that the values are consistent with the existing clearing\nof VM_UFFD_WP.  Be careful to clear the logical flag regardless of its\nphysical form; a PTE bit, a swap PTE bit, or a PTE marker.  Cover PTE,\nhuge PMD and hugetlb paths.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -25,7 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T14:15:32Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-73qc-g3pc-j338/GHSA-73qc-g3pc-j338.json b/advisories/unreviewed/2025/02/GHSA-73qc-g3pc-j338/GHSA-73qc-g3pc-j338.json
index d25fcc156b5..9fd5b7e94af 100644
--- a/advisories/unreviewed/2025/02/GHSA-73qc-g3pc-j338/GHSA-73qc-g3pc-j338.json
+++ b/advisories/unreviewed/2025/02/GHSA-73qc-g3pc-j338/GHSA-73qc-g3pc-j338.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-73qc-g3pc-j338",
-  "modified": "2025-02-13T00:33:07Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-13T00:33:07Z",
   "aliases": [
     "CVE-2024-46923"
   ],
   "details": "An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_ib_fill in the Xclipse Driver.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T22:15:39Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-749g-9h7c-6xjr/GHSA-749g-9h7c-6xjr.json b/advisories/unreviewed/2025/02/GHSA-749g-9h7c-6xjr/GHSA-749g-9h7c-6xjr.json
index 0dcec90e5bb..e7172064410 100644
--- a/advisories/unreviewed/2025/02/GHSA-749g-9h7c-6xjr/GHSA-749g-9h7c-6xjr.json
+++ b/advisories/unreviewed/2025/02/GHSA-749g-9h7c-6xjr/GHSA-749g-9h7c-6xjr.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-749g-9h7c-6xjr",
-  "modified": "2025-02-13T18:32:35Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-13T18:32:35Z",
   "aliases": [
     "CVE-2025-25898"
   ],
   "details": "A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T16:16:49Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-74p9-4v44-wwx5/GHSA-74p9-4v44-wwx5.json b/advisories/unreviewed/2025/02/GHSA-74p9-4v44-wwx5/GHSA-74p9-4v44-wwx5.json
new file mode 100644
index 00000000000..e01d305ecc6
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-74p9-4v44-wwx5/GHSA-74p9-4v44-wwx5.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-74p9-4v44-wwx5",
+  "modified": "2025-02-14T18:30:51Z",
+  "published": "2025-02-14T18:30:51Z",
+  "aliases": [
+    "CVE-2024-3220"
+  ],
+  "details": "There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type.\n\nThis defect is caused by the default locations of Linux and macOS platforms (such as “/etc/mime.types”) also being used on Windows, where they are user-writable locations (“C:\\etc\\mime.types”).\n\nTo work-around this issue a user can call mimetypes.init() with an empty list (“[]”) on Windows platforms to avoid using the default list of known file locations.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3220"
+    },
+    {
+      "type": "WEB",
+      "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/CDXW34ND2LSAOYAR5N6UNONP4ZBX4D6R"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-426"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-7fx8-mhcf-6p64/GHSA-7fx8-mhcf-6p64.json b/advisories/unreviewed/2025/02/GHSA-7fx8-mhcf-6p64/GHSA-7fx8-mhcf-6p64.json
new file mode 100644
index 00000000000..e0aa50d868f
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-7fx8-mhcf-6p64/GHSA-7fx8-mhcf-6p64.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7fx8-mhcf-6p64",
+  "modified": "2025-02-14T18:30:52Z",
+  "published": "2025-02-14T18:30:52Z",
+  "aliases": [
+    "CVE-2025-25988"
+  ],
+  "details": "Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25988"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/havok89/Hoosk/issues/67"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-8752-93pq-4773/GHSA-8752-93pq-4773.json b/advisories/unreviewed/2025/02/GHSA-8752-93pq-4773/GHSA-8752-93pq-4773.json
new file mode 100644
index 00000000000..0ace58b112c
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-8752-93pq-4773/GHSA-8752-93pq-4773.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8752-93pq-4773",
+  "modified": "2025-02-14T18:30:51Z",
+  "published": "2025-02-14T18:30:51Z",
+  "aliases": [
+    "CVE-2024-56463"
+  ],
+  "details": "IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56463"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7183251"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:16Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-8mjp-767h-9569/GHSA-8mjp-767h-9569.json b/advisories/unreviewed/2025/02/GHSA-8mjp-767h-9569/GHSA-8mjp-767h-9569.json
index 259b9b68efc..558e3450218 100644
--- a/advisories/unreviewed/2025/02/GHSA-8mjp-767h-9569/GHSA-8mjp-767h-9569.json
+++ b/advisories/unreviewed/2025/02/GHSA-8mjp-767h-9569/GHSA-8mjp-767h-9569.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8mjp-767h-9569",
-  "modified": "2025-02-12T15:31:59Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-12T15:31:59Z",
   "aliases": [
     "CVE-2025-21694"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/proc: fix softlockup in __read_vmcore (part 2)\n\nSince commit 5cbcb62dddf5 (\"fs/proc: fix softlockup in __read_vmcore\") the\nnumber of softlockups in __read_vmcore at kdump time have gone down, but\nthey still happen sometimes.\n\nIn a memory constrained environment like the kdump image, a softlockup is\nnot just a harmless message, but it can interfere with things like RCU\nfreeing memory, causing the crashdump to get stuck.\n\nThe second loop in __read_vmcore has a lot more opportunities for natural\nsleep points, like scheduling out while waiting for a data write to\nhappen, but apparently that is not always enough.\n\nAdd a cond_resched() to the second loop in __read_vmcore to (hopefully)\nget rid of the softlockups.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -45,7 +50,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T14:15:32Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-8qxw-vh64-m92m/GHSA-8qxw-vh64-m92m.json b/advisories/unreviewed/2025/02/GHSA-8qxw-vh64-m92m/GHSA-8qxw-vh64-m92m.json
new file mode 100644
index 00000000000..c3ea1c6ea2c
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-8qxw-vh64-m92m/GHSA-8qxw-vh64-m92m.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8qxw-vh64-m92m",
+  "modified": "2025-02-14T18:30:51Z",
+  "published": "2025-02-14T18:30:51Z",
+  "aliases": [
+    "CVE-2024-57725"
+  ],
+  "details": "An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57725"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pointedsec/CVE-2024-57725"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T16:15:34Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-8r7c-379q-fg6q/GHSA-8r7c-379q-fg6q.json b/advisories/unreviewed/2025/02/GHSA-8r7c-379q-fg6q/GHSA-8r7c-379q-fg6q.json
new file mode 100644
index 00000000000..55aef62986a
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-8r7c-379q-fg6q/GHSA-8r7c-379q-fg6q.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8r7c-379q-fg6q",
+  "modified": "2025-02-14T18:30:52Z",
+  "published": "2025-02-14T18:30:52Z",
+  "aliases": [
+    "CVE-2025-25993"
+  ],
+  "details": "SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter \"itemid.\"",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25993"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FeMiner/wms/issues/21"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-c3mp-82ww-6hm4/GHSA-c3mp-82ww-6hm4.json b/advisories/unreviewed/2025/02/GHSA-c3mp-82ww-6hm4/GHSA-c3mp-82ww-6hm4.json
index e04de6e0d90..77a4f5b1268 100644
--- a/advisories/unreviewed/2025/02/GHSA-c3mp-82ww-6hm4/GHSA-c3mp-82ww-6hm4.json
+++ b/advisories/unreviewed/2025/02/GHSA-c3mp-82ww-6hm4/GHSA-c3mp-82ww-6hm4.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c3mp-82ww-6hm4",
-  "modified": "2025-02-13T18:32:37Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-13T18:32:37Z",
   "aliases": [
     "CVE-2025-25387"
   ],
   "details": "A SQL Injection vulnerability was found in /admin/manage-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the propertytype POST request parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T17:17:20Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-cc72-wc5x-7wmj/GHSA-cc72-wc5x-7wmj.json b/advisories/unreviewed/2025/02/GHSA-cc72-wc5x-7wmj/GHSA-cc72-wc5x-7wmj.json
new file mode 100644
index 00000000000..88723c03fda
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-cc72-wc5x-7wmj/GHSA-cc72-wc5x-7wmj.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cc72-wc5x-7wmj",
+  "modified": "2025-02-14T18:30:53Z",
+  "published": "2025-02-14T18:30:53Z",
+  "aliases": [
+    "CVE-2025-0503"
+  ],
+  "details": "Mattermost versions 9.11.x <= 9.11.6 fail to filter out DMs from the deleted channels endpoint which allows an attacker to infer user IDs and other metadata from deleted DMs if someone had manually marked DMs as deleted in the database.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0503"
+    },
+    {
+      "type": "WEB",
+      "url": "https://mattermost.com/security-updates"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-754"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T18:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-cgcr-998g-rrqq/GHSA-cgcr-998g-rrqq.json b/advisories/unreviewed/2025/02/GHSA-cgcr-998g-rrqq/GHSA-cgcr-998g-rrqq.json
new file mode 100644
index 00000000000..3798b35f180
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-cgcr-998g-rrqq/GHSA-cgcr-998g-rrqq.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cgcr-998g-rrqq",
+  "modified": "2025-02-14T18:30:53Z",
+  "published": "2025-02-14T18:30:53Z",
+  "aliases": [
+    "CVE-2025-26508"
+  ],
+  "details": "Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26508"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-cpgh-hqjm-xwf7/GHSA-cpgh-hqjm-xwf7.json b/advisories/unreviewed/2025/02/GHSA-cpgh-hqjm-xwf7/GHSA-cpgh-hqjm-xwf7.json
index 5374544afc0..0fe23dc0155 100644
--- a/advisories/unreviewed/2025/02/GHSA-cpgh-hqjm-xwf7/GHSA-cpgh-hqjm-xwf7.json
+++ b/advisories/unreviewed/2025/02/GHSA-cpgh-hqjm-xwf7/GHSA-cpgh-hqjm-xwf7.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cpgh-hqjm-xwf7",
-  "modified": "2025-02-13T18:32:36Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-13T18:32:36Z",
   "aliases": [
     "CVE-2025-25389"
   ],
   "details": "A SQL Injection vulnerability was found in /admin/forgot-password.php in Phpgurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T17:17:20Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-f4jq-8gqc-63v2/GHSA-f4jq-8gqc-63v2.json b/advisories/unreviewed/2025/02/GHSA-f4jq-8gqc-63v2/GHSA-f4jq-8gqc-63v2.json
index e35d5932c30..33b12283f18 100644
--- a/advisories/unreviewed/2025/02/GHSA-f4jq-8gqc-63v2/GHSA-f4jq-8gqc-63v2.json
+++ b/advisories/unreviewed/2025/02/GHSA-f4jq-8gqc-63v2/GHSA-f4jq-8gqc-63v2.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f4jq-8gqc-63v2",
-  "modified": "2025-02-13T00:33:07Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-13T00:33:07Z",
   "aliases": [
     "CVE-2024-56940"
   ],
   "details": "An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file uploads.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T22:15:40Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-f5x3-46hh-69h6/GHSA-f5x3-46hh-69h6.json b/advisories/unreviewed/2025/02/GHSA-f5x3-46hh-69h6/GHSA-f5x3-46hh-69h6.json
index d70ac740d21..d4609665113 100644
--- a/advisories/unreviewed/2025/02/GHSA-f5x3-46hh-69h6/GHSA-f5x3-46hh-69h6.json
+++ b/advisories/unreviewed/2025/02/GHSA-f5x3-46hh-69h6/GHSA-f5x3-46hh-69h6.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f5x3-46hh-69h6",
-  "modified": "2025-02-14T00:30:44Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-14T00:30:44Z",
   "aliases": [
     "CVE-2023-34400"
   ],
   "details": "Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T22:15:10Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-f8cc-p399-4cfh/GHSA-f8cc-p399-4cfh.json b/advisories/unreviewed/2025/02/GHSA-f8cc-p399-4cfh/GHSA-f8cc-p399-4cfh.json
index 5065c6e5d14..b6d3a58430e 100644
--- a/advisories/unreviewed/2025/02/GHSA-f8cc-p399-4cfh/GHSA-f8cc-p399-4cfh.json
+++ b/advisories/unreviewed/2025/02/GHSA-f8cc-p399-4cfh/GHSA-f8cc-p399-4cfh.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f8cc-p399-4cfh",
-  "modified": "2025-02-14T06:30:36Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-14T06:30:36Z",
   "aliases": [
     "CVE-2024-13493"
   ],
   "details": "The Sensly Online Presence WordPress plugin through 0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-14T06:15:19Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-ffvr-gmp3-xx43/GHSA-ffvr-gmp3-xx43.json b/advisories/unreviewed/2025/02/GHSA-ffvr-gmp3-xx43/GHSA-ffvr-gmp3-xx43.json
index 70c98440b36..5f5f2d8f446 100644
--- a/advisories/unreviewed/2025/02/GHSA-ffvr-gmp3-xx43/GHSA-ffvr-gmp3-xx43.json
+++ b/advisories/unreviewed/2025/02/GHSA-ffvr-gmp3-xx43/GHSA-ffvr-gmp3-xx43.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ffvr-gmp3-xx43",
-  "modified": "2025-02-14T15:31:05Z",
+  "modified": "2025-02-14T18:30:51Z",
   "published": "2025-02-14T15:31:05Z",
   "aliases": [
     "CVE-2024-56180"
@@ -17,6 +17,10 @@
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread/k9fw0t5r7t1vbx53gs8d1r8c54rhx0wd"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/02/14/7"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/02/GHSA-fpr6-384r-x95m/GHSA-fpr6-384r-x95m.json b/advisories/unreviewed/2025/02/GHSA-fpr6-384r-x95m/GHSA-fpr6-384r-x95m.json
new file mode 100644
index 00000000000..99eccf68f11
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-fpr6-384r-x95m/GHSA-fpr6-384r-x95m.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fpr6-384r-x95m",
+  "modified": "2025-02-14T18:30:52Z",
+  "published": "2025-02-14T18:30:52Z",
+  "aliases": [
+    "CVE-2025-25997"
+  ],
+  "details": "Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25997"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FeMiner/wms/issues/22"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-g674-vjfp-rx8j/GHSA-g674-vjfp-rx8j.json b/advisories/unreviewed/2025/02/GHSA-g674-vjfp-rx8j/GHSA-g674-vjfp-rx8j.json
new file mode 100644
index 00000000000..3e096ea224c
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-g674-vjfp-rx8j/GHSA-g674-vjfp-rx8j.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g674-vjfp-rx8j",
+  "modified": "2025-02-14T18:30:51Z",
+  "published": "2025-02-14T18:30:51Z",
+  "aliases": [
+    "CVE-2024-57790"
+  ],
+  "details": "IXON B.V. IXrouter IX2400 (Industrial Edge Gateway) v3.0 was discovered to contain hardcoded root credentials stored in the non-volatile flash memory. This vulnerability allows physically proximate attackers to gain root access via UART or SSH.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57790"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rick-cen/vulnerability-research/tree/main/CVE-2024-57790"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-h7cr-rpch-75hm/GHSA-h7cr-rpch-75hm.json b/advisories/unreviewed/2025/02/GHSA-h7cr-rpch-75hm/GHSA-h7cr-rpch-75hm.json
index a488de11a10..e0f31b5660a 100644
--- a/advisories/unreviewed/2025/02/GHSA-h7cr-rpch-75hm/GHSA-h7cr-rpch-75hm.json
+++ b/advisories/unreviewed/2025/02/GHSA-h7cr-rpch-75hm/GHSA-h7cr-rpch-75hm.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h7cr-rpch-75hm",
-  "modified": "2025-02-13T00:33:07Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-13T00:33:07Z",
   "aliases": [
     "CVE-2024-51123"
   ],
   "details": "An issue in Zertificon Z1 SecureMail Z1 SecureMail Gateway 4.44.2-7240-debian12 allows a remote attacker to obtain sensitive information via the /compose-pdf.xhtml?convid=[id] component.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T22:15:39Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-hgfh-7qxq-x5c9/GHSA-hgfh-7qxq-x5c9.json b/advisories/unreviewed/2025/02/GHSA-hgfh-7qxq-x5c9/GHSA-hgfh-7qxq-x5c9.json
new file mode 100644
index 00000000000..892357800bd
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-hgfh-7qxq-x5c9/GHSA-hgfh-7qxq-x5c9.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hgfh-7qxq-x5c9",
+  "modified": "2025-02-14T18:30:52Z",
+  "published": "2025-02-14T18:30:52Z",
+  "aliases": [
+    "CVE-2024-8893"
+  ],
+  "details": "Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8893"
+    },
+    {
+      "type": "WEB",
+      "url": "https://os-s.net/publications/advisories/CVE-2024-8893.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-798"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-j98w-mw3j-r2fc/GHSA-j98w-mw3j-r2fc.json b/advisories/unreviewed/2025/02/GHSA-j98w-mw3j-r2fc/GHSA-j98w-mw3j-r2fc.json
index abfd433c70a..da4ea37aabf 100644
--- a/advisories/unreviewed/2025/02/GHSA-j98w-mw3j-r2fc/GHSA-j98w-mw3j-r2fc.json
+++ b/advisories/unreviewed/2025/02/GHSA-j98w-mw3j-r2fc/GHSA-j98w-mw3j-r2fc.json
@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-476"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2025/02/GHSA-jggw-p92x-6h2m/GHSA-jggw-p92x-6h2m.json b/advisories/unreviewed/2025/02/GHSA-jggw-p92x-6h2m/GHSA-jggw-p92x-6h2m.json
index 05997ab1208..c6a188817c2 100644
--- a/advisories/unreviewed/2025/02/GHSA-jggw-p92x-6h2m/GHSA-jggw-p92x-6h2m.json
+++ b/advisories/unreviewed/2025/02/GHSA-jggw-p92x-6h2m/GHSA-jggw-p92x-6h2m.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jggw-p92x-6h2m",
-  "modified": "2025-02-14T00:30:44Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-14T00:30:44Z",
   "aliases": [
     "CVE-2023-34397"
   ],
   "details": "Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T22:15:10Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-m26p-8j2h-c3gc/GHSA-m26p-8j2h-c3gc.json b/advisories/unreviewed/2025/02/GHSA-m26p-8j2h-c3gc/GHSA-m26p-8j2h-c3gc.json
new file mode 100644
index 00000000000..1625584da8f
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-m26p-8j2h-c3gc/GHSA-m26p-8j2h-c3gc.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m26p-8j2h-c3gc",
+  "modified": "2025-02-14T18:30:53Z",
+  "published": "2025-02-14T18:30:53Z",
+  "aliases": [
+    "CVE-2025-26156"
+  ],
+  "details": "A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26156"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-m44q-qr9w-w24c/GHSA-m44q-qr9w-w24c.json b/advisories/unreviewed/2025/02/GHSA-m44q-qr9w-w24c/GHSA-m44q-qr9w-w24c.json
new file mode 100644
index 00000000000..2b84af41af5
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-m44q-qr9w-w24c/GHSA-m44q-qr9w-w24c.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m44q-qr9w-w24c",
+  "modified": "2025-02-14T18:30:53Z",
+  "published": "2025-02-14T18:30:53Z",
+  "aliases": [
+    "CVE-2025-26157"
+  ],
+  "details": "A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System V1.1, which allows remote attackers to execute arbitrary code via the name POST request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26157"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rtnthakur/CVE/blob/main/others/README.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-m4vq-534q-jr6q/GHSA-m4vq-534q-jr6q.json b/advisories/unreviewed/2025/02/GHSA-m4vq-534q-jr6q/GHSA-m4vq-534q-jr6q.json
index 7148dd597fe..99e32305679 100644
--- a/advisories/unreviewed/2025/02/GHSA-m4vq-534q-jr6q/GHSA-m4vq-534q-jr6q.json
+++ b/advisories/unreviewed/2025/02/GHSA-m4vq-534q-jr6q/GHSA-m4vq-534q-jr6q.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m4vq-534q-jr6q",
-  "modified": "2025-02-13T18:32:34Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-13T18:32:34Z",
   "aliases": [
     "CVE-2025-25357"
   ],
   "details": "A SQL Injection vulnerability was found in /admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the email POST request parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T16:16:49Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-mpg8-8x9c-p9gv/GHSA-mpg8-8x9c-p9gv.json b/advisories/unreviewed/2025/02/GHSA-mpg8-8x9c-p9gv/GHSA-mpg8-8x9c-p9gv.json
index 52a315b2014..9f872af357c 100644
--- a/advisories/unreviewed/2025/02/GHSA-mpg8-8x9c-p9gv/GHSA-mpg8-8x9c-p9gv.json
+++ b/advisories/unreviewed/2025/02/GHSA-mpg8-8x9c-p9gv/GHSA-mpg8-8x9c-p9gv.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mpg8-8x9c-p9gv",
-  "modified": "2025-02-13T00:33:07Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-13T00:33:07Z",
   "aliases": [
     "CVE-2024-57604"
   ],
   "details": "An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-269"
+    ],
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T22:15:41Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-pc6x-4v99-366p/GHSA-pc6x-4v99-366p.json b/advisories/unreviewed/2025/02/GHSA-pc6x-4v99-366p/GHSA-pc6x-4v99-366p.json
index 081cf72abdd..0e1c64ea4e8 100644
--- a/advisories/unreviewed/2025/02/GHSA-pc6x-4v99-366p/GHSA-pc6x-4v99-366p.json
+++ b/advisories/unreviewed/2025/02/GHSA-pc6x-4v99-366p/GHSA-pc6x-4v99-366p.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pc6x-4v99-366p",
-  "modified": "2025-02-13T00:33:07Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-13T00:33:07Z",
   "aliases": [
     "CVE-2024-51440"
   ],
   "details": "An issue in Nothing Tech Nothing OS v.2.6 allows a local attacker to escalate privileges via the NtBpfService component.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-269"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T22:15:39Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-phh8-qcpx-2xhf/GHSA-phh8-qcpx-2xhf.json b/advisories/unreviewed/2025/02/GHSA-phh8-qcpx-2xhf/GHSA-phh8-qcpx-2xhf.json
index e09cc1bfd5d..4a461c3ec58 100644
--- a/advisories/unreviewed/2025/02/GHSA-phh8-qcpx-2xhf/GHSA-phh8-qcpx-2xhf.json
+++ b/advisories/unreviewed/2025/02/GHSA-phh8-qcpx-2xhf/GHSA-phh8-qcpx-2xhf.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-phh8-qcpx-2xhf",
-  "modified": "2025-02-14T00:30:44Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-14T00:30:44Z",
   "aliases": [
     "CVE-2023-34398"
   ],
   "details": "Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T22:15:10Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-qv5v-g96w-753m/GHSA-qv5v-g96w-753m.json b/advisories/unreviewed/2025/02/GHSA-qv5v-g96w-753m/GHSA-qv5v-g96w-753m.json
new file mode 100644
index 00000000000..bb68fa9b700
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-qv5v-g96w-753m/GHSA-qv5v-g96w-753m.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qv5v-g96w-753m",
+  "modified": "2025-02-14T18:30:53Z",
+  "published": "2025-02-14T18:30:53Z",
+  "aliases": [
+    "CVE-2025-26506"
+  ],
+  "details": "Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26506"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-qxjr-36pm-q2q2/GHSA-qxjr-36pm-q2q2.json b/advisories/unreviewed/2025/02/GHSA-qxjr-36pm-q2q2/GHSA-qxjr-36pm-q2q2.json
index aa44c2c0f64..16db59b180a 100644
--- a/advisories/unreviewed/2025/02/GHSA-qxjr-36pm-q2q2/GHSA-qxjr-36pm-q2q2.json
+++ b/advisories/unreviewed/2025/02/GHSA-qxjr-36pm-q2q2/GHSA-qxjr-36pm-q2q2.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qxjr-36pm-q2q2",
-  "modified": "2025-02-12T15:31:59Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-12T15:31:59Z",
   "aliases": [
     "CVE-2024-57952"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"libfs: fix infinite directory reads for offset dir\"\n\nThe current directory offset allocator (based on mtree_alloc_cyclic)\nstores the next offset value to return in octx->next_offset. This\nmechanism typically returns values that increase monotonically over\ntime. Eventually, though, the newly allocated offset value wraps\nback to a low number (say, 2) which is smaller than other already-\nallocated offset values.\n\nYu Kuai <yukuai3@huawei.com> reports that, after commit 64a7ce76fb90\n(\"libfs: fix infinite directory reads for offset dir\"), if a\ndirectory's offset allocator wraps, existing entries are no longer\nvisible via readdir/getdents because offset_readdir() stops listing\nentries once an entry's offset is larger than octx->next_offset.\nThese entries vanish persistently -- they can be looked up, but will\nnever again appear in readdir(3) output.\n\nThe reason for this is that the commit treats directory offsets as\nmonotonically increasing integer values rather than opaque cookies,\nand introduces this comparison:\n\n\tif (dentry2offset(dentry) >= last_index) {\n\nOn 64-bit platforms, the directory offset value upper bound is\n2^63 - 1. Directory offsets will monotonically increase for millions\nof years without wrapping.\n\nOn 32-bit platforms, however, LONG_MAX is 2^31 - 1. The allocator\ncan wrap after only a few weeks (at worst).\n\nRevert commit 64a7ce76fb90 (\"libfs: fix infinite directory reads for\noffset dir\") to prepare for a fix that can work properly on 32-bit\nsystems and might apply to recent LTS kernels where shmem employs\nthe simple_offset mechanism.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -29,7 +34,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T14:15:31Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-r6q8-2gx7-h3pq/GHSA-r6q8-2gx7-h3pq.json b/advisories/unreviewed/2025/02/GHSA-r6q8-2gx7-h3pq/GHSA-r6q8-2gx7-h3pq.json
new file mode 100644
index 00000000000..d6401537d53
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-r6q8-2gx7-h3pq/GHSA-r6q8-2gx7-h3pq.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r6q8-2gx7-h3pq",
+  "modified": "2025-02-14T18:30:52Z",
+  "published": "2025-02-14T18:30:52Z",
+  "aliases": [
+    "CVE-2025-25991"
+  ],
+  "details": "SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25991"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/havok89/Hoosk/issues/68"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-rcq4-h567-5923/GHSA-rcq4-h567-5923.json b/advisories/unreviewed/2025/02/GHSA-rcq4-h567-5923/GHSA-rcq4-h567-5923.json
index 7e572e5cdd4..152fc8d9c95 100644
--- a/advisories/unreviewed/2025/02/GHSA-rcq4-h567-5923/GHSA-rcq4-h567-5923.json
+++ b/advisories/unreviewed/2025/02/GHSA-rcq4-h567-5923/GHSA-rcq4-h567-5923.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rcq4-h567-5923",
-  "modified": "2025-02-14T00:30:44Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-14T00:30:44Z",
   "aliases": [
     "CVE-2023-34402"
   ],
   "details": "Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T23:15:09Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-rfxv-rpwj-gvc7/GHSA-rfxv-rpwj-gvc7.json b/advisories/unreviewed/2025/02/GHSA-rfxv-rpwj-gvc7/GHSA-rfxv-rpwj-gvc7.json
index 20b74375b2b..ce927b32f48 100644
--- a/advisories/unreviewed/2025/02/GHSA-rfxv-rpwj-gvc7/GHSA-rfxv-rpwj-gvc7.json
+++ b/advisories/unreviewed/2025/02/GHSA-rfxv-rpwj-gvc7/GHSA-rfxv-rpwj-gvc7.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rfxv-rpwj-gvc7",
-  "modified": "2025-02-13T00:33:07Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-13T00:33:07Z",
   "aliases": [
     "CVE-2024-51122"
   ],
   "details": "Cross Site Scripting vulnerability in Zertificon Z1 SecureMail Z1 CertServer v.3.16.4-2516-debian12 alllows a remote attacker to execute arbitrary code via the ST, L, O, OU, CN parameters.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T22:15:39Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-v57x-72p2-qvw8/GHSA-v57x-72p2-qvw8.json b/advisories/unreviewed/2025/02/GHSA-v57x-72p2-qvw8/GHSA-v57x-72p2-qvw8.json
new file mode 100644
index 00000000000..9cd23ec62e7
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-v57x-72p2-qvw8/GHSA-v57x-72p2-qvw8.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v57x-72p2-qvw8",
+  "modified": "2025-02-14T18:30:51Z",
+  "published": "2025-02-14T18:30:51Z",
+  "aliases": [
+    "CVE-2025-25745"
+  ],
+  "details": "D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25745"
+    },
+    {
+      "type": "WEB",
+      "url": "https://dear-sunshine-ba5.notion.site/D-Link-DIR-853-2-1812386a664480ea82a7f8321d967187"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T16:15:37Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-vmvf-f857-43v5/GHSA-vmvf-f857-43v5.json b/advisories/unreviewed/2025/02/GHSA-vmvf-f857-43v5/GHSA-vmvf-f857-43v5.json
index 30a8a38f37f..78a410c0585 100644
--- a/advisories/unreviewed/2025/02/GHSA-vmvf-f857-43v5/GHSA-vmvf-f857-43v5.json
+++ b/advisories/unreviewed/2025/02/GHSA-vmvf-f857-43v5/GHSA-vmvf-f857-43v5.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vmvf-f857-43v5",
-  "modified": "2025-02-12T15:31:59Z",
+  "modified": "2025-02-14T18:30:49Z",
   "published": "2025-02-12T15:31:59Z",
   "aliases": [
     "CVE-2025-21695"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: dell-uart-backlight: fix serdev race\n\nThe dell_uart_bl_serdev_probe() function calls devm_serdev_device_open()\nbefore setting the client ops via serdev_device_set_client_ops(). This\nordering can trigger a NULL pointer dereference in the serdev controller's\nreceive_buf handler, as it assumes serdev->ops is valid when\nSERPORT_ACTIVE is set.\n\nThis is similar to the issue fixed in commit 5e700b384ec1\n(\"platform/chrome: cros_ec_uart: properly fix race condition\") where\ndevm_serdev_device_open() was called before fully initializing the\ndevice.\n\nFix the race by ensuring client ops are set before enabling the port via\ndevm_serdev_device_open().\n\nNote, serdev_device_set_baudrate() and serdev_device_set_flow_control()\ncalls should be after the devm_serdev_device_open() call.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T14:15:32Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-wr4g-hvjj-f7fp/GHSA-wr4g-hvjj-f7fp.json b/advisories/unreviewed/2025/02/GHSA-wr4g-hvjj-f7fp/GHSA-wr4g-hvjj-f7fp.json
index 42091ddebaa..bff50d3d628 100644
--- a/advisories/unreviewed/2025/02/GHSA-wr4g-hvjj-f7fp/GHSA-wr4g-hvjj-f7fp.json
+++ b/advisories/unreviewed/2025/02/GHSA-wr4g-hvjj-f7fp/GHSA-wr4g-hvjj-f7fp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-wr4g-hvjj-f7fp",
-  "modified": "2025-02-13T00:33:07Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-13T00:33:07Z",
   "aliases": [
     "CVE-2024-57605"
   ],
   "details": "Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-12T22:15:41Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-x37v-6gqg-j8gj/GHSA-x37v-6gqg-j8gj.json b/advisories/unreviewed/2025/02/GHSA-x37v-6gqg-j8gj/GHSA-x37v-6gqg-j8gj.json
new file mode 100644
index 00000000000..3f6620b50bb
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-x37v-6gqg-j8gj/GHSA-x37v-6gqg-j8gj.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x37v-6gqg-j8gj",
+  "modified": "2025-02-14T18:30:52Z",
+  "published": "2025-02-14T18:30:52Z",
+  "aliases": [
+    "CVE-2025-25990"
+  ],
+  "details": "Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25990"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/havok89/Hoosk/issues/69"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-x855-4m6r-jwmr/GHSA-x855-4m6r-jwmr.json b/advisories/unreviewed/2025/02/GHSA-x855-4m6r-jwmr/GHSA-x855-4m6r-jwmr.json
index 01347b47125..9e3e1b087d5 100644
--- a/advisories/unreviewed/2025/02/GHSA-x855-4m6r-jwmr/GHSA-x855-4m6r-jwmr.json
+++ b/advisories/unreviewed/2025/02/GHSA-x855-4m6r-jwmr/GHSA-x855-4m6r-jwmr.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x855-4m6r-jwmr",
-  "modified": "2025-02-14T00:30:45Z",
+  "modified": "2025-02-14T18:30:50Z",
   "published": "2025-02-14T00:30:45Z",
   "aliases": [
     "CVE-2025-22962"
   ],
   "details": "A critical remote code execution (RCE) vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID (sess_id) can send specially crafted POST requests to the /json endpoint, enabling arbitrary command execution on the underlying system. This vulnerability can lead to full system compromise, including unauthorized access, privilege escalation, and potentially full device takeover.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-77"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-13T23:15:11Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-xf9v-776m-hm72/GHSA-xf9v-776m-hm72.json b/advisories/unreviewed/2025/02/GHSA-xf9v-776m-hm72/GHSA-xf9v-776m-hm72.json
new file mode 100644
index 00000000000..a548a26318e
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-xf9v-776m-hm72/GHSA-xf9v-776m-hm72.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xf9v-776m-hm72",
+  "modified": "2025-02-14T18:30:53Z",
+  "published": "2025-02-14T18:30:53Z",
+  "aliases": [
+    "CVE-2025-26507"
+  ],
+  "details": "Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26507"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-xgr2-6f6r-9xqp/GHSA-xgr2-6f6r-9xqp.json b/advisories/unreviewed/2025/02/GHSA-xgr2-6f6r-9xqp/GHSA-xgr2-6f6r-9xqp.json
new file mode 100644
index 00000000000..5b65b91cbcf
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-xgr2-6f6r-9xqp/GHSA-xgr2-6f6r-9xqp.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xgr2-6f6r-9xqp",
+  "modified": "2025-02-14T18:30:53Z",
+  "published": "2025-02-14T18:30:53Z",
+  "aliases": [
+    "CVE-2025-26158"
+  ],
+  "details": "A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page of Kashipara Online Attendance Management System V1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the department parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26158"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rtnthakur/CVE/blob/main/Kashipara/README.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-14T17:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-xpv5-92cc-8f65/GHSA-xpv5-92cc-8f65.json b/advisories/unreviewed/2025/02/GHSA-xpv5-92cc-8f65/GHSA-xpv5-92cc-8f65.json
index f8bda42eab8..ae6c236ec7e 100644
--- a/advisories/unreviewed/2025/02/GHSA-xpv5-92cc-8f65/GHSA-xpv5-92cc-8f65.json
+++ b/advisories/unreviewed/2025/02/GHSA-xpv5-92cc-8f65/GHSA-xpv5-92cc-8f65.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xpv5-92cc-8f65",
-  "modified": "2025-02-14T06:30:36Z",
+  "modified": "2025-02-14T18:30:51Z",
   "published": "2025-02-14T06:30:36Z",
   "aliases": [
     "CVE-2025-26519"
@@ -46,6 +46,14 @@
     {
       "type": "WEB",
       "url": "http://www.openwall.com/lists/oss-security/2025/02/13/5"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/02/14/5"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/02/14/6"
     }
   ],
   "database_specific": {