diff --git a/advisories/unreviewed/2024/05/GHSA-2qm3-mmvr-v7mm/GHSA-2qm3-mmvr-v7mm.json b/advisories/unreviewed/2024/05/GHSA-2qm3-mmvr-v7mm/GHSA-2qm3-mmvr-v7mm.json new file mode 100644 index 00000000000..df151783169 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-2qm3-mmvr-v7mm/GHSA-2qm3-mmvr-v7mm.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2qm3-mmvr-v7mm", + "modified": "2024-05-23T03:30:41Z", + "published": "2024-05-23T03:30:41Z", + "aliases": [ + "CVE-2024-4783" + ], + "details": "The jQuery T(-) Countdown Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tminus shortcode in all versions up to, and including, 2.3.25 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4783" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/jquery-t-countdown-widget/trunk/countdown-timer.php#L768" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/78eeef12-123b-42f6-b446-c3f2d43153fd?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T02:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-3832-cq7m-8xc3/GHSA-3832-cq7m-8xc3.json b/advisories/unreviewed/2024/05/GHSA-3832-cq7m-8xc3/GHSA-3832-cq7m-8xc3.json new file mode 100644 index 00000000000..c6d3f0707a4 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-3832-cq7m-8xc3/GHSA-3832-cq7m-8xc3.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3832-cq7m-8xc3", + "modified": "2024-05-23T03:30:41Z", + "published": "2024-05-23T03:30:41Z", + "aliases": [ + "CVE-2024-5230" + ], + "details": "A vulnerability has been found in EnvaySoft FleetCart up to 4.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument razorpayKeyId leads to information disclosure. The attack can be launched remotely. It is recommended to upgrade the affected component. The identifier VDB-265981 was assigned to this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5230" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.265981" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.265981" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.333519" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T02:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-4v3w-hvq5-qxpw/GHSA-4v3w-hvq5-qxpw.json b/advisories/unreviewed/2024/05/GHSA-4v3w-hvq5-qxpw/GHSA-4v3w-hvq5-qxpw.json new file mode 100644 index 00000000000..3ac87235c2b --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-4v3w-hvq5-qxpw/GHSA-4v3w-hvq5-qxpw.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4v3w-hvq5-qxpw", + "modified": "2024-05-23T03:30:41Z", + "published": "2024-05-23T03:30:41Z", + "aliases": [ + "CVE-2024-3201" + ], + "details": "The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pp_link' shortcode in all versions up to, and including, 3.1.32 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3201" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3090019%40shapepress-dsgvo%2Ftrunk&old=3016389%40shapepress-dsgvo%2Ftrunk&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/df5cd6e7-e821-403f-a048-25c2ca1fb2de?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T02:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-5vv5-c3pg-26m2/GHSA-5vv5-c3pg-26m2.json b/advisories/unreviewed/2024/05/GHSA-5vv5-c3pg-26m2/GHSA-5vv5-c3pg-26m2.json new file mode 100644 index 00000000000..1d79b9db888 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-5vv5-c3pg-26m2/GHSA-5vv5-c3pg-26m2.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5vv5-c3pg-26m2", + "modified": "2024-05-23T03:30:41Z", + "published": "2024-05-23T03:30:41Z", + "aliases": [ + "CVE-2024-5231" + ], + "details": "A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view/teacher_salary_details.php. The manipulation of the argument index leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265982 is the identifier assigned to this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5231" + }, + { + "type": "WEB", + "url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2021.pdf" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.265982" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.265982" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.339807" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T03:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-mcfx-gc63-q26m/GHSA-mcfx-gc63-q26m.json b/advisories/unreviewed/2024/05/GHSA-mcfx-gc63-q26m/GHSA-mcfx-gc63-q26m.json new file mode 100644 index 00000000000..9bcbabdd161 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-mcfx-gc63-q26m/GHSA-mcfx-gc63-q26m.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mcfx-gc63-q26m", + "modified": "2024-05-23T03:30:41Z", + "published": "2024-05-23T03:30:41Z", + "aliases": [ + "CVE-2024-3065" + ], + "details": "The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3065" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/paypal-pay-buy-donation-and-cart-buttons-shortcode" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c596c278-4f16-4830-8e6e-5e1392d4d118?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T02:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-qr93-4cq6-4587/GHSA-qr93-4cq6-4587.json b/advisories/unreviewed/2024/05/GHSA-qr93-4cq6-4587/GHSA-qr93-4cq6-4587.json new file mode 100644 index 00000000000..594bc72e31e --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-qr93-4cq6-4587/GHSA-qr93-4cq6-4587.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qr93-4cq6-4587", + "modified": "2024-05-23T03:30:40Z", + "published": "2024-05-23T03:30:40Z", + "aliases": [ + "CVE-2023-6844" + ], + "details": "The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to and including 5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6844" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/iframe/trunk/iframe.php#L37" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/iframe/trunk/iframe.php#L60" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3089839%40iframe%2Ftrunk&old=3036990%40iframe%2Ftrunk&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c16e16dc-8888-4222-862f-a57a9f14e7f4?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T02:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-vm94-m3xr-gvj8/GHSA-vm94-m3xr-gvj8.json b/advisories/unreviewed/2024/05/GHSA-vm94-m3xr-gvj8/GHSA-vm94-m3xr-gvj8.json new file mode 100644 index 00000000000..ab1cb95b8b6 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-vm94-m3xr-gvj8/GHSA-vm94-m3xr-gvj8.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vm94-m3xr-gvj8", + "modified": "2024-05-23T03:30:41Z", + "published": "2024-05-23T03:30:41Z", + "aliases": [ + "CVE-2024-4486" + ], + "details": "The Awesome Contact Form7 for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'AEP Contact Form 7' widget in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4486" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/awesome-contact-form7-for-elementor/trunk/widgets/aep-contact-form7.php#L819" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0687e101-3c96-4c9b-941a-1b0fed2f76e2?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T02:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-w4wc-x54x-pg2m/GHSA-w4wc-x54x-pg2m.json b/advisories/unreviewed/2024/05/GHSA-w4wc-x54x-pg2m/GHSA-w4wc-x54x-pg2m.json new file mode 100644 index 00000000000..e9d8be65702 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-w4wc-x54x-pg2m/GHSA-w4wc-x54x-pg2m.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w4wc-x54x-pg2m", + "modified": "2024-05-23T03:30:39Z", + "published": "2024-05-23T03:30:39Z", + "aliases": [ + "CVE-2024-3708" + ], + "details": "A condition exists in lighttpd version prior to 1.4.51 whereby a remote attacker can craft an http request which could result in multiple outcomes:\n1.) cause lighttpd to access freed memory in which case the process lighttpd is running in could be terminated or other non-deterministic behavior could result\n2.) a memory information disclosure event could result which could be used to determine the state of memory which could then be used to theoretically bypass ALSR protections\n\nThis CVE will be updated with more details on July 9th, 2024 after affected parties have had time to remediate.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3708" + }, + { + "type": "WEB", + "url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024002.pdf" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T01:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-w7qp-vgwj-6g7r/GHSA-w7qp-vgwj-6g7r.json b/advisories/unreviewed/2024/05/GHSA-w7qp-vgwj-6g7r/GHSA-w7qp-vgwj-6g7r.json new file mode 100644 index 00000000000..d344060f283 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-w7qp-vgwj-6g7r/GHSA-w7qp-vgwj-6g7r.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w7qp-vgwj-6g7r", + "modified": "2024-05-23T03:30:40Z", + "published": "2024-05-23T03:30:40Z", + "aliases": [ + "CVE-2024-1855" + ], + "details": "The WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.23 via the wpc_check_for_submission function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1855" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-cafe/trunk/core/action/wpc-ajax-action.php#L76" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3084054/wp-cafe/trunk/core/action/wpc-ajax-action.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5f83c19e-1b75-4fea-b4de-f7f844a449c0?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T02:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-wf54-f8v9-v72v/GHSA-wf54-f8v9-v72v.json b/advisories/unreviewed/2024/05/GHSA-wf54-f8v9-v72v/GHSA-wf54-f8v9-v72v.json new file mode 100644 index 00000000000..aa16ec7793f --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-wf54-f8v9-v72v/GHSA-wf54-f8v9-v72v.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wf54-f8v9-v72v", + "modified": "2024-05-23T03:30:41Z", + "published": "2024-05-23T03:30:41Z", + "aliases": [ + "CVE-2024-4978" + ], + "details": "Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4978" + }, + { + "type": "WEB", + "url": "https://twitter.com/2RunJack2/status/1775052981966377148" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-502" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T02:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-wvm8-xgxq-vvhf/GHSA-wvm8-xgxq-vvhf.json b/advisories/unreviewed/2024/05/GHSA-wvm8-xgxq-vvhf/GHSA-wvm8-xgxq-vvhf.json new file mode 100644 index 00000000000..11e1c479c28 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-wvm8-xgxq-vvhf/GHSA-wvm8-xgxq-vvhf.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wvm8-xgxq-vvhf", + "modified": "2024-05-23T03:30:41Z", + "published": "2024-05-23T03:30:41Z", + "aliases": [ + "CVE-2024-4895" + ], + "details": "The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CSV import functionality in all versions up to, and including, 3.4.2.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4895" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3089897" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/wpdatatables/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0c944e08-1b70-4b56-80eb-f588c0fab5b6?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T03:15:08Z" + } +} \ No newline at end of file