diff --git a/advisories/unreviewed/2022/05/GHSA-6wx3-3pp4-7q95/GHSA-6wx3-3pp4-7q95.json b/advisories/unreviewed/2022/05/GHSA-6wx3-3pp4-7q95/GHSA-6wx3-3pp4-7q95.json index 232e3ce7d6e..aebd67621d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wx3-3pp4-7q95/GHSA-6wx3-3pp4-7q95.json +++ b/advisories/unreviewed/2022/05/GHSA-6wx3-3pp4-7q95/GHSA-6wx3-3pp4-7q95.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-6wx3-3pp4-7q95", - "modified": "2022-05-24T17:34:48Z", + "modified": "2024-02-12T15:30:22Z", "published": "2022-05-24T17:34:48Z", "aliases": [ "CVE-2019-2392" ], "details": "A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ diff --git a/advisories/unreviewed/2024/02/GHSA-259r-2fr5-87c3/GHSA-259r-2fr5-87c3.json b/advisories/unreviewed/2024/02/GHSA-259r-2fr5-87c3/GHSA-259r-2fr5-87c3.json index 3e171048667..ce0b5cc2e25 100644 --- a/advisories/unreviewed/2024/02/GHSA-259r-2fr5-87c3/GHSA-259r-2fr5-87c3.json +++ b/advisories/unreviewed/2024/02/GHSA-259r-2fr5-87c3/GHSA-259r-2fr5-87c3.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-259r-2fr5-87c3", - "modified": "2024-02-08T21:30:38Z", + "modified": "2024-02-12T15:30:22Z", "published": "2024-02-08T21:30:38Z", "aliases": [ "CVE-2024-24496" ], "details": "An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-287" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-08T21:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-39v4-4m6h-c4rm/GHSA-39v4-4m6h-c4rm.json b/advisories/unreviewed/2024/02/GHSA-39v4-4m6h-c4rm/GHSA-39v4-4m6h-c4rm.json index 9343ea5ecb3..fb9d2b2ceef 100644 --- a/advisories/unreviewed/2024/02/GHSA-39v4-4m6h-c4rm/GHSA-39v4-4m6h-c4rm.json +++ b/advisories/unreviewed/2024/02/GHSA-39v4-4m6h-c4rm/GHSA-39v4-4m6h-c4rm.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-39v4-4m6h-c4rm", - "modified": "2024-02-09T15:31:26Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:26Z", "aliases": [ "CVE-2024-25309" ], "details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T13:15:42Z" diff --git a/advisories/unreviewed/2024/02/GHSA-5p29-m8h2-83cg/GHSA-5p29-m8h2-83cg.json b/advisories/unreviewed/2024/02/GHSA-5p29-m8h2-83cg/GHSA-5p29-m8h2-83cg.json index 388c5d67cad..5c966893086 100644 --- a/advisories/unreviewed/2024/02/GHSA-5p29-m8h2-83cg/GHSA-5p29-m8h2-83cg.json +++ b/advisories/unreviewed/2024/02/GHSA-5p29-m8h2-83cg/GHSA-5p29-m8h2-83cg.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-5p29-m8h2-83cg", - "modified": "2024-02-08T21:30:38Z", + "modified": "2024-02-12T15:30:22Z", "published": "2024-02-08T21:30:38Z", "aliases": [ "CVE-2024-24495" ], "details": "SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-08T21:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-6v6c-gc45-x65c/GHSA-6v6c-gc45-x65c.json b/advisories/unreviewed/2024/02/GHSA-6v6c-gc45-x65c/GHSA-6v6c-gc45-x65c.json new file mode 100644 index 00000000000..178babacd3f --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-6v6c-gc45-x65c/GHSA-6v6c-gc45-x65c.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6v6c-gc45-x65c", + "modified": "2024-02-12T15:30:23Z", + "published": "2024-02-12T15:30:23Z", + "aliases": [ + "CVE-2024-1062" + ], + "details": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2024-1062" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-122" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-12T13:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-8w8f-p52c-f5w7/GHSA-8w8f-p52c-f5w7.json b/advisories/unreviewed/2024/02/GHSA-8w8f-p52c-f5w7/GHSA-8w8f-p52c-f5w7.json index adf15d5e5d8..1ffe0937f04 100644 --- a/advisories/unreviewed/2024/02/GHSA-8w8f-p52c-f5w7/GHSA-8w8f-p52c-f5w7.json +++ b/advisories/unreviewed/2024/02/GHSA-8w8f-p52c-f5w7/GHSA-8w8f-p52c-f5w7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8w8f-p52c-f5w7", - "modified": "2024-02-09T15:31:26Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:26Z", "aliases": [ "CVE-2024-25307" ], "details": "Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at \"/Cinema-Reservation/booking.php?id=1.\"", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T14:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-99gp-p4g8-wrh7/GHSA-99gp-p4g8-wrh7.json b/advisories/unreviewed/2024/02/GHSA-99gp-p4g8-wrh7/GHSA-99gp-p4g8-wrh7.json index b5759064a8c..61ab69a3989 100644 --- a/advisories/unreviewed/2024/02/GHSA-99gp-p4g8-wrh7/GHSA-99gp-p4g8-wrh7.json +++ b/advisories/unreviewed/2024/02/GHSA-99gp-p4g8-wrh7/GHSA-99gp-p4g8-wrh7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-99gp-p4g8-wrh7", - "modified": "2024-02-08T21:30:38Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-08T21:30:38Z", "aliases": [ "CVE-2024-24497" ], "details": "SQL Injection vulnerability in Employee Management System v.1.0 allows a remote attacker to execute arbitrary SQL commands via the txtusername and txtpassword parameters in the login.php components.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-08T21:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-99pm-h8wp-8xpw/GHSA-99pm-h8wp-8xpw.json b/advisories/unreviewed/2024/02/GHSA-99pm-h8wp-8xpw/GHSA-99pm-h8wp-8xpw.json index 5174e8412c5..b8230dc8958 100644 --- a/advisories/unreviewed/2024/02/GHSA-99pm-h8wp-8xpw/GHSA-99pm-h8wp-8xpw.json +++ b/advisories/unreviewed/2024/02/GHSA-99pm-h8wp-8xpw/GHSA-99pm-h8wp-8xpw.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-99pm-h8wp-8xpw", - "modified": "2024-02-09T15:31:26Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:26Z", "aliases": [ "CVE-2024-25310" ], "details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at \"School/delete.php?id=5.\"", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T14:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-cc59-mwcm-hxv4/GHSA-cc59-mwcm-hxv4.json b/advisories/unreviewed/2024/02/GHSA-cc59-mwcm-hxv4/GHSA-cc59-mwcm-hxv4.json index 3b1ed019095..6d4bf53fb61 100644 --- a/advisories/unreviewed/2024/02/GHSA-cc59-mwcm-hxv4/GHSA-cc59-mwcm-hxv4.json +++ b/advisories/unreviewed/2024/02/GHSA-cc59-mwcm-hxv4/GHSA-cc59-mwcm-hxv4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-cc59-mwcm-hxv4", - "modified": "2024-02-09T15:31:26Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:26Z", "aliases": [ "CVE-2024-25315" ], "details": "Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T14:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-f6q6-67qx-rv6q/GHSA-f6q6-67qx-rv6q.json b/advisories/unreviewed/2024/02/GHSA-f6q6-67qx-rv6q/GHSA-f6q6-67qx-rv6q.json new file mode 100644 index 00000000000..7305d7ba3db --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-f6q6-67qx-rv6q/GHSA-f6q6-67qx-rv6q.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f6q6-67qx-rv6q", + "modified": "2024-02-12T15:30:23Z", + "published": "2024-02-12T15:30:23Z", + "aliases": [ + "CVE-2024-1420" + ], + "details": "Rejected reason: **REJECT** This is a duplicate of CVE-2024-1049. Please use CVE-2024-1049 instead.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1420" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-12T15:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-f86q-9xmw-hpfx/GHSA-f86q-9xmw-hpfx.json b/advisories/unreviewed/2024/02/GHSA-f86q-9xmw-hpfx/GHSA-f86q-9xmw-hpfx.json index 1f40d6b9a11..81e72f0aa39 100644 --- a/advisories/unreviewed/2024/02/GHSA-f86q-9xmw-hpfx/GHSA-f86q-9xmw-hpfx.json +++ b/advisories/unreviewed/2024/02/GHSA-f86q-9xmw-hpfx/GHSA-f86q-9xmw-hpfx.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-f86q-9xmw-hpfx", - "modified": "2024-02-08T21:30:38Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-08T21:30:38Z", "aliases": [ "CVE-2024-24498" ], "details": "Unrestricted File Upload vulnerability in Employee Management System 1.0 allows a remote attacker to execute arbitrary code via the edit-photo.php component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-434" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-08T21:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-fhgv-ff6m-33hx/GHSA-fhgv-ff6m-33hx.json b/advisories/unreviewed/2024/02/GHSA-fhgv-ff6m-33hx/GHSA-fhgv-ff6m-33hx.json index db1a702cdf9..ac24e74feb8 100644 --- a/advisories/unreviewed/2024/02/GHSA-fhgv-ff6m-33hx/GHSA-fhgv-ff6m-33hx.json +++ b/advisories/unreviewed/2024/02/GHSA-fhgv-ff6m-33hx/GHSA-fhgv-ff6m-33hx.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-fhgv-ff6m-33hx", - "modified": "2024-02-09T15:31:26Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:26Z", "aliases": [ "CVE-2024-25302" ], "details": "Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T14:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-frf6-468r-3v33/GHSA-frf6-468r-3v33.json b/advisories/unreviewed/2024/02/GHSA-frf6-468r-3v33/GHSA-frf6-468r-3v33.json index 8ad513f63e2..610bb822315 100644 --- a/advisories/unreviewed/2024/02/GHSA-frf6-468r-3v33/GHSA-frf6-468r-3v33.json +++ b/advisories/unreviewed/2024/02/GHSA-frf6-468r-3v33/GHSA-frf6-468r-3v33.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-frf6-468r-3v33", - "modified": "2024-02-09T15:31:26Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:26Z", "aliases": [ "CVE-2024-25312" ], "details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at \"School/sub_delete.php?id=5.\"", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T13:15:42Z" diff --git a/advisories/unreviewed/2024/02/GHSA-gfhx-2xqr-982p/GHSA-gfhx-2xqr-982p.json b/advisories/unreviewed/2024/02/GHSA-gfhx-2xqr-982p/GHSA-gfhx-2xqr-982p.json index f09b3c1535c..7dfb4ee7ccb 100644 --- a/advisories/unreviewed/2024/02/GHSA-gfhx-2xqr-982p/GHSA-gfhx-2xqr-982p.json +++ b/advisories/unreviewed/2024/02/GHSA-gfhx-2xqr-982p/GHSA-gfhx-2xqr-982p.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-gfhx-2xqr-982p", - "modified": "2024-02-07T15:30:48Z", + "modified": "2024-02-12T15:30:22Z", "published": "2024-02-07T15:30:48Z", "aliases": [ "CVE-2024-24131" ], "details": "SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-07T14:15:52Z" diff --git a/advisories/unreviewed/2024/02/GHSA-p93q-jr7q-q29w/GHSA-p93q-jr7q-q29w.json b/advisories/unreviewed/2024/02/GHSA-p93q-jr7q-q29w/GHSA-p93q-jr7q-q29w.json index 57841c5554b..75c6430559c 100644 --- a/advisories/unreviewed/2024/02/GHSA-p93q-jr7q-q29w/GHSA-p93q-jr7q-q29w.json +++ b/advisories/unreviewed/2024/02/GHSA-p93q-jr7q-q29w/GHSA-p93q-jr7q-q29w.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p93q-jr7q-q29w", - "modified": "2024-02-09T15:31:26Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:26Z", "aliases": [ "CVE-2024-25314" ], "details": "Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T14:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-pp7c-w62w-w9jq/GHSA-pp7c-w62w-w9jq.json b/advisories/unreviewed/2024/02/GHSA-pp7c-w62w-w9jq/GHSA-pp7c-w62w-w9jq.json index da3567b513a..73a2c8a37f6 100644 --- a/advisories/unreviewed/2024/02/GHSA-pp7c-w62w-w9jq/GHSA-pp7c-w62w-w9jq.json +++ b/advisories/unreviewed/2024/02/GHSA-pp7c-w62w-w9jq/GHSA-pp7c-w62w-w9jq.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-pp7c-w62w-w9jq", - "modified": "2024-02-09T15:31:25Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:25Z", "aliases": [ "CVE-2024-25305" ], "details": "Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T13:15:41Z" diff --git a/advisories/unreviewed/2024/02/GHSA-qxg7-vqqh-9gpf/GHSA-qxg7-vqqh-9gpf.json b/advisories/unreviewed/2024/02/GHSA-qxg7-vqqh-9gpf/GHSA-qxg7-vqqh-9gpf.json index bd5741611d7..f1a7b6f6fda 100644 --- a/advisories/unreviewed/2024/02/GHSA-qxg7-vqqh-9gpf/GHSA-qxg7-vqqh-9gpf.json +++ b/advisories/unreviewed/2024/02/GHSA-qxg7-vqqh-9gpf/GHSA-qxg7-vqqh-9gpf.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qxg7-vqqh-9gpf", - "modified": "2024-02-09T15:31:25Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:25Z", "aliases": [ "CVE-2024-25306" ], "details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at \"School/index.php\".", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T13:15:42Z" diff --git a/advisories/unreviewed/2024/02/GHSA-rprw-7v7r-h7jp/GHSA-rprw-7v7r-h7jp.json b/advisories/unreviewed/2024/02/GHSA-rprw-7v7r-h7jp/GHSA-rprw-7v7r-h7jp.json index 157fec0c1d8..e81f5e872d2 100644 --- a/advisories/unreviewed/2024/02/GHSA-rprw-7v7r-h7jp/GHSA-rprw-7v7r-h7jp.json +++ b/advisories/unreviewed/2024/02/GHSA-rprw-7v7r-h7jp/GHSA-rprw-7v7r-h7jp.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rprw-7v7r-h7jp", - "modified": "2024-02-09T09:31:31Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T09:31:31Z", "aliases": [ "CVE-2024-25675" ], "details": "An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T09:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-vjvp-pp6v-gjcf/GHSA-vjvp-pp6v-gjcf.json b/advisories/unreviewed/2024/02/GHSA-vjvp-pp6v-gjcf/GHSA-vjvp-pp6v-gjcf.json index 509f42e5481..770403471c6 100644 --- a/advisories/unreviewed/2024/02/GHSA-vjvp-pp6v-gjcf/GHSA-vjvp-pp6v-gjcf.json +++ b/advisories/unreviewed/2024/02/GHSA-vjvp-pp6v-gjcf/GHSA-vjvp-pp6v-gjcf.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-vjvp-pp6v-gjcf", - "modified": "2024-02-09T15:31:25Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:25Z", "aliases": [ "CVE-2024-25304" ], "details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at \"School/index.php.\"", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T13:15:41Z" diff --git a/advisories/unreviewed/2024/02/GHSA-w9h2-c9f6-73r6/GHSA-w9h2-c9f6-73r6.json b/advisories/unreviewed/2024/02/GHSA-w9h2-c9f6-73r6/GHSA-w9h2-c9f6-73r6.json index 9b6e8c7fda4..fbae6d17550 100644 --- a/advisories/unreviewed/2024/02/GHSA-w9h2-c9f6-73r6/GHSA-w9h2-c9f6-73r6.json +++ b/advisories/unreviewed/2024/02/GHSA-w9h2-c9f6-73r6/GHSA-w9h2-c9f6-73r6.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-w9h2-c9f6-73r6", - "modified": "2024-02-09T15:31:25Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:25Z", "aliases": [ "CVE-2024-25308" ], "details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T13:15:42Z" diff --git a/advisories/unreviewed/2024/02/GHSA-wcmq-fchf-hwch/GHSA-wcmq-fchf-hwch.json b/advisories/unreviewed/2024/02/GHSA-wcmq-fchf-hwch/GHSA-wcmq-fchf-hwch.json index a203357e1d0..d5211bdd820 100644 --- a/advisories/unreviewed/2024/02/GHSA-wcmq-fchf-hwch/GHSA-wcmq-fchf-hwch.json +++ b/advisories/unreviewed/2024/02/GHSA-wcmq-fchf-hwch/GHSA-wcmq-fchf-hwch.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-wcmq-fchf-hwch", - "modified": "2024-02-08T21:30:38Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-08T21:30:38Z", "aliases": [ "CVE-2024-24499" ], "details": "SQL Injection vulnerability in Employee Management System v.1.0 allows a remote attacker to execute arbitrary SQL commands via the txtfullname and txtphone parameters in the edit_profile.php component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-08T21:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-wgvv-23v4-wwj5/GHSA-wgvv-23v4-wwj5.json b/advisories/unreviewed/2024/02/GHSA-wgvv-23v4-wwj5/GHSA-wgvv-23v4-wwj5.json index c7df4b563ed..faf8abf29f1 100644 --- a/advisories/unreviewed/2024/02/GHSA-wgvv-23v4-wwj5/GHSA-wgvv-23v4-wwj5.json +++ b/advisories/unreviewed/2024/02/GHSA-wgvv-23v4-wwj5/GHSA-wgvv-23v4-wwj5.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-wgvv-23v4-wwj5", - "modified": "2024-02-09T15:31:26Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:26Z", "aliases": [ "CVE-2024-25316" ], "details": "Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'eid' parameter in Hotel/admin/usersettingdel.php?eid=2.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T14:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-wj6j-6g37-7vch/GHSA-wj6j-6g37-7vch.json b/advisories/unreviewed/2024/02/GHSA-wj6j-6g37-7vch/GHSA-wj6j-6g37-7vch.json index fb7a1c97e24..0a1dbe22ca5 100644 --- a/advisories/unreviewed/2024/02/GHSA-wj6j-6g37-7vch/GHSA-wj6j-6g37-7vch.json +++ b/advisories/unreviewed/2024/02/GHSA-wj6j-6g37-7vch/GHSA-wj6j-6g37-7vch.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-wj6j-6g37-7vch", - "modified": "2024-02-09T09:31:31Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T09:31:31Z", "aliases": [ "CVE-2024-25674" ], "details": "An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-434" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T09:15:08Z" diff --git a/advisories/unreviewed/2024/02/GHSA-wvp5-cmpq-4c47/GHSA-wvp5-cmpq-4c47.json b/advisories/unreviewed/2024/02/GHSA-wvp5-cmpq-4c47/GHSA-wvp5-cmpq-4c47.json index ce7a15fd382..e0a47b64133 100644 --- a/advisories/unreviewed/2024/02/GHSA-wvp5-cmpq-4c47/GHSA-wvp5-cmpq-4c47.json +++ b/advisories/unreviewed/2024/02/GHSA-wvp5-cmpq-4c47/GHSA-wvp5-cmpq-4c47.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-wvp5-cmpq-4c47", - "modified": "2024-02-09T15:31:26Z", + "modified": "2024-02-12T15:30:23Z", "published": "2024-02-09T15:31:26Z", "aliases": [ "CVE-2024-25313" ], "details": "Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-287" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-09T13:15:42Z"