Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-01-15 18:32:08 +00:00
parent 22166d7ddc
commit 3b3289a015
176 changed files with 3370 additions and 189 deletions
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7mw2-m38p-22r4",
-  "modified": "2022-01-27T00:02:55Z",
+  "modified": "2025-01-15T18:30:34Z",
  "published": "2022-01-21T00:00:40Z",
  "aliases": [
    "CVE-2021-44092"
  ],
  "details": "An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-wcc5-3gcc-8xv6",
-  "modified": "2022-05-24T16:57:57Z",
+  "modified": "2025-01-15T18:30:34Z",
  "published": "2022-05-24T16:57:57Z",
  "aliases": [
    "CVE-2015-9452"
  ],
  "details": "The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex_forms_Id parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -28,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-89"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-hw4x-q63w-42vp",
-  "modified": "2023-11-04T03:30:18Z",
+  "modified": "2025-01-15T18:30:34Z",
  "published": "2023-05-26T15:30:21Z",
  "aliases": [
    "CVE-2022-46945"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-pgq4-vq29-6v5r",
-  "modified": "2023-11-16T21:22:33Z",
+  "modified": "2025-01-15T18:30:35Z",
  "published": "2023-05-26T21:30:23Z",
  "aliases": [
    "CVE-2023-28321"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-635w-7jgp-9rf7",
-  "modified": "2024-02-29T03:33:16Z",
+  "modified": "2025-01-15T18:30:36Z",
  "published": "2024-02-29T03:33:16Z",
  "aliases": [
    "CVE-2024-1129"
@@ -49,7 +49,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-76cr-x9wq-mm5r",
-  "modified": "2024-02-29T03:33:15Z",
+  "modified": "2025-01-15T18:30:36Z",
  "published": "2024-02-29T03:33:15Z",
  "aliases": [
    "CVE-2024-0907"
@@ -49,7 +49,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-m6m8-pj95-q4rg",
-  "modified": "2024-02-29T03:33:16Z",
+  "modified": "2025-01-15T18:30:37Z",
  "published": "2024-02-29T03:33:16Z",
  "aliases": [
    "CVE-2024-1130"
@@ -49,7 +49,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-pf4f-q385-9wcr",
-  "modified": "2024-02-29T03:33:16Z",
+  "modified": "2025-01-15T18:30:37Z",
  "published": "2024-02-29T03:33:16Z",
  "aliases": [
    "CVE-2024-1133"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-w4c6-9hpf-wrhm",
-  "modified": "2024-02-29T03:33:16Z",
+  "modified": "2025-01-15T18:30:36Z",
  "published": "2024-02-29T03:33:16Z",
  "aliases": [
    "CVE-2024-1128"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -38,7 +38,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -38,7 +38,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -38,7 +38,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -38,7 +38,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -38,7 +38,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-57cq-mhwv-qcfq",
-  "modified": "2024-03-06T00:31:27Z",
+  "modified": "2025-01-15T18:30:37Z",
  "published": "2024-03-06T00:31:27Z",
  "aliases": [
    "CVE-2024-27278"
  ],
  "details": "OpenPNE Plugin \"opTimelinePlugin\" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profile with some malicious contents, an arbitrary script may be executed on the web browsers of other users.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -24,8 +29,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-06T00:15:52Z"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-352"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5xf8-64vx-2fcm",
-  "modified": "2024-03-08T09:30:33Z",
+  "modified": "2025-01-15T18:30:37Z",
  "published": "2024-03-08T09:30:33Z",
  "aliases": [
    "CVE-2024-2298"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -38,7 +38,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -38,7 +38,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
--- a/Show More
+++ b/Show More