diff --git a/advisories/unreviewed/2024/04/GHSA-2f2w-fjg5-6g8c/GHSA-2f2w-fjg5-6g8c.json b/advisories/unreviewed/2024/04/GHSA-2f2w-fjg5-6g8c/GHSA-2f2w-fjg5-6g8c.json
new file mode 100644
index 00000000000..b8c366ca715
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-2f2w-fjg5-6g8c/GHSA-2f2w-fjg5-6g8c.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2f2w-fjg5-6g8c",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-30929"
+  ],
+  "details": "Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30929"
+    },
+    {
+      "type": "WEB",
+      "url": "https://chocapikk.com/posts/2024/derbynet-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-2qhq-j5fg-qqg8/GHSA-2qhq-j5fg-qqg8.json b/advisories/unreviewed/2024/04/GHSA-2qhq-j5fg-qqg8/GHSA-2qhq-j5fg-qqg8.json
new file mode 100644
index 00000000000..73f5718f411
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-2qhq-j5fg-qqg8/GHSA-2qhq-j5fg-qqg8.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2qhq-j5fg-qqg8",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-30927"
+  ],
+  "details": "Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30927"
+    },
+    {
+      "type": "WEB",
+      "url": "https://chocapikk.com/posts/2024/derbynet-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-3v49-294p-4c7w/GHSA-3v49-294p-4c7w.json b/advisories/unreviewed/2024/04/GHSA-3v49-294p-4c7w/GHSA-3v49-294p-4c7w.json
new file mode 100644
index 00000000000..0f8415997c4
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-3v49-294p-4c7w/GHSA-3v49-294p-4c7w.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3v49-294p-4c7w",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-22179"
+  ],
+  "details": "\nThe application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22179"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-302"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T22:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-7phh-j5x4-5979/GHSA-7phh-j5x4-5979.json b/advisories/unreviewed/2024/04/GHSA-7phh-j5x4-5979/GHSA-7phh-j5x4-5979.json
new file mode 100644
index 00000000000..effba06769f
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-7phh-j5x4-5979/GHSA-7phh-j5x4-5979.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7phh-j5x4-5979",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-22186"
+  ],
+  "details": "\nThe application suffers from a privilege escalation vulnerability. An \nattacker logged in as guest can escalate his privileges by poisoning the\n cookie to become administrator.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22186"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-565"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T23:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-8h3w-mgw8-gj45/GHSA-8h3w-mgw8-gj45.json b/advisories/unreviewed/2024/04/GHSA-8h3w-mgw8-gj45/GHSA-8h3w-mgw8-gj45.json
new file mode 100644
index 00000000000..19f79d1198e
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-8h3w-mgw8-gj45/GHSA-8h3w-mgw8-gj45.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8h3w-mgw8-gj45",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-30926"
+  ],
+  "details": "Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30926"
+    },
+    {
+      "type": "WEB",
+      "url": "https://chocapikk.com/posts/2024/derbynet-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-9c86-qqfm-5hf3/GHSA-9c86-qqfm-5hf3.json b/advisories/unreviewed/2024/04/GHSA-9c86-qqfm-5hf3/GHSA-9c86-qqfm-5hf3.json
new file mode 100644
index 00000000000..b5eef59ac10
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-9c86-qqfm-5hf3/GHSA-9c86-qqfm-5hf3.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9c86-qqfm-5hf3",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-21872"
+  ],
+  "details": "\nThe device allows an unauthenticated attacker to bypass authentication \nand modify the cookie to reveal hidden pages that allows more critical \noperations to the transmitter.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21872"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-565"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T23:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-h248-33jr-x3g2/GHSA-h248-33jr-x3g2.json b/advisories/unreviewed/2024/04/GHSA-h248-33jr-x3g2/GHSA-h248-33jr-x3g2.json
new file mode 100644
index 00000000000..07e022f6119
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-h248-33jr-x3g2/GHSA-h248-33jr-x3g2.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h248-33jr-x3g2",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-30924"
+  ],
+  "details": "Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30924"
+    },
+    {
+      "type": "WEB",
+      "url": "https://chocapikk.com/posts/2024/derbynet-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-hhcp-6v36-gh75/GHSA-hhcp-6v36-gh75.json b/advisories/unreviewed/2024/04/GHSA-hhcp-6v36-gh75/GHSA-hhcp-6v36-gh75.json
new file mode 100644
index 00000000000..64e115240b1
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-hhcp-6v36-gh75/GHSA-hhcp-6v36-gh75.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hhcp-6v36-gh75",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-3741"
+  ],
+  "details": "Electrolink transmitters are vulnerable to an authentication bypass \nvulnerability affecting the login cookie. An attacker can set an \narbitrary value except 'NO' to the login cookie and have full system \naccess.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3741"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-302"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-q729-84hg-j6wm/GHSA-q729-84hg-j6wm.json b/advisories/unreviewed/2024/04/GHSA-q729-84hg-j6wm/GHSA-q729-84hg-j6wm.json
new file mode 100644
index 00000000000..a80766c2478
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-q729-84hg-j6wm/GHSA-q729-84hg-j6wm.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q729-84hg-j6wm",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-30928"
+  ],
+  "details": "SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30928"
+    },
+    {
+      "type": "WEB",
+      "url": "https://chocapikk.com/posts/2024/derbynet-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-q9cj-qf3m-4wrv/GHSA-q9cj-qf3m-4wrv.json b/advisories/unreviewed/2024/04/GHSA-q9cj-qf3m-4wrv/GHSA-q9cj-qf3m-4wrv.json
new file mode 100644
index 00000000000..2fa83b6d2b5
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-q9cj-qf3m-4wrv/GHSA-q9cj-qf3m-4wrv.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q9cj-qf3m-4wrv",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-3742"
+  ],
+  "details": "\nElectrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3742"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-312"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T23:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-v475-xhc9-wfxg/GHSA-v475-xhc9-wfxg.json b/advisories/unreviewed/2024/04/GHSA-v475-xhc9-wfxg/GHSA-v475-xhc9-wfxg.json
index b5ee3ef9b1d..66cf59948c0 100644
--- a/advisories/unreviewed/2024/04/GHSA-v475-xhc9-wfxg/GHSA-v475-xhc9-wfxg.json
+++ b/advisories/unreviewed/2024/04/GHSA-v475-xhc9-wfxg/GHSA-v475-xhc9-wfxg.json
@@ -36,6 +36,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-20",
       "CWE-77"
     ],
     "severity": "CRITICAL",
diff --git a/advisories/unreviewed/2024/04/GHSA-v86q-pm22-5w9h/GHSA-v86q-pm22-5w9h.json b/advisories/unreviewed/2024/04/GHSA-v86q-pm22-5w9h/GHSA-v86q-pm22-5w9h.json
new file mode 100644
index 00000000000..5839adae0f4
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-v86q-pm22-5w9h/GHSA-v86q-pm22-5w9h.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v86q-pm22-5w9h",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-30925"
+  ],
+  "details": "Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30925"
+    },
+    {
+      "type": "WEB",
+      "url": "https://chocapikk.com/posts/2024/derbynet-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-v8qp-w9p6-9xvp/GHSA-v8qp-w9p6-9xvp.json b/advisories/unreviewed/2024/04/GHSA-v8qp-w9p6-9xvp/GHSA-v8qp-w9p6-9xvp.json
new file mode 100644
index 00000000000..7659c38983d
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-v8qp-w9p6-9xvp/GHSA-v8qp-w9p6-9xvp.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v8qp-w9p6-9xvp",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-21846"
+  ],
+  "details": "\nAn unauthenticated attacker can reset the board and stop transmitter \noperations by sending a specially-crafted GET request to the command.cgi\n gateway, resulting in a denial-of-service scenario.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21846"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-306"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T23:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-wq7q-x8vc-j7p4/GHSA-wq7q-x8vc-j7p4.json b/advisories/unreviewed/2024/04/GHSA-wq7q-x8vc-j7p4/GHSA-wq7q-x8vc-j7p4.json
new file mode 100644
index 00000000000..4da38875081
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-wq7q-x8vc-j7p4/GHSA-wq7q-x8vc-j7p4.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wq7q-x8vc-j7p4",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-30938"
+  ],
+  "details": "SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30938"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/lampSEC/semcms/blob/main/semcms.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-19T00:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-x8vw-8mw4-42v9/GHSA-x8vw-8mw4-42v9.json b/advisories/unreviewed/2024/04/GHSA-x8vw-8mw4-42v9/GHSA-x8vw-8mw4-42v9.json
new file mode 100644
index 00000000000..081c9864137
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-x8vw-8mw4-42v9/GHSA-x8vw-8mw4-42v9.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x8vw-8mw4-42v9",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-31750"
+  ],
+  "details": "SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31750"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/lampSEC/semcms/blob/main/datacube3.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-19T00:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-xww2-7grc-g9mp/GHSA-xww2-7grc-g9mp.json b/advisories/unreviewed/2024/04/GHSA-xww2-7grc-g9mp/GHSA-xww2-7grc-g9mp.json
new file mode 100644
index 00000000000..f16f5b7c137
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-xww2-7grc-g9mp/GHSA-xww2-7grc-g9mp.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xww2-7grc-g9mp",
+  "modified": "2024-04-19T00:30:54Z",
+  "published": "2024-04-19T00:30:54Z",
+  "aliases": [
+    "CVE-2024-1491"
+  ],
+  "details": "\nThe devices allow access to an unprotected endpoint that allows MPFS \nfile system binary image upload without authentication. The MPFS2 file \nsystem module provides a light-weight read-only file system that can be \nstored in external EEPROM, external serial flash, or internal flash \nprogram memory. This file system serves as the basis for the HTTP2 web \nserver module, but is also used by the SNMP module and is available to \nother applications that require basic read-only storage capabilities. \nThis can be exploited to overwrite the flash program memory that holds \nthe web server's main interfaces and execute arbitrary code.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1491"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-306"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-18T23:15:06Z"
+  }
+}
\ No newline at end of file