diff --git a/advisories/unreviewed/2022/03/GHSA-8rv9-5fv4-653w/GHSA-8rv9-5fv4-653w.json b/advisories/unreviewed/2022/03/GHSA-8rv9-5fv4-653w/GHSA-8rv9-5fv4-653w.json index 9ebe687b6a6..6a7d17385e0 100644 --- a/advisories/unreviewed/2022/03/GHSA-8rv9-5fv4-653w/GHSA-8rv9-5fv4-653w.json +++ b/advisories/unreviewed/2022/03/GHSA-8rv9-5fv4-653w/GHSA-8rv9-5fv4-653w.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8rv9-5fv4-653w", - "modified": "2022-03-31T00:00:36Z", + "modified": "2024-09-20T12:31:45Z", "published": "2022-03-25T00:00:33Z", "aliases": [ "CVE-2022-0550" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2022/03/GHSA-r8jv-c3jp-366j/GHSA-r8jv-c3jp-366j.json b/advisories/unreviewed/2022/03/GHSA-r8jv-c3jp-366j/GHSA-r8jv-c3jp-366j.json index bd542f04b4f..6b0de9a9f20 100644 --- a/advisories/unreviewed/2022/03/GHSA-r8jv-c3jp-366j/GHSA-r8jv-c3jp-366j.json +++ b/advisories/unreviewed/2022/03/GHSA-r8jv-c3jp-366j/GHSA-r8jv-c3jp-366j.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r8jv-c3jp-366j", - "modified": "2022-03-31T00:00:36Z", + "modified": "2024-09-20T12:31:45Z", "published": "2022-03-25T00:00:33Z", "aliases": [ "CVE-2022-0551" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/08/GHSA-5cwq-4hm6-gp6g/GHSA-5cwq-4hm6-gp6g.json b/advisories/unreviewed/2023/08/GHSA-5cwq-4hm6-gp6g/GHSA-5cwq-4hm6-gp6g.json index 9d340bc9d2c..ebc59ceb86e 100644 --- a/advisories/unreviewed/2023/08/GHSA-5cwq-4hm6-gp6g/GHSA-5cwq-4hm6-gp6g.json +++ b/advisories/unreviewed/2023/08/GHSA-5cwq-4hm6-gp6g/GHSA-5cwq-4hm6-gp6g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5cwq-4hm6-gp6g", - "modified": "2024-04-04T06:43:46Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T09:30:33Z", "aliases": [ "CVE-2023-22843" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/08/GHSA-84pw-hw22-9v6h/GHSA-84pw-hw22-9v6h.json b/advisories/unreviewed/2023/08/GHSA-84pw-hw22-9v6h/GHSA-84pw-hw22-9v6h.json index 8c11fe86038..8bdc94d911e 100644 --- a/advisories/unreviewed/2023/08/GHSA-84pw-hw22-9v6h/GHSA-84pw-hw22-9v6h.json +++ b/advisories/unreviewed/2023/08/GHSA-84pw-hw22-9v6h/GHSA-84pw-hw22-9v6h.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-84pw-hw22-9v6h", - "modified": "2024-04-04T06:43:43Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T09:30:33Z", "aliases": [ "CVE-2023-22378" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/08/GHSA-fp89-4294-45q3/GHSA-fp89-4294-45q3.json b/advisories/unreviewed/2023/08/GHSA-fp89-4294-45q3/GHSA-fp89-4294-45q3.json index f8e9e933525..b6bb64aca24 100644 --- a/advisories/unreviewed/2023/08/GHSA-fp89-4294-45q3/GHSA-fp89-4294-45q3.json +++ b/advisories/unreviewed/2023/08/GHSA-fp89-4294-45q3/GHSA-fp89-4294-45q3.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fp89-4294-45q3", - "modified": "2024-04-04T06:44:02Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T12:30:26Z", "aliases": [ "CVE-2023-23903" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1286", "CWE-20" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2023/08/GHSA-q578-hqmw-59mf/GHSA-q578-hqmw-59mf.json b/advisories/unreviewed/2023/08/GHSA-q578-hqmw-59mf/GHSA-q578-hqmw-59mf.json index bab4582b603..63f7bad19f8 100644 --- a/advisories/unreviewed/2023/08/GHSA-q578-hqmw-59mf/GHSA-q578-hqmw-59mf.json +++ b/advisories/unreviewed/2023/08/GHSA-q578-hqmw-59mf/GHSA-q578-hqmw-59mf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q578-hqmw-59mf", - "modified": "2024-04-04T06:43:47Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T09:30:34Z", "aliases": [ "CVE-2023-23574" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/08/GHSA-xfcp-h9vc-f632/GHSA-xfcp-h9vc-f632.json b/advisories/unreviewed/2023/08/GHSA-xfcp-h9vc-f632/GHSA-xfcp-h9vc-f632.json index 034e85b3956..5adabedb493 100644 --- a/advisories/unreviewed/2023/08/GHSA-xfcp-h9vc-f632/GHSA-xfcp-h9vc-f632.json +++ b/advisories/unreviewed/2023/08/GHSA-xfcp-h9vc-f632/GHSA-xfcp-h9vc-f632.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xfcp-h9vc-f632", - "modified": "2024-04-04T06:44:08Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T12:30:26Z", "aliases": [ "CVE-2023-24015" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1286", "CWE-20" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2023/09/GHSA-86j7-6frw-pfwj/GHSA-86j7-6frw-pfwj.json b/advisories/unreviewed/2023/09/GHSA-86j7-6frw-pfwj/GHSA-86j7-6frw-pfwj.json index 71501716e88..642f66bcf1d 100644 --- a/advisories/unreviewed/2023/09/GHSA-86j7-6frw-pfwj/GHSA-86j7-6frw-pfwj.json +++ b/advisories/unreviewed/2023/09/GHSA-86j7-6frw-pfwj/GHSA-86j7-6frw-pfwj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-86j7-6frw-pfwj", - "modified": "2024-04-04T07:43:51Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-09-19T12:30:30Z", "aliases": [ "CVE-2023-29245" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/09/GHSA-jwqg-83qr-7fph/GHSA-jwqg-83qr-7fph.json b/advisories/unreviewed/2023/09/GHSA-jwqg-83qr-7fph/GHSA-jwqg-83qr-7fph.json index d300e7efce9..d9b8a78585d 100644 --- a/advisories/unreviewed/2023/09/GHSA-jwqg-83qr-7fph/GHSA-jwqg-83qr-7fph.json +++ b/advisories/unreviewed/2023/09/GHSA-jwqg-83qr-7fph/GHSA-jwqg-83qr-7fph.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jwqg-83qr-7fph", - "modified": "2024-04-04T07:43:49Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-09-19T12:30:30Z", "aliases": [ "CVE-2023-32649" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1286", "CWE-20" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/01/GHSA-frjw-g5j9-99p6/GHSA-frjw-g5j9-99p6.json b/advisories/unreviewed/2024/01/GHSA-frjw-g5j9-99p6/GHSA-frjw-g5j9-99p6.json index 9bdbd98a605..4fcac8ed740 100644 --- a/advisories/unreviewed/2024/01/GHSA-frjw-g5j9-99p6/GHSA-frjw-g5j9-99p6.json +++ b/advisories/unreviewed/2024/01/GHSA-frjw-g5j9-99p6/GHSA-frjw-g5j9-99p6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-frjw-g5j9-99p6", - "modified": "2024-01-15T12:30:20Z", + "modified": "2024-09-20T12:31:45Z", "published": "2024-01-15T12:30:20Z", "aliases": [ "CVE-2023-5253" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2024/04/GHSA-f874-8386-mf62/GHSA-f874-8386-mf62.json b/advisories/unreviewed/2024/04/GHSA-f874-8386-mf62/GHSA-f874-8386-mf62.json index 3a2c211aac3..aab525b3f21 100644 --- a/advisories/unreviewed/2024/04/GHSA-f874-8386-mf62/GHSA-f874-8386-mf62.json +++ b/advisories/unreviewed/2024/04/GHSA-f874-8386-mf62/GHSA-f874-8386-mf62.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f874-8386-mf62", - "modified": "2024-04-10T18:30:47Z", + "modified": "2024-09-20T12:31:45Z", "published": "2024-04-10T18:30:47Z", "aliases": [ "CVE-2023-6916" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-201", "CWE-522" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/05/GHSA-3j7w-h2jh-289j/GHSA-3j7w-h2jh-289j.json b/advisories/unreviewed/2024/05/GHSA-3j7w-h2jh-289j/GHSA-3j7w-h2jh-289j.json index e578ab4ba8b..c354e76c4c9 100644 --- a/advisories/unreviewed/2024/05/GHSA-3j7w-h2jh-289j/GHSA-3j7w-h2jh-289j.json +++ b/advisories/unreviewed/2024/05/GHSA-3j7w-h2jh-289j/GHSA-3j7w-h2jh-289j.json @@ -33,7 +33,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-20" + "CWE-20", + "CWE-356" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2024/05/GHSA-jwfg-733h-8pc5/GHSA-jwfg-733h-8pc5.json b/advisories/unreviewed/2024/05/GHSA-jwfg-733h-8pc5/GHSA-jwfg-733h-8pc5.json index d38bf6f1e36..de2161ef39b 100644 --- a/advisories/unreviewed/2024/05/GHSA-jwfg-733h-8pc5/GHSA-jwfg-733h-8pc5.json +++ b/advisories/unreviewed/2024/05/GHSA-jwfg-733h-8pc5/GHSA-jwfg-733h-8pc5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jwfg-733h-8pc5", - "modified": "2024-05-15T18:30:33Z", + "modified": "2024-09-20T12:31:46Z", "published": "2024-05-15T18:30:33Z", "aliases": [ "CVE-2023-5937" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-538", "CWE-732" ], "severity": "LOW", diff --git a/advisories/unreviewed/2024/09/GHSA-3j9f-4r3c-964g/GHSA-3j9f-4r3c-964g.json b/advisories/unreviewed/2024/09/GHSA-3j9f-4r3c-964g/GHSA-3j9f-4r3c-964g.json index 907cf32d098..2b6b6d14007 100644 --- a/advisories/unreviewed/2024/09/GHSA-3j9f-4r3c-964g/GHSA-3j9f-4r3c-964g.json +++ b/advisories/unreviewed/2024/09/GHSA-3j9f-4r3c-964g/GHSA-3j9f-4r3c-964g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3j9f-4r3c-964g", - "modified": "2024-09-18T09:30:38Z", + "modified": "2024-09-20T12:31:51Z", "published": "2024-09-18T09:30:38Z", "aliases": [ "CVE-2024-46797" diff --git a/advisories/unreviewed/2024/09/GHSA-94g3-94ff-rvhf/GHSA-94g3-94ff-rvhf.json b/advisories/unreviewed/2024/09/GHSA-94g3-94ff-rvhf/GHSA-94g3-94ff-rvhf.json new file mode 100644 index 00000000000..d582ead2d4c --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-94g3-94ff-rvhf/GHSA-94g3-94ff-rvhf.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-94g3-94ff-rvhf", + "modified": "2024-09-20T12:31:55Z", + "published": "2024-09-20T12:31:55Z", + "aliases": [ + "CVE-2024-9031" + ], + "details": "A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the file /project/task/{task_id}/show. The manipulation of the argument comment leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9031" + }, + { + "type": "WEB", + "url": "https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.278201" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.278201" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.410565" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-20T12:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/09/GHSA-gwmp-w6mx-r484/GHSA-gwmp-w6mx-r484.json b/advisories/unreviewed/2024/09/GHSA-gwmp-w6mx-r484/GHSA-gwmp-w6mx-r484.json new file mode 100644 index 00000000000..fc53a3ed9ee --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-gwmp-w6mx-r484/GHSA-gwmp-w6mx-r484.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gwmp-w6mx-r484", + "modified": "2024-09-20T12:31:54Z", + "published": "2024-09-20T12:31:54Z", + "aliases": [ + "CVE-2024-9030" + ], + "details": "A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note. The manipulation of the argument notes leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9030" + }, + { + "type": "WEB", + "url": "https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.278200" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.278200" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-20T12:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/09/GHSA-qmm7-r8jx-cj5h/GHSA-qmm7-r8jx-cj5h.json b/advisories/unreviewed/2024/09/GHSA-qmm7-r8jx-cj5h/GHSA-qmm7-r8jx-cj5h.json new file mode 100644 index 00000000000..def94c6fe3e --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-qmm7-r8jx-cj5h/GHSA-qmm7-r8jx-cj5h.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qmm7-r8jx-cj5h", + "modified": "2024-09-20T12:31:54Z", + "published": "2024-09-20T12:31:54Z", + "aliases": [ + "CVE-2024-9043" + ], + "details": "Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9043" + }, + { + "type": "WEB", + "url": "https://www.twcert.org.tw/en/cp-139-8103-b0568-2.html" + }, + { + "type": "WEB", + "url": "https://www.twcert.org.tw/tw/cp-132-8102-b94a9-1.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-20T11:15:13Z" + } +} \ No newline at end of file