diff --git a/advisories/unreviewed/2024/02/GHSA-7669-733q-3wj7/GHSA-7669-733q-3wj7.json b/advisories/unreviewed/2024/02/GHSA-7669-733q-3wj7/GHSA-7669-733q-3wj7.json index 358465d4e44..671e14918d4 100644 --- a/advisories/unreviewed/2024/02/GHSA-7669-733q-3wj7/GHSA-7669-733q-3wj7.json +++ b/advisories/unreviewed/2024/02/GHSA-7669-733q-3wj7/GHSA-7669-733q-3wj7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-7669-733q-3wj7", - "modified": "2024-02-26T18:30:31Z", + "modified": "2024-10-27T03:30:24Z", "published": "2024-02-26T18:30:31Z", "aliases": [ "CVE-2024-25767" ], "details": "nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-416" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-26T17:15:10Z" diff --git a/advisories/unreviewed/2024/02/GHSA-9mwr-g46g-q5mj/GHSA-9mwr-g46g-q5mj.json b/advisories/unreviewed/2024/02/GHSA-9mwr-g46g-q5mj/GHSA-9mwr-g46g-q5mj.json index 64cf48c425e..1960ad48c66 100644 --- a/advisories/unreviewed/2024/02/GHSA-9mwr-g46g-q5mj/GHSA-9mwr-g46g-q5mj.json +++ b/advisories/unreviewed/2024/02/GHSA-9mwr-g46g-q5mj/GHSA-9mwr-g46g-q5mj.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9mwr-g46g-q5mj", - "modified": "2024-02-29T03:33:17Z", + "modified": "2024-10-27T03:30:24Z", "published": "2024-02-29T03:33:17Z", "aliases": [ "CVE-2024-21725" ], "details": "Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-29T01:44:03Z" diff --git a/advisories/unreviewed/2024/03/GHSA-p824-x7wh-f45r/GHSA-p824-x7wh-f45r.json b/advisories/unreviewed/2024/03/GHSA-p824-x7wh-f45r/GHSA-p824-x7wh-f45r.json index 8ad21ba44f5..a11d683ff0e 100644 --- a/advisories/unreviewed/2024/03/GHSA-p824-x7wh-f45r/GHSA-p824-x7wh-f45r.json +++ b/advisories/unreviewed/2024/03/GHSA-p824-x7wh-f45r/GHSA-p824-x7wh-f45r.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p824-x7wh-f45r", - "modified": "2024-03-11T21:31:25Z", + "modified": "2024-10-27T03:30:24Z", "published": "2024-03-11T21:31:25Z", "aliases": [ "CVE-2024-25984" ], "details": "In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-120" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-11T19:15:47Z" diff --git a/advisories/unreviewed/2024/10/GHSA-mmvx-jpvg-3q6m/GHSA-mmvx-jpvg-3q6m.json b/advisories/unreviewed/2024/10/GHSA-mmvx-jpvg-3q6m/GHSA-mmvx-jpvg-3q6m.json new file mode 100644 index 00000000000..90452c37de3 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-mmvx-jpvg-3q6m/GHSA-mmvx-jpvg-3q6m.json @@ -0,0 +1,58 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mmvx-jpvg-3q6m", + "modified": "2024-10-27T03:30:25Z", + "published": "2024-10-27T03:30:25Z", + "aliases": [ + "CVE-2024-10408" + ], + "details": "A vulnerability has been found in code-projects Blood Bank Management up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /abs.php. The manipulation of the argument search leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10408" + }, + { + "type": "WEB", + "url": "https://code-projects.org" + }, + { + "type": "WEB", + "url": "https://gist.github.com/higordiego/46090516ba1b13fe3d2607ab4c0114f1" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.281938" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.281938" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.431491" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-27T03:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-q557-m5m4-m7pc/GHSA-q557-m5m4-m7pc.json b/advisories/unreviewed/2024/10/GHSA-q557-m5m4-m7pc/GHSA-q557-m5m4-m7pc.json index ffc47cb6846..ea525e13b61 100644 --- a/advisories/unreviewed/2024/10/GHSA-q557-m5m4-m7pc/GHSA-q557-m5m4-m7pc.json +++ b/advisories/unreviewed/2024/10/GHSA-q557-m5m4-m7pc/GHSA-q557-m5m4-m7pc.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-q557-m5m4-m7pc", - "modified": "2024-10-11T18:32:50Z", + "modified": "2024-10-27T03:30:25Z", "published": "2024-10-11T18:32:50Z", "aliases": [ "CVE-2024-44157" ], "details": "A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected system termination.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-120" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-11T18:15:08Z" diff --git a/advisories/unreviewed/2024/10/GHSA-vgx7-53vc-44m5/GHSA-vgx7-53vc-44m5.json b/advisories/unreviewed/2024/10/GHSA-vgx7-53vc-44m5/GHSA-vgx7-53vc-44m5.json new file mode 100644 index 00000000000..cdb69c6d19b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-vgx7-53vc-44m5/GHSA-vgx7-53vc-44m5.json @@ -0,0 +1,58 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vgx7-53vc-44m5", + "modified": "2024-10-27T03:30:25Z", + "published": "2024-10-27T03:30:25Z", + "aliases": [ + "CVE-2024-10409" + ], + "details": "A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10409" + }, + { + "type": "WEB", + "url": "https://code-projects.org" + }, + { + "type": "WEB", + "url": "https://gist.github.com/higordiego/5f927c5e0502b4ec31b3f7ef12556942" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.281939" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.281939" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.431494" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-27T03:15:03Z" + } +} \ No newline at end of file