diff --git a/advisories/unreviewed/2024/02/GHSA-8xxh-r5gq-2wxg/GHSA-8xxh-r5gq-2wxg.json b/advisories/unreviewed/2024/02/GHSA-8xxh-r5gq-2wxg/GHSA-8xxh-r5gq-2wxg.json
index 9ddd2a6c2fa..f1a4bf7baa2 100644
--- a/advisories/unreviewed/2024/02/GHSA-8xxh-r5gq-2wxg/GHSA-8xxh-r5gq-2wxg.json
+++ b/advisories/unreviewed/2024/02/GHSA-8xxh-r5gq-2wxg/GHSA-8xxh-r5gq-2wxg.json
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/02/GHSA-rmqc-8468-5wx2/GHSA-rmqc-8468-5wx2.json b/advisories/unreviewed/2024/02/GHSA-rmqc-8468-5wx2/GHSA-rmqc-8468-5wx2.json
index 430f70908f2..e231742336d 100644
--- a/advisories/unreviewed/2024/02/GHSA-rmqc-8468-5wx2/GHSA-rmqc-8468-5wx2.json
+++ b/advisories/unreviewed/2024/02/GHSA-rmqc-8468-5wx2/GHSA-rmqc-8468-5wx2.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rmqc-8468-5wx2",
-  "modified": "2024-02-15T06:31:35Z",
+  "modified": "2024-12-10T00:31:25Z",
   "published": "2024-02-15T06:31:35Z",
   "aliases": [
     "CVE-2022-23087"
   ],
   "details": "The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted.  These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload (\"TSO\").  The e1000 device model uses an on-stack buffer to generate the modified packet header when simulating these modifications on transmitted packets.\n\nWhen checksum offload is requested for a transmitted packet, the e1000 device model used a guest-provided value to specify the checksum offset in the on-stack buffer.  The offset was not validated for certain packet types.\n\nA misbehaving bhyve guest could overwrite memory in the bhyve process on the host, possibly leading to code execution in the host context.\n\nThe bhyve process runs in a Capsicum sandbox, which (depending on the FreeBSD version and bhyve configuration) limits the impact of exploiting this issue.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -17,11 +22,17 @@
     {
       "type": "WEB",
       "url": "https://security.freebsd.org/advisories/FreeBSD-SA-22:05.bhyve.asc"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20240415-0005"
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-15T05:15:09Z"
diff --git a/advisories/unreviewed/2024/05/GHSA-774r-q974-38m9/GHSA-774r-q974-38m9.json b/advisories/unreviewed/2024/05/GHSA-774r-q974-38m9/GHSA-774r-q974-38m9.json
index 9048cdc79d7..41d07345c46 100644
--- a/advisories/unreviewed/2024/05/GHSA-774r-q974-38m9/GHSA-774r-q974-38m9.json
+++ b/advisories/unreviewed/2024/05/GHSA-774r-q974-38m9/GHSA-774r-q974-38m9.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-774r-q974-38m9",
-  "modified": "2024-05-16T06:30:49Z",
+  "modified": "2024-12-10T00:31:25Z",
   "published": "2024-05-16T06:30:49Z",
   "aliases": [
     "CVE-2024-4929"
@@ -11,6 +11,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
     }
   ],
   "affected": [],
diff --git a/advisories/unreviewed/2024/05/GHSA-8pwq-h6xq-q459/GHSA-8pwq-h6xq-q459.json b/advisories/unreviewed/2024/05/GHSA-8pwq-h6xq-q459/GHSA-8pwq-h6xq-q459.json
index bc89da1398e..90de5f0968f 100644
--- a/advisories/unreviewed/2024/05/GHSA-8pwq-h6xq-q459/GHSA-8pwq-h6xq-q459.json
+++ b/advisories/unreviewed/2024/05/GHSA-8pwq-h6xq-q459/GHSA-8pwq-h6xq-q459.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8pwq-h6xq-q459",
-  "modified": "2024-05-16T06:30:50Z",
+  "modified": "2024-12-10T00:31:25Z",
   "published": "2024-05-16T06:30:50Z",
   "aliases": [
     "CVE-2024-4933"
@@ -11,6 +11,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
     }
   ],
   "affected": [],
diff --git a/advisories/unreviewed/2024/05/GHSA-fcgh-hm5r-m53h/GHSA-fcgh-hm5r-m53h.json b/advisories/unreviewed/2024/05/GHSA-fcgh-hm5r-m53h/GHSA-fcgh-hm5r-m53h.json
index 65b2580d7eb..4e9099dc2d1 100644
--- a/advisories/unreviewed/2024/05/GHSA-fcgh-hm5r-m53h/GHSA-fcgh-hm5r-m53h.json
+++ b/advisories/unreviewed/2024/05/GHSA-fcgh-hm5r-m53h/GHSA-fcgh-hm5r-m53h.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fcgh-hm5r-m53h",
-  "modified": "2024-05-16T03:30:45Z",
+  "modified": "2024-12-10T00:31:25Z",
   "published": "2024-05-16T03:30:45Z",
   "aliases": [
     "CVE-2024-4927"
@@ -11,6 +11,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
     }
   ],
   "affected": [],
diff --git a/advisories/unreviewed/2024/05/GHSA-fwm3-jv2w-cqfq/GHSA-fwm3-jv2w-cqfq.json b/advisories/unreviewed/2024/05/GHSA-fwm3-jv2w-cqfq/GHSA-fwm3-jv2w-cqfq.json
index 43670de4a29..94f70270b66 100644
--- a/advisories/unreviewed/2024/05/GHSA-fwm3-jv2w-cqfq/GHSA-fwm3-jv2w-cqfq.json
+++ b/advisories/unreviewed/2024/05/GHSA-fwm3-jv2w-cqfq/GHSA-fwm3-jv2w-cqfq.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fwm3-jv2w-cqfq",
-  "modified": "2024-05-16T06:30:50Z",
+  "modified": "2024-12-10T00:31:25Z",
   "published": "2024-05-16T06:30:50Z",
   "aliases": [
     "CVE-2024-4931"
@@ -11,6 +11,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
     }
   ],
   "affected": [],
diff --git a/advisories/unreviewed/2024/05/GHSA-h6hw-6pc7-77rf/GHSA-h6hw-6pc7-77rf.json b/advisories/unreviewed/2024/05/GHSA-h6hw-6pc7-77rf/GHSA-h6hw-6pc7-77rf.json
index 30142f5d159..c010167b692 100644
--- a/advisories/unreviewed/2024/05/GHSA-h6hw-6pc7-77rf/GHSA-h6hw-6pc7-77rf.json
+++ b/advisories/unreviewed/2024/05/GHSA-h6hw-6pc7-77rf/GHSA-h6hw-6pc7-77rf.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h6hw-6pc7-77rf",
-  "modified": "2024-05-16T03:30:45Z",
+  "modified": "2024-12-10T00:31:25Z",
   "published": "2024-05-16T03:30:45Z",
   "aliases": [
     "CVE-2024-4928"
@@ -11,6 +11,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
     }
   ],
   "affected": [],
diff --git a/advisories/unreviewed/2024/05/GHSA-vfqm-877m-9vwv/GHSA-vfqm-877m-9vwv.json b/advisories/unreviewed/2024/05/GHSA-vfqm-877m-9vwv/GHSA-vfqm-877m-9vwv.json
index 2e04eea421a..77799430be9 100644
--- a/advisories/unreviewed/2024/05/GHSA-vfqm-877m-9vwv/GHSA-vfqm-877m-9vwv.json
+++ b/advisories/unreviewed/2024/05/GHSA-vfqm-877m-9vwv/GHSA-vfqm-877m-9vwv.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vfqm-877m-9vwv",
-  "modified": "2024-05-16T06:30:50Z",
+  "modified": "2024-12-10T00:31:25Z",
   "published": "2024-05-16T06:30:50Z",
   "aliases": [
     "CVE-2024-4932"
@@ -11,6 +11,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
     }
   ],
   "affected": [],
diff --git a/advisories/unreviewed/2024/05/GHSA-vgwr-cx5h-w5c3/GHSA-vgwr-cx5h-w5c3.json b/advisories/unreviewed/2024/05/GHSA-vgwr-cx5h-w5c3/GHSA-vgwr-cx5h-w5c3.json
index 44d00a90a0b..752293af035 100644
--- a/advisories/unreviewed/2024/05/GHSA-vgwr-cx5h-w5c3/GHSA-vgwr-cx5h-w5c3.json
+++ b/advisories/unreviewed/2024/05/GHSA-vgwr-cx5h-w5c3/GHSA-vgwr-cx5h-w5c3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vgwr-cx5h-w5c3",
-  "modified": "2024-05-16T06:30:50Z",
+  "modified": "2024-12-10T00:31:25Z",
   "published": "2024-05-16T06:30:49Z",
   "aliases": [
     "CVE-2024-4930"
@@ -11,6 +11,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
     }
   ],
   "affected": [],
diff --git a/advisories/unreviewed/2024/07/GHSA-8h4c-r25h-3p7f/GHSA-8h4c-r25h-3p7f.json b/advisories/unreviewed/2024/07/GHSA-8h4c-r25h-3p7f/GHSA-8h4c-r25h-3p7f.json
index e2e722803ac..a7478effbff 100644
--- a/advisories/unreviewed/2024/07/GHSA-8h4c-r25h-3p7f/GHSA-8h4c-r25h-3p7f.json
+++ b/advisories/unreviewed/2024/07/GHSA-8h4c-r25h-3p7f/GHSA-8h4c-r25h-3p7f.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8h4c-r25h-3p7f",
-  "modified": "2024-07-30T09:32:03Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-07-30T09:32:03Z",
   "aliases": [
     "CVE-2024-42151"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable\n\nTest case dummy_st_ops/dummy_init_ret_value passes NULL as the first\nparameter of the test_1() function. Mark this parameter as nullable to\nmake verifier aware of such possibility.\nOtherwise, NULL check in the test_1() code:\n\n      SEC(\"struct_ops/test_1\")\n      int BPF_PROG(test_1, struct bpf_dummy_ops_state *state)\n      {\n            if (!state)\n                    return ...;\n\n            ... access state ...\n      }\n\nMight be removed by verifier, thus triggering NULL pointer dereference\nunder certain conditions.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-07-30T08:15:06Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-hpc7-8m94-wf37/GHSA-hpc7-8m94-wf37.json b/advisories/unreviewed/2024/07/GHSA-hpc7-8m94-wf37/GHSA-hpc7-8m94-wf37.json
index b140d7cade6..0e64e574757 100644
--- a/advisories/unreviewed/2024/07/GHSA-hpc7-8m94-wf37/GHSA-hpc7-8m94-wf37.json
+++ b/advisories/unreviewed/2024/07/GHSA-hpc7-8m94-wf37/GHSA-hpc7-8m94-wf37.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hpc7-8m94-wf37",
-  "modified": "2024-07-30T09:32:03Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-07-30T09:32:02Z",
   "aliases": [
     "CVE-2024-42150"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: txgbe: remove separate irq request for MSI and INTx\n\nWhen using MSI or INTx interrupts, request_irq() for pdev->irq will\nconflict with request_threaded_irq() for txgbe->misc.irq, to cause\nsystem crash. So remove txgbe_request_irq() for MSI/INTx case, and\nrename txgbe_request_msix_irqs() since it only request for queue irqs.\n\nAdd wx->misc_irq_domain to determine whether the driver creates an IRQ\ndomain and threaded request the IRQs.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -25,7 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-07-30T08:15:06Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-xggq-vrr8-pfwp/GHSA-xggq-vrr8-pfwp.json b/advisories/unreviewed/2024/07/GHSA-xggq-vrr8-pfwp/GHSA-xggq-vrr8-pfwp.json
index 4c0e81e5cad..fd060cf79b1 100644
--- a/advisories/unreviewed/2024/07/GHSA-xggq-vrr8-pfwp/GHSA-xggq-vrr8-pfwp.json
+++ b/advisories/unreviewed/2024/07/GHSA-xggq-vrr8-pfwp/GHSA-xggq-vrr8-pfwp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xggq-vrr8-pfwp",
-  "modified": "2024-07-30T09:32:03Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-07-30T09:32:02Z",
   "aliases": [
     "CVE-2024-42149"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: don't misleadingly warn during thaw operations\n\nThe block device may have been frozen before it was claimed by a\nfilesystem. Concurrently another process might try to mount that\nfrozen block device and has temporarily claimed the block device for\nthat purpose causing a concurrent fs_bdev_thaw() to end up here. The\nmounter is already about to abort mounting because they still saw an\nelevanted bdev->bd_fsfreeze_count so get_bdev_super() will return\nNULL in that case.\n\nFor example, P1 calls dm_suspend() which calls into bdev_freeze() before\nthe block device has been claimed by the filesystem. This brings\nbdev->bd_fsfreeze_count to 1 and no call into fs_bdev_freeze() is\nrequired.\n\nNow P2 tries to mount that frozen block device. It claims it and checks\nbdev->bd_fsfreeze_count. As it's elevated it aborts mounting.\n\nIn the meantime P3 called dm_resume(). P3 sees that the block device is\nalready claimed by a filesystem and calls into fs_bdev_thaw().\n\nP3 takes a passive reference and realizes that the filesystem isn't\nready yet. P3 puts itself to sleep to wait for the filesystem to become\nready.\n\nP2 now puts the last active reference to the filesystem and marks it as\ndying. P3 gets woken, sees that the filesystem is dying and\nget_bdev_super() fails.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-07-30T08:15:06Z"
diff --git a/advisories/unreviewed/2024/11/GHSA-5mmf-rjpr-m4cj/GHSA-5mmf-rjpr-m4cj.json b/advisories/unreviewed/2024/11/GHSA-5mmf-rjpr-m4cj/GHSA-5mmf-rjpr-m4cj.json
index 13977313bab..1acb4da0b9b 100644
--- a/advisories/unreviewed/2024/11/GHSA-5mmf-rjpr-m4cj/GHSA-5mmf-rjpr-m4cj.json
+++ b/advisories/unreviewed/2024/11/GHSA-5mmf-rjpr-m4cj/GHSA-5mmf-rjpr-m4cj.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5mmf-rjpr-m4cj",
-  "modified": "2024-11-14T18:30:34Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-11-11T15:31:02Z",
   "aliases": [
     "CVE-2024-50263"
@@ -26,6 +26,10 @@
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/985da552a98e27096444508ce5d853244019111f"
+    },
+    {
+      "type": "WEB",
+      "url": "https://project-zero.issues.chromium.org/issues/373391951"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2024/11/GHSA-68xx-p949-f9wp/GHSA-68xx-p949-f9wp.json b/advisories/unreviewed/2024/11/GHSA-68xx-p949-f9wp/GHSA-68xx-p949-f9wp.json
index 1e3f7030739..0cad7d27d21 100644
--- a/advisories/unreviewed/2024/11/GHSA-68xx-p949-f9wp/GHSA-68xx-p949-f9wp.json
+++ b/advisories/unreviewed/2024/11/GHSA-68xx-p949-f9wp/GHSA-68xx-p949-f9wp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-68xx-p949-f9wp",
-  "modified": "2024-11-08T06:30:48Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-11-08T06:30:48Z",
   "aliases": [
     "CVE-2024-50186"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: explicitly clear the sk pointer, when pf->create fails\n\nWe have recently noticed the exact same KASAN splat as in commit\n6cd4a78d962b (\"net: do not leave a dangling sk pointer, when socket\ncreation fails\"). The problem is that commit did not fully address the\nproblem, as some pf->create implementations do not use sk_common_release\nin their error paths.\n\nFor example, we can use the same reproducer as in the above commit, but\nchanging ping to arping. arping uses AF_PACKET socket and if packet_create\nfails, it will just sk_free the allocated sk object.\n\nWhile we could chase all the pf->create implementations and make sure they\nNULL the freed sk object on error from the socket, we can't guarantee\nfuture protocols will not make the same mistake.\n\nSo it is easier to just explicitly NULL the sk pointer upon return from\npf->create in __sock_create. We do know that pf->create always releases the\nallocated sk object on error, so if the pointer is not NULL, it is\ndefinitely dangling.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -36,8 +41,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-11-08T06:15:15Z"
diff --git a/advisories/unreviewed/2024/11/GHSA-c9qp-272q-mvf9/GHSA-c9qp-272q-mvf9.json b/advisories/unreviewed/2024/11/GHSA-c9qp-272q-mvf9/GHSA-c9qp-272q-mvf9.json
index f79b5de3a4c..f1106f8a051 100644
--- a/advisories/unreviewed/2024/11/GHSA-c9qp-272q-mvf9/GHSA-c9qp-272q-mvf9.json
+++ b/advisories/unreviewed/2024/11/GHSA-c9qp-272q-mvf9/GHSA-c9qp-272q-mvf9.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c9qp-272q-mvf9",
-  "modified": "2024-11-08T18:30:50Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-11-08T06:30:48Z",
   "aliases": [
     "CVE-2024-50184"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio_pmem: Check device status before requesting flush\n\nIf a pmem device is in a bad status, the driver side could wait for\nhost ack forever in virtio_pmem_flush(), causing the system to hang.\n\nSo add a status check in the beginning of virtio_pmem_flush() to return\nearly if the device is not activated.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -44,8 +49,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-754"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-11-08T06:15:15Z"
diff --git a/advisories/unreviewed/2024/11/GHSA-cx44-8c8j-5rr2/GHSA-cx44-8c8j-5rr2.json b/advisories/unreviewed/2024/11/GHSA-cx44-8c8j-5rr2/GHSA-cx44-8c8j-5rr2.json
index 7fcd39e9e85..0330ee55526 100644
--- a/advisories/unreviewed/2024/11/GHSA-cx44-8c8j-5rr2/GHSA-cx44-8c8j-5rr2.json
+++ b/advisories/unreviewed/2024/11/GHSA-cx44-8c8j-5rr2/GHSA-cx44-8c8j-5rr2.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cx44-8c8j-5rr2",
-  "modified": "2024-11-09T12:30:47Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-11-09T12:30:47Z",
   "aliases": [
     "CVE-2024-50220"
@@ -21,6 +21,10 @@
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/f64e67e5d3a45a4a04286c47afade4b518acd47b"
+    },
+    {
+      "type": "WEB",
+      "url": "https://project-zero.issues.chromium.org/issues/373391951"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2024/11/GHSA-jhcx-6vfx-gpqr/GHSA-jhcx-6vfx-gpqr.json b/advisories/unreviewed/2024/11/GHSA-jhcx-6vfx-gpqr/GHSA-jhcx-6vfx-gpqr.json
index e4d6db4707c..97862441cba 100644
--- a/advisories/unreviewed/2024/11/GHSA-jhcx-6vfx-gpqr/GHSA-jhcx-6vfx-gpqr.json
+++ b/advisories/unreviewed/2024/11/GHSA-jhcx-6vfx-gpqr/GHSA-jhcx-6vfx-gpqr.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jhcx-6vfx-gpqr",
-  "modified": "2024-11-08T06:30:48Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-11-08T06:30:48Z",
   "aliases": [
     "CVE-2024-50183"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance\n\nDeleting an NPIV instance requires all fabric ndlps to be released before\nan NPIV's resources can be torn down.  Failure to release fabric ndlps\nbeforehand opens kref imbalance race conditions.  Fix by forcing the DA_ID\nto complete synchronously with usage of wait_queue.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-362"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-11-08T06:15:15Z"
diff --git a/advisories/unreviewed/2024/11/GHSA-jqx7-c9rv-mhxh/GHSA-jqx7-c9rv-mhxh.json b/advisories/unreviewed/2024/11/GHSA-jqx7-c9rv-mhxh/GHSA-jqx7-c9rv-mhxh.json
index 4bd694f5aeb..31e61b4b991 100644
--- a/advisories/unreviewed/2024/11/GHSA-jqx7-c9rv-mhxh/GHSA-jqx7-c9rv-mhxh.json
+++ b/advisories/unreviewed/2024/11/GHSA-jqx7-c9rv-mhxh/GHSA-jqx7-c9rv-mhxh.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jqx7-c9rv-mhxh",
-  "modified": "2024-11-08T06:30:48Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-11-08T06:30:48Z",
   "aliases": [
     "CVE-2024-50177"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: fix a UBSAN warning in DML2.1\n\nWhen programming phantom pipe, since cursor_width is explicity set to 0,\nthis causes calculation logic to trigger overflow for an unsigned int\ntriggering the kernel's UBSAN check as below:\n\n[   40.962845] UBSAN: shift-out-of-bounds in /tmp/amd.EfpumTkO/amd/amdgpu/../display/dc/dml2/dml21/src/dml2_core/dml2_core_dcn4_calcs.c:3312:34\n[   40.962849] shift exponent 4294967170 is too large for 32-bit type 'unsigned int'\n[   40.962852] CPU: 1 PID: 1670 Comm: gnome-shell Tainted: G        W  OE      6.5.0-41-generic #41~22.04.2-Ubuntu\n[   40.962854] Hardware name: Gigabyte Technology Co., Ltd. X670E AORUS PRO X/X670E AORUS PRO X, BIOS F21 01/10/2024\n[   40.962856] Call Trace:\n[   40.962857]  <TASK>\n[   40.962860]  dump_stack_lvl+0x48/0x70\n[   40.962870]  dump_stack+0x10/0x20\n[   40.962872]  __ubsan_handle_shift_out_of_bounds+0x1ac/0x360\n[   40.962878]  calculate_cursor_req_attributes.cold+0x1b/0x28 [amdgpu]\n[   40.963099]  dml_core_mode_support+0x6b91/0x16bc0 [amdgpu]\n[   40.963327]  ? srso_alias_return_thunk+0x5/0x7f\n[   40.963331]  ? CalculateWatermarksMALLUseAndDRAMSpeedChangeSupport+0x18b8/0x2790 [amdgpu]\n[   40.963534]  ? srso_alias_return_thunk+0x5/0x7f\n[   40.963536]  ? dml_core_mode_support+0xb3db/0x16bc0 [amdgpu]\n[   40.963730]  dml2_core_calcs_mode_support_ex+0x2c/0x90 [amdgpu]\n[   40.963906]  ? srso_alias_return_thunk+0x5/0x7f\n[   40.963909]  ? dml2_core_calcs_mode_support_ex+0x2c/0x90 [amdgpu]\n[   40.964078]  core_dcn4_mode_support+0x72/0xbf0 [amdgpu]\n[   40.964247]  dml2_top_optimization_perform_optimization_phase+0x1d3/0x2a0 [amdgpu]\n[   40.964420]  dml2_build_mode_programming+0x23d/0x750 [amdgpu]\n[   40.964587]  dml21_validate+0x274/0x770 [amdgpu]\n[   40.964761]  ? srso_alias_return_thunk+0x5/0x7f\n[   40.964763]  ? resource_append_dpp_pipes_for_plane_composition+0x27c/0x3b0 [amdgpu]\n[   40.964942]  dml2_validate+0x504/0x750 [amdgpu]\n[   40.965117]  ? dml21_copy+0x95/0xb0 [amdgpu]\n[   40.965291]  ? srso_alias_return_thunk+0x5/0x7f\n[   40.965295]  dcn401_validate_bandwidth+0x4e/0x70 [amdgpu]\n[   40.965491]  update_planes_and_stream_state+0x38d/0x5c0 [amdgpu]\n[   40.965672]  update_planes_and_stream_v3+0x52/0x1e0 [amdgpu]\n[   40.965845]  ? srso_alias_return_thunk+0x5/0x7f\n[   40.965849]  dc_update_planes_and_stream+0x71/0xb0 [amdgpu]\n\nFix this by adding a guard for checking cursor width before triggering\nthe size calculation.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-190"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-11-08T06:15:15Z"
diff --git a/advisories/unreviewed/2024/11/GHSA-q7m5-gh3m-8v66/GHSA-q7m5-gh3m-8v66.json b/advisories/unreviewed/2024/11/GHSA-q7m5-gh3m-8v66/GHSA-q7m5-gh3m-8v66.json
index 3d773643d71..ef41a2083c2 100644
--- a/advisories/unreviewed/2024/11/GHSA-q7m5-gh3m-8v66/GHSA-q7m5-gh3m-8v66.json
+++ b/advisories/unreviewed/2024/11/GHSA-q7m5-gh3m-8v66/GHSA-q7m5-gh3m-8v66.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q7m5-gh3m-8v66",
-  "modified": "2024-11-08T06:30:48Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-11-08T06:30:48Z",
   "aliases": [
     "CVE-2024-50185"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: handle consistently DSS corruption\n\nBugged peer implementation can send corrupted DSS options, consistently\nhitting a few warning in the data path. Use DEBUG_NET assertions, to\navoid the splat on some builds and handle consistently the error, dumping\nrelated MIBs and performing fallback and/or reset according to the\nsubflow type.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -41,7 +46,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-11-08T06:15:15Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-39rf-q9wg-hfr6/GHSA-39rf-q9wg-hfr6.json b/advisories/unreviewed/2024/12/GHSA-39rf-q9wg-hfr6/GHSA-39rf-q9wg-hfr6.json
index 58957374e16..9defcf69515 100644
--- a/advisories/unreviewed/2024/12/GHSA-39rf-q9wg-hfr6/GHSA-39rf-q9wg-hfr6.json
+++ b/advisories/unreviewed/2024/12/GHSA-39rf-q9wg-hfr6/GHSA-39rf-q9wg-hfr6.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-39rf-q9wg-hfr6",
-  "modified": "2024-12-05T18:31:03Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-12-05T18:31:03Z",
   "aliases": [
     "CVE-2024-12130"
   ],
   "details": "An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena®\n\n that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
diff --git a/advisories/unreviewed/2024/12/GHSA-3h3p-vm3f-v359/GHSA-3h3p-vm3f-v359.json b/advisories/unreviewed/2024/12/GHSA-3h3p-vm3f-v359/GHSA-3h3p-vm3f-v359.json
new file mode 100644
index 00000000000..efe3d0dd9b7
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-3h3p-vm3f-v359/GHSA-3h3p-vm3f-v359.json
@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3h3p-vm3f-v359",
+  "modified": "2024-12-10T00:31:27Z",
+  "published": "2024-12-10T00:31:27Z",
+  "aliases": [
+    "CVE-2024-55635"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55635"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-core-2024-005"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-10T00:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-7cwc-fjqm-8vh8/GHSA-7cwc-fjqm-8vh8.json b/advisories/unreviewed/2024/12/GHSA-7cwc-fjqm-8vh8/GHSA-7cwc-fjqm-8vh8.json
new file mode 100644
index 00000000000..78f169ca999
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-7cwc-fjqm-8vh8/GHSA-7cwc-fjqm-8vh8.json
@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7cwc-fjqm-8vh8",
+  "modified": "2024-12-10T00:31:27Z",
+  "published": "2024-12-10T00:31:27Z",
+  "aliases": [
+    "CVE-2024-55634"
+  ],
+  "details": "A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55634"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-core-2024-004"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-178"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-10T00:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-8mvq-8h2v-j9vf/GHSA-8mvq-8h2v-j9vf.json b/advisories/unreviewed/2024/12/GHSA-8mvq-8h2v-j9vf/GHSA-8mvq-8h2v-j9vf.json
new file mode 100644
index 00000000000..66bb219702c
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-8mvq-8h2v-j9vf/GHSA-8mvq-8h2v-j9vf.json
@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8mvq-8h2v-j9vf",
+  "modified": "2024-12-10T00:31:26Z",
+  "published": "2024-12-10T00:31:26Z",
+  "aliases": [
+    "CVE-2024-12393"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12393"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-core-2024-003"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-10T00:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-938f-5r4f-h65v/GHSA-938f-5r4f-h65v.json b/advisories/unreviewed/2024/12/GHSA-938f-5r4f-h65v/GHSA-938f-5r4f-h65v.json
new file mode 100644
index 00000000000..da5285f558e
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-938f-5r4f-h65v/GHSA-938f-5r4f-h65v.json
@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-938f-5r4f-h65v",
+  "modified": "2024-12-10T00:31:27Z",
+  "published": "2024-12-10T00:31:27Z",
+  "aliases": [
+    "CVE-2024-55636"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55636"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-core-2024-006"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-915"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-10T00:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-c957-vcxp-6qqg/GHSA-c957-vcxp-6qqg.json b/advisories/unreviewed/2024/12/GHSA-c957-vcxp-6qqg/GHSA-c957-vcxp-6qqg.json
new file mode 100644
index 00000000000..40bcbe23ac2
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-c957-vcxp-6qqg/GHSA-c957-vcxp-6qqg.json
@@ -0,0 +1,37 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c957-vcxp-6qqg",
+  "modified": "2024-12-10T00:31:26Z",
+  "published": "2024-12-10T00:31:26Z",
+  "aliases": [
+    "CVE-2024-50625"
+  ],
+  "details": "An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentially enabling privilege escalation when combined with other vulnerabilities.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50625"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/resources/security"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-09T22:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-cgqg-4h9g-r66q/GHSA-cgqg-4h9g-r66q.json b/advisories/unreviewed/2024/12/GHSA-cgqg-4h9g-r66q/GHSA-cgqg-4h9g-r66q.json
index 43743215785..f70d3054fdf 100644
--- a/advisories/unreviewed/2024/12/GHSA-cgqg-4h9g-r66q/GHSA-cgqg-4h9g-r66q.json
+++ b/advisories/unreviewed/2024/12/GHSA-cgqg-4h9g-r66q/GHSA-cgqg-4h9g-r66q.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cgqg-4h9g-r66q",
-  "modified": "2024-12-07T12:30:25Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-12-07T12:30:25Z",
   "aliases": [
     "CVE-2024-11010"
diff --git a/advisories/unreviewed/2024/12/GHSA-f5gg-m3qx-wxvq/GHSA-f5gg-m3qx-wxvq.json b/advisories/unreviewed/2024/12/GHSA-f5gg-m3qx-wxvq/GHSA-f5gg-m3qx-wxvq.json
index 1fc38f0c191..5e66142f791 100644
--- a/advisories/unreviewed/2024/12/GHSA-f5gg-m3qx-wxvq/GHSA-f5gg-m3qx-wxvq.json
+++ b/advisories/unreviewed/2024/12/GHSA-f5gg-m3qx-wxvq/GHSA-f5gg-m3qx-wxvq.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f5gg-m3qx-wxvq",
-  "modified": "2024-12-05T18:31:03Z",
+  "modified": "2024-12-10T00:31:26Z",
   "published": "2024-12-05T18:31:03Z",
   "aliases": [
     "CVE-2024-11156"
   ],
   "details": "An “out of bounds write”  code execution vulnerability exists in the\n\nRockwell Automation Arena®\n\n that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
diff --git a/advisories/unreviewed/2024/12/GHSA-gvf2-2f4g-jqf4/GHSA-gvf2-2f4g-jqf4.json b/advisories/unreviewed/2024/12/GHSA-gvf2-2f4g-jqf4/GHSA-gvf2-2f4g-jqf4.json
new file mode 100644
index 00000000000..b4965937962
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-gvf2-2f4g-jqf4/GHSA-gvf2-2f4g-jqf4.json
@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gvf2-2f4g-jqf4",
+  "modified": "2024-12-10T00:31:27Z",
+  "published": "2024-12-10T00:31:27Z",
+  "aliases": [
+    "CVE-2024-55638"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 7.0 before 7.102, from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55638"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-core-2024-008"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-915"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-10T00:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-hj9q-mj9c-fcp4/GHSA-hj9q-mj9c-fcp4.json b/advisories/unreviewed/2024/12/GHSA-hj9q-mj9c-fcp4/GHSA-hj9q-mj9c-fcp4.json
new file mode 100644
index 00000000000..4fbd408e577
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-hj9q-mj9c-fcp4/GHSA-hj9q-mj9c-fcp4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hj9q-mj9c-fcp4",
+  "modified": "2024-12-10T00:31:26Z",
+  "published": "2024-12-10T00:31:26Z",
+  "aliases": [
+    "CVE-2024-12174"
+  ],
+  "details": "An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12174"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.tenable.com/security/tns-2024-19"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-295"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-09T22:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-j9q2-q6gv-w438/GHSA-j9q2-q6gv-w438.json b/advisories/unreviewed/2024/12/GHSA-j9q2-q6gv-w438/GHSA-j9q2-q6gv-w438.json
new file mode 100644
index 00000000000..bf045223ca8
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-j9q2-q6gv-w438/GHSA-j9q2-q6gv-w438.json
@@ -0,0 +1,37 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j9q2-q6gv-w438",
+  "modified": "2024-12-10T00:31:26Z",
+  "published": "2024-12-10T00:31:26Z",
+  "aliases": [
+    "CVE-2024-50626"
+  ],
+  "details": "An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50626"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/resources/security"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-09T22:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-q234-cxpj-mgpq/GHSA-q234-cxpj-mgpq.json b/advisories/unreviewed/2024/12/GHSA-q234-cxpj-mgpq/GHSA-q234-cxpj-mgpq.json
new file mode 100644
index 00000000000..17fb69df1fa
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-q234-cxpj-mgpq/GHSA-q234-cxpj-mgpq.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q234-cxpj-mgpq",
+  "modified": "2024-12-10T00:31:27Z",
+  "published": "2024-12-10T00:31:27Z",
+  "aliases": [
+    "CVE-2024-9672"
+  ],
+  "details": "A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9672"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.papercut.com/kb/Main/security-bulletin-december-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-917"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-10T00:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-vq87-xfrv-42wp/GHSA-vq87-xfrv-42wp.json b/advisories/unreviewed/2024/12/GHSA-vq87-xfrv-42wp/GHSA-vq87-xfrv-42wp.json
new file mode 100644
index 00000000000..a9694d0e7c9
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-vq87-xfrv-42wp/GHSA-vq87-xfrv-42wp.json
@@ -0,0 +1,37 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vq87-xfrv-42wp",
+  "modified": "2024-12-10T00:31:26Z",
+  "published": "2024-12-10T00:31:26Z",
+  "aliases": [
+    "CVE-2024-50627"
+  ],
+  "details": "An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentially leading to unauthorized system access.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50627"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/resources/security"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-09T22:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-w6rx-9g2x-mg5g/GHSA-w6rx-9g2x-mg5g.json b/advisories/unreviewed/2024/12/GHSA-w6rx-9g2x-mg5g/GHSA-w6rx-9g2x-mg5g.json
new file mode 100644
index 00000000000..2fb67193da4
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-w6rx-9g2x-mg5g/GHSA-w6rx-9g2x-mg5g.json
@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w6rx-9g2x-mg5g",
+  "modified": "2024-12-10T00:31:27Z",
+  "published": "2024-12-10T00:31:27Z",
+  "aliases": [
+    "CVE-2024-55637"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55637"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-core-2024-007"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-915"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-10T00:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-x4ww-j464-7jpg/GHSA-x4ww-j464-7jpg.json b/advisories/unreviewed/2024/12/GHSA-x4ww-j464-7jpg/GHSA-x4ww-j464-7jpg.json
new file mode 100644
index 00000000000..d2a6c101f7b
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-x4ww-j464-7jpg/GHSA-x4ww-j464-7jpg.json
@@ -0,0 +1,37 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x4ww-j464-7jpg",
+  "modified": "2024-12-10T00:31:26Z",
+  "published": "2024-12-10T00:31:26Z",
+  "aliases": [
+    "CVE-2024-50628"
+  ],
+  "details": "An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50628"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.digi.com/resources/security"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-09T22:15:22Z"
+  }
+}
\ No newline at end of file