diff --git a/advisories/unreviewed/2024/01/GHSA-qmff-49xc-7rf6/GHSA-qmff-49xc-7rf6.json b/advisories/unreviewed/2024/01/GHSA-qmff-49xc-7rf6/GHSA-qmff-49xc-7rf6.json
index 9dbfd8f6b4d..c6666a9dc4b 100644
--- a/advisories/unreviewed/2024/01/GHSA-qmff-49xc-7rf6/GHSA-qmff-49xc-7rf6.json
+++ b/advisories/unreviewed/2024/01/GHSA-qmff-49xc-7rf6/GHSA-qmff-49xc-7rf6.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qmff-49xc-7rf6",
-  "modified": "2024-02-15T21:31:26Z",
+  "modified": "2024-02-20T09:30:30Z",
   "published": "2024-01-17T18:31:36Z",
   "aliases": [
     "CVE-2024-0646"
@@ -41,6 +41,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2024:0851"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2024:0876"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2024-0646"
diff --git a/advisories/unreviewed/2024/02/GHSA-2q9p-5gw5-gr76/GHSA-2q9p-5gw5-gr76.json b/advisories/unreviewed/2024/02/GHSA-2q9p-5gw5-gr76/GHSA-2q9p-5gw5-gr76.json
new file mode 100644
index 00000000000..acc9745d6f2
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-2q9p-5gw5-gr76/GHSA-2q9p-5gw5-gr76.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2q9p-5gw5-gr76",
+  "modified": "2024-02-20T09:30:32Z",
+  "published": "2024-02-20T09:30:32Z",
+  "aliases": [
+    "CVE-2024-25973"
+  ],
+  "details": "The Frentix GmbH OpenOlat LMS is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities. An attacker with rights to create or edit groups can create a course with a name that contains an XSS payload. Furthermore, attackers with the permissions to create or rename a catalog (sub-category) can enter unfiltered input in the name field. In addition, attackers who are allowed to create curriculums can also enter unfiltered input in the name field. This allows an attacker to execute stored JavaScript code with the permissions of the victim in the context of the user's browser.\n\n",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25973"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/openolat"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-20"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T08:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-3mrr-cw9q-727m/GHSA-3mrr-cw9q-727m.json b/advisories/unreviewed/2024/02/GHSA-3mrr-cw9q-727m/GHSA-3mrr-cw9q-727m.json
new file mode 100644
index 00000000000..80cc3bc775c
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-3mrr-cw9q-727m/GHSA-3mrr-cw9q-727m.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3mrr-cw9q-727m",
+  "modified": "2024-02-20T09:30:30Z",
+  "published": "2024-02-20T09:30:30Z",
+  "aliases": [
+    "CVE-2023-44308"
+  ],
+  "details": "Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_adaptive_media_web_portlet_AMPortlet_redirect parameter.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44308"
+    },
+    {
+      "type": "WEB",
+      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-44308"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-601"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T07:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-4585-28v2-8h46/GHSA-4585-28v2-8h46.json b/advisories/unreviewed/2024/02/GHSA-4585-28v2-8h46/GHSA-4585-28v2-8h46.json
new file mode 100644
index 00000000000..1a30fe9a7c4
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-4585-28v2-8h46/GHSA-4585-28v2-8h46.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4585-28v2-8h46",
+  "modified": "2024-02-20T09:30:31Z",
+  "published": "2024-02-20T09:30:31Z",
+  "aliases": [
+    "CVE-2024-25150"
+  ],
+  "details": "Information disclosure vulnerability in the Control Panel in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions allows remote authenticated users to obtain a user's full name from the page's title by enumerating user screen names.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25150"
+    },
+    {
+      "type": "WEB",
+      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25150"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-201"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T08:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-869h-qhfx-w939/GHSA-869h-qhfx-w939.json b/advisories/unreviewed/2024/02/GHSA-869h-qhfx-w939/GHSA-869h-qhfx-w939.json
new file mode 100644
index 00000000000..7f6b2850a1e
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-869h-qhfx-w939/GHSA-869h-qhfx-w939.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-869h-qhfx-w939",
+  "modified": "2024-02-20T09:30:32Z",
+  "published": "2024-02-20T09:30:32Z",
+  "aliases": [
+    "CVE-2024-25606"
+  ],
+  "details": "XXE vulnerability in Liferay Portal 7.2.0 through 7.4.3.7, and older unsupported versions, and Liferay DXP 7.4 before update 4, 7.3 before update 12, 7.2 before fix pack 20, and older unsupported versions allows attackers with permission to deploy widgets/portlets/extensions to obtain sensitive information or consume system resources via the Java2WsddTask._format method.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25606"
+    },
+    {
+      "type": "WEB",
+      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25606"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-611"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T09:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-frwq-jm7h-q2q2/GHSA-frwq-jm7h-q2q2.json b/advisories/unreviewed/2024/02/GHSA-frwq-jm7h-q2q2/GHSA-frwq-jm7h-q2q2.json
new file mode 100644
index 00000000000..d1985d85704
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-frwq-jm7h-q2q2/GHSA-frwq-jm7h-q2q2.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-frwq-jm7h-q2q2",
+  "modified": "2024-02-20T09:30:32Z",
+  "published": "2024-02-20T09:30:32Z",
+  "aliases": [
+    "CVE-2024-25974"
+  ],
+  "details": "The Frentix GmbH OpenOlat LMS is affected by stored a Cross-Site Scripting (XSS) vulnerability. It is possible to upload files within the Media Center of OpenOlat version 18.1.5 (or lower) as an authenticated user without any other rights. Although the filetypes are limited, an SVG image containing an XSS payload can be uploaded. After a successful upload the file can be shared with groups of users (including admins) who can be attacked with the JavaScript payload.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25974"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/openolat"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-20"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T08:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-mf8h-grfg-j9j3/GHSA-mf8h-grfg-j9j3.json b/advisories/unreviewed/2024/02/GHSA-mf8h-grfg-j9j3/GHSA-mf8h-grfg-j9j3.json
new file mode 100644
index 00000000000..ed7ff3e5b78
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-mf8h-grfg-j9j3/GHSA-mf8h-grfg-j9j3.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mf8h-grfg-j9j3",
+  "modified": "2024-02-20T09:30:32Z",
+  "published": "2024-02-20T09:30:32Z",
+  "aliases": [
+    "CVE-2024-25605"
+  ],
+  "details": "The Journal module in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions grants guest users view permission to web content templates by default, which allows remote attackers to view any template via the UI or API.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25605"
+    },
+    {
+      "type": "WEB",
+      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25605"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-276"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T09:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-pw7p-3648-qqmg/GHSA-pw7p-3648-qqmg.json b/advisories/unreviewed/2024/02/GHSA-pw7p-3648-qqmg/GHSA-pw7p-3648-qqmg.json
new file mode 100644
index 00000000000..ab990601314
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-pw7p-3648-qqmg/GHSA-pw7p-3648-qqmg.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pw7p-3648-qqmg",
+  "modified": "2024-02-20T09:30:32Z",
+  "published": "2024-02-20T09:30:32Z",
+  "aliases": [
+    "CVE-2024-25604"
+  ],
+  "details": "Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions does not properly check user permissions, which allows remote authenticated users with the VIEW user permission to edit their own permission via the User and Organizations section of the Control Panel.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25604"
+    },
+    {
+      "type": "WEB",
+      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25604"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T09:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-pwq2-c6f6-f36f/GHSA-pwq2-c6f6-f36f.json b/advisories/unreviewed/2024/02/GHSA-pwq2-c6f6-f36f/GHSA-pwq2-c6f6-f36f.json
new file mode 100644
index 00000000000..66fcf0d47a7
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-pwq2-c6f6-f36f/GHSA-pwq2-c6f6-f36f.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pwq2-c6f6-f36f",
+  "modified": "2024-02-20T09:30:32Z",
+  "published": "2024-02-20T09:30:32Z",
+  "aliases": [
+    "CVE-2024-1608"
+  ],
+  "details": "In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leak w/o user interaction.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1608"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1759867611954552832"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T09:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-qpgh-6v9w-vfv6/GHSA-qpgh-6v9w-vfv6.json b/advisories/unreviewed/2024/02/GHSA-qpgh-6v9w-vfv6/GHSA-qpgh-6v9w-vfv6.json
new file mode 100644
index 00000000000..535739270f5
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-qpgh-6v9w-vfv6/GHSA-qpgh-6v9w-vfv6.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qpgh-6v9w-vfv6",
+  "modified": "2024-02-20T09:30:31Z",
+  "published": "2024-02-20T09:30:31Z",
+  "aliases": [
+    "CVE-2024-25149"
+  ],
+  "details": "Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions does not properly restrict membership of a child site when the \"Limit membership to members of the parent site\" option is enabled, which allows remote authenticated users to add users who are not a member of the parent site to a child site. The added user may obtain permission to perform unauthorized actions in the child site.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25149"
+    },
+    {
+      "type": "WEB",
+      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25149"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T07:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/02/GHSA-w3w6-26f2-p474/GHSA-w3w6-26f2-p474.json b/advisories/unreviewed/2024/02/GHSA-w3w6-26f2-p474/GHSA-w3w6-26f2-p474.json
new file mode 100644
index 00000000000..7b07efbde8d
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-w3w6-26f2-p474/GHSA-w3w6-26f2-p474.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w3w6-26f2-p474",
+  "modified": "2024-02-20T09:30:30Z",
+  "published": "2024-02-20T09:30:30Z",
+  "aliases": [
+    "CVE-2024-22234"
+  ],
+  "details": "In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticated(Authentication) method.\n\nSpecifically, an application is vulnerable if:\n\n  *  The application uses AuthenticationTrustResolver.isFullyAuthenticated(Authentication) directly and a null authentication parameter is passed to it resulting in an erroneous true return value.\n\n\nAn application is not vulnerable if any of the following is true:\n\n  *  The application does not use AuthenticationTrustResolver.isFullyAuthenticated(Authentication) directly.\n  *  The application does not pass null to AuthenticationTrustResolver.isFullyAuthenticated\n  *  The application only uses isFullyAuthenticated via  Method Security https://docs.spring.io/spring-security/reference/servlet/authorization/method-security.html  or  HTTP Request Security https://docs.spring.io/spring-security/reference/servlet/authorization/authorize-http-requests.html \n\n\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22234"
+    },
+    {
+      "type": "WEB",
+      "url": "https://spring.io/security/cve-2024-22234"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T07:15:09Z"
+  }
+}
\ No newline at end of file