diff --git a/advisories/unreviewed/2024/08/GHSA-2wjg-qcgr-7p52/GHSA-2wjg-qcgr-7p52.json b/advisories/unreviewed/2024/08/GHSA-2wjg-qcgr-7p52/GHSA-2wjg-qcgr-7p52.json
index 9cf0e8146a3..83865ed9dd4 100644
--- a/advisories/unreviewed/2024/08/GHSA-2wjg-qcgr-7p52/GHSA-2wjg-qcgr-7p52.json
+++ b/advisories/unreviewed/2024/08/GHSA-2wjg-qcgr-7p52/GHSA-2wjg-qcgr-7p52.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2wjg-qcgr-7p52",
- "modified": "2024-08-21T09:31:32Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-21T09:31:32Z",
"aliases": [
"CVE-2023-52903"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: lock overflowing for IOPOLL\n\nsyzbot reports an issue with overflow filling for IOPOLL:\n\nWARNING: CPU: 0 PID: 28 at io_uring/io_uring.c:734 io_cqring_event_overflow+0x1c0/0x230 io_uring/io_uring.c:734\nCPU: 0 PID: 28 Comm: kworker/u4:1 Not tainted 6.2.0-rc3-syzkaller-16369-g358a161a6a9e #0\nWorkqueue: events_unbound io_ring_exit_work\nCall trace:\n io_cqring_event_overflow+0x1c0/0x230 io_uring/io_uring.c:734\n io_req_cqe_overflow+0x5c/0x70 io_uring/io_uring.c:773\n io_fill_cqe_req io_uring/io_uring.h:168 [inline]\n io_do_iopoll+0x474/0x62c io_uring/rw.c:1065\n io_iopoll_try_reap_events+0x6c/0x108 io_uring/io_uring.c:1513\n io_uring_try_cancel_requests+0x13c/0x258 io_uring/io_uring.c:3056\n io_ring_exit_work+0xec/0x390 io_uring/io_uring.c:2869\n process_one_work+0x2d8/0x504 kernel/workqueue.c:2289\n worker_thread+0x340/0x610 kernel/workqueue.c:2436\n kthread+0x12c/0x158 kernel/kthread.c:376\n ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:863\n\nThere is no real problem for normal IOPOLL as flush is also called with\nuring_lock taken, but it's getting more complicated for IOPOLL|SQPOLL,\nfor which __io_cqring_overflow_flush() happens from the CQ waiting path.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-667"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-21T07:15:06Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-53f2-x8g3-2v76/GHSA-53f2-x8g3-2v76.json b/advisories/unreviewed/2024/08/GHSA-53f2-x8g3-2v76/GHSA-53f2-x8g3-2v76.json
index 7d7cf5a1291..74269447b56 100644
--- a/advisories/unreviewed/2024/08/GHSA-53f2-x8g3-2v76/GHSA-53f2-x8g3-2v76.json
+++ b/advisories/unreviewed/2024/08/GHSA-53f2-x8g3-2v76/GHSA-53f2-x8g3-2v76.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-53f2-x8g3-2v76",
- "modified": "2024-08-21T09:31:32Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-21T09:31:32Z",
"aliases": [
"CVE-2023-52898"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nxhci: Fix null pointer dereference when host dies\n\nMake sure xhci_free_dev() and xhci_kill_endpoint_urbs() do not race\nand cause null pointer dereference when host suddenly dies.\n\nUsb core may call xhci_free_dev() which frees the xhci->devs[slot_id]\nvirt device at the same time that xhci_kill_endpoint_urbs() tries to\nloop through all the device's endpoints, checking if there are any\ncancelled urbs left to give back.\n\nhold the xhci spinlock while freeing the virt device",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-21T07:15:06Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-58p8-qp66-2jq2/GHSA-58p8-qp66-2jq2.json b/advisories/unreviewed/2024/08/GHSA-58p8-qp66-2jq2/GHSA-58p8-qp66-2jq2.json
index b6c954e7060..da353a78803 100644
--- a/advisories/unreviewed/2024/08/GHSA-58p8-qp66-2jq2/GHSA-58p8-qp66-2jq2.json
+++ b/advisories/unreviewed/2024/08/GHSA-58p8-qp66-2jq2/GHSA-58p8-qp66-2jq2.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-58p8-qp66-2jq2",
- "modified": "2024-08-16T15:31:41Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-16T15:31:41Z",
"aliases": [
"CVE-2024-7145"
diff --git a/advisories/unreviewed/2024/08/GHSA-6mp3-h2gc-877w/GHSA-6mp3-h2gc-877w.json b/advisories/unreviewed/2024/08/GHSA-6mp3-h2gc-877w/GHSA-6mp3-h2gc-877w.json
index 079c7be51a4..750b9049082 100644
--- a/advisories/unreviewed/2024/08/GHSA-6mp3-h2gc-877w/GHSA-6mp3-h2gc-877w.json
+++ b/advisories/unreviewed/2024/08/GHSA-6mp3-h2gc-877w/GHSA-6mp3-h2gc-877w.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6mp3-h2gc-877w",
- "modified": "2024-08-21T09:31:32Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-21T09:31:32Z",
"aliases": [
"CVE-2023-52905"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: Fix resource leakage in VF driver unbind\n\nresources allocated like mcam entries to support the Ntuple feature\nand hash tables for the tc feature are not getting freed in driver\nunbind. This patch fixes the issue.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-21T07:15:06Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-6rpx-57fj-hj72/GHSA-6rpx-57fj-hj72.json b/advisories/unreviewed/2024/08/GHSA-6rpx-57fj-hj72/GHSA-6rpx-57fj-hj72.json
index 3138c076425..3b5b839f1c0 100644
--- a/advisories/unreviewed/2024/08/GHSA-6rpx-57fj-hj72/GHSA-6rpx-57fj-hj72.json
+++ b/advisories/unreviewed/2024/08/GHSA-6rpx-57fj-hj72/GHSA-6rpx-57fj-hj72.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6rpx-57fj-hj72",
- "modified": "2024-08-21T09:31:32Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-21T09:31:32Z",
"aliases": [
"CVE-2023-52899"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nAdd exception protection processing for vd in axi_chan_handle_err function\n\nSince there is no protection for vd, a kernel panic will be\ntriggered here in exceptional cases.\n\nYou can refer to the processing of axi_chan_block_xfer_complete function\n\nThe triggered kernel panic is as follows:\n\n[ 67.848444] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\n[ 67.848447] Mem abort info:\n[ 67.848449] ESR = 0x96000004\n[ 67.848451] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 67.848454] SET = 0, FnV = 0\n[ 67.848456] EA = 0, S1PTW = 0\n[ 67.848458] Data abort info:\n[ 67.848460] ISV = 0, ISS = 0x00000004\n[ 67.848462] CM = 0, WnR = 0\n[ 67.848465] user pgtable: 4k pages, 48-bit VAs, pgdp=00000800c4c0b000\n[ 67.848468] [0000000000000060] pgd=0000000000000000, p4d=0000000000000000\n[ 67.848472] Internal error: Oops: 96000004 [#1] SMP\n[ 67.848475] Modules linked in: dmatest\n[ 67.848479] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.100-emu_x2rc+ #11\n[ 67.848483] pstate: 62000085 (nZCv daIf -PAN -UAO +TCO BTYPE=--)\n[ 67.848487] pc : axi_chan_handle_err+0xc4/0x230\n[ 67.848491] lr : axi_chan_handle_err+0x30/0x230\n[ 67.848493] sp : ffff0803fe55ae50\n[ 67.848495] x29: ffff0803fe55ae50 x28: ffff800011212200\n[ 67.848500] x27: ffff0800c42c0080 x26: ffff0800c097c080\n[ 67.848504] x25: ffff800010d33880 x24: ffff80001139d850\n[ 67.848508] x23: ffff0800c097c168 x22: 0000000000000000\n[ 67.848512] x21: 0000000000000080 x20: 0000000000002000\n[ 67.848517] x19: ffff0800c097c080 x18: 0000000000000000\n[ 67.848521] x17: 0000000000000000 x16: 0000000000000000\n[ 67.848525] x15: 0000000000000000 x14: 0000000000000000\n[ 67.848529] x13: 0000000000000000 x12: 0000000000000040\n[ 67.848533] x11: ffff0800c0400248 x10: ffff0800c040024a\n[ 67.848538] x9 : ffff800010576cd4 x8 : ffff0800c0400270\n[ 67.848542] x7 : 0000000000000000 x6 : ffff0800c04003e0\n[ 67.848546] x5 : ffff0800c0400248 x4 : ffff0800c4294480\n[ 67.848550] x3 : dead000000000100 x2 : dead000000000122\n[ 67.848555] x1 : 0000000000000100 x0 : ffff0800c097c168\n[ 67.848559] Call trace:\n[ 67.848562] axi_chan_handle_err+0xc4/0x230\n[ 67.848566] dw_axi_dma_interrupt+0xf4/0x590\n[ 67.848569] __handle_irq_event_percpu+0x60/0x220\n[ 67.848573] handle_irq_event+0x64/0x120\n[ 67.848576] handle_fasteoi_irq+0xc4/0x220\n[ 67.848580] __handle_domain_irq+0x80/0xe0\n[ 67.848583] gic_handle_irq+0xc0/0x138\n[ 67.848585] el1_irq+0xc8/0x180\n[ 67.848588] arch_cpu_idle+0x14/0x2c\n[ 67.848591] default_idle_call+0x40/0x16c\n[ 67.848594] do_idle+0x1f0/0x250\n[ 67.848597] cpu_startup_entry+0x2c/0x60\n[ 67.848600] rest_init+0xc0/0xcc\n[ 67.848603] arch_call_rest_init+0x14/0x1c\n[ 67.848606] start_kernel+0x4cc/0x500\n[ 67.848610] Code: eb0002ff 9a9f12d6 f2fbd5a2 f2fbd5a3 (a94602c1)\n[ 67.848613] ---[ end trace 585a97036f88203a ]---",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-21T07:15:06Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-758w-9j7r-h7p8/GHSA-758w-9j7r-h7p8.json b/advisories/unreviewed/2024/08/GHSA-758w-9j7r-h7p8/GHSA-758w-9j7r-h7p8.json
index 07b480c1614..38ec55580ef 100644
--- a/advisories/unreviewed/2024/08/GHSA-758w-9j7r-h7p8/GHSA-758w-9j7r-h7p8.json
+++ b/advisories/unreviewed/2024/08/GHSA-758w-9j7r-h7p8/GHSA-758w-9j7r-h7p8.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-758w-9j7r-h7p8",
- "modified": "2024-08-21T09:31:32Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-21T09:31:32Z",
"aliases": [
"CVE-2023-52897"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: qgroup: do not warn on record without old_roots populated\n\n[BUG]\nThere are some reports from the mailing list that since v6.1 kernel, the\nWARN_ON() inside btrfs_qgroup_account_extent() gets triggered during\nrescan:\n\n WARNING: CPU: 3 PID: 6424 at fs/btrfs/qgroup.c:2756 btrfs_qgroup_account_extents+0x1ae/0x260 [btrfs]\n CPU: 3 PID: 6424 Comm: snapperd Tainted: P OE 6.1.2-1-default #1 openSUSE Tumbleweed 05c7a1b1b61d5627475528f71f50444637b5aad7\n RIP: 0010:btrfs_qgroup_account_extents+0x1ae/0x260 [btrfs]\n Call Trace:\n \n btrfs_commit_transaction+0x30c/0xb40 [btrfs c39c9c546c241c593f03bd6d5f39ea1b676250f6]\n ? start_transaction+0xc3/0x5b0 [btrfs c39c9c546c241c593f03bd6d5f39ea1b676250f6]\n btrfs_qgroup_rescan+0x42/0xc0 [btrfs c39c9c546c241c593f03bd6d5f39ea1b676250f6]\n btrfs_ioctl+0x1ab9/0x25c0 [btrfs c39c9c546c241c593f03bd6d5f39ea1b676250f6]\n ? __rseq_handle_notify_resume+0xa9/0x4a0\n ? mntput_no_expire+0x4a/0x240\n ? __seccomp_filter+0x319/0x4d0\n __x64_sys_ioctl+0x90/0xd0\n do_syscall_64+0x5b/0x80\n ? syscall_exit_to_user_mode+0x17/0x40\n ? do_syscall_64+0x67/0x80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n RIP: 0033:0x7fd9b790d9bf\n \n\n[CAUSE]\nSince commit e15e9f43c7ca (\"btrfs: introduce\nBTRFS_QGROUP_RUNTIME_FLAG_NO_ACCOUNTING to skip qgroup accounting\"), if\nour qgroup is already in inconsistent state, we will no longer do the\ntime-consuming backref walk.\n\nThis can leave some qgroup records without a valid old_roots ulist.\nNormally this is fine, as btrfs_qgroup_account_extents() would also skip\nthose records if we have NO_ACCOUNTING flag set.\n\nBut there is a small window, if we have NO_ACCOUNTING flag set, and\ninserted some qgroup_record without a old_roots ulist, but then the user\ntriggered a qgroup rescan.\n\nDuring btrfs_qgroup_rescan(), we firstly clear NO_ACCOUNTING flag, then\ncommit current transaction.\n\nAnd since we have a qgroup_record with old_roots = NULL, we trigger the\nWARN_ON() during btrfs_qgroup_account_extents().\n\n[FIX]\nUnfortunately due to the introduction of NO_ACCOUNTING flag, the\nassumption that every qgroup_record would have its old_roots populated\nis no longer correct.\n\nFix the false alerts and drop the WARN_ON().",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-21T07:15:06Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-8hwx-g945-2v69/GHSA-8hwx-g945-2v69.json b/advisories/unreviewed/2024/08/GHSA-8hwx-g945-2v69/GHSA-8hwx-g945-2v69.json
index f99dd3fbd4c..8bef0937491 100644
--- a/advisories/unreviewed/2024/08/GHSA-8hwx-g945-2v69/GHSA-8hwx-g945-2v69.json
+++ b/advisories/unreviewed/2024/08/GHSA-8hwx-g945-2v69/GHSA-8hwx-g945-2v69.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8hwx-g945-2v69",
- "modified": "2024-08-21T09:31:32Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-21T09:31:32Z",
"aliases": [
"CVE-2023-52900"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix general protection fault in nilfs_btree_insert()\n\nIf nilfs2 reads a corrupted disk image and tries to reads a b-tree node\nblock by calling __nilfs_btree_get_block() against an invalid virtual\nblock address, it returns -ENOENT because conversion of the virtual block\naddress to a disk block address fails. However, this return value is the\nsame as the internal code that b-tree lookup routines return to indicate\nthat the block being searched does not exist, so functions that operate on\nthat b-tree may misbehave.\n\nWhen nilfs_btree_insert() receives this spurious 'not found' code from\nnilfs_btree_do_lookup(), it misunderstands that the 'not found' check was\nsuccessful and continues the insert operation using incomplete lookup path\ndata, causing the following crash:\n\n general protection fault, probably for non-canonical address\n 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN\n KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]\n ...\n RIP: 0010:nilfs_btree_get_nonroot_node fs/nilfs2/btree.c:418 [inline]\n RIP: 0010:nilfs_btree_prepare_insert fs/nilfs2/btree.c:1077 [inline]\n RIP: 0010:nilfs_btree_insert+0x6d3/0x1c10 fs/nilfs2/btree.c:1238\n Code: bc 24 80 00 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89\n ff e8 4b 02 92 fe 4d 8b 3f 49 83 c7 28 4c 89 f8 48 c1 e8 03 <42> 80 3c\n 28 00 74 08 4c 89 ff e8 2e 02 92 fe 4d 8b 3f 49 83 c7 02\n ...\n Call Trace:\n \n nilfs_bmap_do_insert fs/nilfs2/bmap.c:121 [inline]\n nilfs_bmap_insert+0x20d/0x360 fs/nilfs2/bmap.c:147\n nilfs_get_block+0x414/0x8d0 fs/nilfs2/inode.c:101\n __block_write_begin_int+0x54c/0x1a80 fs/buffer.c:1991\n __block_write_begin fs/buffer.c:2041 [inline]\n block_write_begin+0x93/0x1e0 fs/buffer.c:2102\n nilfs_write_begin+0x9c/0x110 fs/nilfs2/inode.c:261\n generic_perform_write+0x2e4/0x5e0 mm/filemap.c:3772\n __generic_file_write_iter+0x176/0x400 mm/filemap.c:3900\n generic_file_write_iter+0xab/0x310 mm/filemap.c:3932\n call_write_iter include/linux/fs.h:2186 [inline]\n new_sync_write fs/read_write.c:491 [inline]\n vfs_write+0x7dc/0xc50 fs/read_write.c:584\n ksys_write+0x177/0x2a0 fs/read_write.c:637\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n ...\n \n\nThis patch fixes the root cause of this problem by replacing the error\ncode that __nilfs_btree_get_block() returns on block address conversion\nfailure from -ENOENT to another internal code -EINVAL which means that the\nb-tree metadata is corrupted.\n\nBy returning -EINVAL, it propagates without glitches, and for all relevant\nb-tree operations, functions in the upper bmap layer output an error\nmessage indicating corrupted b-tree metadata via\nnilfs_bmap_convert_error(), and code -EIO will be eventually returned as\nit should be.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -51,7 +54,7 @@
"cwe_ids": [
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-21T07:15:06Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-9w85-68h7-c4c7/GHSA-9w85-68h7-c4c7.json b/advisories/unreviewed/2024/08/GHSA-9w85-68h7-c4c7/GHSA-9w85-68h7-c4c7.json
index cc02a93a4ae..066ffa6cd53 100644
--- a/advisories/unreviewed/2024/08/GHSA-9w85-68h7-c4c7/GHSA-9w85-68h7-c4c7.json
+++ b/advisories/unreviewed/2024/08/GHSA-9w85-68h7-c4c7/GHSA-9w85-68h7-c4c7.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9w85-68h7-c4c7",
- "modified": "2024-08-21T09:31:32Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-21T09:31:32Z",
"aliases": [
"CVE-2023-52906"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_mpls: Fix warning during failed attribute validation\n\nThe 'TCA_MPLS_LABEL' attribute is of 'NLA_U32' type, but has a\nvalidation type of 'NLA_VALIDATE_FUNCTION'. This is an invalid\ncombination according to the comment above 'struct nla_policy':\n\n\"\nMeaning of `validate' field, use via NLA_POLICY_VALIDATE_FN:\n NLA_BINARY Validation function called for the attribute.\n All other Unused - but note that it's a union\n\"\n\nThis can trigger the warning [1] in nla_get_range_unsigned() when\nvalidation of the attribute fails. Despite being of 'NLA_U32' type, the\nassociated 'min'/'max' fields in the policy are negative as they are\naliased by the 'validate' field.\n\nFix by changing the attribute type to 'NLA_BINARY' which is consistent\nwith the above comment and all other users of NLA_POLICY_VALIDATE_FN().\nAs a result, move the length validation to the validation function.\n\nNo regressions in MPLS tests:\n\n # ./tdc.py -f tc-tests/actions/mpls.json\n [...]\n # echo $?\n 0\n\n[1]\nWARNING: CPU: 0 PID: 17743 at lib/nlattr.c:118\nnla_get_range_unsigned+0x1d8/0x1e0 lib/nlattr.c:117\nModules linked in:\nCPU: 0 PID: 17743 Comm: syz-executor.0 Not tainted 6.1.0-rc8 #3\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\nrel-1.13.0-48-gd9c812dda519-prebuilt.qemu.org 04/01/2014\nRIP: 0010:nla_get_range_unsigned+0x1d8/0x1e0 lib/nlattr.c:117\n[...]\nCall Trace:\n \n __netlink_policy_dump_write_attr+0x23d/0x990 net/netlink/policy.c:310\n netlink_policy_dump_write_attr+0x22/0x30 net/netlink/policy.c:411\n netlink_ack_tlv_fill net/netlink/af_netlink.c:2454 [inline]\n netlink_ack+0x546/0x760 net/netlink/af_netlink.c:2506\n netlink_rcv_skb+0x1b7/0x240 net/netlink/af_netlink.c:2546\n rtnetlink_rcv+0x18/0x20 net/core/rtnetlink.c:6109\n netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]\n netlink_unicast+0x5e9/0x6b0 net/netlink/af_netlink.c:1345\n netlink_sendmsg+0x739/0x860 net/netlink/af_netlink.c:1921\n sock_sendmsg_nosec net/socket.c:714 [inline]\n sock_sendmsg net/socket.c:734 [inline]\n ____sys_sendmsg+0x38f/0x500 net/socket.c:2482\n ___sys_sendmsg net/socket.c:2536 [inline]\n __sys_sendmsg+0x197/0x230 net/socket.c:2565\n __do_sys_sendmsg net/socket.c:2574 [inline]\n __se_sys_sendmsg net/socket.c:2572 [inline]\n __x64_sys_sendmsg+0x42/0x50 net/socket.c:2572\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -43,7 +46,7 @@
"cwe_ids": [
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-21T07:15:06Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-gq7c-55hq-cqqg/GHSA-gq7c-55hq-cqqg.json b/advisories/unreviewed/2024/08/GHSA-gq7c-55hq-cqqg/GHSA-gq7c-55hq-cqqg.json
index 970748a42f6..55b963b097b 100644
--- a/advisories/unreviewed/2024/08/GHSA-gq7c-55hq-cqqg/GHSA-gq7c-55hq-cqqg.json
+++ b/advisories/unreviewed/2024/08/GHSA-gq7c-55hq-cqqg/GHSA-gq7c-55hq-cqqg.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gq7c-55hq-cqqg",
- "modified": "2024-08-18T15:34:34Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-18T15:34:34Z",
"aliases": [
"CVE-2024-43335"
diff --git a/advisories/unreviewed/2024/08/GHSA-jgx4-86q4-38fm/GHSA-jgx4-86q4-38fm.json b/advisories/unreviewed/2024/08/GHSA-jgx4-86q4-38fm/GHSA-jgx4-86q4-38fm.json
index d03493786cf..9d316d6eba2 100644
--- a/advisories/unreviewed/2024/08/GHSA-jgx4-86q4-38fm/GHSA-jgx4-86q4-38fm.json
+++ b/advisories/unreviewed/2024/08/GHSA-jgx4-86q4-38fm/GHSA-jgx4-86q4-38fm.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jgx4-86q4-38fm",
- "modified": "2024-08-21T09:31:32Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-21T09:31:32Z",
"aliases": [
"CVE-2023-52902"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnommu: fix memory leak in do_mmap() error path\n\nThe preallocation of the maple tree nodes may leak if the error path to\n\"error_just_free\" is taken. Fix this by moving the freeing of the maple\ntree nodes to a shared location for all error paths.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-401"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-21T07:15:06Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-jx88-73qr-g4w7/GHSA-jx88-73qr-g4w7.json b/advisories/unreviewed/2024/08/GHSA-jx88-73qr-g4w7/GHSA-jx88-73qr-g4w7.json
index 34f0e75d645..3095bbeec85 100644
--- a/advisories/unreviewed/2024/08/GHSA-jx88-73qr-g4w7/GHSA-jx88-73qr-g4w7.json
+++ b/advisories/unreviewed/2024/08/GHSA-jx88-73qr-g4w7/GHSA-jx88-73qr-g4w7.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jx88-73qr-g4w7",
- "modified": "2024-08-21T09:31:32Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-21T09:31:32Z",
"aliases": [
"CVE-2023-52901"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: xhci: Check endpoint is valid before dereferencing it\n\nWhen the host controller is not responding, all URBs queued to all\nendpoints need to be killed. This can cause a kernel panic if we\ndereference an invalid endpoint.\n\nFix this by using xhci_get_virt_ep() helper to find the endpoint and\nchecking if the endpoint is valid before dereferencing it.\n\n[233311.853271] xhci-hcd xhci-hcd.1.auto: xHCI host controller not responding, assume dead\n[233311.853393] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000e8\n\n[233311.853964] pc : xhci_hc_died+0x10c/0x270\n[233311.853971] lr : xhci_hc_died+0x1ac/0x270\n\n[233311.854077] Call trace:\n[233311.854085] xhci_hc_died+0x10c/0x270\n[233311.854093] xhci_stop_endpoint_command_watchdog+0x100/0x1a4\n[233311.854105] call_timer_fn+0x50/0x2d4\n[233311.854112] expire_timers+0xac/0x2e4\n[233311.854118] run_timer_softirq+0x300/0xabc\n[233311.854127] __do_softirq+0x148/0x528\n[233311.854135] irq_exit+0x194/0x1a8\n[233311.854143] __handle_domain_irq+0x164/0x1d0\n[233311.854149] gic_handle_irq.22273+0x10c/0x188\n[233311.854156] el1_irq+0xfc/0x1a8\n[233311.854175] lpm_cpuidle_enter+0x25c/0x418 [msm_pm]\n[233311.854185] cpuidle_enter_state+0x1f0/0x764\n[233311.854194] do_idle+0x594/0x6ac\n[233311.854201] cpu_startup_entry+0x7c/0x80\n[233311.854209] secondary_start_kernel+0x170/0x198",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -49,9 +52,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-21T07:15:06Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-r5h4-2chq-43m3/GHSA-r5h4-2chq-43m3.json b/advisories/unreviewed/2024/08/GHSA-r5h4-2chq-43m3/GHSA-r5h4-2chq-43m3.json
index ce0f2d2e9df..6f78b3d6503 100644
--- a/advisories/unreviewed/2024/08/GHSA-r5h4-2chq-43m3/GHSA-r5h4-2chq-43m3.json
+++ b/advisories/unreviewed/2024/08/GHSA-r5h4-2chq-43m3/GHSA-r5h4-2chq-43m3.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r5h4-2chq-43m3",
- "modified": "2024-08-20T21:30:35Z",
+ "modified": "2024-09-13T15:31:31Z",
"published": "2024-08-20T21:30:35Z",
"aliases": [
"CVE-2024-31842"
],
"details": "An issue was discovered in Italtel Embrace 1.6.4. The web application inserts the access token of an authenticated user inside GET requests. The query string for the URL could be saved in the browser's history, passed through Referers to other web sites, stored in web logs, or otherwise recorded in other sources. If the query string contains sensitive information such as session identifiers, then attackers can use this information to launch further attacks. Because the access token in sent in GET requests, this vulnerability could lead to complete account takeover.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-20T20:15:08Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-259g-6529-jqq8/GHSA-259g-6529-jqq8.json b/advisories/unreviewed/2024/09/GHSA-259g-6529-jqq8/GHSA-259g-6529-jqq8.json
new file mode 100644
index 00000000000..cddace446a5
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-259g-6529-jqq8/GHSA-259g-6529-jqq8.json
@@ -0,0 +1,46 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-259g-6529-jqq8",
+ "modified": "2024-09-13T15:31:36Z",
+ "published": "2024-09-13T15:31:36Z",
+ "aliases": [
+ "CVE-2024-8732"
+ ],
+ "details": "The Roles & Capabilities plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8732"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/leira-roles/trunk/admin/class-leira-roles-admin.php#L413"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/leira-roles/trunk/admin/class-leira-roles-admin.php#L541"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3956cd40-6b46-4013-9d71-a979de2c3687?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:18Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-2x6j-v6mv-vf98/GHSA-2x6j-v6mv-vf98.json b/advisories/unreviewed/2024/09/GHSA-2x6j-v6mv-vf98/GHSA-2x6j-v6mv-vf98.json
new file mode 100644
index 00000000000..c193e3fb763
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-2x6j-v6mv-vf98/GHSA-2x6j-v6mv-vf98.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-2x6j-v6mv-vf98",
+ "modified": "2024-09-13T15:31:36Z",
+ "published": "2024-09-13T15:31:36Z",
+ "aliases": [
+ "CVE-2024-8747"
+ ],
+ "details": "The Email Obfuscate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email-obfuscate' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8747"
+ },
+ {
+ "type": "WEB",
+ "url": "https://wordpress.org/plugins/email-obfuscate-shortcode"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/77bed6ce-84e7-4b71-8acd-bb5b73e362d2?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:18Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-4r9q-49xf-jvj3/GHSA-4r9q-49xf-jvj3.json b/advisories/unreviewed/2024/09/GHSA-4r9q-49xf-jvj3/GHSA-4r9q-49xf-jvj3.json
new file mode 100644
index 00000000000..2ac0bb802c2
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-4r9q-49xf-jvj3/GHSA-4r9q-49xf-jvj3.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-4r9q-49xf-jvj3",
+ "modified": "2024-09-13T15:31:36Z",
+ "published": "2024-09-13T15:31:36Z",
+ "aliases": [
+ "CVE-2024-8734"
+ ],
+ "details": "The Lucas String Replace plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.0.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8734"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/lucas-string-replace/trunk/includes/class-lucas-string-replace-settings.php#L176"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/cf1e4b20-e7e5-4a3a-9895-02d51499d54e?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:18Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-55jp-9v82-mrww/GHSA-55jp-9v82-mrww.json b/advisories/unreviewed/2024/09/GHSA-55jp-9v82-mrww/GHSA-55jp-9v82-mrww.json
new file mode 100644
index 00000000000..57a56fb94a0
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-55jp-9v82-mrww/GHSA-55jp-9v82-mrww.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-55jp-9v82-mrww",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-5867"
+ ],
+ "details": "The Delicate theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter within the theme's Button shortcode in all versions up to, and including, 3.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5867"
+ },
+ {
+ "type": "WEB",
+ "url": "https://themes.trac.wordpress.org/browser/delicate/3.5.5/functions/shortcodes.php#L128"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/dbf491d6-e546-4e3f-88c2-237b647a2b1e?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:15Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-6f2c-7wmp-gmrf/GHSA-6f2c-7wmp-gmrf.json b/advisories/unreviewed/2024/09/GHSA-6f2c-7wmp-gmrf/GHSA-6f2c-7wmp-gmrf.json
new file mode 100644
index 00000000000..b6646b46e93
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-6f2c-7wmp-gmrf/GHSA-6f2c-7wmp-gmrf.json
@@ -0,0 +1,46 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-6f2c-7wmp-gmrf",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-7423"
+ ],
+ "details": "The Stream plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.1. This is due to missing or incorrect nonce validation on the network_options_action() function. This makes it possible for unauthenticated attackers to update arbitrary options that can lead to DoS or privilege escalation via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7423"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/stream/tags/4.0.1/classes/class-network.php#L353"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/changeset/3139815/stream/trunk/classes/class-network.php"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9d15e418-36bb-4f53-ac67-8f6122591dd2?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-352"
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:16Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-6wmp-x825-hf7x/GHSA-6wmp-x825-hf7x.json b/advisories/unreviewed/2024/09/GHSA-6wmp-x825-hf7x/GHSA-6wmp-x825-hf7x.json
new file mode 100644
index 00000000000..2f3e96ca328
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-6wmp-x825-hf7x/GHSA-6wmp-x825-hf7x.json
@@ -0,0 +1,46 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-6wmp-x825-hf7x",
+ "modified": "2024-09-13T15:31:36Z",
+ "published": "2024-09-13T15:31:36Z",
+ "aliases": [
+ "CVE-2024-8737"
+ ],
+ "details": "The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8737"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/pdf-thumbnail-generator/tags/1.3/pdf-thumbnail-generator.php#L184"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/changeset/3151055"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b183587b-95bd-4e82-bfc7-db5a8fbd58f9?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:18Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-7r6c-3p49-xqvv/GHSA-7r6c-3p49-xqvv.json b/advisories/unreviewed/2024/09/GHSA-7r6c-3p49-xqvv/GHSA-7r6c-3p49-xqvv.json
new file mode 100644
index 00000000000..86cba292c42
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-7r6c-3p49-xqvv/GHSA-7r6c-3p49-xqvv.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-7r6c-3p49-xqvv",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-5870"
+ ],
+ "details": "The Tweaker5 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5870"
+ },
+ {
+ "type": "WEB",
+ "url": "https://themes.trac.wordpress.org/browser/tweaker5/1.2/inc/extras.php#L175"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f70ba568-b013-4177-928a-eefb606333ee?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:15Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-956h-wvh5-7cgp/GHSA-956h-wvh5-7cgp.json b/advisories/unreviewed/2024/09/GHSA-956h-wvh5-7cgp/GHSA-956h-wvh5-7cgp.json
new file mode 100644
index 00000000000..ba149a39ee2
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-956h-wvh5-7cgp/GHSA-956h-wvh5-7cgp.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-956h-wvh5-7cgp",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-46048"
+ ],
+ "details": "Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46048"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/BenJpopo/V/blob/main/Tenda/FH451/formexeCommand.md"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T14:15:14Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-9672-786w-jwpr/GHSA-9672-786w-jwpr.json b/advisories/unreviewed/2024/09/GHSA-9672-786w-jwpr/GHSA-9672-786w-jwpr.json
new file mode 100644
index 00000000000..557337fcb23
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-9672-786w-jwpr/GHSA-9672-786w-jwpr.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-9672-786w-jwpr",
+ "modified": "2024-09-13T15:31:34Z",
+ "published": "2024-09-13T15:31:34Z",
+ "aliases": [
+ "CVE-2024-46046"
+ ],
+ "details": "Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46046"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/BenJpopo/V/blob/main/Tenda/FH451/RouteStatic.md"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T14:15:14Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-9rpm-27w3-292g/GHSA-9rpm-27w3-292g.json b/advisories/unreviewed/2024/09/GHSA-9rpm-27w3-292g/GHSA-9rpm-27w3-292g.json
new file mode 100644
index 00000000000..67d7fa5fef6
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-9rpm-27w3-292g/GHSA-9rpm-27w3-292g.json
@@ -0,0 +1,38 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-9rpm-27w3-292g",
+ "modified": "2024-09-13T15:31:34Z",
+ "published": "2024-09-13T15:31:34Z",
+ "aliases": [
+ "CVE-2024-46044"
+ ],
+ "details": "CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46044"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/BenJpopo/V/blob/main/Tenda/CH22/fromqossetting.md"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-121"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T14:15:13Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-cj63-c83g-7mc2/GHSA-cj63-c83g-7mc2.json b/advisories/unreviewed/2024/09/GHSA-cj63-c83g-7mc2/GHSA-cj63-c83g-7mc2.json
new file mode 100644
index 00000000000..a7b46d6c21f
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-cj63-c83g-7mc2/GHSA-cj63-c83g-7mc2.json
@@ -0,0 +1,50 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-cj63-c83g-7mc2",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-8242"
+ ],
+ "details": "The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_user_profile() function in all versions up to, and including, 4.15.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files (not including PHP files) on the affected site's server which may make remote code execution possible. This can be paired with a registration endpoint for unauthenticated users to exploit the issue.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8242"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L1053"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/changeset/3147900/mstore-api/trunk/controllers/flutter-user.php"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/changeset/3147900/mstore-api/trunk/functions/index.php"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/fe3834a6-a6f5-4cc7-951e-a6ada6346b07?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-434"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:16Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-f9m9-68wf-ppcf/GHSA-f9m9-68wf-ppcf.json b/advisories/unreviewed/2024/09/GHSA-f9m9-68wf-ppcf/GHSA-f9m9-68wf-ppcf.json
new file mode 100644
index 00000000000..cc3ef74d411
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-f9m9-68wf-ppcf/GHSA-f9m9-68wf-ppcf.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-f9m9-68wf-ppcf",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-5884"
+ ],
+ "details": "The Beauty theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tpl_featured_cat_id’ parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5884"
+ },
+ {
+ "type": "WEB",
+ "url": "https://themes.trac.wordpress.org/browser/beauty/1.1.4/functions.php#L46"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c1089958-a481-47b1-9dc6-799a1a7930c8?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:16Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-g7fv-v867-rmwj/GHSA-g7fv-v867-rmwj.json b/advisories/unreviewed/2024/09/GHSA-g7fv-v867-rmwj/GHSA-g7fv-v867-rmwj.json
new file mode 100644
index 00000000000..ce342d66a5c
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-g7fv-v867-rmwj/GHSA-g7fv-v867-rmwj.json
@@ -0,0 +1,50 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-g7fv-v867-rmwj",
+ "modified": "2024-09-13T15:31:36Z",
+ "published": "2024-09-13T15:31:36Z",
+ "aliases": [
+ "CVE-2024-8269"
+ ],
+ "details": "The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 4.15.3. This is due to the plugin not checking that user registration is enabled prior to creating a user account through the register() function. This makes it possible for unauthenticated attackers to create user accounts on sites, even when user registration is disabled and plugin functionality is not activated.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8269"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/mstore-api/tags/4.15.2/controllers/flutter-user.php#L406"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/mstore-api/tags/4.15.2/controllers/flutter-user.php#L454"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/changeset/3147900/mstore-api/trunk/controllers/flutter-user.php"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/59c5b6e7-74b0-430d-8b4a-5a42220f3ec9?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-284"
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:17Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-gm45-ppxv-rfjp/GHSA-gm45-ppxv-rfjp.json b/advisories/unreviewed/2024/09/GHSA-gm45-ppxv-rfjp/GHSA-gm45-ppxv-rfjp.json
new file mode 100644
index 00000000000..f8599ba9232
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-gm45-ppxv-rfjp/GHSA-gm45-ppxv-rfjp.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-gm45-ppxv-rfjp",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2022-2446"
+ ],
+ "details": "The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9. This makes it possible for authenticated attackers with administrative privileges to call files using a PHAR wrapper that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2446"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/changeset/3151053"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f3555702-4427-4569-8fd6-f84113593e9d?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-502"
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:13Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-jgpx-8fg9-hh7j/GHSA-jgpx-8fg9-hh7j.json b/advisories/unreviewed/2024/09/GHSA-jgpx-8fg9-hh7j/GHSA-jgpx-8fg9-hh7j.json
new file mode 100644
index 00000000000..872a908ce3f
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-jgpx-8fg9-hh7j/GHSA-jgpx-8fg9-hh7j.json
@@ -0,0 +1,55 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-jgpx-8fg9-hh7j",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-46713"
+ ],
+ "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/aux: Fix AUX buffer serialization\n\nOle reported that event->mmap_mutex is strictly insufficient to\nserialize the AUX buffer, add a per RB mutex to fully serialize it.\n\nNote that in the lock order comment the perf_event::mmap_mutex order\nwas already wrong, that is, it nesting under mmap_lock is not new with\nthis patch.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46713"
+ },
+ {
+ "type": "WEB",
+ "url": "https://git.kernel.org/stable/c/2ab9d830262c132ab5db2f571003d80850d56b2a"
+ },
+ {
+ "type": "WEB",
+ "url": "https://git.kernel.org/stable/c/52d13d224fdf1299c8b642807fa1ea14d693f5ff"
+ },
+ {
+ "type": "WEB",
+ "url": "https://git.kernel.org/stable/c/7882923f1cb88dc1a17f2bf0c81b1fc80d44db82"
+ },
+ {
+ "type": "WEB",
+ "url": "https://git.kernel.org/stable/c/9dc7ad2b67772cfb94ceb3b0c9c4023c2463215d"
+ },
+ {
+ "type": "WEB",
+ "url": "https://git.kernel.org/stable/c/b9b6882e243b653d379abbeaa64a500182aba370"
+ },
+ {
+ "type": "WEB",
+ "url": "https://git.kernel.org/stable/c/c4b69bee3f4ef76809288fe6827bc14d4ae788ef"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:15Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-jhh2-7qpr-2pv5/GHSA-jhh2-7qpr-2pv5.json b/advisories/unreviewed/2024/09/GHSA-jhh2-7qpr-2pv5/GHSA-jhh2-7qpr-2pv5.json
new file mode 100644
index 00000000000..bfff8143ac5
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-jhh2-7qpr-2pv5/GHSA-jhh2-7qpr-2pv5.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-jhh2-7qpr-2pv5",
+ "modified": "2024-09-13T15:31:34Z",
+ "published": "2024-09-13T15:31:34Z",
+ "aliases": [
+ "CVE-2024-46045"
+ ],
+ "details": "Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46045"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/BenJpopo/V/blob/main/Tenda/CH22/frmL7PlotForm.md"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T14:15:14Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-jw76-x8jc-r725/GHSA-jw76-x8jc-r725.json b/advisories/unreviewed/2024/09/GHSA-jw76-x8jc-r725/GHSA-jw76-x8jc-r725.json
index 1a7adbf46a7..0c99a0cf862 100644
--- a/advisories/unreviewed/2024/09/GHSA-jw76-x8jc-r725/GHSA-jw76-x8jc-r725.json
+++ b/advisories/unreviewed/2024/09/GHSA-jw76-x8jc-r725/GHSA-jw76-x8jc-r725.json
@@ -32,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-416",
"CWE-843"
],
"severity": "HIGH",
diff --git a/advisories/unreviewed/2024/09/GHSA-m74p-p5fp-95cw/GHSA-m74p-p5fp-95cw.json b/advisories/unreviewed/2024/09/GHSA-m74p-p5fp-95cw/GHSA-m74p-p5fp-95cw.json
new file mode 100644
index 00000000000..a0741cc0c98
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-m74p-p5fp-95cw/GHSA-m74p-p5fp-95cw.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-m74p-p5fp-95cw",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-5789"
+ ],
+ "details": "The Triton Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute within the theme's Button shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5789"
+ },
+ {
+ "type": "WEB",
+ "url": "https://themes.trac.wordpress.org/browser/triton-lite/1.3/lib/includes/shortcodes.php#L136"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/049efe5a-3f68-46ad-b73a-1892f03c9d1d?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:15Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-m8mp-83qq-7j4f/GHSA-m8mp-83qq-7j4f.json b/advisories/unreviewed/2024/09/GHSA-m8mp-83qq-7j4f/GHSA-m8mp-83qq-7j4f.json
index 28f0593f41b..cc62f6f43ef 100644
--- a/advisories/unreviewed/2024/09/GHSA-m8mp-83qq-7j4f/GHSA-m8mp-83qq-7j4f.json
+++ b/advisories/unreviewed/2024/09/GHSA-m8mp-83qq-7j4f/GHSA-m8mp-83qq-7j4f.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m8mp-83qq-7j4f",
- "modified": "2024-09-13T06:30:43Z",
+ "modified": "2024-09-13T15:31:33Z",
"published": "2024-09-13T06:30:43Z",
"aliases": [
"CVE-2024-7129"
],
"details": "The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-13T06:15:15Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-mvvx-479v-8cr8/GHSA-mvvx-479v-8cr8.json b/advisories/unreviewed/2024/09/GHSA-mvvx-479v-8cr8/GHSA-mvvx-479v-8cr8.json
new file mode 100644
index 00000000000..0de3ac139d7
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-mvvx-479v-8cr8/GHSA-mvvx-479v-8cr8.json
@@ -0,0 +1,38 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-mvvx-479v-8cr8",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-46049"
+ ],
+ "details": "Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46049"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/BenJpopo/V/blob/main/Tenda/O6/formexeCommand.md"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-121"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T14:15:14Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-p742-8whq-qv2p/GHSA-p742-8whq-qv2p.json b/advisories/unreviewed/2024/09/GHSA-p742-8whq-qv2p/GHSA-p742-8whq-qv2p.json
new file mode 100644
index 00000000000..363f4d3e13f
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-p742-8whq-qv2p/GHSA-p742-8whq-qv2p.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-p742-8whq-qv2p",
+ "modified": "2024-09-13T15:31:36Z",
+ "published": "2024-09-13T15:31:36Z",
+ "aliases": [
+ "CVE-2024-8731"
+ ],
+ "details": "The Cron Jobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8731"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/leira-cron-jobs/trunk/admin/class-leira-cron-jobs-admin.php#L147"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5f6da693-4610-4875-aa14-102809309b8d?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:17Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-pgmw-5qx3-mhj6/GHSA-pgmw-5qx3-mhj6.json b/advisories/unreviewed/2024/09/GHSA-pgmw-5qx3-mhj6/GHSA-pgmw-5qx3-mhj6.json
new file mode 100644
index 00000000000..ff4dedee023
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-pgmw-5qx3-mhj6/GHSA-pgmw-5qx3-mhj6.json
@@ -0,0 +1,54 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-pgmw-5qx3-mhj6",
+ "modified": "2024-09-13T15:31:36Z",
+ "published": "2024-09-13T15:31:36Z",
+ "aliases": [
+ "CVE-2024-8714"
+ ],
+ "details": "The WordPress Affiliates Plugin — SliceWP Affiliates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.1.20. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8714"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/slicewp/tags/1.1.20/includes/admin/commissions/class-list-table-commissions.php#L544"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/slicewp/tags/1.1.20/includes/admin/payouts/class-list-table-payments.php#L490"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/slicewp/tags/1.1.20/includes/admin/visits/class-list-table-visits.php#L396"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/changeset/3151062"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/45dd22d4-9a51-4569-a756-1f1a5f8626c1?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:17Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-r6cg-gw4p-5gmj/GHSA-r6cg-gw4p-5gmj.json b/advisories/unreviewed/2024/09/GHSA-r6cg-gw4p-5gmj/GHSA-r6cg-gw4p-5gmj.json
index bc9975e5e90..cf01882d8cd 100644
--- a/advisories/unreviewed/2024/09/GHSA-r6cg-gw4p-5gmj/GHSA-r6cg-gw4p-5gmj.json
+++ b/advisories/unreviewed/2024/09/GHSA-r6cg-gw4p-5gmj/GHSA-r6cg-gw4p-5gmj.json
@@ -33,6 +33,7 @@
"database_specific": {
"cwe_ids": [
"CWE-122",
+ "CWE-416",
"CWE-787"
],
"severity": "HIGH",
diff --git a/advisories/unreviewed/2024/09/GHSA-rvmx-xw47-rh9g/GHSA-rvmx-xw47-rh9g.json b/advisories/unreviewed/2024/09/GHSA-rvmx-xw47-rh9g/GHSA-rvmx-xw47-rh9g.json
new file mode 100644
index 00000000000..f59a439d01c
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-rvmx-xw47-rh9g/GHSA-rvmx-xw47-rh9g.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-rvmx-xw47-rh9g",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-6544"
+ ],
+ "details": "The Custom Post Limits plugin for WordPress is vulnerable to full path disclosure in all versions up to, and including, 4.4.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6544"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/custom-post-limits/trunk/tests/bootstrap.php"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9cf4a11e-ad28-4a93-9278-1d2d113a4859?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-200"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:16Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-vg62-5q72-657x/GHSA-vg62-5q72-657x.json b/advisories/unreviewed/2024/09/GHSA-vg62-5q72-657x/GHSA-vg62-5q72-657x.json
new file mode 100644
index 00000000000..0080d4202ca
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-vg62-5q72-657x/GHSA-vg62-5q72-657x.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-vg62-5q72-657x",
+ "modified": "2024-09-13T15:31:34Z",
+ "published": "2024-09-13T15:31:34Z",
+ "aliases": [
+ "CVE-2024-46047"
+ ],
+ "details": "Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46047"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/BenJpopo/V/blob/main/Tenda/FH451/DhcpListClient.md"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T14:15:14Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-wx49-gvfc-fhrp/GHSA-wx49-gvfc-fhrp.json b/advisories/unreviewed/2024/09/GHSA-wx49-gvfc-fhrp/GHSA-wx49-gvfc-fhrp.json
new file mode 100644
index 00000000000..b99e6e8ad8c
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-wx49-gvfc-fhrp/GHSA-wx49-gvfc-fhrp.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-wx49-gvfc-fhrp",
+ "modified": "2024-09-13T15:31:35Z",
+ "published": "2024-09-13T15:31:35Z",
+ "aliases": [
+ "CVE-2024-5869"
+ ],
+ "details": "The Neighborly theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5869"
+ },
+ {
+ "type": "WEB",
+ "url": "https://themes.trac.wordpress.org/browser/neighborly/1.4/inc/extras.php#L151"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f65834c6-6da7-4033-aa2a-a4926d6c955d?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:15Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-xhxf-q686-3p2f/GHSA-xhxf-q686-3p2f.json b/advisories/unreviewed/2024/09/GHSA-xhxf-q686-3p2f/GHSA-xhxf-q686-3p2f.json
new file mode 100644
index 00000000000..61d9064ca13
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-xhxf-q686-3p2f/GHSA-xhxf-q686-3p2f.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-xhxf-q686-3p2f",
+ "modified": "2024-09-13T15:31:36Z",
+ "published": "2024-09-13T15:31:36Z",
+ "aliases": [
+ "CVE-2024-8730"
+ ],
+ "details": "The Exit Notifier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.9.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8730"
+ },
+ {
+ "type": "WEB",
+ "url": "https://plugins.trac.wordpress.org/browser/exit-notifier/trunk/includes/class-exit-notifier-settings.php#L707"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ddc1aedb-e64f-4b61-a247-c3cdc731f001?source=cve"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-13T15:15:17Z"
+ }
+}
\ No newline at end of file