diff --git a/advisories/github-reviewed/2024/12/GHSA-h63v-hw6g-x8hp/GHSA-h63v-hw6g-x8hp.json b/advisories/github-reviewed/2024/12/GHSA-h63v-hw6g-x8hp/GHSA-h63v-hw6g-x8hp.json
index 2efc5ef4c62..e7a1eebb22c 100644
--- a/advisories/github-reviewed/2024/12/GHSA-h63v-hw6g-x8hp/GHSA-h63v-hw6g-x8hp.json
+++ b/advisories/github-reviewed/2024/12/GHSA-h63v-hw6g-x8hp/GHSA-h63v-hw6g-x8hp.json
@@ -63,7 +63,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-325"
+      "CWE-325",
+      "CWE-327"
     ],
     "severity": "HIGH",
     "github_reviewed": true,
diff --git a/advisories/unreviewed/2023/12/GHSA-qjcj-xg77-6c32/GHSA-qjcj-xg77-6c32.json b/advisories/unreviewed/2023/12/GHSA-qjcj-xg77-6c32/GHSA-qjcj-xg77-6c32.json
index 5e45e3783cf..90cacd79a8d 100644
--- a/advisories/unreviewed/2023/12/GHSA-qjcj-xg77-6c32/GHSA-qjcj-xg77-6c32.json
+++ b/advisories/unreviewed/2023/12/GHSA-qjcj-xg77-6c32/GHSA-qjcj-xg77-6c32.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qjcj-xg77-6c32",
-  "modified": "2023-12-14T15:30:20Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2023-12-08T06:30:38Z",
   "aliases": [
     "CVE-2023-45866"
diff --git a/advisories/unreviewed/2024/03/GHSA-2gv4-5v5r-xjq2/GHSA-2gv4-5v5r-xjq2.json b/advisories/unreviewed/2024/03/GHSA-2gv4-5v5r-xjq2/GHSA-2gv4-5v5r-xjq2.json
index 7209072ce3a..ae7d6021105 100644
--- a/advisories/unreviewed/2024/03/GHSA-2gv4-5v5r-xjq2/GHSA-2gv4-5v5r-xjq2.json
+++ b/advisories/unreviewed/2024/03/GHSA-2gv4-5v5r-xjq2/GHSA-2gv4-5v5r-xjq2.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2gv4-5v5r-xjq2",
-  "modified": "2024-03-02T00:31:31Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-02T00:31:31Z",
   "aliases": [
     "CVE-2021-47076"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Return CQE error if invalid lkey was supplied\n\nRXE is missing update of WQE status in LOCAL_WRITE failures.  This caused\nthe following kernel panic if someone sent an atomic operation with an\nexplicitly wrong lkey.\n\n[leonro@vm ~]$ mkt test\ntest_atomic_invalid_lkey (tests.test_atomic.AtomicTest) ...\n WARNING: CPU: 5 PID: 263 at drivers/infiniband/sw/rxe/rxe_comp.c:740 rxe_completer+0x1a6d/0x2e30 [rdma_rxe]\n Modules linked in: crc32_generic rdma_rxe ip6_udp_tunnel udp_tunnel rdma_ucm rdma_cm ib_umad ib_ipoib iw_cm ib_cm mlx5_ib ib_uverbs ib_core mlx5_core ptp pps_core\n CPU: 5 PID: 263 Comm: python3 Not tainted 5.13.0-rc1+ #2936\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n RIP: 0010:rxe_completer+0x1a6d/0x2e30 [rdma_rxe]\n Code: 03 0f 8e 65 0e 00 00 3b 93 10 06 00 00 0f 84 82 0a 00 00 4c 89 ff 4c 89 44 24 38 e8 2d 74 a9 e1 4c 8b 44 24 38 e9 1c f5 ff ff <0f> 0b e9 0c e8 ff ff b8 05 00 00 00 41 bf 05 00 00 00 e9 ab e7 ff\n RSP: 0018:ffff8880158af090 EFLAGS: 00010246\n RAX: 0000000000000000 RBX: ffff888016a78000 RCX: ffffffffa0cf1652\n RDX: 1ffff9200004b442 RSI: 0000000000000004 RDI: ffffc9000025a210\n RBP: dffffc0000000000 R08: 00000000ffffffea R09: ffff88801617740b\n R10: ffffed1002c2ee81 R11: 0000000000000007 R12: ffff88800f3b63e8\n R13: ffff888016a78008 R14: ffffc9000025a180 R15: 000000000000000c\n FS:  00007f88b622a740(0000) GS:ffff88806d540000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f88b5a1fa10 CR3: 000000000d848004 CR4: 0000000000370ea0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n  rxe_do_task+0x130/0x230 [rdma_rxe]\n  rxe_rcv+0xb11/0x1df0 [rdma_rxe]\n  rxe_loopback+0x157/0x1e0 [rdma_rxe]\n  rxe_responder+0x5532/0x7620 [rdma_rxe]\n  rxe_do_task+0x130/0x230 [rdma_rxe]\n  rxe_rcv+0x9c8/0x1df0 [rdma_rxe]\n  rxe_loopback+0x157/0x1e0 [rdma_rxe]\n  rxe_requester+0x1efd/0x58c0 [rdma_rxe]\n  rxe_do_task+0x130/0x230 [rdma_rxe]\n  rxe_post_send+0x998/0x1860 [rdma_rxe]\n  ib_uverbs_post_send+0xd5f/0x1220 [ib_uverbs]\n  ib_uverbs_write+0x847/0xc80 [ib_uverbs]\n  vfs_write+0x1c5/0x840\n  ksys_write+0x176/0x1d0\n  do_syscall_64+0x3f/0x80\n  entry_SYSCALL_64_after_hwframe+0x44/0xae",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -25,7 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-01T22:15:47Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-3h2v-h2q9-f9r6/GHSA-3h2v-h2q9-f9r6.json b/advisories/unreviewed/2024/03/GHSA-3h2v-h2q9-f9r6/GHSA-3h2v-h2q9-f9r6.json
index b9a9bf49c78..bdf8060ec90 100644
--- a/advisories/unreviewed/2024/03/GHSA-3h2v-h2q9-f9r6/GHSA-3h2v-h2q9-f9r6.json
+++ b/advisories/unreviewed/2024/03/GHSA-3h2v-h2q9-f9r6/GHSA-3h2v-h2q9-f9r6.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3h2v-h2q9-f9r6",
-  "modified": "2024-03-06T09:30:27Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-06T09:30:27Z",
   "aliases": [
     "CVE-2023-52593"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()\n\nSince 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()'\nshould check the return value before examining skb data. So convert\nthe latter to return an appropriate error code and propagate it to\nreturn from 'wfx_start_ap()' as well. Compile tested only.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-3wwr-wv4x-4gxg/GHSA-3wwr-wv4x-4gxg.json b/advisories/unreviewed/2024/03/GHSA-3wwr-wv4x-4gxg/GHSA-3wwr-wv4x-4gxg.json
index da666df8f92..1dbe54241e7 100644
--- a/advisories/unreviewed/2024/03/GHSA-3wwr-wv4x-4gxg/GHSA-3wwr-wv4x-4gxg.json
+++ b/advisories/unreviewed/2024/03/GHSA-3wwr-wv4x-4gxg/GHSA-3wwr-wv4x-4gxg.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3wwr-wv4x-4gxg",
-  "modified": "2024-06-27T12:30:44Z",
+  "modified": "2024-12-12T15:31:06Z",
   "published": "2024-03-18T12:30:35Z",
   "aliases": [
     "CVE-2023-52615"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwrng: core - Fix page fault dead lock on mmap-ed hwrng\n\nThere is a dead-lock in the hwrng device read path.  This triggers\nwhen the user reads from /dev/hwrng into memory also mmap-ed from\n/dev/hwrng.  The resulting page fault triggers a recursive read\nwhich then dead-locks.\n\nFix this by using a stack buffer when calling copy_to_user.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -56,8 +61,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-667"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-18T11:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-6ccp-3692-j6fr/GHSA-6ccp-3692-j6fr.json b/advisories/unreviewed/2024/03/GHSA-6ccp-3692-j6fr/GHSA-6ccp-3692-j6fr.json
index 2c91328c0a5..45a9467a664 100644
--- a/advisories/unreviewed/2024/03/GHSA-6ccp-3692-j6fr/GHSA-6ccp-3692-j6fr.json
+++ b/advisories/unreviewed/2024/03/GHSA-6ccp-3692-j6fr/GHSA-6ccp-3692-j6fr.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6ccp-3692-j6fr",
-  "modified": "2024-03-02T00:31:31Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-02T00:31:31Z",
   "aliases": [
     "CVE-2021-47074"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-loop: fix memory leak in nvme_loop_create_ctrl()\n\nWhen creating loop ctrl in nvme_loop_create_ctrl(), if nvme_init_ctrl()\nfails, the loop ctrl should be freed before jumping to the \"out\" label.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-401"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-01T22:15:47Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-6x4q-xmhw-jmpw/GHSA-6x4q-xmhw-jmpw.json b/advisories/unreviewed/2024/03/GHSA-6x4q-xmhw-jmpw/GHSA-6x4q-xmhw-jmpw.json
index ef9c0faae2c..05e14761a11 100644
--- a/advisories/unreviewed/2024/03/GHSA-6x4q-xmhw-jmpw/GHSA-6x4q-xmhw-jmpw.json
+++ b/advisories/unreviewed/2024/03/GHSA-6x4q-xmhw-jmpw/GHSA-6x4q-xmhw-jmpw.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6x4q-xmhw-jmpw",
-  "modified": "2024-03-25T09:32:35Z",
+  "modified": "2024-12-12T15:31:06Z",
   "published": "2024-03-25T09:32:35Z",
   "aliases": [
     "CVE-2021-47148"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: fix a buffer overflow in otx2_set_rxfh_context()\n\nThis function is called from ethtool_set_rxfh() and \"*rss_context\"\ncomes from the user.  Add some bounds checking to prevent memory\ncorruption.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-25T09:15:09Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-79hf-9rwh-4gv8/GHSA-79hf-9rwh-4gv8.json b/advisories/unreviewed/2024/03/GHSA-79hf-9rwh-4gv8/GHSA-79hf-9rwh-4gv8.json
index d194751cd15..2ea00b70b21 100644
--- a/advisories/unreviewed/2024/03/GHSA-79hf-9rwh-4gv8/GHSA-79hf-9rwh-4gv8.json
+++ b/advisories/unreviewed/2024/03/GHSA-79hf-9rwh-4gv8/GHSA-79hf-9rwh-4gv8.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-79hf-9rwh-4gv8",
-  "modified": "2024-06-26T00:31:35Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-06T09:30:28Z",
   "aliases": [
     "CVE-2023-52595"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00: restart beacon queue when hardware reset\n\nWhen a hardware reset is triggered, all registers are reset, so all\nqueues are forced to stop in hardware interface. However, mac80211\nwill not automatically stop the queue. If we don't manually stop the\nbeacon queue, the queue will be deadlocked and unable to start again.\nThis patch fixes the issue where Apple devices cannot connect to the\nAP after calling ieee80211_restart_hw().",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -48,8 +53,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-667"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:09Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-cgjr-9g5g-88j4/GHSA-cgjr-9g5g-88j4.json b/advisories/unreviewed/2024/03/GHSA-cgjr-9g5g-88j4/GHSA-cgjr-9g5g-88j4.json
index 35016f53454..af813af7178 100644
--- a/advisories/unreviewed/2024/03/GHSA-cgjr-9g5g-88j4/GHSA-cgjr-9g5g-88j4.json
+++ b/advisories/unreviewed/2024/03/GHSA-cgjr-9g5g-88j4/GHSA-cgjr-9g5g-88j4.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cgjr-9g5g-88j4",
-  "modified": "2024-06-27T12:30:44Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-06T09:30:28Z",
   "aliases": [
     "CVE-2023-52594"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()\n\nFix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug\noccurs when txs->cnt, data from a URB provided by a USB device, is\nbigger than the size of the array txs->txstatus, which is\nHTC_MAX_TX_STATUS. WARN_ON() already checks it, but there is no bug\nhandling code after the check. Make the function return if that is the\ncase.\n\nFound by a modified version of syzkaller.\n\nUBSAN: array-index-out-of-bounds in htc_drv_txrx.c\nindex 13 is out of range for type '__wmi_event_txstatus [12]'\nCall Trace:\n ath9k_htc_txstatus\n ath9k_wmi_event_tasklet\n tasklet_action_common\n __do_softirq\n irq_exit_rxu\n sysvec_apic_timer_interrupt",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -56,8 +61,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-129"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:09Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-f8g6-27f9-3r98/GHSA-f8g6-27f9-3r98.json b/advisories/unreviewed/2024/03/GHSA-f8g6-27f9-3r98/GHSA-f8g6-27f9-3r98.json
index 3b2b9a3446f..5048a5b4dcc 100644
--- a/advisories/unreviewed/2024/03/GHSA-f8g6-27f9-3r98/GHSA-f8g6-27f9-3r98.json
+++ b/advisories/unreviewed/2024/03/GHSA-f8g6-27f9-3r98/GHSA-f8g6-27f9-3r98.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f8g6-27f9-3r98",
-  "modified": "2024-03-02T00:31:30Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-02T00:31:30Z",
   "aliases": [
     "CVE-2021-47071"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nuio_hv_generic: Fix a memory leak in error handling paths\n\nIf 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be\nupdated and 'hv_uio_cleanup()' in the error handling path will not be\nable to free the corresponding buffer.\n\nIn such a case, we need to free the buffer explicitly.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-401"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-01T22:15:46Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-pvf7-pgpm-3q43/GHSA-pvf7-pgpm-3q43.json b/advisories/unreviewed/2024/03/GHSA-pvf7-pgpm-3q43/GHSA-pvf7-pgpm-3q43.json
index d838ab77e00..3ba1710d1ac 100644
--- a/advisories/unreviewed/2024/03/GHSA-pvf7-pgpm-3q43/GHSA-pvf7-pgpm-3q43.json
+++ b/advisories/unreviewed/2024/03/GHSA-pvf7-pgpm-3q43/GHSA-pvf7-pgpm-3q43.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pvf7-pgpm-3q43",
-  "modified": "2024-06-26T00:31:35Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-18T12:30:35Z",
   "aliases": [
     "CVE-2023-52614"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM / devfreq: Fix buffer overflow in trans_stat_show\n\nFix buffer overflow in trans_stat_show().\n\nConvert simple snprintf to the more secure scnprintf with size of\nPAGE_SIZE.\n\nAdd condition checking if we are exceeding PAGE_SIZE and exit early from\nloop. Also add at the end a warning that we exceeded PAGE_SIZE and that\nstats is disabled.\n\nReturn -EFBIG in the case where we don't have enough space to write the\nfull transition table.\n\nAlso document in the ABI that this function can return -EFBIG error.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -44,8 +49,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-18T11:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-q2qw-486m-j3c6/GHSA-q2qw-486m-j3c6.json b/advisories/unreviewed/2024/03/GHSA-q2qw-486m-j3c6/GHSA-q2qw-486m-j3c6.json
index 8fea6f20493..ba577a8b56e 100644
--- a/advisories/unreviewed/2024/03/GHSA-q2qw-486m-j3c6/GHSA-q2qw-486m-j3c6.json
+++ b/advisories/unreviewed/2024/03/GHSA-q2qw-486m-j3c6/GHSA-q2qw-486m-j3c6.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q2qw-486m-j3c6",
-  "modified": "2024-03-11T18:31:09Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-11T18:31:09Z",
   "aliases": [
     "CVE-2024-26619"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: Fix module loading free order\n\nReverse order of kfree calls to resolve use-after-free error.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-11T18:15:19Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-56gf-j26c-43xh/GHSA-56gf-j26c-43xh.json b/advisories/unreviewed/2024/09/GHSA-56gf-j26c-43xh/GHSA-56gf-j26c-43xh.json
index 2804aa3909a..7c49fa9b9dc 100644
--- a/advisories/unreviewed/2024/09/GHSA-56gf-j26c-43xh/GHSA-56gf-j26c-43xh.json
+++ b/advisories/unreviewed/2024/09/GHSA-56gf-j26c-43xh/GHSA-56gf-j26c-43xh.json
@@ -26,6 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-59",
       "CWE-61"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2024/12/GHSA-224h-vf26-wvfw/GHSA-224h-vf26-wvfw.json b/advisories/unreviewed/2024/12/GHSA-224h-vf26-wvfw/GHSA-224h-vf26-wvfw.json
new file mode 100644
index 00000000000..606448277e1
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-224h-vf26-wvfw/GHSA-224h-vf26-wvfw.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-224h-vf26-wvfw",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-28143"
+  ],
+  "details": "The password change function at /cgi/admin.cgi does not require the current/old password, which makes the application vulnerable to account takeover. An attacker can use this to forcefully set a new password within the -rsetpass+-aaction+- parameter for a user without knowing the old password, e.g. by exploiting a CSRF issue.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28143"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-620"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T14:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-2gf6-qx54-c8vp/GHSA-2gf6-qx54-c8vp.json b/advisories/unreviewed/2024/12/GHSA-2gf6-qx54-c8vp/GHSA-2gf6-qx54-c8vp.json
new file mode 100644
index 00000000000..5355d035306
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-2gf6-qx54-c8vp/GHSA-2gf6-qx54-c8vp.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2gf6-qx54-c8vp",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-54119"
+  ],
+  "details": "Cross-process screen stack vulnerability in the UIExtension module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54119"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/12"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:11Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-33rg-9hjg-3559/GHSA-33rg-9hjg-3559.json b/advisories/unreviewed/2024/12/GHSA-33rg-9hjg-3559/GHSA-33rg-9hjg-3559.json
new file mode 100644
index 00000000000..32ae358f934
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-33rg-9hjg-3559/GHSA-33rg-9hjg-3559.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-33rg-9hjg-3559",
+  "modified": "2024-12-12T15:31:07Z",
+  "published": "2024-12-12T15:31:07Z",
+  "aliases": [
+    "CVE-2024-36498"
+  ],
+  "details": "Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The \"Edit Disclaimer Text\" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL\n\n\n\n\n\n\n\n\n\nhttps://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre\n\nThe stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Version 7.40 implemented a fix, but it could be bypassed via URL-encoding the Javascript payload again.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36498"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-355f-hgvp-6hq8/GHSA-355f-hgvp-6hq8.json b/advisories/unreviewed/2024/12/GHSA-355f-hgvp-6hq8/GHSA-355f-hgvp-6hq8.json
index 783c3c7e841..2dbfbf675d9 100644
--- a/advisories/unreviewed/2024/12/GHSA-355f-hgvp-6hq8/GHSA-355f-hgvp-6hq8.json
+++ b/advisories/unreviewed/2024/12/GHSA-355f-hgvp-6hq8/GHSA-355f-hgvp-6hq8.json
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-200"
+      "CWE-200",
+      "CWE-732"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-3cfg-p79p-hp56/GHSA-3cfg-p79p-hp56.json b/advisories/unreviewed/2024/12/GHSA-3cfg-p79p-hp56/GHSA-3cfg-p79p-hp56.json
new file mode 100644
index 00000000000..60dcd779af7
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-3cfg-p79p-hp56/GHSA-3cfg-p79p-hp56.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3cfg-p79p-hp56",
+  "modified": "2024-12-12T15:31:09Z",
+  "published": "2024-12-12T15:31:09Z",
+  "aliases": [
+    "CVE-2024-54842"
+  ],
+  "details": "A SQL injection vulnerability was found in phpgurukul Online Nurse Hiring System v1.0 in /admin/password-recovery.php via the mobileno parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54842"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/achchhelalchauhan/phpgurukul/blob/main/SQL%20injection%20ONHP-forgetpass-mobileno.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T15:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-3hpg-wc2r-h2qx/GHSA-3hpg-wc2r-h2qx.json b/advisories/unreviewed/2024/12/GHSA-3hpg-wc2r-h2qx/GHSA-3hpg-wc2r-h2qx.json
index 8c7ca1170e2..dafe597be48 100644
--- a/advisories/unreviewed/2024/12/GHSA-3hpg-wc2r-h2qx/GHSA-3hpg-wc2r-h2qx.json
+++ b/advisories/unreviewed/2024/12/GHSA-3hpg-wc2r-h2qx/GHSA-3hpg-wc2r-h2qx.json
@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/12/GHSA-4g5g-f23m-c94v/GHSA-4g5g-f23m-c94v.json b/advisories/unreviewed/2024/12/GHSA-4g5g-f23m-c94v/GHSA-4g5g-f23m-c94v.json
new file mode 100644
index 00000000000..b923f733312
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-4g5g-f23m-c94v/GHSA-4g5g-f23m-c94v.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4g5g-f23m-c94v",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-54122"
+  ],
+  "details": "Concurrent variable access vulnerability in the ability module\nImpact: Successful exploitation of this vulnerability may affect availability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54122"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/12"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-362"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:11Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-68rw-c4gj-cpcv/GHSA-68rw-c4gj-cpcv.json b/advisories/unreviewed/2024/12/GHSA-68rw-c4gj-cpcv/GHSA-68rw-c4gj-cpcv.json
new file mode 100644
index 00000000000..5f54b80c2f3
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-68rw-c4gj-cpcv/GHSA-68rw-c4gj-cpcv.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-68rw-c4gj-cpcv",
+  "modified": "2024-12-12T15:31:07Z",
+  "published": "2024-12-12T15:31:07Z",
+  "aliases": [
+    "CVE-2024-28142"
+  ],
+  "details": "Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The \"File Name\" page (/cgi/uset.cgi?-cfilename) in the User Settings menu improperly filters the \"file name\" and wildcard character input field. By exploiting the wildcard character feature, attackers are able to store arbitrary Javascript code which is being triggered if the page is viewed afterwards, e.g. by higher privileged users such as admins.\n\n\n\n\n\n\n\n\n\nThis attack can even be performed without being logged in because the affected functions are not fully protected. Without logging in, only the file name parameter of the \"Default\" User can be changed.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28142"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-6mx8-m8xp-f2vc/GHSA-6mx8-m8xp-f2vc.json b/advisories/unreviewed/2024/12/GHSA-6mx8-m8xp-f2vc/GHSA-6mx8-m8xp-f2vc.json
new file mode 100644
index 00000000000..dd641828578
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-6mx8-m8xp-f2vc/GHSA-6mx8-m8xp-f2vc.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6mx8-m8xp-f2vc",
+  "modified": "2024-12-12T15:31:09Z",
+  "published": "2024-12-12T15:31:09Z",
+  "aliases": [
+    "CVE-2024-21575"
+  ],
+  "details": "ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the `image.filename` field in a POST request sent to the `/upload/temp` endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some conditions, result in remote code execution (RCE).",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21575"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ltdrdata/ComfyUI-Impact-Pack/commit/a43dae373e648ae0f0cc0c9768c3cea6a72acff7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ltdrdata/ComfyUI-Impact-Pack/blob/1087f2ee063c9d53cd198add79b41a7a3465c05a/modules/impact/impact_server.py#L28"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-35"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T15:15:12Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-6wgj-rp85-6f6w/GHSA-6wgj-rp85-6f6w.json b/advisories/unreviewed/2024/12/GHSA-6wgj-rp85-6f6w/GHSA-6wgj-rp85-6f6w.json
index 8d7bb142091..58fc3241668 100644
--- a/advisories/unreviewed/2024/12/GHSA-6wgj-rp85-6f6w/GHSA-6wgj-rp85-6f6w.json
+++ b/advisories/unreviewed/2024/12/GHSA-6wgj-rp85-6f6w/GHSA-6wgj-rp85-6f6w.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-787"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-787v-v9vq-4rgv/GHSA-787v-v9vq-4rgv.json b/advisories/unreviewed/2024/12/GHSA-787v-v9vq-4rgv/GHSA-787v-v9vq-4rgv.json
new file mode 100644
index 00000000000..67233c8bc5c
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-787v-v9vq-4rgv/GHSA-787v-v9vq-4rgv.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-787v-v9vq-4rgv",
+  "modified": "2024-12-12T15:31:09Z",
+  "published": "2024-12-12T15:31:09Z",
+  "aliases": [
+    "CVE-2024-55633"
+  ],
+  "details": "Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable. \n\nThis issue affects Apache Superset: before 4.1.0.\n\nUsers are recommended to upgrade to version 4.1.0, which fixes the issue.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55633"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/bwmd17fcvljt9q4cgctp4v09zh3qs7fb"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-285"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T15:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-7r69-4p34-c2pw/GHSA-7r69-4p34-c2pw.json b/advisories/unreviewed/2024/12/GHSA-7r69-4p34-c2pw/GHSA-7r69-4p34-c2pw.json
new file mode 100644
index 00000000000..2d3c6c3ed06
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-7r69-4p34-c2pw/GHSA-7r69-4p34-c2pw.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7r69-4p34-c2pw",
+  "modified": "2024-12-12T15:31:07Z",
+  "published": "2024-12-12T15:31:07Z",
+  "aliases": [
+    "CVE-2024-12271"
+  ],
+  "details": "The 360 Javascript Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ref’ parameter in all versions up to, and including, 1.7.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12271"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/360deg-javascript-viewer/trunk/includes/class-jsv-360-parser.php#L129"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/360deg-javascript-viewer/trunk/includes/class-jsv-360-parser.php#L162"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3206400"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/12b4e363-248f-469a-a958-0b1ec5c6e37f?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-84p4-9xrj-9rj5/GHSA-84p4-9xrj-9rj5.json b/advisories/unreviewed/2024/12/GHSA-84p4-9xrj-9rj5/GHSA-84p4-9xrj-9rj5.json
new file mode 100644
index 00000000000..031498af258
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-84p4-9xrj-9rj5/GHSA-84p4-9xrj-9rj5.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-84p4-9xrj-9rj5",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-28146"
+  ],
+  "details": "The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28146"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-798"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T14:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-99xq-gh8h-93m3/GHSA-99xq-gh8h-93m3.json b/advisories/unreviewed/2024/12/GHSA-99xq-gh8h-93m3/GHSA-99xq-gh8h-93m3.json
new file mode 100644
index 00000000000..ded61a0c5c2
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-99xq-gh8h-93m3/GHSA-99xq-gh8h-93m3.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-99xq-gh8h-93m3",
+  "modified": "2024-12-12T15:31:07Z",
+  "published": "2024-12-12T15:31:07Z",
+  "aliases": [
+    "CVE-2024-36494"
+  ],
+  "details": "Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The login page at /cgi/slogin.cgi suffers from XSS due to improper input filtering of the -tsetup+-uuser parameter, which can only be exploited if the target user is not already logged in. This makes it ideal for login form phishing attempts.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36494"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-9gpp-mwr2-q4r3/GHSA-9gpp-mwr2-q4r3.json b/advisories/unreviewed/2024/12/GHSA-9gpp-mwr2-q4r3/GHSA-9gpp-mwr2-q4r3.json
index a5dc7473321..fea4c44a33a 100644
--- a/advisories/unreviewed/2024/12/GHSA-9gpp-mwr2-q4r3/GHSA-9gpp-mwr2-q4r3.json
+++ b/advisories/unreviewed/2024/12/GHSA-9gpp-mwr2-q4r3/GHSA-9gpp-mwr2-q4r3.json
@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-125"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/12/GHSA-f9hr-3m6x-jmr5/GHSA-f9hr-3m6x-jmr5.json b/advisories/unreviewed/2024/12/GHSA-f9hr-3m6x-jmr5/GHSA-f9hr-3m6x-jmr5.json
new file mode 100644
index 00000000000..4ca662197d8
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-f9hr-3m6x-jmr5/GHSA-f9hr-3m6x-jmr5.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f9hr-3m6x-jmr5",
+  "modified": "2024-12-12T15:31:07Z",
+  "published": "2024-12-12T15:31:07Z",
+  "aliases": [
+    "CVE-2024-47947"
+  ],
+  "details": "Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The \"Edit Disclaimer Text\" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL\n\n\n\n\n\n\n\n\n\nhttps://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre\n\nThe stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47947"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-fj3p-hvq5-mp63/GHSA-fj3p-hvq5-mp63.json b/advisories/unreviewed/2024/12/GHSA-fj3p-hvq5-mp63/GHSA-fj3p-hvq5-mp63.json
index f14c178445a..63a7a1fcd01 100644
--- a/advisories/unreviewed/2024/12/GHSA-fj3p-hvq5-mp63/GHSA-fj3p-hvq5-mp63.json
+++ b/advisories/unreviewed/2024/12/GHSA-fj3p-hvq5-mp63/GHSA-fj3p-hvq5-mp63.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-787"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-hj6p-9597-6c2m/GHSA-hj6p-9597-6c2m.json b/advisories/unreviewed/2024/12/GHSA-hj6p-9597-6c2m/GHSA-hj6p-9597-6c2m.json
index b7ac1f95059..410de5f401a 100644
--- a/advisories/unreviewed/2024/12/GHSA-hj6p-9597-6c2m/GHSA-hj6p-9597-6c2m.json
+++ b/advisories/unreviewed/2024/12/GHSA-hj6p-9597-6c2m/GHSA-hj6p-9597-6c2m.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hj6p-9597-6c2m",
-  "modified": "2024-12-10T21:30:53Z",
+  "modified": "2024-12-12T15:31:07Z",
   "published": "2024-12-10T21:30:53Z",
   "aliases": [
     "CVE-2024-53480"
   ],
   "details": "Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in `login.php` via the `emailcont` parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-10T20:15:20Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-mxmf-v24g-56jq/GHSA-mxmf-v24g-56jq.json b/advisories/unreviewed/2024/12/GHSA-mxmf-v24g-56jq/GHSA-mxmf-v24g-56jq.json
index c1e5be8edfc..8bddc37a1e6 100644
--- a/advisories/unreviewed/2024/12/GHSA-mxmf-v24g-56jq/GHSA-mxmf-v24g-56jq.json
+++ b/advisories/unreviewed/2024/12/GHSA-mxmf-v24g-56jq/GHSA-mxmf-v24g-56jq.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-200"
+      "CWE-200",
+      "CWE-732"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-pc69-2jfc-f577/GHSA-pc69-2jfc-f577.json b/advisories/unreviewed/2024/12/GHSA-pc69-2jfc-f577/GHSA-pc69-2jfc-f577.json
new file mode 100644
index 00000000000..60f837e65d3
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-pc69-2jfc-f577/GHSA-pc69-2jfc-f577.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pc69-2jfc-f577",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-28145"
+  ],
+  "details": "An unauthenticated attacker can perform an SQL injection by accessing the /class/dbconnect.php file and supplying malicious GET parameters. The HTTP GET parameters search, table, field, and value are vulnerable. For example, one SQL injection can be performed on the parameter \"field\" with the UNION keyword.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28145"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T14:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-pr2c-m553-hpcv/GHSA-pr2c-m553-hpcv.json b/advisories/unreviewed/2024/12/GHSA-pr2c-m553-hpcv/GHSA-pr2c-m553-hpcv.json
new file mode 100644
index 00000000000..29c2b334a1f
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-pr2c-m553-hpcv/GHSA-pr2c-m553-hpcv.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pr2c-m553-hpcv",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-50584"
+  ],
+  "details": "An authenticated attacker with the user/role \"Poweruser\" can perform an SQL injection by accessing the /class/template_io.php file and supplying malicious GET parameters. The \"templates\" parameter is vulnerable against blind boolean-based SQL injection attacks. SQL syntax must be injected into the JSON syntax of the templates parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50584"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T14:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-q8r8-h2xj-8948/GHSA-q8r8-h2xj-8948.json b/advisories/unreviewed/2024/12/GHSA-q8r8-h2xj-8948/GHSA-q8r8-h2xj-8948.json
new file mode 100644
index 00000000000..f5fe5af2c58
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-q8r8-h2xj-8948/GHSA-q8r8-h2xj-8948.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q8r8-h2xj-8948",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-28144"
+  ],
+  "details": "An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interface from the same IP they are logged in as the other user.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28144"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-384"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T14:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-w4gc-9x8j-9hjv/GHSA-w4gc-9x8j-9hjv.json b/advisories/unreviewed/2024/12/GHSA-w4gc-9x8j-9hjv/GHSA-w4gc-9x8j-9hjv.json
index 6469c666928..7fcaeecd871 100644
--- a/advisories/unreviewed/2024/12/GHSA-w4gc-9x8j-9hjv/GHSA-w4gc-9x8j-9hjv.json
+++ b/advisories/unreviewed/2024/12/GHSA-w4gc-9x8j-9hjv/GHSA-w4gc-9x8j-9hjv.json
@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-94"
+    ],
     "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/12/GHSA-w66q-chx8-5439/GHSA-w66q-chx8-5439.json b/advisories/unreviewed/2024/12/GHSA-w66q-chx8-5439/GHSA-w66q-chx8-5439.json
index 96f714df4d9..4a2ce48c691 100644
--- a/advisories/unreviewed/2024/12/GHSA-w66q-chx8-5439/GHSA-w66q-chx8-5439.json
+++ b/advisories/unreviewed/2024/12/GHSA-w66q-chx8-5439/GHSA-w66q-chx8-5439.json
@@ -26,6 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-125",
       "CWE-126"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2024/12/GHSA-wcp9-qqhp-g679/GHSA-wcp9-qqhp-g679.json b/advisories/unreviewed/2024/12/GHSA-wcp9-qqhp-g679/GHSA-wcp9-qqhp-g679.json
new file mode 100644
index 00000000000..95b41d423f3
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-wcp9-qqhp-g679/GHSA-wcp9-qqhp-g679.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wcp9-qqhp-g679",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-54118"
+  ],
+  "details": "Cross-process screen stack vulnerability in the UIExtension module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54118"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/12"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:11Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-wg7c-c82w-8v8f/GHSA-wg7c-c82w-8v8f.json b/advisories/unreviewed/2024/12/GHSA-wg7c-c82w-8v8f/GHSA-wg7c-c82w-8v8f.json
index 648bbcbd19f..0fd20f7f800 100644
--- a/advisories/unreviewed/2024/12/GHSA-wg7c-c82w-8v8f/GHSA-wg7c-c82w-8v8f.json
+++ b/advisories/unreviewed/2024/12/GHSA-wg7c-c82w-8v8f/GHSA-wg7c-c82w-8v8f.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-787"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-xm75-jp9m-47jj/GHSA-xm75-jp9m-47jj.json b/advisories/unreviewed/2024/12/GHSA-xm75-jp9m-47jj/GHSA-xm75-jp9m-47jj.json
index a105aec01a1..5d6d87978d6 100644
--- a/advisories/unreviewed/2024/12/GHSA-xm75-jp9m-47jj/GHSA-xm75-jp9m-47jj.json
+++ b/advisories/unreviewed/2024/12/GHSA-xm75-jp9m-47jj/GHSA-xm75-jp9m-47jj.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-787"
     ],
     "severity": "HIGH",
     "github_reviewed": false,