diff --git a/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json b/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json
index 1352cb33828..acf11c70e8f 100644
--- a/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json
+++ b/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6f9g-cxwr-q5jr",
-  "modified": "2024-08-20T18:00:42Z",
+  "modified": "2024-12-20T18:32:22Z",
   "published": "2024-01-24T18:31:02Z",
   "aliases": [
     "CVE-2024-23897"
@@ -108,6 +108,10 @@
       "type": "WEB",
       "url": "https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical-security-vulnerabilities-in-jenkins"
     },
+    {
+      "type": "WEB",
+      "url": "https://www.vicarius.io/vsociety/posts/the-anatomy-of-a-jenkins-vulnerability-cve-2024-23897-revealed-1"
+    },
     {
       "type": "WEB",
       "url": "http://packetstormsecurity.com/files/176839/Jenkins-2.441-LTS-2.426.3-CVE-2024-23897-Scanner.html"
diff --git a/advisories/unreviewed/2023/10/GHSA-87j2-5g9j-7jmv/GHSA-87j2-5g9j-7jmv.json b/advisories/unreviewed/2023/10/GHSA-87j2-5g9j-7jmv/GHSA-87j2-5g9j-7jmv.json
index 47bc0e52f1f..0402d437acf 100644
--- a/advisories/unreviewed/2023/10/GHSA-87j2-5g9j-7jmv/GHSA-87j2-5g9j-7jmv.json
+++ b/advisories/unreviewed/2023/10/GHSA-87j2-5g9j-7jmv/GHSA-87j2-5g9j-7jmv.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-87j2-5g9j-7jmv",
-  "modified": "2024-07-03T18:33:10Z",
+  "modified": "2024-12-20T18:31:28Z",
   "published": "2023-10-25T18:32:21Z",
   "aliases": [
     "CVE-2023-34048"
@@ -19,6 +19,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34048"
     },
+    {
+      "type": "WEB",
+      "url": "https://www.vicarius.io/vsociety/posts/understanding-cve-2023-34048-a-zero-day-out-of-bound-write-in-vcenter-server"
+    },
     {
       "type": "WEB",
       "url": "https://www.vmware.com/security/advisories/VMSA-2023-0023.html"
diff --git a/advisories/unreviewed/2024/04/GHSA-2252-87pv-34g4/GHSA-2252-87pv-34g4.json b/advisories/unreviewed/2024/04/GHSA-2252-87pv-34g4/GHSA-2252-87pv-34g4.json
index 6a16e369053..9197d85d35a 100644
--- a/advisories/unreviewed/2024/04/GHSA-2252-87pv-34g4/GHSA-2252-87pv-34g4.json
+++ b/advisories/unreviewed/2024/04/GHSA-2252-87pv-34g4/GHSA-2252-87pv-34g4.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2252-87pv-34g4",
-  "modified": "2024-06-27T15:30:38Z",
+  "modified": "2024-12-20T18:31:29Z",
   "published": "2024-04-04T09:30:36Z",
   "aliases": [
     "CVE-2024-26801"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Avoid potential use-after-free in hci_error_reset\n\nWhile handling the HCI_EV_HARDWARE_ERROR event, if the underlying\nBT controller is not responding, the GPIO reset mechanism would\nfree the hci_dev and lead to a use-after-free in hci_error_reset.\n\nHere's the call trace observed on a ChromeOS device with Intel AX201:\n   queue_work_on+0x3e/0x6c\n   __hci_cmd_sync_sk+0x2ee/0x4c0 [bluetooth <HASH:3b4a6>]\n   ? init_wait_entry+0x31/0x31\n   __hci_cmd_sync+0x16/0x20 [bluetooth <HASH:3b4a 6>]\n   hci_error_reset+0x4f/0xa4 [bluetooth <HASH:3b4a 6>]\n   process_one_work+0x1d8/0x33f\n   worker_thread+0x21b/0x373\n   kthread+0x13a/0x152\n   ? pr_cont_work+0x54/0x54\n   ? kthread_blkcg+0x31/0x31\n    ret_from_fork+0x1f/0x30\n\nThis patch holds the reference count on the hci_dev while processing\na HCI_EV_HARDWARE_ERROR event to avoid potential crash.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -56,8 +61,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-04-04T09:15:09Z"
diff --git a/advisories/unreviewed/2024/04/GHSA-3v83-crv9-cf9p/GHSA-3v83-crv9-cf9p.json b/advisories/unreviewed/2024/04/GHSA-3v83-crv9-cf9p/GHSA-3v83-crv9-cf9p.json
index 8e6883152ec..55e6f89ead7 100644
--- a/advisories/unreviewed/2024/04/GHSA-3v83-crv9-cf9p/GHSA-3v83-crv9-cf9p.json
+++ b/advisories/unreviewed/2024/04/GHSA-3v83-crv9-cf9p/GHSA-3v83-crv9-cf9p.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3v83-crv9-cf9p",
-  "modified": "2024-06-27T12:30:45Z",
+  "modified": "2024-12-20T18:31:29Z",
   "published": "2024-04-04T09:30:36Z",
   "aliases": [
     "CVE-2024-26793"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ngtp: fix use-after-free and null-ptr-deref in gtp_newlink()\n\nThe gtp_link_ops operations structure for the subsystem must be\nregistered after registering the gtp_net_ops pernet operations structure.\n\nSyzkaller hit 'general protection fault in gtp_genl_dump_pdp' bug:\n\n[ 1010.702740] gtp: GTP module unloaded\n[ 1010.715877] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI\n[ 1010.715888] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\n[ 1010.715895] CPU: 1 PID: 128616 Comm: a.out Not tainted 6.8.0-rc6-std-def-alt1 #1\n[ 1010.715899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-alt1 04/01/2014\n[ 1010.715908] RIP: 0010:gtp_newlink+0x4d7/0x9c0 [gtp]\n[ 1010.715915] Code: 80 3c 02 00 0f 85 41 04 00 00 48 8b bb d8 05 00 00 e8 ed f6 ff ff 48 89 c2 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 4f 04 00 00 4c 89 e2 4c 8b 6d 00 48 b8 00 00 00\n[ 1010.715920] RSP: 0018:ffff888020fbf180 EFLAGS: 00010203\n[ 1010.715929] RAX: dffffc0000000000 RBX: ffff88800399c000 RCX: 0000000000000000\n[ 1010.715933] RDX: 0000000000000001 RSI: ffffffff84805280 RDI: 0000000000000282\n[ 1010.715938] RBP: 000000000000000d R08: 0000000000000001 R09: 0000000000000000\n[ 1010.715942] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800399cc80\n[ 1010.715947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000400\n[ 1010.715953] FS:  00007fd1509ab5c0(0000) GS:ffff88805b300000(0000) knlGS:0000000000000000\n[ 1010.715958] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 1010.715962] CR2: 0000000000000000 CR3: 000000001c07a000 CR4: 0000000000750ee0\n[ 1010.715968] PKRU: 55555554\n[ 1010.715972] Call Trace:\n[ 1010.715985]  ? __die_body.cold+0x1a/0x1f\n[ 1010.715995]  ? die_addr+0x43/0x70\n[ 1010.716002]  ? exc_general_protection+0x199/0x2f0\n[ 1010.716016]  ? asm_exc_general_protection+0x1e/0x30\n[ 1010.716026]  ? gtp_newlink+0x4d7/0x9c0 [gtp]\n[ 1010.716034]  ? gtp_net_exit+0x150/0x150 [gtp]\n[ 1010.716042]  __rtnl_newlink+0x1063/0x1700\n[ 1010.716051]  ? rtnl_setlink+0x3c0/0x3c0\n[ 1010.716063]  ? is_bpf_text_address+0xc0/0x1f0\n[ 1010.716070]  ? kernel_text_address.part.0+0xbb/0xd0\n[ 1010.716076]  ? __kernel_text_address+0x56/0xa0\n[ 1010.716084]  ? unwind_get_return_address+0x5a/0xa0\n[ 1010.716091]  ? create_prof_cpu_mask+0x30/0x30\n[ 1010.716098]  ? arch_stack_walk+0x9e/0xf0\n[ 1010.716106]  ? stack_trace_save+0x91/0xd0\n[ 1010.716113]  ? stack_trace_consume_entry+0x170/0x170\n[ 1010.716121]  ? __lock_acquire+0x15c5/0x5380\n[ 1010.716139]  ? mark_held_locks+0x9e/0xe0\n[ 1010.716148]  ? kmem_cache_alloc_trace+0x35f/0x3c0\n[ 1010.716155]  ? __rtnl_newlink+0x1700/0x1700\n[ 1010.716160]  rtnl_newlink+0x69/0xa0\n[ 1010.716166]  rtnetlink_rcv_msg+0x43b/0xc50\n[ 1010.716172]  ? rtnl_fdb_dump+0x9f0/0x9f0\n[ 1010.716179]  ? lock_acquire+0x1fe/0x560\n[ 1010.716188]  ? netlink_deliver_tap+0x12f/0xd50\n[ 1010.716196]  netlink_rcv_skb+0x14d/0x440\n[ 1010.716202]  ? rtnl_fdb_dump+0x9f0/0x9f0\n[ 1010.716208]  ? netlink_ack+0xab0/0xab0\n[ 1010.716213]  ? netlink_deliver_tap+0x202/0xd50\n[ 1010.716220]  ? netlink_deliver_tap+0x218/0xd50\n[ 1010.716226]  ? __virt_addr_valid+0x30b/0x590\n[ 1010.716233]  netlink_unicast+0x54b/0x800\n[ 1010.716240]  ? netlink_attachskb+0x870/0x870\n[ 1010.716248]  ? __check_object_size+0x2de/0x3b0\n[ 1010.716254]  netlink_sendmsg+0x938/0xe40\n[ 1010.716261]  ? netlink_unicast+0x800/0x800\n[ 1010.716269]  ? __import_iovec+0x292/0x510\n[ 1010.716276]  ? netlink_unicast+0x800/0x800\n[ 1010.716284]  __sock_sendmsg+0x159/0x190\n[ 1010.716290]  ____sys_sendmsg+0x712/0x880\n[ 1010.716297]  ? sock_write_iter+0x3d0/0x3d0\n[ 1010.716304]  ? __ia32_sys_recvmmsg+0x270/0x270\n[ 1010.716309]  ? lock_acquire+0x1fe/0x560\n[ 1010.716315]  ? drain_array_locked+0x90/0x90\n[ 1010.716324]  ___sys_sendmsg+0xf8/0x170\n[ 1010.716331]  ? sendmsg_copy_msghdr+0x170/0x170\n[ 1010.716337]  ? lockdep_init_map\n---truncated---",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -56,8 +61,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-04-04T09:15:08Z"
diff --git a/advisories/unreviewed/2024/04/GHSA-7w6v-jhvx-qx5c/GHSA-7w6v-jhvx-qx5c.json b/advisories/unreviewed/2024/04/GHSA-7w6v-jhvx-qx5c/GHSA-7w6v-jhvx-qx5c.json
index e442e49ffb7..8e4ab41794f 100644
--- a/advisories/unreviewed/2024/04/GHSA-7w6v-jhvx-qx5c/GHSA-7w6v-jhvx-qx5c.json
+++ b/advisories/unreviewed/2024/04/GHSA-7w6v-jhvx-qx5c/GHSA-7w6v-jhvx-qx5c.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7w6v-jhvx-qx5c",
-  "modified": "2024-04-04T15:30:34Z",
+  "modified": "2024-12-20T18:31:29Z",
   "published": "2024-04-04T09:30:36Z",
   "aliases": [
     "CVE-2024-26792"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix double free of anonymous device after snapshot creation failure\n\nWhen creating a snapshot we may do a double free of an anonymous device\nin case there's an error committing the transaction. The second free may\nresult in freeing an anonymous device number that was allocated by some\nother subsystem in the kernel or another btrfs filesystem.\n\nThe steps that lead to this:\n\n1) At ioctl.c:create_snapshot() we allocate an anonymous device number\n   and assign it to pending_snapshot->anon_dev;\n\n2) Then we call btrfs_commit_transaction() and end up at\n   transaction.c:create_pending_snapshot();\n\n3) There we call btrfs_get_new_fs_root() and pass it the anonymous device\n   number stored in pending_snapshot->anon_dev;\n\n4) btrfs_get_new_fs_root() frees that anonymous device number because\n   btrfs_lookup_fs_root() returned a root - someone else did a lookup\n   of the new root already, which could some task doing backref walking;\n\n5) After that some error happens in the transaction commit path, and at\n   ioctl.c:create_snapshot() we jump to the 'fail' label, and after\n   that we free again the same anonymous device number, which in the\n   meanwhile may have been reallocated somewhere else, because\n   pending_snapshot->anon_dev still has the same value as in step 1.\n\nRecently syzbot ran into this and reported the following trace:\n\n  ------------[ cut here ]------------\n  ida_free called for id=51 which is not allocated.\n  WARNING: CPU: 1 PID: 31038 at lib/idr.c:525 ida_free+0x370/0x420 lib/idr.c:525\n  Modules linked in:\n  CPU: 1 PID: 31038 Comm: syz-executor.2 Not tainted 6.8.0-rc4-syzkaller-00410-gc02197fc9076 #0\n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024\n  RIP: 0010:ida_free+0x370/0x420 lib/idr.c:525\n  Code: 10 42 80 3c 28 (...)\n  RSP: 0018:ffffc90015a67300 EFLAGS: 00010246\n  RAX: be5130472f5dd000 RBX: 0000000000000033 RCX: 0000000000040000\n  RDX: ffffc90009a7a000 RSI: 000000000003ffff RDI: 0000000000040000\n  RBP: ffffc90015a673f0 R08: ffffffff81577992 R09: 1ffff92002b4cdb4\n  R10: dffffc0000000000 R11: fffff52002b4cdb5 R12: 0000000000000246\n  R13: dffffc0000000000 R14: ffffffff8e256b80 R15: 0000000000000246\n  FS:  00007fca3f4b46c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 00007f167a17b978 CR3: 000000001ed26000 CR4: 0000000000350ef0\n  Call Trace:\n   <TASK>\n   btrfs_get_root_ref+0xa48/0xaf0 fs/btrfs/disk-io.c:1346\n   create_pending_snapshot+0xff2/0x2bc0 fs/btrfs/transaction.c:1837\n   create_pending_snapshots+0x195/0x1d0 fs/btrfs/transaction.c:1931\n   btrfs_commit_transaction+0xf1c/0x3740 fs/btrfs/transaction.c:2404\n   create_snapshot+0x507/0x880 fs/btrfs/ioctl.c:848\n   btrfs_mksubvol+0x5d0/0x750 fs/btrfs/ioctl.c:998\n   btrfs_mksnapshot+0xb5/0xf0 fs/btrfs/ioctl.c:1044\n   __btrfs_ioctl_snap_create+0x387/0x4b0 fs/btrfs/ioctl.c:1306\n   btrfs_ioctl_snap_create_v2+0x1ca/0x400 fs/btrfs/ioctl.c:1393\n   btrfs_ioctl+0xa74/0xd40\n   vfs_ioctl fs/ioctl.c:51 [inline]\n   __do_sys_ioctl fs/ioctl.c:871 [inline]\n   __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:857\n   do_syscall_64+0xfb/0x240\n   entry_SYSCALL_64_after_hwframe+0x6f/0x77\n  RIP: 0033:0x7fca3e67dda9\n  Code: 28 00 00 00 (...)\n  RSP: 002b:00007fca3f4b40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n  RAX: ffffffffffffffda RBX: 00007fca3e7abf80 RCX: 00007fca3e67dda9\n  RDX: 00000000200005c0 RSI: 0000000050009417 RDI: 0000000000000003\n  RBP: 00007fca3e6ca47a R08: 0000000000000000 R09: 0000000000000000\n  R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\n  R13: 000000000000000b R14: 00007fca3e7abf80 R15: 00007fff6bf95658\n   </TASK>\n\nWhere we get an explicit message where we attempt to free an anonymous\ndevice number that is not currently allocated. It happens in a different\ncode path from the example below, at btrfs_get_root_ref(), so this change\nmay not fix the case triggered by sy\n---truncated---",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-415"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-04-04T09:15:08Z"
diff --git a/advisories/unreviewed/2024/04/GHSA-q4hp-86wf-hj44/GHSA-q4hp-86wf-hj44.json b/advisories/unreviewed/2024/04/GHSA-q4hp-86wf-hj44/GHSA-q4hp-86wf-hj44.json
index 910f19e1c73..6d2ffc98bde 100644
--- a/advisories/unreviewed/2024/04/GHSA-q4hp-86wf-hj44/GHSA-q4hp-86wf-hj44.json
+++ b/advisories/unreviewed/2024/04/GHSA-q4hp-86wf-hj44/GHSA-q4hp-86wf-hj44.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q4hp-86wf-hj44",
-  "modified": "2024-04-04T15:30:34Z",
+  "modified": "2024-12-20T18:31:29Z",
   "published": "2024-04-04T09:30:36Z",
   "aliases": [
     "CVE-2024-26800"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: fix use-after-free on failed backlog decryption\n\nWhen the decrypt request goes to the backlog and crypto_aead_decrypt\nreturns -EBUSY, tls_do_decryption will wait until all async\ndecryptions have completed. If one of them fails, tls_do_decryption\nwill return -EBADMSG and tls_decrypt_sg jumps to the error path,\nreleasing all the pages. But the pages have been passed to the async\ncallback, and have already been released by tls_decrypt_done.\n\nThe only true async case is when crypto_aead_decrypt returns\n -EINPROGRESS. With -EBUSY, we already waited so we can tell\ntls_sw_recvmsg that the data is available for immediate copy, but we\nneed to notify tls_decrypt_sg (via the new ->async_done flag) that the\nmemory has already been released.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-04-04T09:15:09Z"
diff --git a/advisories/unreviewed/2024/05/GHSA-5jhr-gg3j-ggcf/GHSA-5jhr-gg3j-ggcf.json b/advisories/unreviewed/2024/05/GHSA-5jhr-gg3j-ggcf/GHSA-5jhr-gg3j-ggcf.json
index 012b7a4022c..05e84ea6ac5 100644
--- a/advisories/unreviewed/2024/05/GHSA-5jhr-gg3j-ggcf/GHSA-5jhr-gg3j-ggcf.json
+++ b/advisories/unreviewed/2024/05/GHSA-5jhr-gg3j-ggcf/GHSA-5jhr-gg3j-ggcf.json
@@ -49,7 +49,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-416"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/05/GHSA-c24q-2hx9-mjpc/GHSA-c24q-2hx9-mjpc.json b/advisories/unreviewed/2024/05/GHSA-c24q-2hx9-mjpc/GHSA-c24q-2hx9-mjpc.json
index 8782bde3956..c28856c6d41 100644
--- a/advisories/unreviewed/2024/05/GHSA-c24q-2hx9-mjpc/GHSA-c24q-2hx9-mjpc.json
+++ b/advisories/unreviewed/2024/05/GHSA-c24q-2hx9-mjpc/GHSA-c24q-2hx9-mjpc.json
@@ -38,7 +38,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/08/GHSA-gp2r-34c8-48xq/GHSA-gp2r-34c8-48xq.json b/advisories/unreviewed/2024/08/GHSA-gp2r-34c8-48xq/GHSA-gp2r-34c8-48xq.json
index 8502e5ce568..a8c86bff7af 100644
--- a/advisories/unreviewed/2024/08/GHSA-gp2r-34c8-48xq/GHSA-gp2r-34c8-48xq.json
+++ b/advisories/unreviewed/2024/08/GHSA-gp2r-34c8-48xq/GHSA-gp2r-34c8-48xq.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gp2r-34c8-48xq",
-  "modified": "2024-08-06T15:30:50Z",
+  "modified": "2024-12-20T18:31:30Z",
   "published": "2024-08-05T09:30:26Z",
   "aliases": [
     "CVE-2024-38856"
@@ -34,6 +34,10 @@
     {
       "type": "WEB",
       "url": "https://ofbiz.apache.org/security.html"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2024/08/04/1"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2024/09/GHSA-c76v-gjqc-j462/GHSA-c76v-gjqc-j462.json b/advisories/unreviewed/2024/09/GHSA-c76v-gjqc-j462/GHSA-c76v-gjqc-j462.json
index cc8242cb574..329209ea927 100644
--- a/advisories/unreviewed/2024/09/GHSA-c76v-gjqc-j462/GHSA-c76v-gjqc-j462.json
+++ b/advisories/unreviewed/2024/09/GHSA-c76v-gjqc-j462/GHSA-c76v-gjqc-j462.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c76v-gjqc-j462",
-  "modified": "2024-09-07T18:30:24Z",
+  "modified": "2024-12-20T18:31:30Z",
   "published": "2024-09-07T18:30:24Z",
   "aliases": [
     "CVE-2024-40711"
@@ -19,6 +19,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40711"
     },
+    {
+      "type": "WEB",
+      "url": "https://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2"
+    },
     {
       "type": "WEB",
       "url": "https://www.veeam.com/kb4649"
diff --git a/advisories/unreviewed/2024/10/GHSA-fr4c-ch83-r968/GHSA-fr4c-ch83-r968.json b/advisories/unreviewed/2024/10/GHSA-fr4c-ch83-r968/GHSA-fr4c-ch83-r968.json
index 28d1f4c41ff..e641d1b78e4 100644
--- a/advisories/unreviewed/2024/10/GHSA-fr4c-ch83-r968/GHSA-fr4c-ch83-r968.json
+++ b/advisories/unreviewed/2024/10/GHSA-fr4c-ch83-r968/GHSA-fr4c-ch83-r968.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fr4c-ch83-r968",
-  "modified": "2024-10-22T21:30:36Z",
+  "modified": "2024-12-20T18:31:30Z",
   "published": "2024-10-03T00:30:41Z",
   "aliases": [
     "CVE-2024-45519"
@@ -19,6 +19,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45519"
     },
+    {
+      "type": "WEB",
+      "url": "https://blog.projectdiscovery.io/zimbra-remote-code-execution"
+    },
     {
       "type": "WEB",
       "url": "https://wiki.zimbra.com/wiki/Security_Center"
diff --git a/advisories/unreviewed/2024/11/GHSA-p4xq-57qv-f9c5/GHSA-p4xq-57qv-f9c5.json b/advisories/unreviewed/2024/11/GHSA-p4xq-57qv-f9c5/GHSA-p4xq-57qv-f9c5.json
index 12f28e9943e..d671a3dbf99 100644
--- a/advisories/unreviewed/2024/11/GHSA-p4xq-57qv-f9c5/GHSA-p4xq-57qv-f9c5.json
+++ b/advisories/unreviewed/2024/11/GHSA-p4xq-57qv-f9c5/GHSA-p4xq-57qv-f9c5.json
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/11/GHSA-v66c-953m-5pfj/GHSA-v66c-953m-5pfj.json b/advisories/unreviewed/2024/11/GHSA-v66c-953m-5pfj/GHSA-v66c-953m-5pfj.json
index a046ef4ccfd..0f1fe57e3be 100644
--- a/advisories/unreviewed/2024/11/GHSA-v66c-953m-5pfj/GHSA-v66c-953m-5pfj.json
+++ b/advisories/unreviewed/2024/11/GHSA-v66c-953m-5pfj/GHSA-v66c-953m-5pfj.json
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-27hp-xhwr-wr2m/GHSA-27hp-xhwr-wr2m.json b/advisories/unreviewed/2024/12/GHSA-27hp-xhwr-wr2m/GHSA-27hp-xhwr-wr2m.json
new file mode 100644
index 00000000000..81bfcf8e5e7
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-27hp-xhwr-wr2m/GHSA-27hp-xhwr-wr2m.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-27hp-xhwr-wr2m",
+  "modified": "2024-12-20T18:31:32Z",
+  "published": "2024-12-20T18:31:32Z",
+  "aliases": [
+    "CVE-2024-56337"
+  ],
+  "details": "Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97.\n\nThe mitigation for CVE-2024-50379 was incomplete.\n\nUsers running Tomcat on a case insensitive file system with the default servlet write enabled (readonly initialisation \nparameter set to the non-default value of false) may need additional configuration to fully mitigate CVE-2024-50379 depending on which version of Java they are using with Tomcat:\n- running on Java 8 or Java 11: the system property sun.io.useCanonCaches must be explicitly set to false (it defaults to true)\n- running on Java 17: the system property sun.io.useCanonCaches, if set, must be set to false (it defaults to false)\n- running on Java 21 onwards: no further configuration is required (the system property and the problematic cache have been removed)\n\nTomcat 11.0.3, 10.1.35 and 9.0.99 onwards will include checks that sun.io.useCanonCaches is set appropriately before allowing the default servlet to be write enabled on a case insensitive file system. Tomcat will also set sun.io.useCanonCaches to false by default where it can.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56337"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/b2b9qrgjrz1kvo4ym8y2wkfdvwoq6qbp"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50379"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-367"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-20T16:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-2fgh-jjh6-cvr4/GHSA-2fgh-jjh6-cvr4.json b/advisories/unreviewed/2024/12/GHSA-2fgh-jjh6-cvr4/GHSA-2fgh-jjh6-cvr4.json
index a18aaade17f..b98c95c80f4 100644
--- a/advisories/unreviewed/2024/12/GHSA-2fgh-jjh6-cvr4/GHSA-2fgh-jjh6-cvr4.json
+++ b/advisories/unreviewed/2024/12/GHSA-2fgh-jjh6-cvr4/GHSA-2fgh-jjh6-cvr4.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2fgh-jjh6-cvr4",
-  "modified": "2024-12-20T15:30:48Z",
+  "modified": "2024-12-20T18:31:32Z",
   "published": "2024-12-20T15:30:48Z",
   "aliases": [
     "CVE-2024-12014"
   ],
   "details": "Path Traversal and Insecure Direct Object Reference (IDOR) vulnerabilities in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
@@ -26,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-639"
     ],
     "severity": "LOW",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-2hr5-cvwp-jr5w/GHSA-2hr5-cvwp-jr5w.json b/advisories/unreviewed/2024/12/GHSA-2hr5-cvwp-jr5w/GHSA-2hr5-cvwp-jr5w.json
new file mode 100644
index 00000000000..26d0bbf38c2
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-2hr5-cvwp-jr5w/GHSA-2hr5-cvwp-jr5w.json
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2hr5-cvwp-jr5w",
+  "modified": "2024-12-20T18:31:32Z",
+  "published": "2024-12-20T18:31:32Z",
+  "aliases": [
+    "CVE-2024-55186"
+  ],
+  "details": "An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55186"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/oqtane/oqtane.framework/pull/4876/files"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/SmitShah1518/00de9ecc46c1a8e2b189185c9d92afb0"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-20T16:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-32vr-62m9-gj5v/GHSA-32vr-62m9-gj5v.json b/advisories/unreviewed/2024/12/GHSA-32vr-62m9-gj5v/GHSA-32vr-62m9-gj5v.json
index e7a7df7e2e9..63c92f9c629 100644
--- a/advisories/unreviewed/2024/12/GHSA-32vr-62m9-gj5v/GHSA-32vr-62m9-gj5v.json
+++ b/advisories/unreviewed/2024/12/GHSA-32vr-62m9-gj5v/GHSA-32vr-62m9-gj5v.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-32vr-62m9-gj5v",
-  "modified": "2024-12-20T06:30:45Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:45Z",
   "aliases": [
     "CVE-2024-44195"
   ],
   "details": "A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to read arbitrary files.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T04:15:05Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-334g-hq35-7fwx/GHSA-334g-hq35-7fwx.json b/advisories/unreviewed/2024/12/GHSA-334g-hq35-7fwx/GHSA-334g-hq35-7fwx.json
new file mode 100644
index 00000000000..a956b92ac49
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-334g-hq35-7fwx/GHSA-334g-hq35-7fwx.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-334g-hq35-7fwx",
+  "modified": "2024-12-20T18:31:32Z",
+  "published": "2024-12-20T18:31:32Z",
+  "aliases": [
+    "CVE-2024-12677"
+  ],
+  "details": "Delta Electronics DTM Soft deserializes objects, which could allow an attacker to execute arbitrary code.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12677"
+    },
+    {
+      "type": "WEB",
+      "url": "https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=dtm&sort_expr=cdate&sort_dir=DESC"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-03"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-20T17:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-3vx3-2qpf-jvhh/GHSA-3vx3-2qpf-jvhh.json b/advisories/unreviewed/2024/12/GHSA-3vx3-2qpf-jvhh/GHSA-3vx3-2qpf-jvhh.json
index 2b20d8cd437..15917a3d860 100644
--- a/advisories/unreviewed/2024/12/GHSA-3vx3-2qpf-jvhh/GHSA-3vx3-2qpf-jvhh.json
+++ b/advisories/unreviewed/2024/12/GHSA-3vx3-2qpf-jvhh/GHSA-3vx3-2qpf-jvhh.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3vx3-2qpf-jvhh",
-  "modified": "2024-12-20T06:30:46Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:45Z",
   "aliases": [
     "CVE-2024-11108"
   ],
   "details": "The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T06:15:22Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-55mr-49mr-xcvc/GHSA-55mr-49mr-xcvc.json b/advisories/unreviewed/2024/12/GHSA-55mr-49mr-xcvc/GHSA-55mr-49mr-xcvc.json
index 8011bac74ef..ca1b8c8a9b8 100644
--- a/advisories/unreviewed/2024/12/GHSA-55mr-49mr-xcvc/GHSA-55mr-49mr-xcvc.json
+++ b/advisories/unreviewed/2024/12/GHSA-55mr-49mr-xcvc/GHSA-55mr-49mr-xcvc.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-55mr-49mr-xcvc",
-  "modified": "2024-12-19T18:31:37Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-19T18:31:37Z",
   "aliases": [
     "CVE-2023-7005"
   ],
   "details": "A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the lock, such as through revealing the unlockKey field.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-19T18:15:06Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-5gg8-h96p-jfm4/GHSA-5gg8-h96p-jfm4.json b/advisories/unreviewed/2024/12/GHSA-5gg8-h96p-jfm4/GHSA-5gg8-h96p-jfm4.json
index c1bd1e60004..00f3a615b44 100644
--- a/advisories/unreviewed/2024/12/GHSA-5gg8-h96p-jfm4/GHSA-5gg8-h96p-jfm4.json
+++ b/advisories/unreviewed/2024/12/GHSA-5gg8-h96p-jfm4/GHSA-5gg8-h96p-jfm4.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5gg8-h96p-jfm4",
-  "modified": "2024-12-20T03:30:23Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T03:30:23Z",
   "aliases": [
     "CVE-2024-54538"
   ],
   "details": "A denial-of-service issue was addressed with improved input validation. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, tvOS 18.1, macOS Sonoma 14.7.1, watchOS 11.1, macOS Ventura 13.7.1. A remote attacker may be able to cause a denial-of-service.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -44,8 +49,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T01:15:06Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-5qww-56gc-f66c/GHSA-5qww-56gc-f66c.json b/advisories/unreviewed/2024/12/GHSA-5qww-56gc-f66c/GHSA-5qww-56gc-f66c.json
new file mode 100644
index 00000000000..e133fbca3d5
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-5qww-56gc-f66c/GHSA-5qww-56gc-f66c.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5qww-56gc-f66c",
+  "modified": "2024-12-20T18:31:30Z",
+  "published": "2024-12-20T18:31:30Z",
+  "aliases": [
+    "CVE-2024-28892"
+  ],
+  "details": "An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28892"
+    },
+    {
+      "type": "WEB",
+      "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1960"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1960"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-78"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-21T15:15:29Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-5vp4-pvmw-cjmm/GHSA-5vp4-pvmw-cjmm.json b/advisories/unreviewed/2024/12/GHSA-5vp4-pvmw-cjmm/GHSA-5vp4-pvmw-cjmm.json
new file mode 100644
index 00000000000..ce194030a6b
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-5vp4-pvmw-cjmm/GHSA-5vp4-pvmw-cjmm.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5vp4-pvmw-cjmm",
+  "modified": "2024-12-20T18:31:32Z",
+  "published": "2024-12-20T18:31:32Z",
+  "aliases": [
+    "CVE-2024-10385"
+  ],
+  "details": "Ticket management system in DirectAdmin Evolution Skin is vulnerable to XSS (Cross-site Scripting), which allows a low-privileged user to inject and store malicious JavaScript code.\nIf an admin views the ticket, the script might perform actions with their privileges, including command execution. \nThis issue has been fixed in version 1.668 of DirectAdmin Evolution Skin.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10385"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cert.pl/en/posts/2024/12/CVE-2024-10385"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.directadmin.com/evolution.php"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-20T16:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-659x-gph6-8j4w/GHSA-659x-gph6-8j4w.json b/advisories/unreviewed/2024/12/GHSA-659x-gph6-8j4w/GHSA-659x-gph6-8j4w.json
index 8d388bc96cd..c9999649bcd 100644
--- a/advisories/unreviewed/2024/12/GHSA-659x-gph6-8j4w/GHSA-659x-gph6-8j4w.json
+++ b/advisories/unreviewed/2024/12/GHSA-659x-gph6-8j4w/GHSA-659x-gph6-8j4w.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-659x-gph6-8j4w",
-  "modified": "2024-12-19T06:30:43Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-19T06:30:43Z",
   "aliases": [
     "CVE-2024-11984"
   ],
   "details": "A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM privilege via a crafted ZIP file.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
diff --git a/advisories/unreviewed/2024/12/GHSA-85g9-m9j2-hcx2/GHSA-85g9-m9j2-hcx2.json b/advisories/unreviewed/2024/12/GHSA-85g9-m9j2-hcx2/GHSA-85g9-m9j2-hcx2.json
index e378696244c..cf0a55d4a8c 100644
--- a/advisories/unreviewed/2024/12/GHSA-85g9-m9j2-hcx2/GHSA-85g9-m9j2-hcx2.json
+++ b/advisories/unreviewed/2024/12/GHSA-85g9-m9j2-hcx2/GHSA-85g9-m9j2-hcx2.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-85g9-m9j2-hcx2",
-  "modified": "2024-12-19T09:30:47Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-19T09:30:47Z",
   "aliases": [
     "CVE-2024-12569"
   ],
   "details": "Disclosure of sensitive information in HikVision camera driver's log file in XProtect Device Pack allows an attacker to read camera credentials stored in the Recording Server under specific conditions.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
diff --git a/advisories/unreviewed/2024/12/GHSA-94w9-fcwh-p5jv/GHSA-94w9-fcwh-p5jv.json b/advisories/unreviewed/2024/12/GHSA-94w9-fcwh-p5jv/GHSA-94w9-fcwh-p5jv.json
index 64fc2bf001b..2d99ecd131d 100644
--- a/advisories/unreviewed/2024/12/GHSA-94w9-fcwh-p5jv/GHSA-94w9-fcwh-p5jv.json
+++ b/advisories/unreviewed/2024/12/GHSA-94w9-fcwh-p5jv/GHSA-94w9-fcwh-p5jv.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-94w9-fcwh-p5jv",
-  "modified": "2024-12-20T06:30:45Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:45Z",
   "aliases": [
     "CVE-2024-44211"
   ],
   "details": "This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-281"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T04:15:05Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-995c-qww8-64fj/GHSA-995c-qww8-64fj.json b/advisories/unreviewed/2024/12/GHSA-995c-qww8-64fj/GHSA-995c-qww8-64fj.json
new file mode 100644
index 00000000000..36b5b744c39
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-995c-qww8-64fj/GHSA-995c-qww8-64fj.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-995c-qww8-64fj",
+  "modified": "2024-12-20T18:31:32Z",
+  "published": "2024-12-20T18:31:32Z",
+  "aliases": [
+    "CVE-2024-55470"
+  ],
+  "details": "Oqtane Framework 6.0.0 is vulnerable to Incorrect Access Control. By manipulating the entityid parameter, attackers can bypass passcode validation and successfully log into the application or access restricted data without proper authorization. The lack of server-side validation exacerbates the issue, as the application relies on client-side information for authentication.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55470"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/oqtane/oqtane.framework/pull/4878/files"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/Kaushikjoshi/2d8ad350ba5e72030fcee2536498cfe4"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-290"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-20T16:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-c6qm-82c6-q92v/GHSA-c6qm-82c6-q92v.json b/advisories/unreviewed/2024/12/GHSA-c6qm-82c6-q92v/GHSA-c6qm-82c6-q92v.json
new file mode 100644
index 00000000000..a89795341a5
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-c6qm-82c6-q92v/GHSA-c6qm-82c6-q92v.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c6qm-82c6-q92v",
+  "modified": "2024-12-20T18:31:30Z",
+  "published": "2024-12-20T18:31:30Z",
+  "aliases": [
+    "CVE-2024-21855"
+  ],
+  "details": "A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21855"
+    },
+    {
+      "type": "WEB",
+      "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1962"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1962"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-306"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-21T15:15:26Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-gfc3-ch46-26gp/GHSA-gfc3-ch46-26gp.json b/advisories/unreviewed/2024/12/GHSA-gfc3-ch46-26gp/GHSA-gfc3-ch46-26gp.json
index c68ca0a170a..e3eb68a22b5 100644
--- a/advisories/unreviewed/2024/12/GHSA-gfc3-ch46-26gp/GHSA-gfc3-ch46-26gp.json
+++ b/advisories/unreviewed/2024/12/GHSA-gfc3-ch46-26gp/GHSA-gfc3-ch46-26gp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gfc3-ch46-26gp",
-  "modified": "2024-12-20T06:30:45Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:45Z",
   "aliases": [
     "CVE-2024-44231"
   ],
   "details": "This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to bypass Login Window during a software update.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T04:15:05Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-hhcw-wwxv-g95c/GHSA-hhcw-wwxv-g95c.json b/advisories/unreviewed/2024/12/GHSA-hhcw-wwxv-g95c/GHSA-hhcw-wwxv-g95c.json
new file mode 100644
index 00000000000..714e52d57a1
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-hhcw-wwxv-g95c/GHSA-hhcw-wwxv-g95c.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hhcw-wwxv-g95c",
+  "modified": "2024-12-20T18:31:32Z",
+  "published": "2024-12-20T18:31:32Z",
+  "aliases": [
+    "CVE-2024-55471"
+  ],
+  "details": "Oqtane Framework is vulnerable to Insecure Direct Object Reference (IDOR) in Oqtane.Controllers.UserController. This allows unauthorized users to access sensitive information of other users by manipulating the id parameter.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55471"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/oqtane/oqtane.framework/pull/4880/files"
+    },
+    {
+      "type": "WEB",
+      "url": "https://medium.com/@Rudra_2158/cve-2024-55471-breaking-down-the-idor-vulnerability-in-oqtane-framework-c0f4b02f12fc"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-639"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-20T16:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-hhqj-wp3p-mcgx/GHSA-hhqj-wp3p-mcgx.json b/advisories/unreviewed/2024/12/GHSA-hhqj-wp3p-mcgx/GHSA-hhqj-wp3p-mcgx.json
index 1002743f63a..7f94985f9c3 100644
--- a/advisories/unreviewed/2024/12/GHSA-hhqj-wp3p-mcgx/GHSA-hhqj-wp3p-mcgx.json
+++ b/advisories/unreviewed/2024/12/GHSA-hhqj-wp3p-mcgx/GHSA-hhqj-wp3p-mcgx.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hhqj-wp3p-mcgx",
-  "modified": "2024-12-20T06:30:45Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:45Z",
   "aliases": [
     "CVE-2024-10706"
   ],
   "details": "The Download Manager WordPress plugin before 3.3.03 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T06:15:22Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-hv8c-r4r9-rxwp/GHSA-hv8c-r4r9-rxwp.json b/advisories/unreviewed/2024/12/GHSA-hv8c-r4r9-rxwp/GHSA-hv8c-r4r9-rxwp.json
index dd0d146cb14..baf8ed2c4bd 100644
--- a/advisories/unreviewed/2024/12/GHSA-hv8c-r4r9-rxwp/GHSA-hv8c-r4r9-rxwp.json
+++ b/advisories/unreviewed/2024/12/GHSA-hv8c-r4r9-rxwp/GHSA-hv8c-r4r9-rxwp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hv8c-r4r9-rxwp",
-  "modified": "2024-12-20T06:30:46Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:46Z",
   "aliases": [
     "CVE-2024-8968"
   ],
   "details": "The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T06:15:23Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-j9vj-qv55-qq58/GHSA-j9vj-qv55-qq58.json b/advisories/unreviewed/2024/12/GHSA-j9vj-qv55-qq58/GHSA-j9vj-qv55-qq58.json
index cdd1a1c3579..51a97b00ece 100644
--- a/advisories/unreviewed/2024/12/GHSA-j9vj-qv55-qq58/GHSA-j9vj-qv55-qq58.json
+++ b/advisories/unreviewed/2024/12/GHSA-j9vj-qv55-qq58/GHSA-j9vj-qv55-qq58.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-287"
+      "CWE-287",
+      "CWE-522"
     ],
     "severity": "LOW",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-jcrx-xhx2-r8m2/GHSA-jcrx-xhx2-r8m2.json b/advisories/unreviewed/2024/12/GHSA-jcrx-xhx2-r8m2/GHSA-jcrx-xhx2-r8m2.json
index 0932e2b4030..4dac5bac541 100644
--- a/advisories/unreviewed/2024/12/GHSA-jcrx-xhx2-r8m2/GHSA-jcrx-xhx2-r8m2.json
+++ b/advisories/unreviewed/2024/12/GHSA-jcrx-xhx2-r8m2/GHSA-jcrx-xhx2-r8m2.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jcrx-xhx2-r8m2",
-  "modified": "2024-12-20T06:30:45Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:45Z",
   "aliases": [
     "CVE-2024-44298"
   ],
   "details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access information about a user's contacts.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-922"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T04:15:05Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-m7m7-c2p8-w63c/GHSA-m7m7-c2p8-w63c.json b/advisories/unreviewed/2024/12/GHSA-m7m7-c2p8-w63c/GHSA-m7m7-c2p8-w63c.json
index e724e47fd0a..7fc83a1a7d1 100644
--- a/advisories/unreviewed/2024/12/GHSA-m7m7-c2p8-w63c/GHSA-m7m7-c2p8-w63c.json
+++ b/advisories/unreviewed/2024/12/GHSA-m7m7-c2p8-w63c/GHSA-m7m7-c2p8-w63c.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m7m7-c2p8-w63c",
-  "modified": "2024-12-20T06:30:45Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:45Z",
   "aliases": [
     "CVE-2024-44293"
   ],
   "details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. A user may be able to view sensitive user information.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T04:15:05Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-mcx6-f8wc-g68m/GHSA-mcx6-f8wc-g68m.json b/advisories/unreviewed/2024/12/GHSA-mcx6-f8wc-g68m/GHSA-mcx6-f8wc-g68m.json
index 6ad4df00a01..df0f3a34c07 100644
--- a/advisories/unreviewed/2024/12/GHSA-mcx6-f8wc-g68m/GHSA-mcx6-f8wc-g68m.json
+++ b/advisories/unreviewed/2024/12/GHSA-mcx6-f8wc-g68m/GHSA-mcx6-f8wc-g68m.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mcx6-f8wc-g68m",
-  "modified": "2024-12-20T06:30:45Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:45Z",
   "aliases": [
     "CVE-2024-44292"
   ],
   "details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-922"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T04:15:05Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-q8f7-m8x2-rw5g/GHSA-q8f7-m8x2-rw5g.json b/advisories/unreviewed/2024/12/GHSA-q8f7-m8x2-rw5g/GHSA-q8f7-m8x2-rw5g.json
index b5721fc0be2..ea0b1eed276 100644
--- a/advisories/unreviewed/2024/12/GHSA-q8f7-m8x2-rw5g/GHSA-q8f7-m8x2-rw5g.json
+++ b/advisories/unreviewed/2024/12/GHSA-q8f7-m8x2-rw5g/GHSA-q8f7-m8x2-rw5g.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-346"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-r5vc-6528-fgf9/GHSA-r5vc-6528-fgf9.json b/advisories/unreviewed/2024/12/GHSA-r5vc-6528-fgf9/GHSA-r5vc-6528-fgf9.json
new file mode 100644
index 00000000000..769d81d3e6f
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-r5vc-6528-fgf9/GHSA-r5vc-6528-fgf9.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r5vc-6528-fgf9",
+  "modified": "2024-12-20T18:31:32Z",
+  "published": "2024-12-20T18:31:32Z",
+  "aliases": [
+    "CVE-2024-12840"
+  ],
+  "details": "A server-side request forgery exists in Satellite. When a PUT HTTP request is made to /http_proxies/test_connection, when supplied with the http_proxies variable set to localhost, the attacker can fetch the localhost banner.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12840"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2024-12840"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333494"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-918"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-20T16:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-wfqx-gh2p-77p7/GHSA-wfqx-gh2p-77p7.json b/advisories/unreviewed/2024/12/GHSA-wfqx-gh2p-77p7/GHSA-wfqx-gh2p-77p7.json
index 21a182bf384..6b23022758e 100644
--- a/advisories/unreviewed/2024/12/GHSA-wfqx-gh2p-77p7/GHSA-wfqx-gh2p-77p7.json
+++ b/advisories/unreviewed/2024/12/GHSA-wfqx-gh2p-77p7/GHSA-wfqx-gh2p-77p7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-wfqx-gh2p-77p7",
-  "modified": "2024-12-20T09:31:29Z",
+  "modified": "2024-12-20T18:31:32Z",
   "published": "2024-12-20T09:31:29Z",
   "aliases": [
     "CVE-2024-11297"
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-200"
+      "CWE-200",
+      "CWE-203"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-whc6-7v67-764g/GHSA-whc6-7v67-764g.json b/advisories/unreviewed/2024/12/GHSA-whc6-7v67-764g/GHSA-whc6-7v67-764g.json
index b85c3aecd5a..3e9b9daec1b 100644
--- a/advisories/unreviewed/2024/12/GHSA-whc6-7v67-764g/GHSA-whc6-7v67-764g.json
+++ b/advisories/unreviewed/2024/12/GHSA-whc6-7v67-764g/GHSA-whc6-7v67-764g.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-whc6-7v67-764g",
-  "modified": "2024-12-19T21:31:11Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-19T21:31:11Z",
   "aliases": [
     "CVE-2024-12672"
@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/12/GHSA-xrq3-j5cq-h7p4/GHSA-xrq3-j5cq-h7p4.json b/advisories/unreviewed/2024/12/GHSA-xrq3-j5cq-h7p4/GHSA-xrq3-j5cq-h7p4.json
index 310d0805095..07808ea1c64 100644
--- a/advisories/unreviewed/2024/12/GHSA-xrq3-j5cq-h7p4/GHSA-xrq3-j5cq-h7p4.json
+++ b/advisories/unreviewed/2024/12/GHSA-xrq3-j5cq-h7p4/GHSA-xrq3-j5cq-h7p4.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xrq3-j5cq-h7p4",
-  "modified": "2024-12-20T06:30:45Z",
+  "modified": "2024-12-20T18:31:31Z",
   "published": "2024-12-20T06:30:45Z",
   "aliases": [
     "CVE-2024-10555"
   ],
   "details": "The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-20T06:15:22Z"