diff --git a/advisories/github-reviewed/2024/10/GHSA-wcx9-ccpj-hx3c/GHSA-wcx9-ccpj-hx3c.json b/advisories/github-reviewed/2024/10/GHSA-wcx9-ccpj-hx3c/GHSA-wcx9-ccpj-hx3c.json
new file mode 100644
index 00000000000..9f68d1d05b8
--- /dev/null
+++ b/advisories/github-reviewed/2024/10/GHSA-wcx9-ccpj-hx3c/GHSA-wcx9-ccpj-hx3c.json
@@ -0,0 +1,106 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wcx9-ccpj-hx3c",
+  "modified": "2024-10-28T18:31:57Z",
+  "published": "2024-10-28T18:31:57Z",
+  "aliases": [
+
+  ],
+  "summary": "Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect')",
+  "details": "### Summary\nAn issue on Coder's login page allows attackers to craft a Coder URL that when clicked by a logged in user could redirect them to a website the attacker controls, e.g. https://google.com.\n\n### Details\nOn the login page, Coder checks for the presence of a `redirect` query parameter. On successful login, the user would be redirected to the location of the parameter. Improper sanitization allows attackers to specify a URL outside of the Coder application to redirect users to.\n\n### Impact\nCoder users could potentially be redirected to a untrusted website if tricked into clicking a URL crafted by the attacker. Coder authentication tokens are **not** leaked to the resulting website.\n\nTo check if your deployment is vulnerable, visit the following URL for your Coder deployment:\n- `https://<coder url>/login?redirect=https%3A%2F%2Fcoder.com%2Fdocs`\n\n### Patched Versions\nThis vulnerability is remedied in\n- v2.16.1\n- v2.15.3\n- v2.14.4\n\nAll versions prior to 2.3.1 are not affected.\n\n### Thanks\n- https://github.com/jchristov\n\n### References\nhttps://github.com/coder/coder/security/advisories/GHSA-wcx9-ccpj-hx3c\nhttps://github.com/coder/coder/commit/69c1d981e3131e50d52b01f6a360abadaad699e6",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/coder/coder/v2"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.16.0"
+            },
+            {
+              "fixed": "2.16.1"
+            }
+          ]
+        }
+      ],
+      "versions": [
+        "2.16.0"
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/coder/coder/v2"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.15.0"
+            },
+            {
+              "fixed": "2.15.3"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/coder/coder/v2"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.3.1"
+            },
+            {
+              "fixed": "2.14.4"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/coder/coder/security/advisories/GHSA-wcx9-ccpj-hx3c"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/coder/coder/commit/69c1d981e3131e50d52b01f6a360abadaad699e6"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/coder/coder"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-601"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-10-28T18:31:57Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2023/11/GHSA-6wgj-66m2-xxp2/GHSA-6wgj-66m2-xxp2.json b/advisories/unreviewed/2023/11/GHSA-6wgj-66m2-xxp2/GHSA-6wgj-66m2-xxp2.json
index 6e1b49e01cf..abd48132eab 100644
--- a/advisories/unreviewed/2023/11/GHSA-6wgj-66m2-xxp2/GHSA-6wgj-66m2-xxp2.json
+++ b/advisories/unreviewed/2023/11/GHSA-6wgj-66m2-xxp2/GHSA-6wgj-66m2-xxp2.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6wgj-66m2-xxp2",
-  "modified": "2024-04-29T21:30:32Z",
+  "modified": "2024-10-28T18:31:38Z",
   "published": "2023-11-28T09:30:26Z",
   "aliases": [
     "CVE-2023-48022"
@@ -21,6 +21,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48022"
     },
+    {
+      "type": "WEB",
+      "url": "https://atlas.mitre.org/studies/AML.CS0023"
+    },
     {
       "type": "WEB",
       "url": "https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0"
diff --git a/advisories/unreviewed/2024/03/GHSA-36f2-v56q-6v2j/GHSA-36f2-v56q-6v2j.json b/advisories/unreviewed/2024/03/GHSA-36f2-v56q-6v2j/GHSA-36f2-v56q-6v2j.json
index f901bea0d56..04ea14a138e 100644
--- a/advisories/unreviewed/2024/03/GHSA-36f2-v56q-6v2j/GHSA-36f2-v56q-6v2j.json
+++ b/advisories/unreviewed/2024/03/GHSA-36f2-v56q-6v2j/GHSA-36f2-v56q-6v2j.json
@@ -32,6 +32,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-79",
       "CWE-80"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2024/03/GHSA-3rwc-8hqh-2vxh/GHSA-3rwc-8hqh-2vxh.json b/advisories/unreviewed/2024/03/GHSA-3rwc-8hqh-2vxh/GHSA-3rwc-8hqh-2vxh.json
index 36e8880b120..b10cbe74774 100644
--- a/advisories/unreviewed/2024/03/GHSA-3rwc-8hqh-2vxh/GHSA-3rwc-8hqh-2vxh.json
+++ b/advisories/unreviewed/2024/03/GHSA-3rwc-8hqh-2vxh/GHSA-3rwc-8hqh-2vxh.json
@@ -28,7 +28,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-125"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/03/GHSA-5v3g-553g-mcmp/GHSA-5v3g-553g-mcmp.json b/advisories/unreviewed/2024/03/GHSA-5v3g-553g-mcmp/GHSA-5v3g-553g-mcmp.json
index 7a0b89cc3c0..ff4dc987b13 100644
--- a/advisories/unreviewed/2024/03/GHSA-5v3g-553g-mcmp/GHSA-5v3g-553g-mcmp.json
+++ b/advisories/unreviewed/2024/03/GHSA-5v3g-553g-mcmp/GHSA-5v3g-553g-mcmp.json
@@ -28,7 +28,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-125"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/03/GHSA-9qj2-fmrm-53wv/GHSA-9qj2-fmrm-53wv.json b/advisories/unreviewed/2024/03/GHSA-9qj2-fmrm-53wv/GHSA-9qj2-fmrm-53wv.json
index f18606b8bfc..a7eadb64919 100644
--- a/advisories/unreviewed/2024/03/GHSA-9qj2-fmrm-53wv/GHSA-9qj2-fmrm-53wv.json
+++ b/advisories/unreviewed/2024/03/GHSA-9qj2-fmrm-53wv/GHSA-9qj2-fmrm-53wv.json
@@ -28,7 +28,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-125"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/03/GHSA-rx25-q489-m9cc/GHSA-rx25-q489-m9cc.json b/advisories/unreviewed/2024/03/GHSA-rx25-q489-m9cc/GHSA-rx25-q489-m9cc.json
index 5132dd34ccb..3aade29ac0a 100644
--- a/advisories/unreviewed/2024/03/GHSA-rx25-q489-m9cc/GHSA-rx25-q489-m9cc.json
+++ b/advisories/unreviewed/2024/03/GHSA-rx25-q489-m9cc/GHSA-rx25-q489-m9cc.json
@@ -28,7 +28,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-121"
+      "CWE-121",
+      "CWE-125"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/03/GHSA-vpp6-9fcm-rv58/GHSA-vpp6-9fcm-rv58.json b/advisories/unreviewed/2024/03/GHSA-vpp6-9fcm-rv58/GHSA-vpp6-9fcm-rv58.json
index fee9d27c6c9..5a38b9e9cbf 100644
--- a/advisories/unreviewed/2024/03/GHSA-vpp6-9fcm-rv58/GHSA-vpp6-9fcm-rv58.json
+++ b/advisories/unreviewed/2024/03/GHSA-vpp6-9fcm-rv58/GHSA-vpp6-9fcm-rv58.json
@@ -40,7 +40,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-288"
+      "CWE-288",
+      "CWE-294"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/06/GHSA-xhwx-76j2-m76q/GHSA-xhwx-76j2-m76q.json b/advisories/unreviewed/2024/06/GHSA-xhwx-76j2-m76q/GHSA-xhwx-76j2-m76q.json
index 0964abe66d3..670a03b2d2c 100644
--- a/advisories/unreviewed/2024/06/GHSA-xhwx-76j2-m76q/GHSA-xhwx-76j2-m76q.json
+++ b/advisories/unreviewed/2024/06/GHSA-xhwx-76j2-m76q/GHSA-xhwx-76j2-m76q.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xhwx-76j2-m76q",
-  "modified": "2024-06-07T06:30:30Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-06-07T06:30:30Z",
   "aliases": [
     "CVE-2024-5640"
@@ -40,7 +40,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/10/GHSA-2v28-q9qp-f3gx/GHSA-2v28-q9qp-f3gx.json b/advisories/unreviewed/2024/10/GHSA-2v28-q9qp-f3gx/GHSA-2v28-q9qp-f3gx.json
new file mode 100644
index 00000000000..55581847175
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-2v28-q9qp-f3gx/GHSA-2v28-q9qp-f3gx.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2v28-q9qp-f3gx",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50451"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50451"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/wp-meta-data-filter-and-taxonomy-filter/wordpress-mdtf-meta-data-and-taxonomies-filter-plugin-1-3-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-329m-37p4-j9m8/GHSA-329m-37p4-j9m8.json b/advisories/unreviewed/2024/10/GHSA-329m-37p4-j9m8/GHSA-329m-37p4-j9m8.json
new file mode 100644
index 00000000000..349bda68efb
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-329m-37p4-j9m8/GHSA-329m-37p4-j9m8.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-329m-37p4-j9m8",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50440"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chris Coyier CodePen Embedded Pens Shortcode allows Stored XSS.This issue affects CodePen Embedded Pens Shortcode: from n/a through 1.0.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50440"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/codepen-embedded-pen-shortcode/wordpress-codepen-embedded-pens-shortcode-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-33jq-g649-fc48/GHSA-33jq-g649-fc48.json b/advisories/unreviewed/2024/10/GHSA-33jq-g649-fc48/GHSA-33jq-g649-fc48.json
new file mode 100644
index 00000000000..61d944ae4fa
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-33jq-g649-fc48/GHSA-33jq-g649-fc48.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-33jq-g649-fc48",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50438"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a before 5.0.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50438"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/church-admin/wordpress-church-admin-plugin-5-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-368v-5vcp-j279/GHSA-368v-5vcp-j279.json b/advisories/unreviewed/2024/10/GHSA-368v-5vcp-j279/GHSA-368v-5vcp-j279.json
new file mode 100644
index 00000000000..185cc33c254
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-368v-5vcp-j279/GHSA-368v-5vcp-j279.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-368v-5vcp-j279",
+  "modified": "2024-10-28T18:31:38Z",
+  "published": "2024-10-28T18:31:38Z",
+  "aliases": [
+    "CVE-2023-31271"
+  ],
+  "details": "Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31271"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-14T14:15:50Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-3pp2-9g7m-mf2q/GHSA-3pp2-9g7m-mf2q.json b/advisories/unreviewed/2024/10/GHSA-3pp2-9g7m-mf2q/GHSA-3pp2-9g7m-mf2q.json
new file mode 100644
index 00000000000..03aa9c05eeb
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-3pp2-9g7m-mf2q/GHSA-3pp2-9g7m-mf2q.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3pp2-9g7m-mf2q",
+  "modified": "2024-10-28T18:31:43Z",
+  "published": "2024-10-28T18:31:43Z",
+  "aliases": [
+    "CVE-2024-50469"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Team Bright Vessel Textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through 0.1.3.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50469"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/textboxes/wordpress-textboxes-plugin-0-1-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-45g4-3pq8-625w/GHSA-45g4-3pq8-625w.json b/advisories/unreviewed/2024/10/GHSA-45g4-3pq8-625w/GHSA-45g4-3pq8-625w.json
index 0a483f04514..39dfbfc840b 100644
--- a/advisories/unreviewed/2024/10/GHSA-45g4-3pq8-625w/GHSA-45g4-3pq8-625w.json
+++ b/advisories/unreviewed/2024/10/GHSA-45g4-3pq8-625w/GHSA-45g4-3pq8-625w.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-45g4-3pq8-625w",
-  "modified": "2024-10-28T15:31:16Z",
+  "modified": "2024-10-28T18:31:41Z",
   "published": "2024-10-28T15:31:16Z",
   "aliases": [
     "CVE-2024-48291"
   ],
   "details": "dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=editAdmin&id=17",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-352"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-28T15:15:05Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-482x-m8hf-65v2/GHSA-482x-m8hf-65v2.json b/advisories/unreviewed/2024/10/GHSA-482x-m8hf-65v2/GHSA-482x-m8hf-65v2.json
new file mode 100644
index 00000000000..06bed7a17f5
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-482x-m8hf-65v2/GHSA-482x-m8hf-65v2.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-482x-m8hf-65v2",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50449"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder allows Stored XSS.This issue affects PDF Generator Addon for Elementor Page Builder: from n/a through 1.7.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50449"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/pdf-generator-addon-for-elementor-page-builder/wordpress-pdf-generator-addon-for-elementor-page-builder-plugin-1-7-4-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-4hcp-rr7c-2jm2/GHSA-4hcp-rr7c-2jm2.json b/advisories/unreviewed/2024/10/GHSA-4hcp-rr7c-2jm2/GHSA-4hcp-rr7c-2jm2.json
index 83339cd17e0..9997004125b 100644
--- a/advisories/unreviewed/2024/10/GHSA-4hcp-rr7c-2jm2/GHSA-4hcp-rr7c-2jm2.json
+++ b/advisories/unreviewed/2024/10/GHSA-4hcp-rr7c-2jm2/GHSA-4hcp-rr7c-2jm2.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4hcp-rr7c-2jm2",
-  "modified": "2024-10-21T21:30:50Z",
+  "modified": "2024-10-28T18:31:40Z",
   "published": "2024-10-21T21:30:50Z",
   "aliases": [
     "CVE-2024-50016"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Avoid overflow assignment in link_dp_cts\n\nsampling_rate is an uint8_t but is assigned an unsigned int, and thus it\ncan overflow. As a result, sampling_rate is changed to uint32_t.\n\nSimilarly, LINK_QUAL_PATTERN_SET has a size of 2 bits, and it should\nonly be assigned to a value less or equal than 4.\n\nThis fixes 2 INTEGER_OVERFLOW issues reported by Coverity.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -37,9 +40,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-190"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T19:15:04Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-4phr-f8p6-4r74/GHSA-4phr-f8p6-4r74.json b/advisories/unreviewed/2024/10/GHSA-4phr-f8p6-4r74/GHSA-4phr-f8p6-4r74.json
new file mode 100644
index 00000000000..67bc2a95514
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-4phr-f8p6-4r74/GHSA-4phr-f8p6-4r74.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4phr-f8p6-4r74",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50445"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.13.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50445"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/selection-lite/wordpress-selection-lite-plugin-1-13-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-4xcq-35vg-rj75/GHSA-4xcq-35vg-rj75.json b/advisories/unreviewed/2024/10/GHSA-4xcq-35vg-rj75/GHSA-4xcq-35vg-rj75.json
new file mode 100644
index 00000000000..1cb9a45a1cd
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-4xcq-35vg-rj75/GHSA-4xcq-35vg-rj75.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4xcq-35vg-rj75",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50447"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce allows Stored XSS.This issue affects Envo's Elementor Templates & Widgets for WooCommerce: from n/a through 1.4.19.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50447"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/envo-elementor-for-woocommerce/wordpress-envo-s-elementor-templates-widgets-for-woocommerce-plugin-1-4-19-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-59xx-g8cv-87qw/GHSA-59xx-g8cv-87qw.json b/advisories/unreviewed/2024/10/GHSA-59xx-g8cv-87qw/GHSA-59xx-g8cv-87qw.json
new file mode 100644
index 00000000000..dc7585f9ff6
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-59xx-g8cv-87qw/GHSA-59xx-g8cv-87qw.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-59xx-g8cv-87qw",
+  "modified": "2024-10-28T18:31:41Z",
+  "published": "2024-10-28T18:31:41Z",
+  "aliases": [
+    "CVE-2024-10469"
+  ],
+  "details": "VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10469"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/CERTCC/VINCE"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-276"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T16:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-6542-3jxf-gxwj/GHSA-6542-3jxf-gxwj.json b/advisories/unreviewed/2024/10/GHSA-6542-3jxf-gxwj/GHSA-6542-3jxf-gxwj.json
new file mode 100644
index 00000000000..42a40285ba0
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-6542-3jxf-gxwj/GHSA-6542-3jxf-gxwj.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6542-3jxf-gxwj",
+  "modified": "2024-10-28T18:31:43Z",
+  "published": "2024-10-28T18:31:43Z",
+  "aliases": [
+    "CVE-2024-9629"
+  ],
+  "details": "The Contact Form 7 + Telegram plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'wpcf7_Telegram::ajax' function in versions up to, and including, 0.8.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to approve, pause and refuse subscriptions.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9629"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/cf7-telegram/tags/0.8.4/classes/wpcf7telegram.php#L537"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3176353/cf7-telegram#file21"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f330fa5a-b471-45ee-a2a6-3ae8f3941bfe?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-7m46-88q5-mp7g/GHSA-7m46-88q5-mp7g.json b/advisories/unreviewed/2024/10/GHSA-7m46-88q5-mp7g/GHSA-7m46-88q5-mp7g.json
new file mode 100644
index 00000000000..8bd7a0e331e
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-7m46-88q5-mp7g/GHSA-7m46-88q5-mp7g.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7m46-88q5-mp7g",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50460"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in FirelightWP Firelight Lightbox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through 2.3.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50460"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/easy-fancybox/wordpress-firelight-lightbox-plugin-2-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-7pj6-rq69-3m65/GHSA-7pj6-rq69-3m65.json b/advisories/unreviewed/2024/10/GHSA-7pj6-rq69-3m65/GHSA-7pj6-rq69-3m65.json
index 734bcb3a81c..a434a9bb3e4 100644
--- a/advisories/unreviewed/2024/10/GHSA-7pj6-rq69-3m65/GHSA-7pj6-rq69-3m65.json
+++ b/advisories/unreviewed/2024/10/GHSA-7pj6-rq69-3m65/GHSA-7pj6-rq69-3m65.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7pj6-rq69-3m65",
-  "modified": "2024-10-21T18:30:58Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T18:30:58Z",
   "aliases": [
     "CVE-2024-49957"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix null-ptr-deref when journal load failed.\n\nDuring the mounting process, if journal_reset() fails because of too short\njournal, then lead to jbd2_journal_load() fails with NULL j_sb_buffer. \nSubsequently, ocfs2_journal_shutdown() calls\njbd2_journal_flush()->jbd2_cleanup_journal_tail()->\n__jbd2_update_log_tail()->jbd2_journal_update_sb_log_tail()\n->lock_buffer(journal->j_sb_buffer), resulting in a null-pointer\ndereference error.\n\nTo resolve this issue, we should check the JBD2_LOADED flag to ensure the\njournal was properly loaded.  Additionally, use journal instead of\nosb->journal directly to simplify the code.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -49,9 +52,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-476"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T18:15:16Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-94p2-m4qf-5m97/GHSA-94p2-m4qf-5m97.json b/advisories/unreviewed/2024/10/GHSA-94p2-m4qf-5m97/GHSA-94p2-m4qf-5m97.json
index c450f8ad4fa..d9865da2593 100644
--- a/advisories/unreviewed/2024/10/GHSA-94p2-m4qf-5m97/GHSA-94p2-m4qf-5m97.json
+++ b/advisories/unreviewed/2024/10/GHSA-94p2-m4qf-5m97/GHSA-94p2-m4qf-5m97.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-94p2-m4qf-5m97",
-  "modified": "2024-10-21T18:30:59Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T18:30:59Z",
   "aliases": [
     "CVE-2024-49988"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: add refcnt to ksmbd_conn struct\n\nWhen sending an oplock break request, opinfo->conn is used,\nBut freed ->conn can be used on multichannel.\nThis patch add a reference count to the ksmbd_conn struct\nso that it can be freed when it is no longer used.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -37,9 +40,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-416"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T18:15:19Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-9jhx-gr45-29p7/GHSA-9jhx-gr45-29p7.json b/advisories/unreviewed/2024/10/GHSA-9jhx-gr45-29p7/GHSA-9jhx-gr45-29p7.json
index be5fb6b6628..1aadc9b0c6e 100644
--- a/advisories/unreviewed/2024/10/GHSA-9jhx-gr45-29p7/GHSA-9jhx-gr45-29p7.json
+++ b/advisories/unreviewed/2024/10/GHSA-9jhx-gr45-29p7/GHSA-9jhx-gr45-29p7.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9jhx-gr45-29p7",
-  "modified": "2024-10-21T18:30:59Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T18:30:59Z",
   "aliases": [
     "CVE-2024-49990"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/hdcp: Check GSC structure validity\n\nSometimes xe_gsc is not initialized when checked at HDCP capability\ncheck. Add gsc structure check to avoid null pointer error.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -33,9 +36,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-908"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T18:15:19Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-9w59-84qq-87g4/GHSA-9w59-84qq-87g4.json b/advisories/unreviewed/2024/10/GHSA-9w59-84qq-87g4/GHSA-9w59-84qq-87g4.json
new file mode 100644
index 00000000000..207b78a18c1
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-9w59-84qq-87g4/GHSA-9w59-84qq-87g4.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9w59-84qq-87g4",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50439"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force Astra Widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through 1.2.14.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50439"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/astra-widgets/wordpress-astra-widgets-plugin-1-2-14-stored-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-c8jq-9f5m-r697/GHSA-c8jq-9f5m-r697.json b/advisories/unreviewed/2024/10/GHSA-c8jq-9f5m-r697/GHSA-c8jq-9f5m-r697.json
index 0d01828f8fb..d348cffc21e 100644
--- a/advisories/unreviewed/2024/10/GHSA-c8jq-9f5m-r697/GHSA-c8jq-9f5m-r697.json
+++ b/advisories/unreviewed/2024/10/GHSA-c8jq-9f5m-r697/GHSA-c8jq-9f5m-r697.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c8jq-9f5m-r697",
-  "modified": "2024-10-21T18:30:59Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T18:30:59Z",
   "aliases": [
     "CVE-2024-49995"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: guard against string buffer overrun\n\nSmatch reports that copying media_name and if_name to name_parts may\noverwrite the destination.\n\n .../bearer.c:166 bearer_name_validate() error: strcpy() 'media_name' too large for 'name_parts->media_name' (32 vs 16)\n .../bearer.c:167 bearer_name_validate() error: strcpy() 'if_name' too large for 'name_parts->if_name' (1010102 vs 16)\n\nThis does seem to be the case so guard against this possibility by using\nstrscpy() and failing if truncation occurs.\n\nIntroduced by commit b97bf3fd8f6a (\"[TIPC] Initial merge\")\n\nCompile tested only.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -51,7 +54,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T18:15:19Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-f8wg-8fjj-qf3g/GHSA-f8wg-8fjj-qf3g.json b/advisories/unreviewed/2024/10/GHSA-f8wg-8fjj-qf3g/GHSA-f8wg-8fjj-qf3g.json
new file mode 100644
index 00000000000..3609c612144
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-f8wg-8fjj-qf3g/GHSA-f8wg-8fjj-qf3g.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f8wg-8fjj-qf3g",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50441"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.15.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50441"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/cozy-addons/wordpress-cozy-blocks-plugin-2-0-15-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-fvjx-c7j7-q6v8/GHSA-fvjx-c7j7-q6v8.json b/advisories/unreviewed/2024/10/GHSA-fvjx-c7j7-q6v8/GHSA-fvjx-c7j7-q6v8.json
new file mode 100644
index 00000000000..7a91f59be1a
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-fvjx-c7j7-q6v8/GHSA-fvjx-c7j7-q6v8.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fvjx-c7j7-q6v8",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50446"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in FuturioWP Futurio Extra allows Stored XSS.This issue affects Futurio Extra: from n/a through 2.0.11.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50446"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/futurio-extra/wordpress-futurio-extra-plugin-2-0-11-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-gj49-2hq5-g5h7/GHSA-gj49-2hq5-g5h7.json b/advisories/unreviewed/2024/10/GHSA-gj49-2hq5-g5h7/GHSA-gj49-2hq5-g5h7.json
index 72a3e4bc9d4..e257523189b 100644
--- a/advisories/unreviewed/2024/10/GHSA-gj49-2hq5-g5h7/GHSA-gj49-2hq5-g5h7.json
+++ b/advisories/unreviewed/2024/10/GHSA-gj49-2hq5-g5h7/GHSA-gj49-2hq5-g5h7.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gj49-2hq5-g5h7",
-  "modified": "2024-10-21T18:30:59Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T18:30:59Z",
   "aliases": [
     "CVE-2024-49991"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer\n\nPass pointer reference to amdgpu_bo_unref to clear the correct pointer,\notherwise amdgpu_bo_unref clear the local variable, the original pointer\nnot set to NULL, this could cause use-after-free bug.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -37,9 +40,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-416"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T18:15:19Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-hr79-p2m4-h6xg/GHSA-hr79-p2m4-h6xg.json b/advisories/unreviewed/2024/10/GHSA-hr79-p2m4-h6xg/GHSA-hr79-p2m4-h6xg.json
new file mode 100644
index 00000000000..b29124e629d
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-hr79-p2m4-h6xg/GHSA-hr79-p2m4-h6xg.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hr79-p2m4-h6xg",
+  "modified": "2024-10-28T18:31:43Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50462"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fla-shop Interactive World Map allows Stored XSS.This issue affects Interactive World Map: from n/a through 3.4.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50462"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/interactive-world-map/wordpress-interactive-world-map-plugin-3-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-jf2q-q2v4-h63r/GHSA-jf2q-q2v4-h63r.json b/advisories/unreviewed/2024/10/GHSA-jf2q-q2v4-h63r/GHSA-jf2q-q2v4-h63r.json
new file mode 100644
index 00000000000..80c17c56dcf
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-jf2q-q2v4-h63r/GHSA-jf2q-q2v4-h63r.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jf2q-q2v4-h63r",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-6245"
+  ],
+  "details": "Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market.\n\nThis issue affects SmartPlay: 66T0.05.50.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6245"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.global-infotainment-system.com/en/top.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.marutisuzuki.com/corporate/technology/smartplay-systems"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-1392"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T17:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-jhcf-hv78-23rq/GHSA-jhcf-hv78-23rq.json b/advisories/unreviewed/2024/10/GHSA-jhcf-hv78-23rq/GHSA-jhcf-hv78-23rq.json
new file mode 100644
index 00000000000..04417737059
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-jhcf-hv78-23rq/GHSA-jhcf-hv78-23rq.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jhcf-hv78-23rq",
+  "modified": "2024-10-28T18:31:41Z",
+  "published": "2024-10-28T18:31:41Z",
+  "aliases": [
+    "CVE-2024-42028"
+  ],
+  "details": "A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and earlier) allows a malicious actor with a local operational system user to execute high privilege actions on UniFi Network Server.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42028"
+    },
+    {
+      "type": "WEB",
+      "url": "https://community.ui.com/releases/Security-Advisory-Bulletin-043-043/28e45c75-314e-4f07-a4f3-d17f67bd53f7"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T16:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-m3h7-ffr6-fmrq/GHSA-m3h7-ffr6-fmrq.json b/advisories/unreviewed/2024/10/GHSA-m3h7-ffr6-fmrq/GHSA-m3h7-ffr6-fmrq.json
new file mode 100644
index 00000000000..75a533de217
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-m3h7-ffr6-fmrq/GHSA-m3h7-ffr6-fmrq.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m3h7-ffr6-fmrq",
+  "modified": "2024-10-28T18:31:43Z",
+  "published": "2024-10-28T18:31:43Z",
+  "aliases": [
+    "CVE-2024-50464"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pierre Lebedel Kodex Posts likes allows Stored XSS.This issue affects Kodex Posts likes: from n/a through 2.5.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50464"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/kodex-posts-likes/wordpress-kodex-posts-likes-plugin-2-5-0-cross-site-scripting-xss-vulnerability-2?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-mm7p-v4m8-8xqp/GHSA-mm7p-v4m8-8xqp.json b/advisories/unreviewed/2024/10/GHSA-mm7p-v4m8-8xqp/GHSA-mm7p-v4m8-8xqp.json
new file mode 100644
index 00000000000..fcbb0134774
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-mm7p-v4m8-8xqp/GHSA-mm7p-v4m8-8xqp.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mm7p-v4m8-8xqp",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50448"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.14.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50448"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/yith-woocommerce-product-add-ons/wordpress-yith-woocommerce-product-add-ons-plugin-4-14-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-mp23-j9p6-rgph/GHSA-mp23-j9p6-rgph.json b/advisories/unreviewed/2024/10/GHSA-mp23-j9p6-rgph/GHSA-mp23-j9p6-rgph.json
new file mode 100644
index 00000000000..80cb622d984
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-mp23-j9p6-rgph/GHSA-mp23-j9p6-rgph.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mp23-j9p6-rgph",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50461"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.14.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50461"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/embedpress/wordpress-embedpress-plugin-4-0-14-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-mwch-w2jw-vrw4/GHSA-mwch-w2jw-vrw4.json b/advisories/unreviewed/2024/10/GHSA-mwch-w2jw-vrw4/GHSA-mwch-w2jw-vrw4.json
new file mode 100644
index 00000000000..860008254ac
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-mwch-w2jw-vrw4/GHSA-mwch-w2jw-vrw4.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mwch-w2jw-vrw4",
+  "modified": "2024-10-28T18:31:43Z",
+  "published": "2024-10-28T18:31:43Z",
+  "aliases": [
+    "CVE-2024-50467"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WebXApp Scrollbar by webxapp – Best vertical/horizontal scrollbars plugin allows Stored XSS.This issue affects Scrollbar by webxapp – Best vertical/horizontal scrollbars plugin: from n/a through 1.3.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50467"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/scrollbar-by-webxapp/wordpress-scrollbar-by-webxapp-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-p237-mjc7-7qqj/GHSA-p237-mjc7-7qqj.json b/advisories/unreviewed/2024/10/GHSA-p237-mjc7-7qqj/GHSA-p237-mjc7-7qqj.json
index 9a56ae6556e..9a27c01282e 100644
--- a/advisories/unreviewed/2024/10/GHSA-p237-mjc7-7qqj/GHSA-p237-mjc7-7qqj.json
+++ b/advisories/unreviewed/2024/10/GHSA-p237-mjc7-7qqj/GHSA-p237-mjc7-7qqj.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p237-mjc7-7qqj",
-  "modified": "2024-10-21T18:30:59Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T18:30:59Z",
   "aliases": [
     "CVE-2024-49962"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()\n\nACPICA commit 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0\n\nACPI_ALLOCATE_ZEROED() may fail, elements might be NULL and will cause\nNULL pointer dereference later.\n\n[ rjw: Subject and changelog edits ]",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -49,9 +52,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-476"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T18:15:17Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-pjhv-p74j-x696/GHSA-pjhv-p74j-x696.json b/advisories/unreviewed/2024/10/GHSA-pjhv-p74j-x696/GHSA-pjhv-p74j-x696.json
new file mode 100644
index 00000000000..30a12e4c547
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-pjhv-p74j-x696/GHSA-pjhv-p74j-x696.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pjhv-p74j-x696",
+  "modified": "2024-10-28T18:31:43Z",
+  "published": "2024-10-28T18:31:43Z",
+  "aliases": [
+    "CVE-2024-50468"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Robinson Raptor Editor allows DOM-Based XSS.This issue affects Raptor Editor: from n/a through 1.0.20.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50468"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/wp-raptor/wordpress-raptor-editor-plugin-1-0-20-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-q5ff-63c8-hcx3/GHSA-q5ff-63c8-hcx3.json b/advisories/unreviewed/2024/10/GHSA-q5ff-63c8-hcx3/GHSA-q5ff-63c8-hcx3.json
index f97180b0f19..8bcf2ec646c 100644
--- a/advisories/unreviewed/2024/10/GHSA-q5ff-63c8-hcx3/GHSA-q5ff-63c8-hcx3.json
+++ b/advisories/unreviewed/2024/10/GHSA-q5ff-63c8-hcx3/GHSA-q5ff-63c8-hcx3.json
@@ -28,7 +28,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-125"
+      "CWE-125",
+      "CWE-190"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/10/GHSA-q68q-7rrh-j62p/GHSA-q68q-7rrh-j62p.json b/advisories/unreviewed/2024/10/GHSA-q68q-7rrh-j62p/GHSA-q68q-7rrh-j62p.json
index 680b12ef023..b953fc35212 100644
--- a/advisories/unreviewed/2024/10/GHSA-q68q-7rrh-j62p/GHSA-q68q-7rrh-j62p.json
+++ b/advisories/unreviewed/2024/10/GHSA-q68q-7rrh-j62p/GHSA-q68q-7rrh-j62p.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q68q-7rrh-j62p",
-  "modified": "2024-10-28T15:31:16Z",
+  "modified": "2024-10-28T18:31:41Z",
   "published": "2024-10-28T15:31:16Z",
   "aliases": [
     "CVE-2024-48191"
   ],
   "details": "dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-352"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-28T14:15:04Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-qf5q-fm5c-hc2p/GHSA-qf5q-fm5c-hc2p.json b/advisories/unreviewed/2024/10/GHSA-qf5q-fm5c-hc2p/GHSA-qf5q-fm5c-hc2p.json
index 2ea8a380425..94dc666b767 100644
--- a/advisories/unreviewed/2024/10/GHSA-qf5q-fm5c-hc2p/GHSA-qf5q-fm5c-hc2p.json
+++ b/advisories/unreviewed/2024/10/GHSA-qf5q-fm5c-hc2p/GHSA-qf5q-fm5c-hc2p.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qf5q-fm5c-hc2p",
-  "modified": "2024-10-21T18:30:59Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T18:30:59Z",
   "aliases": [
     "CVE-2024-49987"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpftool: Fix undefined behavior in qsort(NULL, 0, ...)\n\nWhen netfilter has no entry to display, qsort is called with\nqsort(NULL, 0, ...). This results in undefined behavior, as UBSan\nreports:\n\nnet.c:827:2: runtime error: null pointer passed as argument 1, which is declared to never be null\n\nAlthough the C standard does not explicitly state whether calling qsort\nwith a NULL pointer when the size is 0 constitutes undefined behavior,\nSection 7.1.4 of the C standard (Use of library functions) mentions:\n\n\"Each of the following statements applies unless explicitly stated\notherwise in the detailed descriptions that follow: If an argument to a\nfunction has an invalid value (such as a value outside the domain of\nthe function, or a pointer outside the address space of the program, or\na null pointer, or a pointer to non-modifiable storage when the\ncorresponding parameter is not const-qualified) or a type (after\npromotion) not expected by a function with variable number of\narguments, the behavior is undefined.\"\n\nTo avoid this, add an early return when nf_link_info is NULL to prevent\ncalling qsort with a NULL pointer.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -37,9 +40,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-476"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T18:15:19Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-qfhj-q535-jf9w/GHSA-qfhj-q535-jf9w.json b/advisories/unreviewed/2024/10/GHSA-qfhj-q535-jf9w/GHSA-qfhj-q535-jf9w.json
index 635eb0e7347..ee59803489e 100644
--- a/advisories/unreviewed/2024/10/GHSA-qfhj-q535-jf9w/GHSA-qfhj-q535-jf9w.json
+++ b/advisories/unreviewed/2024/10/GHSA-qfhj-q535-jf9w/GHSA-qfhj-q535-jf9w.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qfhj-q535-jf9w",
-  "modified": "2024-10-21T18:30:59Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T18:30:59Z",
   "aliases": [
     "CVE-2024-49985"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume\n\nIn case there is any sort of clock controller attached to this I2C bus\ncontroller, for example Versaclock or even an AIC32x4 I2C codec, then\nan I2C transfer triggered from the clock controller clk_ops .prepare\ncallback may trigger a deadlock on drivers/clk/clk.c prepare_lock mutex.\n\nThis is because the clock controller first grabs the prepare_lock mutex\nand then performs the prepare operation, including its I2C access. The\nI2C access resumes this I2C bus controller via .runtime_resume callback,\nwhich calls clk_prepare_enable(), which attempts to grab the prepare_lock\nmutex again and deadlocks.\n\nSince the clock are already prepared since probe() and unprepared in\nremove(), use simple clk_enable()/clk_disable() calls to enable and\ndisable the clock on runtime suspend and resume, to avoid hitting the\nprepare_lock mutex.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -49,9 +52,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-667"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T18:15:18Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-r75j-q9wj-xrc3/GHSA-r75j-q9wj-xrc3.json b/advisories/unreviewed/2024/10/GHSA-r75j-q9wj-xrc3/GHSA-r75j-q9wj-xrc3.json
index 2e3a39b212c..494f883d5f1 100644
--- a/advisories/unreviewed/2024/10/GHSA-r75j-q9wj-xrc3/GHSA-r75j-q9wj-xrc3.json
+++ b/advisories/unreviewed/2024/10/GHSA-r75j-q9wj-xrc3/GHSA-r75j-q9wj-xrc3.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-r75j-q9wj-xrc3",
-  "modified": "2024-10-21T21:30:50Z",
+  "modified": "2024-10-28T18:31:40Z",
   "published": "2024-10-21T21:30:50Z",
   "aliases": [
     "CVE-2024-50015"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: dax: fix overflowing extents beyond inode size when partially writing\n\nThe dax_iomap_rw() does two things in each iteration: map written blocks\nand copy user data to blocks. If the process is killed by user(See signal\nhandling in dax_iomap_iter()), the copied data will be returned and added\non inode size, which means that the length of written extents may exceed\nthe inode size, then fsck will fail. An example is given as:\n\ndd if=/dev/urandom of=file bs=4M count=1\n dax_iomap_rw\n  iomap_iter // round 1\n   ext4_iomap_begin\n    ext4_iomap_alloc // allocate 0~2M extents(written flag)\n  dax_iomap_iter // copy 2M data\n  iomap_iter // round 2\n   iomap_iter_advance\n    iter->pos += iter->processed // iter->pos = 2M\n   ext4_iomap_begin\n    ext4_iomap_alloc // allocate 2~4M extents(written flag)\n  dax_iomap_iter\n   fatal_signal_pending\n  done = iter->pos - iocb->ki_pos // done = 2M\n ext4_handle_inode_extension\n  ext4_update_inode_size // inode size = 2M\n\nfsck reports: Inode 13, i_size is 2097152, should be 4194304.  Fix?\n\nFix the problem by truncating extents if the written length is smaller\nthan expected.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -51,7 +54,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T19:15:04Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-v7j7-2w3m-jfff/GHSA-v7j7-2w3m-jfff.json b/advisories/unreviewed/2024/10/GHSA-v7j7-2w3m-jfff/GHSA-v7j7-2w3m-jfff.json
index 1d42b747312..198f3664e68 100644
--- a/advisories/unreviewed/2024/10/GHSA-v7j7-2w3m-jfff/GHSA-v7j7-2w3m-jfff.json
+++ b/advisories/unreviewed/2024/10/GHSA-v7j7-2w3m-jfff/GHSA-v7j7-2w3m-jfff.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v7j7-2w3m-jfff",
-  "modified": "2024-10-21T21:30:50Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T21:30:50Z",
   "aliases": [
     "CVE-2024-50014"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix access to uninitialised lock in fc replay path\n\nThe following kernel trace can be triggered with fstest generic/629 when\nexecuted against a filesystem with fast-commit feature enabled:\n\nINFO: trying to register non-static key.\nThe code is fine but needs lockdep annotation, or maybe\nyou didn't initialize this object before use?\nturning off the locking correctness validator.\nCPU: 0 PID: 866 Comm: mount Not tainted 6.10.0+ #11\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.2-3-gd478f380-prebuilt.qemu.org 04/01/2014\nCall Trace:\n <TASK>\n dump_stack_lvl+0x66/0x90\n register_lock_class+0x759/0x7d0\n __lock_acquire+0x85/0x2630\n ? __find_get_block+0xb4/0x380\n lock_acquire+0xd1/0x2d0\n ? __ext4_journal_get_write_access+0xd5/0x160\n _raw_spin_lock+0x33/0x40\n ? __ext4_journal_get_write_access+0xd5/0x160\n __ext4_journal_get_write_access+0xd5/0x160\n ext4_reserve_inode_write+0x61/0xb0\n __ext4_mark_inode_dirty+0x79/0x270\n ? ext4_ext_replay_set_iblocks+0x2f8/0x450\n ext4_ext_replay_set_iblocks+0x330/0x450\n ext4_fc_replay+0x14c8/0x1540\n ? jread+0x88/0x2e0\n ? rcu_is_watching+0x11/0x40\n do_one_pass+0x447/0xd00\n jbd2_journal_recover+0x139/0x1b0\n jbd2_journal_load+0x96/0x390\n ext4_load_and_init_journal+0x253/0xd40\n ext4_fill_super+0x2cc6/0x3180\n...\n\nIn the replay path there's an attempt to lock sbi->s_bdev_wb_lock in\nfunction ext4_check_bdev_write_error().  Unfortunately, at this point this\nspinlock has not been initialized yet.  Moving it's initialization to an\nearlier point in __ext4_fill_super() fixes this splat.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -33,9 +36,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-908"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T19:15:04Z"
diff --git a/advisories/unreviewed/2024/10/GHSA-vg8g-7jgx-v9fv/GHSA-vg8g-7jgx-v9fv.json b/advisories/unreviewed/2024/10/GHSA-vg8g-7jgx-v9fv/GHSA-vg8g-7jgx-v9fv.json
new file mode 100644
index 00000000000..994f8d8d2f6
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-vg8g-7jgx-v9fv/GHSA-vg8g-7jgx-v9fv.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vg8g-7jgx-v9fv",
+  "modified": "2024-10-28T18:31:42Z",
+  "published": "2024-10-28T18:31:42Z",
+  "aliases": [
+    "CVE-2024-50458"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Codeus Advanced Sermons allows Stored XSS.This issue affects Advanced Sermons: from n/a through 3.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50458"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/advanced-sermons/wordpress-advanced-sermons-plugin-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-28T18:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-whx9-wv5g-grwq/GHSA-whx9-wv5g-grwq.json b/advisories/unreviewed/2024/10/GHSA-whx9-wv5g-grwq/GHSA-whx9-wv5g-grwq.json
new file mode 100644
index 00000000000..0948430a93a
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-whx9-wv5g-grwq/GHSA-whx9-wv5g-grwq.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-whx9-wv5g-grwq",
+  "modified": "2024-10-28T18:31:39Z",
+  "published": "2024-10-28T18:31:39Z",
+  "aliases": [
+    "CVE-2023-35003"
+  ],
+  "details": "Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35003"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-14T14:15:58Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-xrhf-cccw-cpm8/GHSA-xrhf-cccw-cpm8.json b/advisories/unreviewed/2024/10/GHSA-xrhf-cccw-cpm8/GHSA-xrhf-cccw-cpm8.json
index 4d2dadc7263..262ffa4bd91 100644
--- a/advisories/unreviewed/2024/10/GHSA-xrhf-cccw-cpm8/GHSA-xrhf-cccw-cpm8.json
+++ b/advisories/unreviewed/2024/10/GHSA-xrhf-cccw-cpm8/GHSA-xrhf-cccw-cpm8.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xrhf-cccw-cpm8",
-  "modified": "2024-10-21T18:30:59Z",
+  "modified": "2024-10-28T18:31:39Z",
   "published": "2024-10-21T18:30:58Z",
   "aliases": [
     "CVE-2024-49960"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix timer use-after-free on failed mount\n\nSyzbot has found an ODEBUG bug in ext4_fill_super\n\nThe del_timer_sync function cancels the s_err_report timer,\nwhich reminds about filesystem errors daily. We should\nguarantee the timer is no longer active before kfree(sbi).\n\nWhen filesystem mounting fails, the flow goes to failed_mount3,\nwhere an error occurs when ext4_stop_mmpd is called, causing\na read I/O failure. This triggers the ext4_handle_error function\nthat ultimately re-arms the timer,\nleaving the s_err_report timer active before kfree(sbi) is called.\n\nFix the issue by canceling the s_err_report timer after calling ext4_stop_mmpd.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -37,9 +40,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-416"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-10-21T18:15:17Z"