From 9f77295cb4d157ede9b50868af08727ba683548f Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 2 Jan 2024 03:31:45 +0000
Subject: [PATCH] Publish Advisories

GHSA-w6ww-869j-cgm6
GHSA-22j2-mxcq-m52p
GHSA-26mj-5qc9-44g4
GHSA-4mhp-935g-p95j
GHSA-6pjw-2w28-39xc
GHSA-74pj-4459-77rw
GHSA-7c6f-5v4h-x27j
GHSA-7gxx-vcpp-m3j9
GHSA-7q5q-c932-cm9r
GHSA-8q2r-v4xp-34qq
GHSA-8wmq-6cfj-m7w3
GHSA-9gfp-mxq7-r8g5
GHSA-cpmr-p9r8-5m73
GHSA-f8hf-p24c-jqvg
GHSA-g4pv-55wx-3w8q
GHSA-gqgh-pxg9-5r2w
GHSA-m7pf-2cqc-rm4r
GHSA-p2v6-235w-qhfc
GHSA-q4r7-vvv3-cgv4
GHSA-q6w4-3x9w-4364
GHSA-v27h-q36j-mh72
GHSA-w44p-fc2q-qf57
GHSA-w86q-6fxq-gcmr
---
 .../GHSA-w6ww-869j-cgm6.json                  |  4 ++
 .../GHSA-22j2-mxcq-m52p.json                  | 35 ++++++++++++++
 .../GHSA-26mj-5qc9-44g4.json                  | 46 +++++++++++++++++++
 .../GHSA-4mhp-935g-p95j.json                  | 35 ++++++++++++++
 .../GHSA-6pjw-2w28-39xc.json                  | 35 ++++++++++++++
 .../GHSA-74pj-4459-77rw.json                  | 35 ++++++++++++++
 .../GHSA-7c6f-5v4h-x27j.json                  | 35 ++++++++++++++
 .../GHSA-7gxx-vcpp-m3j9.json                  | 46 +++++++++++++++++++
 .../GHSA-7q5q-c932-cm9r.json                  | 35 ++++++++++++++
 .../GHSA-8q2r-v4xp-34qq.json                  | 35 ++++++++++++++
 .../GHSA-8wmq-6cfj-m7w3.json                  | 35 ++++++++++++++
 .../GHSA-9gfp-mxq7-r8g5.json                  | 35 ++++++++++++++
 .../GHSA-cpmr-p9r8-5m73.json                  | 35 ++++++++++++++
 .../GHSA-f8hf-p24c-jqvg.json                  | 35 ++++++++++++++
 .../GHSA-g4pv-55wx-3w8q.json                  | 35 ++++++++++++++
 .../GHSA-gqgh-pxg9-5r2w.json                  | 35 ++++++++++++++
 .../GHSA-m7pf-2cqc-rm4r.json                  | 35 ++++++++++++++
 .../GHSA-p2v6-235w-qhfc.json                  | 35 ++++++++++++++
 .../GHSA-q4r7-vvv3-cgv4.json                  | 35 ++++++++++++++
 .../GHSA-q6w4-3x9w-4364.json                  | 35 ++++++++++++++
 .../GHSA-v27h-q36j-mh72.json                  | 35 ++++++++++++++
 .../GHSA-w44p-fc2q-qf57.json                  | 35 ++++++++++++++
 .../GHSA-w86q-6fxq-gcmr.json                  | 35 ++++++++++++++
 23 files changed, 796 insertions(+)
 create mode 100644 advisories/unreviewed/2024/01/GHSA-22j2-mxcq-m52p/GHSA-22j2-mxcq-m52p.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-26mj-5qc9-44g4/GHSA-26mj-5qc9-44g4.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-4mhp-935g-p95j/GHSA-4mhp-935g-p95j.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-6pjw-2w28-39xc/GHSA-6pjw-2w28-39xc.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-74pj-4459-77rw/GHSA-74pj-4459-77rw.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-7c6f-5v4h-x27j/GHSA-7c6f-5v4h-x27j.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-7gxx-vcpp-m3j9/GHSA-7gxx-vcpp-m3j9.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-7q5q-c932-cm9r/GHSA-7q5q-c932-cm9r.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-8q2r-v4xp-34qq/GHSA-8q2r-v4xp-34qq.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-8wmq-6cfj-m7w3/GHSA-8wmq-6cfj-m7w3.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-9gfp-mxq7-r8g5/GHSA-9gfp-mxq7-r8g5.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-cpmr-p9r8-5m73/GHSA-cpmr-p9r8-5m73.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-f8hf-p24c-jqvg/GHSA-f8hf-p24c-jqvg.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-g4pv-55wx-3w8q/GHSA-g4pv-55wx-3w8q.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-gqgh-pxg9-5r2w/GHSA-gqgh-pxg9-5r2w.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-m7pf-2cqc-rm4r/GHSA-m7pf-2cqc-rm4r.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-p2v6-235w-qhfc/GHSA-p2v6-235w-qhfc.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-q4r7-vvv3-cgv4/GHSA-q4r7-vvv3-cgv4.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-q6w4-3x9w-4364/GHSA-q6w4-3x9w-4364.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-v27h-q36j-mh72/GHSA-v27h-q36j-mh72.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-w44p-fc2q-qf57/GHSA-w44p-fc2q-qf57.json
 create mode 100644 advisories/unreviewed/2024/01/GHSA-w86q-6fxq-gcmr/GHSA-w86q-6fxq-gcmr.json

diff --git a/advisories/unreviewed/2023/12/GHSA-w6ww-869j-cgm6/GHSA-w6ww-869j-cgm6.json b/advisories/unreviewed/2023/12/GHSA-w6ww-869j-cgm6/GHSA-w6ww-869j-cgm6.json
index e26eab8acba..79325027612 100644
--- a/advisories/unreviewed/2023/12/GHSA-w6ww-869j-cgm6/GHSA-w6ww-869j-cgm6.json
+++ b/advisories/unreviewed/2023/12/GHSA-w6ww-869j-cgm6/GHSA-w6ww-869j-cgm6.json
@@ -73,6 +73,10 @@
     {
       "type": "WEB",
       "url": "http://www.openwall.com/lists/oss-security/2024/01/01/2"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2024/01/01/3"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2024/01/GHSA-22j2-mxcq-m52p/GHSA-22j2-mxcq-m52p.json b/advisories/unreviewed/2024/01/GHSA-22j2-mxcq-m52p/GHSA-22j2-mxcq-m52p.json
new file mode 100644
index 00000000000..6ff08ebc7cf
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-22j2-mxcq-m52p/GHSA-22j2-mxcq-m52p.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-22j2-mxcq-m52p",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32874"
+  ],
+  "details": "In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161803; Issue ID: MOLY01161803 (MSV-893).",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32874"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-26mj-5qc9-44g4/GHSA-26mj-5qc9-44g4.json b/advisories/unreviewed/2024/01/GHSA-26mj-5qc9-44g4/GHSA-26mj-5qc9-44g4.json
new file mode 100644
index 00000000000..d2650948b89
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-26mj-5qc9-44g4/GHSA-26mj-5qc9-44g4.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-26mj-5qc9-44g4",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2024-0185"
+  ],
+  "details": "A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file dasboard_teacher.php of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249443.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0185"
+    },
+    {
+      "type": "WEB",
+      "url": "https://mega.nz/file/PBd13AoR#G3fYWB82wGCa7sD22JP3_twtbw3B0qSJ-4eMMrYR5cE"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.249443"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.249443"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-434"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T01:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-4mhp-935g-p95j/GHSA-4mhp-935g-p95j.json b/advisories/unreviewed/2024/01/GHSA-4mhp-935g-p95j/GHSA-4mhp-935g-p95j.json
new file mode 100644
index 00000000000..5b8a0d58e7b
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-4mhp-935g-p95j/GHSA-4mhp-935g-p95j.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4mhp-935g-p95j",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32879"
+  ],
+  "details": "In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308064.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32879"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-6pjw-2w28-39xc/GHSA-6pjw-2w28-39xc.json b/advisories/unreviewed/2024/01/GHSA-6pjw-2w28-39xc/GHSA-6pjw-2w28-39xc.json
new file mode 100644
index 00000000000..e3bec160931
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-6pjw-2w28-39xc/GHSA-6pjw-2w28-39xc.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6pjw-2w28-39xc",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32878"
+  ],
+  "details": "In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08307992.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32878"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-74pj-4459-77rw/GHSA-74pj-4459-77rw.json b/advisories/unreviewed/2024/01/GHSA-74pj-4459-77rw/GHSA-74pj-4459-77rw.json
new file mode 100644
index 00000000000..4b8c37f6a7f
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-74pj-4459-77rw/GHSA-74pj-4459-77rw.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-74pj-4459-77rw",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32885"
+  ],
+  "details": "In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780685; Issue ID: ALPS07780685.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32885"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-7c6f-5v4h-x27j/GHSA-7c6f-5v4h-x27j.json b/advisories/unreviewed/2024/01/GHSA-7c6f-5v4h-x27j/GHSA-7c6f-5v4h-x27j.json
new file mode 100644
index 00000000000..a1f28b28f62
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-7c6f-5v4h-x27j/GHSA-7c6f-5v4h-x27j.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7c6f-5v4h-x27j",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32872"
+  ],
+  "details": "In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08308607.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32872"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-7gxx-vcpp-m3j9/GHSA-7gxx-vcpp-m3j9.json b/advisories/unreviewed/2024/01/GHSA-7gxx-vcpp-m3j9/GHSA-7gxx-vcpp-m3j9.json
new file mode 100644
index 00000000000..bc7a41fec05
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-7gxx-vcpp-m3j9/GHSA-7gxx-vcpp-m3j9.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7gxx-vcpp-m3j9",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2024-0186"
+  ],
+  "details": "A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249444.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0186"
+    },
+    {
+      "type": "WEB",
+      "url": "https://note.zhaoj.in/share/WwPWWizD2Spk"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.249444"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.249444"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-640"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T01:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-7q5q-c932-cm9r/GHSA-7q5q-c932-cm9r.json b/advisories/unreviewed/2024/01/GHSA-7q5q-c932-cm9r/GHSA-7q5q-c932-cm9r.json
new file mode 100644
index 00000000000..77a3eb36bc2
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-7q5q-c932-cm9r/GHSA-7q5q-c932-cm9r.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7q5q-c932-cm9r",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32880"
+  ],
+  "details": "In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308076.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32880"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-8q2r-v4xp-34qq/GHSA-8q2r-v4xp-34qq.json b/advisories/unreviewed/2024/01/GHSA-8q2r-v4xp-34qq/GHSA-8q2r-v4xp-34qq.json
new file mode 100644
index 00000000000..c574a0c8cd2
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-8q2r-v4xp-34qq/GHSA-8q2r-v4xp-34qq.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8q2r-v4xp-34qq",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32888"
+  ],
+  "details": "In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161830; Issue ID: MOLY01161830 (MSV-894).",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32888"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-8wmq-6cfj-m7w3/GHSA-8wmq-6cfj-m7w3.json b/advisories/unreviewed/2024/01/GHSA-8wmq-6cfj-m7w3/GHSA-8wmq-6cfj-m7w3.json
new file mode 100644
index 00000000000..6018c9ec863
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-8wmq-6cfj-m7w3/GHSA-8wmq-6cfj-m7w3.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8wmq-6cfj-m7w3",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32877"
+  ],
+  "details": "In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308070.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32877"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-9gfp-mxq7-r8g5/GHSA-9gfp-mxq7-r8g5.json b/advisories/unreviewed/2024/01/GHSA-9gfp-mxq7-r8g5/GHSA-9gfp-mxq7-r8g5.json
new file mode 100644
index 00000000000..06dc7dc2d4d
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-9gfp-mxq7-r8g5/GHSA-9gfp-mxq7-r8g5.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9gfp-mxq7-r8g5",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32875"
+  ],
+  "details": "In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08304217.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32875"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-cpmr-p9r8-5m73/GHSA-cpmr-p9r8-5m73.json b/advisories/unreviewed/2024/01/GHSA-cpmr-p9r8-5m73/GHSA-cpmr-p9r8-5m73.json
new file mode 100644
index 00000000000..036a1e6814f
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-cpmr-p9r8-5m73/GHSA-cpmr-p9r8-5m73.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cpmr-p9r8-5m73",
+  "modified": "2024-01-02T03:30:31Z",
+  "published": "2024-01-02T03:30:31Z",
+  "aliases": [
+    "CVE-2023-32890"
+  ],
+  "details": "In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01183647; Issue ID: MOLY01183647 (MSV-963).",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32890"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-f8hf-p24c-jqvg/GHSA-f8hf-p24c-jqvg.json b/advisories/unreviewed/2024/01/GHSA-f8hf-p24c-jqvg/GHSA-f8hf-p24c-jqvg.json
new file mode 100644
index 00000000000..37e929112ba
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-f8hf-p24c-jqvg/GHSA-f8hf-p24c-jqvg.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f8hf-p24c-jqvg",
+  "modified": "2024-01-02T03:30:31Z",
+  "published": "2024-01-02T03:30:31Z",
+  "aliases": [
+    "CVE-2023-32889"
+  ],
+  "details": "In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161825; Issue ID: MOLY01161825 (MSV-895).",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32889"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-g4pv-55wx-3w8q/GHSA-g4pv-55wx-3w8q.json b/advisories/unreviewed/2024/01/GHSA-g4pv-55wx-3w8q/GHSA-g4pv-55wx-3w8q.json
new file mode 100644
index 00000000000..c8ea35b4124
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-g4pv-55wx-3w8q/GHSA-g4pv-55wx-3w8q.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g4pv-55wx-3w8q",
+  "modified": "2024-01-02T03:30:31Z",
+  "published": "2024-01-02T03:30:31Z",
+  "aliases": [
+    "CVE-2023-32891"
+  ],
+  "details": "In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07933038; Issue ID: MSV-559.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32891"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-gqgh-pxg9-5r2w/GHSA-gqgh-pxg9-5r2w.json b/advisories/unreviewed/2024/01/GHSA-gqgh-pxg9-5r2w/GHSA-gqgh-pxg9-5r2w.json
new file mode 100644
index 00000000000..e90bce2312f
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-gqgh-pxg9-5r2w/GHSA-gqgh-pxg9-5r2w.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gqgh-pxg9-5r2w",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32881"
+  ],
+  "details": "In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308080.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32881"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-m7pf-2cqc-rm4r/GHSA-m7pf-2cqc-rm4r.json b/advisories/unreviewed/2024/01/GHSA-m7pf-2cqc-rm4r/GHSA-m7pf-2cqc-rm4r.json
new file mode 100644
index 00000000000..f508ce19f7e
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-m7pf-2cqc-rm4r/GHSA-m7pf-2cqc-rm4r.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m7pf-2cqc-rm4r",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32876"
+  ],
+  "details": "In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32876"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-p2v6-235w-qhfc/GHSA-p2v6-235w-qhfc.json b/advisories/unreviewed/2024/01/GHSA-p2v6-235w-qhfc/GHSA-p2v6-235w-qhfc.json
new file mode 100644
index 00000000000..e847198b45f
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-p2v6-235w-qhfc/GHSA-p2v6-235w-qhfc.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p2v6-235w-qhfc",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32886"
+  ],
+  "details": "In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00730807; Issue ID: MOLY00730807.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32886"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-q4r7-vvv3-cgv4/GHSA-q4r7-vvv3-cgv4.json b/advisories/unreviewed/2024/01/GHSA-q4r7-vvv3-cgv4/GHSA-q4r7-vvv3-cgv4.json
new file mode 100644
index 00000000000..b3d739f766b
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-q4r7-vvv3-cgv4/GHSA-q4r7-vvv3-cgv4.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q4r7-vvv3-cgv4",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32882"
+  ],
+  "details": "In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308616.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32882"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-q6w4-3x9w-4364/GHSA-q6w4-3x9w-4364.json b/advisories/unreviewed/2024/01/GHSA-q6w4-3x9w-4364/GHSA-q6w4-3x9w-4364.json
new file mode 100644
index 00000000000..a8222443a5e
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-q6w4-3x9w-4364/GHSA-q6w4-3x9w-4364.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q6w4-3x9w-4364",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32884"
+  ],
+  "details": "In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944011; Issue ID: ALPS07944011.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32884"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-v27h-q36j-mh72/GHSA-v27h-q36j-mh72.json b/advisories/unreviewed/2024/01/GHSA-v27h-q36j-mh72/GHSA-v27h-q36j-mh72.json
new file mode 100644
index 00000000000..d66a54e973c
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-v27h-q36j-mh72/GHSA-v27h-q36j-mh72.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v27h-q36j-mh72",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32887"
+  ],
+  "details": "In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161837; Issue ID: MOLY01161837 (MSV-892).",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32887"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-w44p-fc2q-qf57/GHSA-w44p-fc2q-qf57.json b/advisories/unreviewed/2024/01/GHSA-w44p-fc2q-qf57/GHSA-w44p-fc2q-qf57.json
new file mode 100644
index 00000000000..c408eb59499
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-w44p-fc2q-qf57/GHSA-w44p-fc2q-qf57.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w44p-fc2q-qf57",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32883"
+  ],
+  "details": "In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08282249; Issue ID: ALPS08282249.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32883"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-w86q-6fxq-gcmr/GHSA-w86q-6fxq-gcmr.json b/advisories/unreviewed/2024/01/GHSA-w86q-6fxq-gcmr/GHSA-w86q-6fxq-gcmr.json
new file mode 100644
index 00000000000..318925d14b1
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-w86q-6fxq-gcmr/GHSA-w86q-6fxq-gcmr.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w86q-6fxq-gcmr",
+  "modified": "2024-01-02T03:30:30Z",
+  "published": "2024-01-02T03:30:30Z",
+  "aliases": [
+    "CVE-2023-32831"
+  ],
+  "details": "In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32831"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/January-2024"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-02T03:15:07Z"
+  }
+}
\ No newline at end of file