From ac3faba8a236891853a921693d6ce95d3072b8f5 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 13 Aug 2024 03:32:31 +0000
Subject: [PATCH] Publish Advisories

GHSA-fff2-44c8-59c5
GHSA-hw83-24q6-v392
GHSA-vx79-rj6m-r29g
GHSA-344g-jvx4-773r
GHSA-3729-9j52-jqrv
GHSA-4m3r-vc8v-w5x9
GHSA-4v66-fhwx-979j
GHSA-5mcq-h782-4vg7
GHSA-63m7-8wfj-vrjr
GHSA-8qcr-ggrf-g25w
GHSA-8w5x-vc73-8w4j
GHSA-c4v2-g748-rmrp
GHSA-c6cg-7q2c-x256
GHSA-g3g3-23p3-c263
GHSA-gj76-qqq8-xf7w
GHSA-gqg7-4h7v-f4hf
GHSA-hfgc-xxrj-48m3
GHSA-jhjr-vvw5-3rf8
GHSA-p25w-hwv3-vj5q
GHSA-pxph-2m4r-q6cp
GHSA-r67g-69pq-w76x
GHSA-vqhc-8g79-hf73
GHSA-x4w8-rv9m-fp3j
GHSA-x64m-5xw4-43cw
---
 .../GHSA-fff2-44c8-59c5.json                  | 11 ++--
 .../GHSA-hw83-24q6-v392.json                  |  2 +-
 .../GHSA-vx79-rj6m-r29g.json                  |  4 +-
 .../GHSA-344g-jvx4-773r.json                  | 58 +++++++++++++++++++
 .../GHSA-3729-9j52-jqrv.json                  | 58 +++++++++++++++++++
 .../GHSA-4m3r-vc8v-w5x9.json                  | 11 ++--
 .../GHSA-4v66-fhwx-979j.json                  | 11 ++--
 .../GHSA-5mcq-h782-4vg7.json                  | 11 ++--
 .../GHSA-63m7-8wfj-vrjr.json                  | 11 ++--
 .../GHSA-8qcr-ggrf-g25w.json                  | 11 ++--
 .../GHSA-8w5x-vc73-8w4j.json                  | 11 ++--
 .../GHSA-c4v2-g748-rmrp.json                  |  9 ++-
 .../GHSA-c6cg-7q2c-x256.json                  | 42 ++++++++++++++
 .../GHSA-g3g3-23p3-c263.json                  | 11 ++--
 .../GHSA-gj76-qqq8-xf7w.json                  | 11 ++--
 .../GHSA-gqg7-4h7v-f4hf.json                  | 54 +++++++++++++++++
 .../GHSA-hfgc-xxrj-48m3.json                  |  9 ++-
 .../GHSA-jhjr-vvw5-3rf8.json                  | 11 ++--
 .../GHSA-p25w-hwv3-vj5q.json                  | 11 ++--
 .../GHSA-pxph-2m4r-q6cp.json                  | 11 ++--
 .../GHSA-r67g-69pq-w76x.json                  | 42 ++++++++++++++
 .../GHSA-vqhc-8g79-hf73.json                  | 11 ++--
 .../GHSA-x4w8-rv9m-fp3j.json                  |  2 +-
 .../GHSA-x64m-5xw4-43cw.json                  | 11 ++--
 24 files changed, 368 insertions(+), 66 deletions(-)
 create mode 100644 advisories/unreviewed/2024/08/GHSA-344g-jvx4-773r/GHSA-344g-jvx4-773r.json
 create mode 100644 advisories/unreviewed/2024/08/GHSA-3729-9j52-jqrv/GHSA-3729-9j52-jqrv.json
 create mode 100644 advisories/unreviewed/2024/08/GHSA-c6cg-7q2c-x256/GHSA-c6cg-7q2c-x256.json
 create mode 100644 advisories/unreviewed/2024/08/GHSA-gqg7-4h7v-f4hf/GHSA-gqg7-4h7v-f4hf.json
 create mode 100644 advisories/unreviewed/2024/08/GHSA-r67g-69pq-w76x/GHSA-r67g-69pq-w76x.json

diff --git a/advisories/unreviewed/2024/06/GHSA-fff2-44c8-59c5/GHSA-fff2-44c8-59c5.json b/advisories/unreviewed/2024/06/GHSA-fff2-44c8-59c5/GHSA-fff2-44c8-59c5.json
index 070ee9f4007..a702a345190 100644
--- a/advisories/unreviewed/2024/06/GHSA-fff2-44c8-59c5/GHSA-fff2-44c8-59c5.json
+++ b/advisories/unreviewed/2024/06/GHSA-fff2-44c8-59c5/GHSA-fff2-44c8-59c5.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fff2-44c8-59c5",
-  "modified": "2024-06-26T00:31:43Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-06-26T00:31:43Z",
   "aliases": [
     "CVE-2024-37742"
   ],
   "details": "An issue in Safe Exam Browser for Windows before 3.6 allows an attacker to share clipboard data between the SEB kiosk mode and the underlying system, compromising exam integrity which may lead to arbitrary code execution and obtaining sensitive information via the Clipboard Management component.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-284"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-25T22:15:35Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-hw83-24q6-v392/GHSA-hw83-24q6-v392.json b/advisories/unreviewed/2024/07/GHSA-hw83-24q6-v392/GHSA-hw83-24q6-v392.json
index c78ab1afe46..1b1e0bd245b 100644
--- a/advisories/unreviewed/2024/07/GHSA-hw83-24q6-v392/GHSA-hw83-24q6-v392.json
+++ b/advisories/unreviewed/2024/07/GHSA-hw83-24q6-v392/GHSA-hw83-24q6-v392.json
@@ -32,7 +32,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-200"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/07/GHSA-vx79-rj6m-r29g/GHSA-vx79-rj6m-r29g.json b/advisories/unreviewed/2024/07/GHSA-vx79-rj6m-r29g/GHSA-vx79-rj6m-r29g.json
index 725b38ad7f0..52fb1b85444 100644
--- a/advisories/unreviewed/2024/07/GHSA-vx79-rj6m-r29g/GHSA-vx79-rj6m-r29g.json
+++ b/advisories/unreviewed/2024/07/GHSA-vx79-rj6m-r29g/GHSA-vx79-rj6m-r29g.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vx79-rj6m-r29g",
-  "modified": "2024-07-31T06:30:34Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-07-31T06:30:34Z",
   "aliases": [
     "CVE-2024-39949"
@@ -28,7 +28,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-20"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/08/GHSA-344g-jvx4-773r/GHSA-344g-jvx4-773r.json b/advisories/unreviewed/2024/08/GHSA-344g-jvx4-773r/GHSA-344g-jvx4-773r.json
new file mode 100644
index 00000000000..c3f53c769cc
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-344g-jvx4-773r/GHSA-344g-jvx4-773r.json
@@ -0,0 +1,58 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-344g-jvx4-773r",
+  "modified": "2024-08-13T03:31:16Z",
+  "published": "2024-08-13T03:31:16Z",
+  "aliases": [
+    "CVE-2024-7094"
+  ],
+  "details": "The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.8.6 via the 'storeTheme' function. This is due to a lack of sanitization on user-supplied values, which replace values in the style.php file, along with missing capability checks. This makes it possible for unauthenticated attackers to execute code on the server. This issue was partially patched in 2.8.6 when the code injection issue was resolved, and fully patched in 2.8.7 when the missing authorization and cross-site request forgery protection was added.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7094"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/includes/css/style.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/includes/formhandler.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/modules/themes/controller.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/modules/themes/model.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/modules/themes/tpls/admin_themes.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/31513f9e-6185-425b-9e7e-36f21f72d0a2?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-13T03:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/08/GHSA-3729-9j52-jqrv/GHSA-3729-9j52-jqrv.json b/advisories/unreviewed/2024/08/GHSA-3729-9j52-jqrv/GHSA-3729-9j52-jqrv.json
new file mode 100644
index 00000000000..2092bf27ecc
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-3729-9j52-jqrv/GHSA-3729-9j52-jqrv.json
@@ -0,0 +1,58 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3729-9j52-jqrv",
+  "modified": "2024-08-13T03:31:16Z",
+  "published": "2024-08-13T03:31:16Z",
+  "aliases": [
+    "CVE-2024-7709"
+  ],
+  "details": "A vulnerability, which was classified as problematic, has been found in OcoMon 4.0. This issue affects some unknown processing of the file /includes/common/require_access_recovery.php of the component URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0.1 and 5.0 is able to address this issue. It is recommended to upgrade the affected component.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7709"
+    },
+    {
+      "type": "WEB",
+      "url": "https://ocomon.com.br/site/atualizacao-de-seguranca"
+    },
+    {
+      "type": "WEB",
+      "url": "https://ocomon.com.br/site/downloads"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.274205"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.274205"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.388843"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-13T01:24:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/08/GHSA-4m3r-vc8v-w5x9/GHSA-4m3r-vc8v-w5x9.json b/advisories/unreviewed/2024/08/GHSA-4m3r-vc8v-w5x9/GHSA-4m3r-vc8v-w5x9.json
index 49f1cd72ab1..1242b195691 100644
--- a/advisories/unreviewed/2024/08/GHSA-4m3r-vc8v-w5x9/GHSA-4m3r-vc8v-w5x9.json
+++ b/advisories/unreviewed/2024/08/GHSA-4m3r-vc8v-w5x9/GHSA-4m3r-vc8v-w5x9.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4m3r-vc8v-w5x9",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40477"
   ],
   "details": "A SQL injection vulnerability in \"/oahms/admin/forgot-password.php\" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the \"email\" parameter.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-89"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:28Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-4v66-fhwx-979j/GHSA-4v66-fhwx-979j.json b/advisories/unreviewed/2024/08/GHSA-4v66-fhwx-979j/GHSA-4v66-fhwx-979j.json
index 9ca92e49399..96e1aa1856f 100644
--- a/advisories/unreviewed/2024/08/GHSA-4v66-fhwx-979j/GHSA-4v66-fhwx-979j.json
+++ b/advisories/unreviewed/2024/08/GHSA-4v66-fhwx-979j/GHSA-4v66-fhwx-979j.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4v66-fhwx-979j",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40482"
   ],
   "details": "An Unrestricted file upload vulnerability was found in \"/Membership/edit_member.php\" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:29Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-5mcq-h782-4vg7/GHSA-5mcq-h782-4vg7.json b/advisories/unreviewed/2024/08/GHSA-5mcq-h782-4vg7/GHSA-5mcq-h782-4vg7.json
index 8a5a1efc3f9..771d59be3b1 100644
--- a/advisories/unreviewed/2024/08/GHSA-5mcq-h782-4vg7/GHSA-5mcq-h782-4vg7.json
+++ b/advisories/unreviewed/2024/08/GHSA-5mcq-h782-4vg7/GHSA-5mcq-h782-4vg7.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5mcq-h782-4vg7",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-41570"
   ],
   "details": "An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-918"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:31Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-63m7-8wfj-vrjr/GHSA-63m7-8wfj-vrjr.json b/advisories/unreviewed/2024/08/GHSA-63m7-8wfj-vrjr/GHSA-63m7-8wfj-vrjr.json
index f96c44d2a1c..f22a8f3af24 100644
--- a/advisories/unreviewed/2024/08/GHSA-63m7-8wfj-vrjr/GHSA-63m7-8wfj-vrjr.json
+++ b/advisories/unreviewed/2024/08/GHSA-63m7-8wfj-vrjr/GHSA-63m7-8wfj-vrjr.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-63m7-8wfj-vrjr",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40481"
   ],
   "details": "A Stored Cross Site Scripting (XSS) vulnerability was found in \"/admin/view-enquiry.php\" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the Contact Us page \"message\" parameter.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:29Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-8qcr-ggrf-g25w/GHSA-8qcr-ggrf-g25w.json b/advisories/unreviewed/2024/08/GHSA-8qcr-ggrf-g25w/GHSA-8qcr-ggrf-g25w.json
index 9ecd27cd075..f9074edda6a 100644
--- a/advisories/unreviewed/2024/08/GHSA-8qcr-ggrf-g25w/GHSA-8qcr-ggrf-g25w.json
+++ b/advisories/unreviewed/2024/08/GHSA-8qcr-ggrf-g25w/GHSA-8qcr-ggrf-g25w.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8qcr-ggrf-g25w",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40484"
   ],
   "details": "A Reflected Cross Site Scripting (XSS) vulnerability was found in \"/oahms/search.php\" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the \"searchdata\" parameter.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:29Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-8w5x-vc73-8w4j/GHSA-8w5x-vc73-8w4j.json b/advisories/unreviewed/2024/08/GHSA-8w5x-vc73-8w4j/GHSA-8w5x-vc73-8w4j.json
index cd14b7234d9..30ef8347492 100644
--- a/advisories/unreviewed/2024/08/GHSA-8w5x-vc73-8w4j/GHSA-8w5x-vc73-8w4j.json
+++ b/advisories/unreviewed/2024/08/GHSA-8w5x-vc73-8w4j/GHSA-8w5x-vc73-8w4j.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8w5x-vc73-8w4j",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40479"
   ],
   "details": "A SQL injection vulnerability in \"/admin/quizquestion.php\" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the \"eid\" parameter.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-89"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:28Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-c4v2-g748-rmrp/GHSA-c4v2-g748-rmrp.json b/advisories/unreviewed/2024/08/GHSA-c4v2-g748-rmrp/GHSA-c4v2-g748-rmrp.json
index b2a465218bc..08e658c5bf0 100644
--- a/advisories/unreviewed/2024/08/GHSA-c4v2-g748-rmrp/GHSA-c4v2-g748-rmrp.json
+++ b/advisories/unreviewed/2024/08/GHSA-c4v2-g748-rmrp/GHSA-c4v2-g748-rmrp.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c4v2-g748-rmrp",
-  "modified": "2024-08-12T15:30:51Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:51Z",
   "aliases": [
     "CVE-2024-6133"
   ],
   "details": "The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:38Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-c6cg-7q2c-x256/GHSA-c6cg-7q2c-x256.json b/advisories/unreviewed/2024/08/GHSA-c6cg-7q2c-x256/GHSA-c6cg-7q2c-x256.json
new file mode 100644
index 00000000000..56fba3740d8
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-c6cg-7q2c-x256/GHSA-c6cg-7q2c-x256.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c6cg-7q2c-x256",
+  "modified": "2024-08-13T03:31:16Z",
+  "published": "2024-08-13T03:31:16Z",
+  "aliases": [
+    "CVE-2024-7388"
+  ],
+  "details": "The WP Bannerize Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via banner alt data in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7388"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3133241/wp-bannerize-pro/trunk/plugin/CustomPostTypes/WPBannerizeCustomPostType.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ba08dbad-15f9-43cf-b0d7-a2a4604cb4af?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-13T03:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/08/GHSA-g3g3-23p3-c263/GHSA-g3g3-23p3-c263.json b/advisories/unreviewed/2024/08/GHSA-g3g3-23p3-c263/GHSA-g3g3-23p3-c263.json
index 24a627fca93..f6b6fc25ab0 100644
--- a/advisories/unreviewed/2024/08/GHSA-g3g3-23p3-c263/GHSA-g3g3-23p3-c263.json
+++ b/advisories/unreviewed/2024/08/GHSA-g3g3-23p3-c263/GHSA-g3g3-23p3-c263.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g3g3-23p3-c263",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-41332"
   ],
   "details": "Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-284"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:30Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-gj76-qqq8-xf7w/GHSA-gj76-qqq8-xf7w.json b/advisories/unreviewed/2024/08/GHSA-gj76-qqq8-xf7w/GHSA-gj76-qqq8-xf7w.json
index cbdebb630be..52f50f096dd 100644
--- a/advisories/unreviewed/2024/08/GHSA-gj76-qqq8-xf7w/GHSA-gj76-qqq8-xf7w.json
+++ b/advisories/unreviewed/2024/08/GHSA-gj76-qqq8-xf7w/GHSA-gj76-qqq8-xf7w.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gj76-qqq8-xf7w",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40474"
   ],
   "details": "A Reflected Cross Site Scripting (XSS) vulnerability was found in \"edit-cate.php\" in SourceCodester House Rental Management System v1.0.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:28Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-gqg7-4h7v-f4hf/GHSA-gqg7-4h7v-f4hf.json b/advisories/unreviewed/2024/08/GHSA-gqg7-4h7v-f4hf/GHSA-gqg7-4h7v-f4hf.json
new file mode 100644
index 00000000000..0050d2ea2f1
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-gqg7-4h7v-f4hf/GHSA-gqg7-4h7v-f4hf.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gqg7-4h7v-f4hf",
+  "modified": "2024-08-13T03:31:16Z",
+  "published": "2024-08-13T03:31:16Z",
+  "aliases": [
+    "CVE-2024-7707"
+  ],
+  "details": "A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7707"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/VodkaVortex/IoT/blob/main/formSafeEmailFilter.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.274190"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.274190"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.385670"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-13T01:24:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/08/GHSA-hfgc-xxrj-48m3/GHSA-hfgc-xxrj-48m3.json b/advisories/unreviewed/2024/08/GHSA-hfgc-xxrj-48m3/GHSA-hfgc-xxrj-48m3.json
index 762fc4fa47a..33ede91ad7f 100644
--- a/advisories/unreviewed/2024/08/GHSA-hfgc-xxrj-48m3/GHSA-hfgc-xxrj-48m3.json
+++ b/advisories/unreviewed/2024/08/GHSA-hfgc-xxrj-48m3/GHSA-hfgc-xxrj-48m3.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hfgc-xxrj-48m3",
-  "modified": "2024-08-12T15:30:51Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:51Z",
   "aliases": [
     "CVE-2024-6136"
   ],
   "details": "The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:38Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-jhjr-vvw5-3rf8/GHSA-jhjr-vvw5-3rf8.json b/advisories/unreviewed/2024/08/GHSA-jhjr-vvw5-3rf8/GHSA-jhjr-vvw5-3rf8.json
index 2e6c18d4966..8a3e41d0ca2 100644
--- a/advisories/unreviewed/2024/08/GHSA-jhjr-vvw5-3rf8/GHSA-jhjr-vvw5-3rf8.json
+++ b/advisories/unreviewed/2024/08/GHSA-jhjr-vvw5-3rf8/GHSA-jhjr-vvw5-3rf8.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jhjr-vvw5-3rf8",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40472"
   ],
   "details": "Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via \"delete-calorie.php.\"",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-89"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:28Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-p25w-hwv3-vj5q/GHSA-p25w-hwv3-vj5q.json b/advisories/unreviewed/2024/08/GHSA-p25w-hwv3-vj5q/GHSA-p25w-hwv3-vj5q.json
index 7b8306fd66a..f037b2e1e11 100644
--- a/advisories/unreviewed/2024/08/GHSA-p25w-hwv3-vj5q/GHSA-p25w-hwv3-vj5q.json
+++ b/advisories/unreviewed/2024/08/GHSA-p25w-hwv3-vj5q/GHSA-p25w-hwv3-vj5q.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p25w-hwv3-vj5q",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40486"
   ],
   "details": "A SQL injection vulnerability in \"/index.php\" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email or password Login parameters.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-89"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:29Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-pxph-2m4r-q6cp/GHSA-pxph-2m4r-q6cp.json b/advisories/unreviewed/2024/08/GHSA-pxph-2m4r-q6cp/GHSA-pxph-2m4r-q6cp.json
index 34853b728a2..8600c67852d 100644
--- a/advisories/unreviewed/2024/08/GHSA-pxph-2m4r-q6cp/GHSA-pxph-2m4r-q6cp.json
+++ b/advisories/unreviewed/2024/08/GHSA-pxph-2m4r-q6cp/GHSA-pxph-2m4r-q6cp.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pxph-2m4r-q6cp",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40475"
   ],
   "details": "SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/payment_report.php, /rental/balance_report.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-284"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:28Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-r67g-69pq-w76x/GHSA-r67g-69pq-w76x.json b/advisories/unreviewed/2024/08/GHSA-r67g-69pq-w76x/GHSA-r67g-69pq-w76x.json
new file mode 100644
index 00000000000..39162538c2e
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-r67g-69pq-w76x/GHSA-r67g-69pq-w76x.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r67g-69pq-w76x",
+  "modified": "2024-08-13T03:31:16Z",
+  "published": "2024-08-13T03:31:16Z",
+  "aliases": [
+    "CVE-2022-38382"
+  ],
+  "details": "IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another user to obtain sensitive information.  IBM X-Force ID:  233672.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38382"
+    },
+    {
+      "type": "WEB",
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/233672"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7165286"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-613"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-13T02:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/08/GHSA-vqhc-8g79-hf73/GHSA-vqhc-8g79-hf73.json b/advisories/unreviewed/2024/08/GHSA-vqhc-8g79-hf73/GHSA-vqhc-8g79-hf73.json
index 305385ad8ac..420b46e25d9 100644
--- a/advisories/unreviewed/2024/08/GHSA-vqhc-8g79-hf73/GHSA-vqhc-8g79-hf73.json
+++ b/advisories/unreviewed/2024/08/GHSA-vqhc-8g79-hf73/GHSA-vqhc-8g79-hf73.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vqhc-8g79-hf73",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40476"
   ],
   "details": "A Cross-Site Request Forgery (CSRF) vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at the /rental/ajax.php?action=delete_tenant.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-352"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:28Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-x4w8-rv9m-fp3j/GHSA-x4w8-rv9m-fp3j.json b/advisories/unreviewed/2024/08/GHSA-x4w8-rv9m-fp3j/GHSA-x4w8-rv9m-fp3j.json
index e5d3a23e254..8d5c6b88555 100644
--- a/advisories/unreviewed/2024/08/GHSA-x4w8-rv9m-fp3j/GHSA-x4w8-rv9m-fp3j.json
+++ b/advisories/unreviewed/2024/08/GHSA-x4w8-rv9m-fp3j/GHSA-x4w8-rv9m-fp3j.json
@@ -28,7 +28,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-119"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/08/GHSA-x64m-5xw4-43cw/GHSA-x64m-5xw4-43cw.json b/advisories/unreviewed/2024/08/GHSA-x64m-5xw4-43cw/GHSA-x64m-5xw4-43cw.json
index 63ba0fb21c3..0a82f5997d3 100644
--- a/advisories/unreviewed/2024/08/GHSA-x64m-5xw4-43cw/GHSA-x64m-5xw4-43cw.json
+++ b/advisories/unreviewed/2024/08/GHSA-x64m-5xw4-43cw/GHSA-x64m-5xw4-43cw.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x64m-5xw4-43cw",
-  "modified": "2024-08-12T15:30:50Z",
+  "modified": "2024-08-13T03:31:16Z",
   "published": "2024-08-12T15:30:50Z",
   "aliases": [
     "CVE-2024-40488"
   ],
   "details": "A Cross-Site Request Forgery (CSRF) vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member action at the /delete_members.php.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-352"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-08-12T13:38:29Z"