diff --git a/advisories/unreviewed/2024/05/GHSA-5w2f-hr95-2h6j/GHSA-5w2f-hr95-2h6j.json b/advisories/unreviewed/2024/05/GHSA-5w2f-hr95-2h6j/GHSA-5w2f-hr95-2h6j.json index b170cab249b..6027d08ebc2 100644 --- a/advisories/unreviewed/2024/05/GHSA-5w2f-hr95-2h6j/GHSA-5w2f-hr95-2h6j.json +++ b/advisories/unreviewed/2024/05/GHSA-5w2f-hr95-2h6j/GHSA-5w2f-hr95-2h6j.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-5w2f-hr95-2h6j", - "modified": "2024-05-21T15:31:44Z", + "modified": "2024-12-26T18:30:33Z", "published": "2024-05-21T15:31:44Z", "aliases": [ "CVE-2021-47363" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnexthop: Fix division by zero while replacing a resilient group\n\nThe resilient nexthop group torture tests in fib_nexthop.sh exposed a\npossible division by zero while replacing a resilient group [1]. The\ndivision by zero occurs when the data path sees a resilient nexthop\ngroup with zero buckets.\n\nThe tests replace a resilient nexthop group in a loop while traffic is\nforwarded through it. The tests do not specify the number of buckets\nwhile performing the replacement, resulting in the kernel allocating a\nstub resilient table (i.e, 'struct nh_res_table') with zero buckets.\n\nThis table should never be visible to the data path, but the old nexthop\ngroup (i.e., 'oldg') might still be used by the data path when the stub\ntable is assigned to it.\n\nFix this by only assigning the stub table to the old nexthop group after\nmaking sure the group is no longer used by the data path.\n\nTested with fib_nexthops.sh:\n\nTests passed: 222\nTests failed: 0\n\n[1]\n divide error: 0000 [#1] PREEMPT SMP KASAN\n CPU: 0 PID: 1850 Comm: ping Not tainted 5.14.0-custom-10271-ga86eb53057fe #1107\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/01/2014\n RIP: 0010:nexthop_select_path+0x2d2/0x1a80\n[...]\n Call Trace:\n fib_select_multipath+0x79b/0x1530\n fib_select_path+0x8fb/0x1c10\n ip_route_output_key_hash_rcu+0x1198/0x2da0\n ip_route_output_key_hash+0x190/0x340\n ip_route_output_flow+0x21/0x120\n raw_sendmsg+0x91d/0x2e10\n inet_sendmsg+0x9e/0xe0\n __sys_sendto+0x23d/0x360\n __x64_sys_sendto+0xe1/0x1b0\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-369" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-21T15:15:22Z" diff --git a/advisories/unreviewed/2024/05/GHSA-6hmf-7mx4-83j8/GHSA-6hmf-7mx4-83j8.json b/advisories/unreviewed/2024/05/GHSA-6hmf-7mx4-83j8/GHSA-6hmf-7mx4-83j8.json index 14e5b48cd35..390b6a4615e 100644 --- a/advisories/unreviewed/2024/05/GHSA-6hmf-7mx4-83j8/GHSA-6hmf-7mx4-83j8.json +++ b/advisories/unreviewed/2024/05/GHSA-6hmf-7mx4-83j8/GHSA-6hmf-7mx4-83j8.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-6hmf-7mx4-83j8", - "modified": "2024-05-21T15:31:44Z", + "modified": "2024-12-26T18:30:33Z", "published": "2024-05-21T15:31:44Z", "aliases": [ "CVE-2021-47372" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: fix use after free on rmmod\n\nplat_dev->dev->platform_data is released by platform_device_unregister(),\nuse of pclk and hclk is a use-after-free. Since device unregister won't\nneed a clk device we adjust the function call sequence to fix this issue.\n\n[ 31.261225] BUG: KASAN: use-after-free in macb_remove+0x77/0xc6 [macb_pci]\n[ 31.275563] Freed by task 306:\n[ 30.276782] platform_device_release+0x25/0x80", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -40,8 +45,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-21T15:15:23Z" diff --git a/advisories/unreviewed/2024/05/GHSA-8mwf-wgf7-7qpx/GHSA-8mwf-wgf7-7qpx.json b/advisories/unreviewed/2024/05/GHSA-8mwf-wgf7-7qpx/GHSA-8mwf-wgf7-7qpx.json index 13168703262..7f0068952f2 100644 --- a/advisories/unreviewed/2024/05/GHSA-8mwf-wgf7-7qpx/GHSA-8mwf-wgf7-7qpx.json +++ b/advisories/unreviewed/2024/05/GHSA-8mwf-wgf7-7qpx/GHSA-8mwf-wgf7-7qpx.json @@ -38,7 +38,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-125" + "CWE-125", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/05/GHSA-cc8f-64j2-hxm7/GHSA-cc8f-64j2-hxm7.json b/advisories/unreviewed/2024/05/GHSA-cc8f-64j2-hxm7/GHSA-cc8f-64j2-hxm7.json index 869c37510e8..26373829359 100644 --- a/advisories/unreviewed/2024/05/GHSA-cc8f-64j2-hxm7/GHSA-cc8f-64j2-hxm7.json +++ b/advisories/unreviewed/2024/05/GHSA-cc8f-64j2-hxm7/GHSA-cc8f-64j2-hxm7.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-cc8f-64j2-hxm7", - "modified": "2024-05-21T15:31:44Z", + "modified": "2024-12-26T18:30:33Z", "published": "2024-05-21T15:31:44Z", "aliases": [ "CVE-2021-47364" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: Fix memory leak in compat_insnlist()\n\n`compat_insnlist()` handles the 32-bit version of the `COMEDI_INSNLIST`\nioctl (whenwhen `CONFIG_COMPAT` is enabled). It allocates memory to\ntemporarily hold an array of `struct comedi_insn` converted from the\n32-bit version in user space. This memory is only being freed if there\nis a fault while filling the array, otherwise it is leaked.\n\nAdd a call to `kfree()` to fix the leak.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -28,8 +33,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-21T15:15:22Z" diff --git a/advisories/unreviewed/2024/05/GHSA-f6rr-qfxh-hcf9/GHSA-f6rr-qfxh-hcf9.json b/advisories/unreviewed/2024/05/GHSA-f6rr-qfxh-hcf9/GHSA-f6rr-qfxh-hcf9.json index 587e905d990..69a62dff361 100644 --- a/advisories/unreviewed/2024/05/GHSA-f6rr-qfxh-hcf9/GHSA-f6rr-qfxh-hcf9.json +++ b/advisories/unreviewed/2024/05/GHSA-f6rr-qfxh-hcf9/GHSA-f6rr-qfxh-hcf9.json @@ -38,7 +38,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-122" + "CWE-122", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/05/GHSA-m9r6-94f7-4j6m/GHSA-m9r6-94f7-4j6m.json b/advisories/unreviewed/2024/05/GHSA-m9r6-94f7-4j6m/GHSA-m9r6-94f7-4j6m.json index a59b3e19d82..1ea61a9be9b 100644 --- a/advisories/unreviewed/2024/05/GHSA-m9r6-94f7-4j6m/GHSA-m9r6-94f7-4j6m.json +++ b/advisories/unreviewed/2024/05/GHSA-m9r6-94f7-4j6m/GHSA-m9r6-94f7-4j6m.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-m9r6-94f7-4j6m", - "modified": "2024-05-21T15:31:44Z", + "modified": "2024-12-26T18:30:33Z", "published": "2024-05-21T15:31:44Z", "aliases": [ "CVE-2021-47373" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3-its: Fix potential VPE leak on error\n\nIn its_vpe_irq_domain_alloc, when its_vpe_init() returns an error,\nthere is an off-by-one in the number of VPEs to be freed.\n\nFix it by simply passing the number of VPEs allocated, which is the\nindex of the loop iterating over the VPEs.\n\n[maz: fixed commit message]", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -40,8 +45,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-193" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-21T15:15:23Z" diff --git a/advisories/unreviewed/2024/07/GHSA-7gj8-545r-5295/GHSA-7gj8-545r-5295.json b/advisories/unreviewed/2024/07/GHSA-7gj8-545r-5295/GHSA-7gj8-545r-5295.json index 27b7ed04a92..a817b2985cd 100644 --- a/advisories/unreviewed/2024/07/GHSA-7gj8-545r-5295/GHSA-7gj8-545r-5295.json +++ b/advisories/unreviewed/2024/07/GHSA-7gj8-545r-5295/GHSA-7gj8-545r-5295.json @@ -30,7 +30,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-358" + "CWE-358", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/07/GHSA-c369-vvw4-mwwv/GHSA-c369-vvw4-mwwv.json b/advisories/unreviewed/2024/07/GHSA-c369-vvw4-mwwv/GHSA-c369-vvw4-mwwv.json index 9315f28ee9a..8805ea9d279 100644 --- a/advisories/unreviewed/2024/07/GHSA-c369-vvw4-mwwv/GHSA-c369-vvw4-mwwv.json +++ b/advisories/unreviewed/2024/07/GHSA-c369-vvw4-mwwv/GHSA-c369-vvw4-mwwv.json @@ -30,7 +30,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-138" + "CWE-138", + "CWE-20" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/07/GHSA-cc8c-62x7-qwjr/GHSA-cc8c-62x7-qwjr.json b/advisories/unreviewed/2024/07/GHSA-cc8c-62x7-qwjr/GHSA-cc8c-62x7-qwjr.json index f86f39317c8..2da9e986f80 100644 --- a/advisories/unreviewed/2024/07/GHSA-cc8c-62x7-qwjr/GHSA-cc8c-62x7-qwjr.json +++ b/advisories/unreviewed/2024/07/GHSA-cc8c-62x7-qwjr/GHSA-cc8c-62x7-qwjr.json @@ -30,7 +30,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-358" + "CWE-358", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/07/GHSA-v4v9-v4wf-9c86/GHSA-v4v9-v4wf-9c86.json b/advisories/unreviewed/2024/07/GHSA-v4v9-v4wf-9c86/GHSA-v4v9-v4wf-9c86.json index 8c2ac78cb4f..d9aa244239c 100644 --- a/advisories/unreviewed/2024/07/GHSA-v4v9-v4wf-9c86/GHSA-v4v9-v4wf-9c86.json +++ b/advisories/unreviewed/2024/07/GHSA-v4v9-v4wf-9c86/GHSA-v4v9-v4wf-9c86.json @@ -29,7 +29,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-787" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-353m-ww6p-9379/GHSA-353m-ww6p-9379.json b/advisories/unreviewed/2024/12/GHSA-353m-ww6p-9379/GHSA-353m-ww6p-9379.json index 047a5367fcf..a8adb0478f4 100644 --- a/advisories/unreviewed/2024/12/GHSA-353m-ww6p-9379/GHSA-353m-ww6p-9379.json +++ b/advisories/unreviewed/2024/12/GHSA-353m-ww6p-9379/GHSA-353m-ww6p-9379.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-203" + ], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-4jmc-cgpx-wfmf/GHSA-4jmc-cgpx-wfmf.json b/advisories/unreviewed/2024/12/GHSA-4jmc-cgpx-wfmf/GHSA-4jmc-cgpx-wfmf.json index 9b8f820306f..355449453ca 100644 --- a/advisories/unreviewed/2024/12/GHSA-4jmc-cgpx-wfmf/GHSA-4jmc-cgpx-wfmf.json +++ b/advisories/unreviewed/2024/12/GHSA-4jmc-cgpx-wfmf/GHSA-4jmc-cgpx-wfmf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4jmc-cgpx-wfmf", - "modified": "2024-12-26T06:30:47Z", + "modified": "2024-12-26T18:30:36Z", "published": "2024-12-26T06:30:47Z", "aliases": [ "CVE-2024-12935" @@ -27,6 +27,10 @@ "type": "WEB", "url": "https://code-projects.org" }, + { + "type": "WEB", + "url": "https://code-projects.org/simple-admin-panel-in-php-with-source-code" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.289288" diff --git a/advisories/unreviewed/2024/12/GHSA-5f85-54q8-wff9/GHSA-5f85-54q8-wff9.json b/advisories/unreviewed/2024/12/GHSA-5f85-54q8-wff9/GHSA-5f85-54q8-wff9.json new file mode 100644 index 00000000000..dfd83df33b0 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-5f85-54q8-wff9/GHSA-5f85-54q8-wff9.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5f85-54q8-wff9", + "modified": "2024-12-26T18:30:37Z", + "published": "2024-12-26T18:30:37Z", + "aliases": [ + "CVE-2024-12961" + ], + "details": "A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /update_ach_details.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12961" + }, + { + "type": "WEB", + "url": "https://1000projects.org" + }, + { + "type": "WEB", + "url": "https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README9.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.289326" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.289326" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.468805" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-26T18:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-7669-rvr4-58hw/GHSA-7669-rvr4-58hw.json b/advisories/unreviewed/2024/12/GHSA-7669-rvr4-58hw/GHSA-7669-rvr4-58hw.json index 8bb2ae65a60..5a8300787df 100644 --- a/advisories/unreviewed/2024/12/GHSA-7669-rvr4-58hw/GHSA-7669-rvr4-58hw.json +++ b/advisories/unreviewed/2024/12/GHSA-7669-rvr4-58hw/GHSA-7669-rvr4-58hw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7669-rvr4-58hw", - "modified": "2024-12-26T06:30:47Z", + "modified": "2024-12-26T18:30:36Z", "published": "2024-12-26T06:30:47Z", "aliases": [ "CVE-2024-12934" @@ -27,6 +27,10 @@ "type": "WEB", "url": "https://code-projects.org" }, + { + "type": "WEB", + "url": "https://code-projects.org/simple-admin-panel-in-php-with-source-code" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.289287" diff --git a/advisories/unreviewed/2024/12/GHSA-7xmg-mhxw-qfv7/GHSA-7xmg-mhxw-qfv7.json b/advisories/unreviewed/2024/12/GHSA-7xmg-mhxw-qfv7/GHSA-7xmg-mhxw-qfv7.json index 64fdc291317..98ec0aecab6 100644 --- a/advisories/unreviewed/2024/12/GHSA-7xmg-mhxw-qfv7/GHSA-7xmg-mhxw-qfv7.json +++ b/advisories/unreviewed/2024/12/GHSA-7xmg-mhxw-qfv7/GHSA-7xmg-mhxw-qfv7.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-203" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-7xx9-9h6c-w6jp/GHSA-7xx9-9h6c-w6jp.json b/advisories/unreviewed/2024/12/GHSA-7xx9-9h6c-w6jp/GHSA-7xx9-9h6c-w6jp.json index 3b04d6b97d0..31474cb5b99 100644 --- a/advisories/unreviewed/2024/12/GHSA-7xx9-9h6c-w6jp/GHSA-7xx9-9h6c-w6jp.json +++ b/advisories/unreviewed/2024/12/GHSA-7xx9-9h6c-w6jp/GHSA-7xx9-9h6c-w6jp.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-203" + ], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-c83w-gq93-g5pw/GHSA-c83w-gq93-g5pw.json b/advisories/unreviewed/2024/12/GHSA-c83w-gq93-g5pw/GHSA-c83w-gq93-g5pw.json index e9ab9f6351e..5436e28ab0b 100644 --- a/advisories/unreviewed/2024/12/GHSA-c83w-gq93-g5pw/GHSA-c83w-gq93-g5pw.json +++ b/advisories/unreviewed/2024/12/GHSA-c83w-gq93-g5pw/GHSA-c83w-gq93-g5pw.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-863" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-cfwh-77j4-h2hh/GHSA-cfwh-77j4-h2hh.json b/advisories/unreviewed/2024/12/GHSA-cfwh-77j4-h2hh/GHSA-cfwh-77j4-h2hh.json index c82ea44c123..a1a102034ac 100644 --- a/advisories/unreviewed/2024/12/GHSA-cfwh-77j4-h2hh/GHSA-cfwh-77j4-h2hh.json +++ b/advisories/unreviewed/2024/12/GHSA-cfwh-77j4-h2hh/GHSA-cfwh-77j4-h2hh.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-cfwh-77j4-h2hh", - "modified": "2024-12-26T03:30:58Z", + "modified": "2024-12-26T18:30:35Z", "published": "2024-12-26T03:30:58Z", "aliases": [ "CVE-2024-12932" @@ -27,6 +27,10 @@ "type": "WEB", "url": "https://code-projects.org" }, + { + "type": "WEB", + "url": "https://code-projects.org/simple-admin-panel-in-php-with-source-code" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.289285" diff --git a/advisories/unreviewed/2024/12/GHSA-cmv6-j9p5-3jrp/GHSA-cmv6-j9p5-3jrp.json b/advisories/unreviewed/2024/12/GHSA-cmv6-j9p5-3jrp/GHSA-cmv6-j9p5-3jrp.json index 43bccac6ddd..236d63dfbac 100644 --- a/advisories/unreviewed/2024/12/GHSA-cmv6-j9p5-3jrp/GHSA-cmv6-j9p5-3jrp.json +++ b/advisories/unreviewed/2024/12/GHSA-cmv6-j9p5-3jrp/GHSA-cmv6-j9p5-3jrp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-cmv6-j9p5-3jrp", - "modified": "2024-12-26T03:30:58Z", + "modified": "2024-12-26T18:30:35Z", "published": "2024-12-26T03:30:58Z", "aliases": [ "CVE-2024-12931" @@ -27,6 +27,10 @@ "type": "WEB", "url": "https://code-projects.org" }, + { + "type": "WEB", + "url": "https://code-projects.org/simple-admin-panel-in-php-with-source-code" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.289284" diff --git a/advisories/unreviewed/2024/12/GHSA-fqpc-qqwj-f2wv/GHSA-fqpc-qqwj-f2wv.json b/advisories/unreviewed/2024/12/GHSA-fqpc-qqwj-f2wv/GHSA-fqpc-qqwj-f2wv.json index 78cfc649d20..aba9d524792 100644 --- a/advisories/unreviewed/2024/12/GHSA-fqpc-qqwj-f2wv/GHSA-fqpc-qqwj-f2wv.json +++ b/advisories/unreviewed/2024/12/GHSA-fqpc-qqwj-f2wv/GHSA-fqpc-qqwj-f2wv.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-434" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-fxjp-p9mj-r6h8/GHSA-fxjp-p9mj-r6h8.json b/advisories/unreviewed/2024/12/GHSA-fxjp-p9mj-r6h8/GHSA-fxjp-p9mj-r6h8.json index 8eb1b348405..90f0cf5c8f8 100644 --- a/advisories/unreviewed/2024/12/GHSA-fxjp-p9mj-r6h8/GHSA-fxjp-p9mj-r6h8.json +++ b/advisories/unreviewed/2024/12/GHSA-fxjp-p9mj-r6h8/GHSA-fxjp-p9mj-r6h8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fxjp-p9mj-r6h8", - "modified": "2024-12-26T06:30:48Z", + "modified": "2024-12-26T18:30:36Z", "published": "2024-12-26T06:30:48Z", "aliases": [ "CVE-2024-12937" @@ -27,6 +27,10 @@ "type": "WEB", "url": "https://code-projects.org" }, + { + "type": "WEB", + "url": "https://code-projects.org/simple-admin-panel-in-php-with-source-code" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.289290" diff --git a/advisories/unreviewed/2024/12/GHSA-gh3f-64h2-9gjh/GHSA-gh3f-64h2-9gjh.json b/advisories/unreviewed/2024/12/GHSA-gh3f-64h2-9gjh/GHSA-gh3f-64h2-9gjh.json index ebbc027c5fe..dda37bdd40e 100644 --- a/advisories/unreviewed/2024/12/GHSA-gh3f-64h2-9gjh/GHSA-gh3f-64h2-9gjh.json +++ b/advisories/unreviewed/2024/12/GHSA-gh3f-64h2-9gjh/GHSA-gh3f-64h2-9gjh.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-gh3f-64h2-9gjh", - "modified": "2024-12-26T06:30:47Z", + "modified": "2024-12-26T18:30:36Z", "published": "2024-12-26T06:30:47Z", "aliases": [ "CVE-2024-12936" @@ -27,6 +27,10 @@ "type": "WEB", "url": "https://code-projects.org" }, + { + "type": "WEB", + "url": "https://code-projects.org/simple-admin-panel-in-php-with-source-code" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.289289" diff --git a/advisories/unreviewed/2024/12/GHSA-gq87-xqcq-qgm6/GHSA-gq87-xqcq-qgm6.json b/advisories/unreviewed/2024/12/GHSA-gq87-xqcq-qgm6/GHSA-gq87-xqcq-qgm6.json index afb21c22efd..d3780af3ed3 100644 --- a/advisories/unreviewed/2024/12/GHSA-gq87-xqcq-qgm6/GHSA-gq87-xqcq-qgm6.json +++ b/advisories/unreviewed/2024/12/GHSA-gq87-xqcq-qgm6/GHSA-gq87-xqcq-qgm6.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-203" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-j4rx-7qrg-jr79/GHSA-j4rx-7qrg-jr79.json b/advisories/unreviewed/2024/12/GHSA-j4rx-7qrg-jr79/GHSA-j4rx-7qrg-jr79.json new file mode 100644 index 00000000000..1e1b2ed4dce --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-j4rx-7qrg-jr79/GHSA-j4rx-7qrg-jr79.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j4rx-7qrg-jr79", + "modified": "2024-12-26T18:30:36Z", + "published": "2024-12-26T18:30:36Z", + "aliases": [ + "CVE-2024-12958" + ], + "details": "A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_pro_details.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12958" + }, + { + "type": "WEB", + "url": "https://1000projects.org" + }, + { + "type": "WEB", + "url": "https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README6.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.289323" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.289323" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.468799" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-26T16:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-m48c-2qvg-rh53/GHSA-m48c-2qvg-rh53.json b/advisories/unreviewed/2024/12/GHSA-m48c-2qvg-rh53/GHSA-m48c-2qvg-rh53.json new file mode 100644 index 00000000000..53459202acc --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-m48c-2qvg-rh53/GHSA-m48c-2qvg-rh53.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m48c-2qvg-rh53", + "modified": "2024-12-26T18:30:37Z", + "published": "2024-12-26T18:30:37Z", + "aliases": [ + "CVE-2024-51540" + ], + "details": "Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete objects.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51540" + }, + { + "type": "WEB", + "url": "https://www.dell.com/support/kbdoc/en-us/000256642/dsa-2024-483-security-update-for-dell-ecs-multiple-vulnerabilities" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-26T16:15:29Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-pj7x-jg2m-24rm/GHSA-pj7x-jg2m-24rm.json b/advisories/unreviewed/2024/12/GHSA-pj7x-jg2m-24rm/GHSA-pj7x-jg2m-24rm.json new file mode 100644 index 00000000000..d69461d1b1c --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-pj7x-jg2m-24rm/GHSA-pj7x-jg2m-24rm.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pj7x-jg2m-24rm", + "modified": "2024-12-26T18:30:37Z", + "published": "2024-12-26T18:30:37Z", + "aliases": [ + "CVE-2024-12960" + ], + "details": "A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. This issue affects some unknown processing of the file /update_edu_details.php. The manipulation of the argument q leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12960" + }, + { + "type": "WEB", + "url": "https://1000projects.org" + }, + { + "type": "WEB", + "url": "https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README8.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.289325" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.289325" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.468804" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-26T18:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-qq79-x2qm-v335/GHSA-qq79-x2qm-v335.json b/advisories/unreviewed/2024/12/GHSA-qq79-x2qm-v335/GHSA-qq79-x2qm-v335.json new file mode 100644 index 00000000000..9332f3999f5 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-qq79-x2qm-v335/GHSA-qq79-x2qm-v335.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qq79-x2qm-v335", + "modified": "2024-12-26T18:30:36Z", + "published": "2024-12-26T18:30:36Z", + "aliases": [ + "CVE-2024-12908" + ], + "details": "Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compared before normalization and canonicalization, potentially leading to over matching against the approved list. If this attack were successfully exploited, a remote attacker may be able to convince a user to visit a malicious web-page, or open a\nmalicious document which could trigger the vulnerable handler, allowing them to execute\narbitrary code on the user's machine. Delinea added additional validation that the downloaded installer's batch file was in the expected format.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12908" + }, + { + "type": "WEB", + "url": "https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process" + }, + { + "type": "WEB", + "url": "https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000049.htm" + }, + { + "type": "WEB", + "url": "https://trust.delinea.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-94" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-26T16:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-qr9m-mrgx-pv4r/GHSA-qr9m-mrgx-pv4r.json b/advisories/unreviewed/2024/12/GHSA-qr9m-mrgx-pv4r/GHSA-qr9m-mrgx-pv4r.json index 8e26ba689af..4d3c7f6c61f 100644 --- a/advisories/unreviewed/2024/12/GHSA-qr9m-mrgx-pv4r/GHSA-qr9m-mrgx-pv4r.json +++ b/advisories/unreviewed/2024/12/GHSA-qr9m-mrgx-pv4r/GHSA-qr9m-mrgx-pv4r.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-203" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-rj25-7x5r-jgw6/GHSA-rj25-7x5r-jgw6.json b/advisories/unreviewed/2024/12/GHSA-rj25-7x5r-jgw6/GHSA-rj25-7x5r-jgw6.json index a5b9be44e60..1607013267c 100644 --- a/advisories/unreviewed/2024/12/GHSA-rj25-7x5r-jgw6/GHSA-rj25-7x5r-jgw6.json +++ b/advisories/unreviewed/2024/12/GHSA-rj25-7x5r-jgw6/GHSA-rj25-7x5r-jgw6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rj25-7x5r-jgw6", - "modified": "2024-12-26T06:30:47Z", + "modified": "2024-12-26T18:30:36Z", "published": "2024-12-26T06:30:47Z", "aliases": [ "CVE-2024-12933" @@ -27,6 +27,10 @@ "type": "WEB", "url": "https://code-projects.org" }, + { + "type": "WEB", + "url": "https://code-projects.org/simple-admin-panel-in-php-with-source-code" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.289286" diff --git a/advisories/unreviewed/2024/12/GHSA-v9v2-x5xp-j57g/GHSA-v9v2-x5xp-j57g.json b/advisories/unreviewed/2024/12/GHSA-v9v2-x5xp-j57g/GHSA-v9v2-x5xp-j57g.json index 519433faa14..bef1c003128 100644 --- a/advisories/unreviewed/2024/12/GHSA-v9v2-x5xp-j57g/GHSA-v9v2-x5xp-j57g.json +++ b/advisories/unreviewed/2024/12/GHSA-v9v2-x5xp-j57g/GHSA-v9v2-x5xp-j57g.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-203" + ], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-wx8m-v849-9cjp/GHSA-wx8m-v849-9cjp.json b/advisories/unreviewed/2024/12/GHSA-wx8m-v849-9cjp/GHSA-wx8m-v849-9cjp.json new file mode 100644 index 00000000000..b7e85cdf543 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-wx8m-v849-9cjp/GHSA-wx8m-v849-9cjp.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wx8m-v849-9cjp", + "modified": "2024-12-26T18:30:37Z", + "published": "2024-12-26T18:30:36Z", + "aliases": [ + "CVE-2024-12959" + ], + "details": "A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /update_personal_details.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12959" + }, + { + "type": "WEB", + "url": "https://1000projects.org" + }, + { + "type": "WEB", + "url": "https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README7.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.289324" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.289324" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.468800" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-26T16:15:27Z" + } +} \ No newline at end of file