diff --git a/advisories/github-reviewed/2024/09/GHSA-rw5h-g8xq-6877/GHSA-rw5h-g8xq-6877.json b/advisories/github-reviewed/2024/09/GHSA-rw5h-g8xq-6877/GHSA-rw5h-g8xq-6877.json
new file mode 100644
index 00000000000..d85836fac4f
--- /dev/null
+++ b/advisories/github-reviewed/2024/09/GHSA-rw5h-g8xq-6877/GHSA-rw5h-g8xq-6877.json
@@ -0,0 +1,88 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rw5h-g8xq-6877",
+  "modified": "2024-09-17T18:33:14Z",
+  "published": "2024-09-17T18:33:14Z",
+  "aliases": [
+    "CVE-2024-45803"
+  ],
+  "summary": "Wire UI has a JS XSS Vulnerability on route /wireui/button?label=Content",
+  "details": "### Summary\nA potential Cross-Site Scripting (XSS) vulnerability has been identified in the `/wireui/button` endpoint, specifically through the `label` query parameter. Malicious actors could exploit this vulnerability by injecting JavaScript into the `label` parameter, leading to the execution of arbitrary code in the victim's browser.\n\n### Details\nThe `/wireui/button` endpoint dynamically renders button labels based on user-provided input via the `label` query parameter. Due to insufficient sanitization or escaping of this input, an attacker can inject malicious JavaScript. The following URL demonstrates the vulnerability:\n\n```\nhttps://wireui.dev/wireui/button?label=Cancel&1%25%7ds8dk0%3E%3Cscript%3Ealert(1)%3C/script%3Ez1qt3=1\n```\n\nBy crafting such a request, an attacker can inject arbitrary code that will be executed by the browser when the endpoint is accessed.\n\n### Proof of Concept (PoC)\nTo demonstrate the vulnerability, visit the following URL:\n\n```\n/wireui/button?label=<script>alert(1)</script>\n```\n\nUpon loading the page, the injected JavaScript will execute, displaying an alert with the message \"1.\" This confirms the vulnerability and highlights that user input is not being properly escaped or sanitized.\n\n### Impact\nIf exploited, this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the affected website. This could lead to:\n\n- **Session Hijacking**: Stealing session cookies, tokens, or other sensitive information.\n- **User Impersonation**: Performing unauthorized actions on behalf of authenticated users.\n- **Phishing**: Redirecting users to malicious websites.\n- **Content Manipulation**: Altering the appearance or behavior of the affected page to mislead users or execute further attacks.\n\nThe severity of this vulnerability depends on the context of where the affected component is used, but in all cases, it poses a significant risk to user security.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "wireui/wireui"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.19.3"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "wireui/wireui"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.0.0"
+            },
+            {
+              "fixed": "2.1.3"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/wireui/wireui/security/advisories/GHSA-rw5h-g8xq-6877"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/wireui/wireui/commit/784c4f110e58eb41d0f2bdecd4655ea417f16e7e"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/wireui/wireui/commit/a457654912055f4dcc559da04d4e319f76b80fc5"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/wireui/wireui"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-09-17T18:33:14Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/10/GHSA-989p-fg49-9347/GHSA-989p-fg49-9347.json b/advisories/unreviewed/2022/10/GHSA-989p-fg49-9347/GHSA-989p-fg49-9347.json
index ff24b1d6042..cac44151f9f 100644
--- a/advisories/unreviewed/2022/10/GHSA-989p-fg49-9347/GHSA-989p-fg49-9347.json
+++ b/advisories/unreviewed/2022/10/GHSA-989p-fg49-9347/GHSA-989p-fg49-9347.json
@@ -32,7 +32,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-94"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2022/10/GHSA-9xgx-w3jc-5fhh/GHSA-9xgx-w3jc-5fhh.json b/advisories/unreviewed/2022/10/GHSA-9xgx-w3jc-5fhh/GHSA-9xgx-w3jc-5fhh.json
index 32dab24e1a2..dcf9a5a3356 100644
--- a/advisories/unreviewed/2022/10/GHSA-9xgx-w3jc-5fhh/GHSA-9xgx-w3jc-5fhh.json
+++ b/advisories/unreviewed/2022/10/GHSA-9xgx-w3jc-5fhh/GHSA-9xgx-w3jc-5fhh.json
@@ -32,7 +32,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-306"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2023/10/GHSA-9v76-7rmr-76cm/GHSA-9v76-7rmr-76cm.json b/advisories/unreviewed/2023/10/GHSA-9v76-7rmr-76cm/GHSA-9v76-7rmr-76cm.json
index 73e9087f67f..3efdd06b602 100644
--- a/advisories/unreviewed/2023/10/GHSA-9v76-7rmr-76cm/GHSA-9v76-7rmr-76cm.json
+++ b/advisories/unreviewed/2023/10/GHSA-9v76-7rmr-76cm/GHSA-9v76-7rmr-76cm.json
@@ -28,7 +28,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-269"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2023/10/GHSA-w279-72w5-rrq7/GHSA-w279-72w5-rrq7.json b/advisories/unreviewed/2023/10/GHSA-w279-72w5-rrq7/GHSA-w279-72w5-rrq7.json
index b0108f33f1f..168e3372398 100644
--- a/advisories/unreviewed/2023/10/GHSA-w279-72w5-rrq7/GHSA-w279-72w5-rrq7.json
+++ b/advisories/unreviewed/2023/10/GHSA-w279-72w5-rrq7/GHSA-w279-72w5-rrq7.json
@@ -28,6 +28,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-284",
       "CWE-863"
     ],
     "severity": "CRITICAL",
diff --git a/advisories/unreviewed/2024/06/GHSA-fp76-24v2-8wq4/GHSA-fp76-24v2-8wq4.json b/advisories/unreviewed/2024/06/GHSA-fp76-24v2-8wq4/GHSA-fp76-24v2-8wq4.json
index f6c70ceb202..39309c2044f 100644
--- a/advisories/unreviewed/2024/06/GHSA-fp76-24v2-8wq4/GHSA-fp76-24v2-8wq4.json
+++ b/advisories/unreviewed/2024/06/GHSA-fp76-24v2-8wq4/GHSA-fp76-24v2-8wq4.json
@@ -1,14 +1,21 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fp76-24v2-8wq4",
-  "modified": "2024-06-27T18:31:31Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-06-27T18:31:31Z",
   "aliases": [
     "CVE-2024-39373"
   ],
   "details": "TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the manipulation of settings and could allow an attacker to gain unauthorized access to the system with administrative privileges.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
   ],
   "affected": [
 
@@ -27,7 +34,7 @@
     "cwe_ids": [
       "CWE-77"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-27T16:15:11Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-mxfh-pj5j-6v79/GHSA-mxfh-pj5j-6v79.json b/advisories/unreviewed/2024/06/GHSA-mxfh-pj5j-6v79/GHSA-mxfh-pj5j-6v79.json
index e9a0aca3b2e..04963407dd8 100644
--- a/advisories/unreviewed/2024/06/GHSA-mxfh-pj5j-6v79/GHSA-mxfh-pj5j-6v79.json
+++ b/advisories/unreviewed/2024/06/GHSA-mxfh-pj5j-6v79/GHSA-mxfh-pj5j-6v79.json
@@ -1,14 +1,21 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mxfh-pj5j-6v79",
-  "modified": "2024-06-27T18:31:32Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-06-27T18:31:32Z",
   "aliases": [
     "CVE-2024-39375"
   ],
   "details": "TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
   ],
   "affected": [
 
@@ -27,7 +34,7 @@
     "cwe_ids": [
       "CWE-603"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-27T16:15:11Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-v93q-27w5-6jq6/GHSA-v93q-27w5-6jq6.json b/advisories/unreviewed/2024/06/GHSA-v93q-27w5-6jq6/GHSA-v93q-27w5-6jq6.json
index cc3c4070cfd..fadc6aeaf67 100644
--- a/advisories/unreviewed/2024/06/GHSA-v93q-27w5-6jq6/GHSA-v93q-27w5-6jq6.json
+++ b/advisories/unreviewed/2024/06/GHSA-v93q-27w5-6jq6/GHSA-v93q-27w5-6jq6.json
@@ -1,14 +1,21 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v93q-27w5-6jq6",
-  "modified": "2024-06-27T18:31:32Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-06-27T18:31:32Z",
   "aliases": [
     "CVE-2024-39376"
   ],
   "details": "TELSAT marKoni FM Transmitters are vulnerable to users gaining unauthorized access to sensitive information or performing actions beyond their designated permissions.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
   ],
   "affected": [
 
@@ -27,7 +34,7 @@
     "cwe_ids": [
       "CWE-284"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-27T16:15:11Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-69mq-rrf6-hxmf/GHSA-69mq-rrf6-hxmf.json b/advisories/unreviewed/2024/07/GHSA-69mq-rrf6-hxmf/GHSA-69mq-rrf6-hxmf.json
index fbfbd90aa5d..8d780ff9107 100644
--- a/advisories/unreviewed/2024/07/GHSA-69mq-rrf6-hxmf/GHSA-69mq-rrf6-hxmf.json
+++ b/advisories/unreviewed/2024/07/GHSA-69mq-rrf6-hxmf/GHSA-69mq-rrf6-hxmf.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-69mq-rrf6-hxmf",
-  "modified": "2024-07-17T00:32:53Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-07-17T00:32:53Z",
   "aliases": [
     "CVE-2024-5815"
   ],
   "details": "A Cross-Site Request Forgery vulnerability in GitHub Enterprise Server allowed write operations on a victim-owned repository by exploiting incorrect request types. A mitigating factor is that the attacker would have to be a trusted GitHub Enterprise Server user, and the victim would have to visit a tag in the attacker's fork of their own repository. vulnerability affected all versions of GitHub Enterprise Server prior 3.14 and was fixed in version 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17.\n\n\n This vulnerability was reported via the GitHub Bug Bounty program.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:X/RE:L/U:Amber"
diff --git a/advisories/unreviewed/2024/07/GHSA-p46f-3938-pv7g/GHSA-p46f-3938-pv7g.json b/advisories/unreviewed/2024/07/GHSA-p46f-3938-pv7g/GHSA-p46f-3938-pv7g.json
index f8311173b52..f3bb1ca3f1b 100644
--- a/advisories/unreviewed/2024/07/GHSA-p46f-3938-pv7g/GHSA-p46f-3938-pv7g.json
+++ b/advisories/unreviewed/2024/07/GHSA-p46f-3938-pv7g/GHSA-p46f-3938-pv7g.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p46f-3938-pv7g",
-  "modified": "2024-07-17T00:32:53Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-07-17T00:32:53Z",
   "aliases": [
     "CVE-2024-6395"
   ],
   "details": "An exposure of sensitive information vulnerability in GitHub Enterprise Server would allow an attacker to enumerate the names of private repositories that utilize deploy keys. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. This vulnerability was reported via the GitHub Bug Bounty program.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:C/RE:L/U:Amber"
diff --git a/advisories/unreviewed/2024/08/GHSA-6cjc-w4j3-jjh8/GHSA-6cjc-w4j3-jjh8.json b/advisories/unreviewed/2024/08/GHSA-6cjc-w4j3-jjh8/GHSA-6cjc-w4j3-jjh8.json
index fcfaf855c31..c3067e9c5ae 100644
--- a/advisories/unreviewed/2024/08/GHSA-6cjc-w4j3-jjh8/GHSA-6cjc-w4j3-jjh8.json
+++ b/advisories/unreviewed/2024/08/GHSA-6cjc-w4j3-jjh8/GHSA-6cjc-w4j3-jjh8.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6cjc-w4j3-jjh8",
-  "modified": "2024-08-13T09:30:52Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-08-02T12:31:43Z",
   "aliases": [
     "CVE-2024-38878"
diff --git a/advisories/unreviewed/2024/09/GHSA-36xh-276f-w5j9/GHSA-36xh-276f-w5j9.json b/advisories/unreviewed/2024/09/GHSA-36xh-276f-w5j9/GHSA-36xh-276f-w5j9.json
index 9310301dcc8..ddcb20cbe49 100644
--- a/advisories/unreviewed/2024/09/GHSA-36xh-276f-w5j9/GHSA-36xh-276f-w5j9.json
+++ b/advisories/unreviewed/2024/09/GHSA-36xh-276f-w5j9/GHSA-36xh-276f-w5j9.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-36xh-276f-w5j9",
-  "modified": "2024-09-17T06:30:37Z",
+  "modified": "2024-09-17T18:33:26Z",
   "published": "2024-09-17T06:30:37Z",
   "aliases": [
     "CVE-2024-8092"
   ],
   "details": "The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T06:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-382w-q3v4-xc76/GHSA-382w-q3v4-xc76.json b/advisories/unreviewed/2024/09/GHSA-382w-q3v4-xc76/GHSA-382w-q3v4-xc76.json
index 5a25be45304..f821e403f27 100644
--- a/advisories/unreviewed/2024/09/GHSA-382w-q3v4-xc76/GHSA-382w-q3v4-xc76.json
+++ b/advisories/unreviewed/2024/09/GHSA-382w-q3v4-xc76/GHSA-382w-q3v4-xc76.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-382w-q3v4-xc76",
-  "modified": "2024-09-17T00:31:05Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T00:31:05Z",
   "aliases": [
     "CVE-2024-44160"
   ],
   "details": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted texture may lead to unexpected app termination.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -33,9 +36,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-400"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T00:15:50Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-5fx5-p3qx-6q26/GHSA-5fx5-p3qx-6q26.json b/advisories/unreviewed/2024/09/GHSA-5fx5-p3qx-6q26/GHSA-5fx5-p3qx-6q26.json
index 9b631fe8077..2a1ed473e81 100644
--- a/advisories/unreviewed/2024/09/GHSA-5fx5-p3qx-6q26/GHSA-5fx5-p3qx-6q26.json
+++ b/advisories/unreviewed/2024/09/GHSA-5fx5-p3qx-6q26/GHSA-5fx5-p3qx-6q26.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5fx5-p3qx-6q26",
-  "modified": "2024-09-16T14:37:28Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-16T14:37:28Z",
   "aliases": [
     "CVE-2024-46938"
   ],
   "details": "An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can read arbitrary files.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-200"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-15T22:15:09Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-5jh6-g6wh-386v/GHSA-5jh6-g6wh-386v.json b/advisories/unreviewed/2024/09/GHSA-5jh6-g6wh-386v/GHSA-5jh6-g6wh-386v.json
index 2fe3812631a..01ef480046c 100644
--- a/advisories/unreviewed/2024/09/GHSA-5jh6-g6wh-386v/GHSA-5jh6-g6wh-386v.json
+++ b/advisories/unreviewed/2024/09/GHSA-5jh6-g6wh-386v/GHSA-5jh6-g6wh-386v.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5jh6-g6wh-386v",
-  "modified": "2024-09-02T18:31:26Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-09-02T18:31:26Z",
   "aliases": [
     "CVE-2024-6919"
   ],
   "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection.This issue affects NACPremium: through 01082024.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:L/U:X"
diff --git a/advisories/unreviewed/2024/09/GHSA-6363-r5pj-4jm8/GHSA-6363-r5pj-4jm8.json b/advisories/unreviewed/2024/09/GHSA-6363-r5pj-4jm8/GHSA-6363-r5pj-4jm8.json
index 0e6f5b105b8..f1c757f035d 100644
--- a/advisories/unreviewed/2024/09/GHSA-6363-r5pj-4jm8/GHSA-6363-r5pj-4jm8.json
+++ b/advisories/unreviewed/2024/09/GHSA-6363-r5pj-4jm8/GHSA-6363-r5pj-4jm8.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6363-r5pj-4jm8",
-  "modified": "2024-09-17T06:30:36Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T06:30:36Z",
   "aliases": [
     "CVE-2024-8047"
   ],
   "details": "The Visual Sound (old) WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T06:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-6443-r9mf-j2mj/GHSA-6443-r9mf-j2mj.json b/advisories/unreviewed/2024/09/GHSA-6443-r9mf-j2mj/GHSA-6443-r9mf-j2mj.json
index dabe28ad02d..f79425cfafc 100644
--- a/advisories/unreviewed/2024/09/GHSA-6443-r9mf-j2mj/GHSA-6443-r9mf-j2mj.json
+++ b/advisories/unreviewed/2024/09/GHSA-6443-r9mf-j2mj/GHSA-6443-r9mf-j2mj.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6443-r9mf-j2mj",
-  "modified": "2024-09-17T06:30:36Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T06:30:36Z",
   "aliases": [
     "CVE-2024-8044"
   ],
   "details": "The infolinks Ad Wrap WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T06:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-66vj-hxh5-x3jh/GHSA-66vj-hxh5-x3jh.json b/advisories/unreviewed/2024/09/GHSA-66vj-hxh5-x3jh/GHSA-66vj-hxh5-x3jh.json
new file mode 100644
index 00000000000..2c59783eee2
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-66vj-hxh5-x3jh/GHSA-66vj-hxh5-x3jh.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-66vj-hxh5-x3jh",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-38813"
+  ],
+  "details": "The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38813"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-250"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-6947-f67q-7599/GHSA-6947-f67q-7599.json b/advisories/unreviewed/2024/09/GHSA-6947-f67q-7599/GHSA-6947-f67q-7599.json
index f2b47c6b2d4..007ba2118f4 100644
--- a/advisories/unreviewed/2024/09/GHSA-6947-f67q-7599/GHSA-6947-f67q-7599.json
+++ b/advisories/unreviewed/2024/09/GHSA-6947-f67q-7599/GHSA-6947-f67q-7599.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6947-f67q-7599",
-  "modified": "2024-09-17T00:31:04Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T00:31:04Z",
   "aliases": [
     "CVE-2024-40861"
   ],
   "details": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to gain root privileges.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-269"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T00:15:49Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-72q3-gvh6-6m6w/GHSA-72q3-gvh6-6m6w.json b/advisories/unreviewed/2024/09/GHSA-72q3-gvh6-6m6w/GHSA-72q3-gvh6-6m6w.json
new file mode 100644
index 00000000000..72812b2a2fd
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-72q3-gvh6-6m6w/GHSA-72q3-gvh6-6m6w.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-72q3-gvh6-6m6w",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-38812"
+  ],
+  "details": "The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38812"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-122"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-7hx6-3799-26cc/GHSA-7hx6-3799-26cc.json b/advisories/unreviewed/2024/09/GHSA-7hx6-3799-26cc/GHSA-7hx6-3799-26cc.json
new file mode 100644
index 00000000000..5c4c53e7f9b
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-7hx6-3799-26cc/GHSA-7hx6-3799-26cc.json
@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7hx6-3799-26cc",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-45804"
+  ],
+  "details": "Rejected reason: This CVE is a duplicate of another CVE.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45804"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-7wfr-5f4h-3mw7/GHSA-7wfr-5f4h-3mw7.json b/advisories/unreviewed/2024/09/GHSA-7wfr-5f4h-3mw7/GHSA-7wfr-5f4h-3mw7.json
index 55ab0a7453a..ed494d93967 100644
--- a/advisories/unreviewed/2024/09/GHSA-7wfr-5f4h-3mw7/GHSA-7wfr-5f4h-3mw7.json
+++ b/advisories/unreviewed/2024/09/GHSA-7wfr-5f4h-3mw7/GHSA-7wfr-5f4h-3mw7.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7wfr-5f4h-3mw7",
-  "modified": "2024-09-17T06:30:37Z",
+  "modified": "2024-09-17T18:33:26Z",
   "published": "2024-09-17T06:30:37Z",
   "aliases": [
     "CVE-2024-8052"
   ],
   "details": "The Review Ratings WordPress plugin through 1.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T06:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-97r7-fmq6-w47h/GHSA-97r7-fmq6-w47h.json b/advisories/unreviewed/2024/09/GHSA-97r7-fmq6-w47h/GHSA-97r7-fmq6-w47h.json
new file mode 100644
index 00000000000..12c0699bea8
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-97r7-fmq6-w47h/GHSA-97r7-fmq6-w47h.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-97r7-fmq6-w47h",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-42501"
+  ],
+  "details": "An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or install implants.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42501"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-c2wx-2chw-3qfv/GHSA-c2wx-2chw-3qfv.json b/advisories/unreviewed/2024/09/GHSA-c2wx-2chw-3qfv/GHSA-c2wx-2chw-3qfv.json
index 15231171b87..b2a96e6f39e 100644
--- a/advisories/unreviewed/2024/09/GHSA-c2wx-2chw-3qfv/GHSA-c2wx-2chw-3qfv.json
+++ b/advisories/unreviewed/2024/09/GHSA-c2wx-2chw-3qfv/GHSA-c2wx-2chw-3qfv.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c2wx-2chw-3qfv",
-  "modified": "2024-09-17T00:31:05Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T00:31:05Z",
   "aliases": [
     "CVE-2024-44147"
   ],
   "details": "This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An app may gain unauthorized access to Local Network.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-269"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T00:15:50Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-chwj-xj8v-386c/GHSA-chwj-xj8v-386c.json b/advisories/unreviewed/2024/09/GHSA-chwj-xj8v-386c/GHSA-chwj-xj8v-386c.json
index 15a02f957fc..3b90e9110ac 100644
--- a/advisories/unreviewed/2024/09/GHSA-chwj-xj8v-386c/GHSA-chwj-xj8v-386c.json
+++ b/advisories/unreviewed/2024/09/GHSA-chwj-xj8v-386c/GHSA-chwj-xj8v-386c.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-chwj-xj8v-386c",
-  "modified": "2024-09-17T06:30:37Z",
+  "modified": "2024-09-17T18:33:26Z",
   "published": "2024-09-17T06:30:37Z",
   "aliases": [
     "CVE-2024-8091"
   ],
   "details": "The Enhanced Search Box WordPress plugin through 0.6.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T06:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-cmj7-8jrj-42g2/GHSA-cmj7-8jrj-42g2.json b/advisories/unreviewed/2024/09/GHSA-cmj7-8jrj-42g2/GHSA-cmj7-8jrj-42g2.json
index 475dffe6979..91149a3f6eb 100644
--- a/advisories/unreviewed/2024/09/GHSA-cmj7-8jrj-42g2/GHSA-cmj7-8jrj-42g2.json
+++ b/advisories/unreviewed/2024/09/GHSA-cmj7-8jrj-42g2/GHSA-cmj7-8jrj-42g2.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cmj7-8jrj-42g2",
-  "modified": "2024-09-17T00:31:03Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T00:31:03Z",
   "aliases": [
     "CVE-2024-27874"
   ],
   "details": "This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attacker may be able to cause a denial-of-service.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-400"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T00:15:47Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-f3pj-vwf5-5vr3/GHSA-f3pj-vwf5-5vr3.json b/advisories/unreviewed/2024/09/GHSA-f3pj-vwf5-5vr3/GHSA-f3pj-vwf5-5vr3.json
index 7f0cabbc3aa..bbb82642ec3 100644
--- a/advisories/unreviewed/2024/09/GHSA-f3pj-vwf5-5vr3/GHSA-f3pj-vwf5-5vr3.json
+++ b/advisories/unreviewed/2024/09/GHSA-f3pj-vwf5-5vr3/GHSA-f3pj-vwf5-5vr3.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f3pj-vwf5-5vr3",
-  "modified": "2024-09-17T06:30:36Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T06:30:36Z",
   "aliases": [
     "CVE-2024-5170"
   ],
   "details": "The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T06:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-fp25-mvr2-58xp/GHSA-fp25-mvr2-58xp.json b/advisories/unreviewed/2024/09/GHSA-fp25-mvr2-58xp/GHSA-fp25-mvr2-58xp.json
new file mode 100644
index 00000000000..ebd1065dc97
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-fp25-mvr2-58xp/GHSA-fp25-mvr2-58xp.json
@@ -0,0 +1,58 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fp25-mvr2-58xp",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-8944"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8944"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/65241/cve/issues/1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://code-projects.org"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.277761"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.277761"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.408871"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-h2w7-w434-9vmm/GHSA-h2w7-w434-9vmm.json b/advisories/unreviewed/2024/09/GHSA-h2w7-w434-9vmm/GHSA-h2w7-w434-9vmm.json
index 68900568194..5f68879e87f 100644
--- a/advisories/unreviewed/2024/09/GHSA-h2w7-w434-9vmm/GHSA-h2w7-w434-9vmm.json
+++ b/advisories/unreviewed/2024/09/GHSA-h2w7-w434-9vmm/GHSA-h2w7-w434-9vmm.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h2w7-w434-9vmm",
-  "modified": "2024-09-09T15:30:41Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-09-09T15:30:41Z",
   "aliases": [
     "CVE-2024-44375"
   ],
   "details": "D-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-787"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-09T14:15:14Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-hf3h-f7qm-mhc4/GHSA-hf3h-f7qm-mhc4.json b/advisories/unreviewed/2024/09/GHSA-hf3h-f7qm-mhc4/GHSA-hf3h-f7qm-mhc4.json
new file mode 100644
index 00000000000..198973f1d00
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-hf3h-f7qm-mhc4/GHSA-hf3h-f7qm-mhc4.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hf3h-f7qm-mhc4",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-8945"
+  ],
+  "details": "A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unknown code of the file /index.php/dashboard/save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8945"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bytium.com/sql-injection-vulnerability-identified-in-rise-crm"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.277762"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.277762"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.409096"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-jr3c-32f2-p7wg/GHSA-jr3c-32f2-p7wg.json b/advisories/unreviewed/2024/09/GHSA-jr3c-32f2-p7wg/GHSA-jr3c-32f2-p7wg.json
index a7214931b17..6fe592bc1b7 100644
--- a/advisories/unreviewed/2024/09/GHSA-jr3c-32f2-p7wg/GHSA-jr3c-32f2-p7wg.json
+++ b/advisories/unreviewed/2024/09/GHSA-jr3c-32f2-p7wg/GHSA-jr3c-32f2-p7wg.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jr3c-32f2-p7wg",
-  "modified": "2024-09-17T06:30:36Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T06:30:36Z",
   "aliases": [
     "CVE-2024-8051"
   ],
   "details": "The Special Feed Items WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T06:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-m62g-7v8j-3fwc/GHSA-m62g-7v8j-3fwc.json b/advisories/unreviewed/2024/09/GHSA-m62g-7v8j-3fwc/GHSA-m62g-7v8j-3fwc.json
index 5fffe4b878a..ab394ada7ad 100644
--- a/advisories/unreviewed/2024/09/GHSA-m62g-7v8j-3fwc/GHSA-m62g-7v8j-3fwc.json
+++ b/advisories/unreviewed/2024/09/GHSA-m62g-7v8j-3fwc/GHSA-m62g-7v8j-3fwc.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m62g-7v8j-3fwc",
-  "modified": "2024-09-16T14:37:28Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-16T14:37:28Z",
   "aliases": [
     "CVE-2024-46918"
   ],
   "details": "app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -31,7 +34,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-15T20:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-p7pw-3rg9-hpxm/GHSA-p7pw-3rg9-hpxm.json b/advisories/unreviewed/2024/09/GHSA-p7pw-3rg9-hpxm/GHSA-p7pw-3rg9-hpxm.json
new file mode 100644
index 00000000000..b9bcd50dae8
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-p7pw-3rg9-hpxm/GHSA-p7pw-3rg9-hpxm.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p7pw-3rg9-hpxm",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-45682"
+  ],
+  "details": "There is a command injection vulnerability that may allow an attacker to inject malicious input on the device's operating system.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45682"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-261-02"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-77"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-r288-8r34-4php/GHSA-r288-8r34-4php.json b/advisories/unreviewed/2024/09/GHSA-r288-8r34-4php/GHSA-r288-8r34-4php.json
new file mode 100644
index 00000000000..98787237438
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-r288-8r34-4php/GHSA-r288-8r34-4php.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r288-8r34-4php",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-42502"
+  ],
+  "details": "Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42502"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-vm99-jjc2-8hw5/GHSA-vm99-jjc2-8hw5.json b/advisories/unreviewed/2024/09/GHSA-vm99-jjc2-8hw5/GHSA-vm99-jjc2-8hw5.json
index ce53d168327..738755cbd42 100644
--- a/advisories/unreviewed/2024/09/GHSA-vm99-jjc2-8hw5/GHSA-vm99-jjc2-8hw5.json
+++ b/advisories/unreviewed/2024/09/GHSA-vm99-jjc2-8hw5/GHSA-vm99-jjc2-8hw5.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vm99-jjc2-8hw5",
-  "modified": "2024-09-09T12:31:57Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-09-09T12:31:57Z",
   "aliases": [
     "CVE-2024-8601"
   ],
   "details": "This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to unauthorized access to sensitive information belonging to other users.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
@@ -28,7 +32,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-639"
+      "CWE-639",
+      "CWE-863"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/09/GHSA-vrrc-qv8c-m5rg/GHSA-vrrc-qv8c-m5rg.json b/advisories/unreviewed/2024/09/GHSA-vrrc-qv8c-m5rg/GHSA-vrrc-qv8c-m5rg.json
new file mode 100644
index 00000000000..5755fd206a9
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-vrrc-qv8c-m5rg/GHSA-vrrc-qv8c-m5rg.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vrrc-qv8c-m5rg",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-42503"
+  ],
+  "details": "Authenticated command execution vulnerability exist in the  ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42503"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-w2r7-9579-27hf/GHSA-w2r7-9579-27hf.json b/advisories/unreviewed/2024/09/GHSA-w2r7-9579-27hf/GHSA-w2r7-9579-27hf.json
new file mode 100644
index 00000000000..27c97b06bb4
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-w2r7-9579-27hf/GHSA-w2r7-9579-27hf.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w2r7-9579-27hf",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-8768"
+  ],
+  "details": "A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8768"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/vllm-project/vllm/issues/7632"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/vllm-project/vllm/pull/7746"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2024-8768"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2311895"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-617"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T17:15:11Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-w4pv-qv3j-89ww/GHSA-w4pv-qv3j-89ww.json b/advisories/unreviewed/2024/09/GHSA-w4pv-qv3j-89ww/GHSA-w4pv-qv3j-89ww.json
index 13b4e971e57..cb99fdf68c5 100644
--- a/advisories/unreviewed/2024/09/GHSA-w4pv-qv3j-89ww/GHSA-w4pv-qv3j-89ww.json
+++ b/advisories/unreviewed/2024/09/GHSA-w4pv-qv3j-89ww/GHSA-w4pv-qv3j-89ww.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-w4pv-qv3j-89ww",
-  "modified": "2024-09-09T15:30:41Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-09-09T15:30:41Z",
   "aliases": [
     "CVE-2024-7015"
   ],
   "details": "Improper Authentication, Missing Authentication for Critical Function, Improper Authorization vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse.This issue affects PassBox: before v1.2.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
diff --git a/advisories/unreviewed/2024/09/GHSA-wc36-9694-f9rf/GHSA-wc36-9694-f9rf.json b/advisories/unreviewed/2024/09/GHSA-wc36-9694-f9rf/GHSA-wc36-9694-f9rf.json
new file mode 100644
index 00000000000..530418c473b
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-wc36-9694-f9rf/GHSA-wc36-9694-f9rf.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wc36-9694-f9rf",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-8939"
+  ],
+  "details": "A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vllm JSON web API can lead to a Denial of Service (DoS). The API used for LLM-based sentence or chat completion accepts a best_of parameter to return the best completion from several options. When this parameter is set to a large value, the API does not handle timeouts or resource exhaustion properly, allowing an attacker to cause a DoS by consuming excessive system resources. This leads to the API becoming unresponsive, preventing legitimate users from accessing the service.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8939"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2024-8939"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312782"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-400"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T17:15:11Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-wc8g-qpv4-8j46/GHSA-wc8g-qpv4-8j46.json b/advisories/unreviewed/2024/09/GHSA-wc8g-qpv4-8j46/GHSA-wc8g-qpv4-8j46.json
index 4784bad60a6..d6a5a927392 100644
--- a/advisories/unreviewed/2024/09/GHSA-wc8g-qpv4-8j46/GHSA-wc8g-qpv4-8j46.json
+++ b/advisories/unreviewed/2024/09/GHSA-wc8g-qpv4-8j46/GHSA-wc8g-qpv4-8j46.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-wc8g-qpv4-8j46",
-  "modified": "2024-09-17T00:31:04Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T00:31:04Z",
   "aliases": [
     "CVE-2024-40841"
   ],
   "details": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted video file may lead to unexpected app termination.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-400"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T00:15:48Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-x6hc-3hv8-fjx3/GHSA-x6hc-3hv8-fjx3.json b/advisories/unreviewed/2024/09/GHSA-x6hc-3hv8-fjx3/GHSA-x6hc-3hv8-fjx3.json
index 36919123a27..03678472dca 100644
--- a/advisories/unreviewed/2024/09/GHSA-x6hc-3hv8-fjx3/GHSA-x6hc-3hv8-fjx3.json
+++ b/advisories/unreviewed/2024/09/GHSA-x6hc-3hv8-fjx3/GHSA-x6hc-3hv8-fjx3.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x6hc-3hv8-fjx3",
-  "modified": "2024-09-02T18:31:26Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-09-02T18:31:26Z",
   "aliases": [
     "CVE-2024-6920"
   ],
   "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS.This issue affects NACPremium: through 01082024.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:X/U:X"
diff --git a/advisories/unreviewed/2024/09/GHSA-xj9g-83cq-wf3m/GHSA-xj9g-83cq-wf3m.json b/advisories/unreviewed/2024/09/GHSA-xj9g-83cq-wf3m/GHSA-xj9g-83cq-wf3m.json
index ba7c125103c..6d82a335b02 100644
--- a/advisories/unreviewed/2024/09/GHSA-xj9g-83cq-wf3m/GHSA-xj9g-83cq-wf3m.json
+++ b/advisories/unreviewed/2024/09/GHSA-xj9g-83cq-wf3m/GHSA-xj9g-83cq-wf3m.json
@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xj9g-83cq-wf3m",
-  "modified": "2024-09-02T18:31:26Z",
+  "modified": "2024-09-17T18:33:24Z",
   "published": "2024-09-02T18:31:26Z",
   "aliases": [
     "CVE-2024-6921"
   ],
   "details": "Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data.This issue affects NACPremium: through 01082024.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
diff --git a/advisories/unreviewed/2024/09/GHSA-xr64-7w22-vxqw/GHSA-xr64-7w22-vxqw.json b/advisories/unreviewed/2024/09/GHSA-xr64-7w22-vxqw/GHSA-xr64-7w22-vxqw.json
new file mode 100644
index 00000000000..f4fabdff620
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-xr64-7w22-vxqw/GHSA-xr64-7w22-vxqw.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xr64-7w22-vxqw",
+  "modified": "2024-09-17T18:33:26Z",
+  "published": "2024-09-17T18:33:26Z",
+  "aliases": [
+    "CVE-2024-38380"
+  ],
+  "details": "This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser, allowing an attacker to execute arbitrary JavaScript in the context of the victim's browser session.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38380"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-261-02"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-17T18:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-xwc4-p3cg-mmq4/GHSA-xwc4-p3cg-mmq4.json b/advisories/unreviewed/2024/09/GHSA-xwc4-p3cg-mmq4/GHSA-xwc4-p3cg-mmq4.json
index f2be7765f2b..8292cffeb02 100644
--- a/advisories/unreviewed/2024/09/GHSA-xwc4-p3cg-mmq4/GHSA-xwc4-p3cg-mmq4.json
+++ b/advisories/unreviewed/2024/09/GHSA-xwc4-p3cg-mmq4/GHSA-xwc4-p3cg-mmq4.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xwc4-p3cg-mmq4",
-  "modified": "2024-09-17T06:30:36Z",
+  "modified": "2024-09-17T18:33:25Z",
   "published": "2024-09-17T06:30:36Z",
   "aliases": [
     "CVE-2024-8043"
   ],
   "details": "The Vikinghammer Tweet WordPress plugin through 0.2.4 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-09-17T06:15:02Z"