diff --git a/advisories/unreviewed/2021/07/GHSA-x3cj-3539-rcpx/GHSA-x3cj-3539-rcpx.json b/advisories/unreviewed/2021/07/GHSA-x3cj-3539-rcpx/GHSA-x3cj-3539-rcpx.json
index 9c27bf31766..8e7b1c82a8a 100644
--- a/advisories/unreviewed/2021/07/GHSA-x3cj-3539-rcpx/GHSA-x3cj-3539-rcpx.json
+++ b/advisories/unreviewed/2021/07/GHSA-x3cj-3539-rcpx/GHSA-x3cj-3539-rcpx.json
@@ -34,6 +34,10 @@
       "type": "WEB",
       "url": "https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/"
     },
+    {
+      "type": "WEB",
+      "url": "https://security.gentoo.org/glsa/202401-23"
+    },
     {
       "type": "WEB",
       "url": "https://security.netapp.com/advisory/ntap-20210805-0003/"
diff --git a/advisories/unreviewed/2022/05/GHSA-52fp-4722-wcjw/GHSA-52fp-4722-wcjw.json b/advisories/unreviewed/2022/05/GHSA-52fp-4722-wcjw/GHSA-52fp-4722-wcjw.json
index a5d1bc528ea..7653eae487c 100644
--- a/advisories/unreviewed/2022/05/GHSA-52fp-4722-wcjw/GHSA-52fp-4722-wcjw.json
+++ b/advisories/unreviewed/2022/05/GHSA-52fp-4722-wcjw/GHSA-52fp-4722-wcjw.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-52fp-4722-wcjw",
-  "modified": "2022-05-24T19:10:03Z",
+  "modified": "2024-01-16T15:30:25Z",
   "published": "2022-05-24T19:10:03Z",
   "aliases": [
     "CVE-2021-3580"
   ],
   "details": "A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -26,6 +29,10 @@
       "type": "WEB",
       "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00008.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://security.gentoo.org/glsa/202401-24"
+    },
     {
       "type": "WEB",
       "url": "https://security.netapp.com/advisory/ntap-20211104-0006/"
diff --git a/advisories/unreviewed/2023/06/GHSA-whjr-4v2f-wjp4/GHSA-whjr-4v2f-wjp4.json b/advisories/unreviewed/2023/06/GHSA-whjr-4v2f-wjp4/GHSA-whjr-4v2f-wjp4.json
index b0743320c1c..a1db872dfdc 100644
--- a/advisories/unreviewed/2023/06/GHSA-whjr-4v2f-wjp4/GHSA-whjr-4v2f-wjp4.json
+++ b/advisories/unreviewed/2023/06/GHSA-whjr-4v2f-wjp4/GHSA-whjr-4v2f-wjp4.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-whjr-4v2f-wjp4",
-  "modified": "2023-06-26T00:30:21Z",
+  "modified": "2024-01-16T15:30:26Z",
   "published": "2023-06-26T00:30:21Z",
   "aliases": [
     "CVE-2023-36660"
   ],
   "details": "The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,13 +32,17 @@
     {
       "type": "WEB",
       "url": "https://git.lysator.liu.se/nettle/nettle/-/compare/nettle_3.9_release_20230514...nettle_3.9.1_release_20230601"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.gentoo.org/glsa/202401-24"
     }
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-787"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2023-06-25T22:15:21Z"
diff --git a/advisories/unreviewed/2023/12/GHSA-ghxm-9fh8-8p5g/GHSA-ghxm-9fh8-8p5g.json b/advisories/unreviewed/2023/12/GHSA-ghxm-9fh8-8p5g/GHSA-ghxm-9fh8-8p5g.json
index b3e4ec6e56e..beedea3e13f 100644
--- a/advisories/unreviewed/2023/12/GHSA-ghxm-9fh8-8p5g/GHSA-ghxm-9fh8-8p5g.json
+++ b/advisories/unreviewed/2023/12/GHSA-ghxm-9fh8-8p5g/GHSA-ghxm-9fh8-8p5g.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ghxm-9fh8-8p5g",
-  "modified": "2023-12-18T21:30:21Z",
+  "modified": "2024-01-16T15:30:27Z",
   "published": "2023-12-12T03:31:45Z",
   "aliases": [
     "CVE-2023-49581"
diff --git a/advisories/unreviewed/2024/01/GHSA-3r49-2w65-cxgr/GHSA-3r49-2w65-cxgr.json b/advisories/unreviewed/2024/01/GHSA-3r49-2w65-cxgr/GHSA-3r49-2w65-cxgr.json
new file mode 100644
index 00000000000..ec24419a967
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-3r49-2w65-cxgr/GHSA-3r49-2w65-cxgr.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3r49-2w65-cxgr",
+  "modified": "2024-01-16T15:30:27Z",
+  "published": "2024-01-16T15:30:27Z",
+  "aliases": [
+    "CVE-2024-0232"
+  ],
+  "details": "A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0232"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2024-0232"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243754"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T14:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-4766-3xqh-rp5x/GHSA-4766-3xqh-rp5x.json b/advisories/unreviewed/2024/01/GHSA-4766-3xqh-rp5x/GHSA-4766-3xqh-rp5x.json
index e61850a45c7..ad5f766947c 100644
--- a/advisories/unreviewed/2024/01/GHSA-4766-3xqh-rp5x/GHSA-4766-3xqh-rp5x.json
+++ b/advisories/unreviewed/2024/01/GHSA-4766-3xqh-rp5x/GHSA-4766-3xqh-rp5x.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4766-3xqh-rp5x",
-  "modified": "2024-01-09T03:30:22Z",
+  "modified": "2024-01-16T15:30:27Z",
   "published": "2024-01-09T03:30:22Z",
   "aliases": [
     "CVE-2023-49238"
   ],
   "details": "In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) because of a non-unique initial system user password. Although this password must be changed upon the first login, it is possible that an attacker logs in before the legitimate administrator logs in.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-521"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-01-09T02:15:44Z"
diff --git a/advisories/unreviewed/2024/01/GHSA-664m-3qr3-jp8f/GHSA-664m-3qr3-jp8f.json b/advisories/unreviewed/2024/01/GHSA-664m-3qr3-jp8f/GHSA-664m-3qr3-jp8f.json
new file mode 100644
index 00000000000..e0baf51a263
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-664m-3qr3-jp8f/GHSA-664m-3qr3-jp8f.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-664m-3qr3-jp8f",
+  "modified": "2024-01-16T15:30:27Z",
+  "published": "2024-01-16T15:30:27Z",
+  "aliases": [
+    "CVE-2024-0571"
+  ],
+  "details": "A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. This issue affects the function setSmsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument text leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250787. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0571"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/1/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.250787"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.250787"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T14:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-6wh7-wg3p-86m2/GHSA-6wh7-wg3p-86m2.json b/advisories/unreviewed/2024/01/GHSA-6wh7-wg3p-86m2/GHSA-6wh7-wg3p-86m2.json
new file mode 100644
index 00000000000..2fc271e7bc6
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-6wh7-wg3p-86m2/GHSA-6wh7-wg3p-86m2.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6wh7-wg3p-86m2",
+  "modified": "2024-01-16T15:30:27Z",
+  "published": "2024-01-16T15:30:27Z",
+  "aliases": [
+    "CVE-2024-0570"
+  ],
+  "details": "A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended to upgrade the affected component. VDB-250786 is the identifier assigned to this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0570"
+    },
+    {
+      "type": "WEB",
+      "url": "https://drive.google.com/file/d/1xmGHvjMTaOn7v6buju5Ifuti3q47G7yF/view?usp=sharing"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.250786"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.250786"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T14:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-7j98-74jh-cjxh/GHSA-7j98-74jh-cjxh.json b/advisories/unreviewed/2024/01/GHSA-7j98-74jh-cjxh/GHSA-7j98-74jh-cjxh.json
new file mode 100644
index 00000000000..11e1b8bb699
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-7j98-74jh-cjxh/GHSA-7j98-74jh-cjxh.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7j98-74jh-cjxh",
+  "modified": "2024-01-16T15:30:28Z",
+  "published": "2024-01-16T15:30:28Z",
+  "aliases": [
+    "CVE-2023-6395"
+  ],
+  "details": "The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of proper sandboxing during the expansion and execution of Jinja2 templates, which may be included in certain configuration parameters. While the Mock documentation advises treating users added to the mock group as privileged, certain build systems invoking mock on behalf of users might inadvertently permit less privileged users to define configuration tags. These tags could then be passed as parameters to mock during execution, potentially leading to the utilization of Jinja2 templates for remote privilege escalation and the execution of arbitrary code as the root user on the build server.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6395"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/xsuchy/templated-dictionary/commit/0740bd0ca8d487301881541028977d120f8b8933"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/xsuchy/templated-dictionary/commit/bcd90f0dafa365575c4b101e6f5d98c4ef4e4b69"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2023-6395"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2252206"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-20"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T15:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-9vfv-cp84-75xg/GHSA-9vfv-cp84-75xg.json b/advisories/unreviewed/2024/01/GHSA-9vfv-cp84-75xg/GHSA-9vfv-cp84-75xg.json
new file mode 100644
index 00000000000..6cdf8394fd6
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-9vfv-cp84-75xg/GHSA-9vfv-cp84-75xg.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9vfv-cp84-75xg",
+  "modified": "2024-01-16T15:30:28Z",
+  "published": "2024-01-16T15:30:28Z",
+  "aliases": [
+    "CVE-2024-0584"
+  ],
+  "details": "A use-after-free issue was found in igmp_start_timer in net/ipv4/igmp.c in the network sub-component in the Linux Kernel. This flaw allows a local user to observe a refcnt use-after-free issue when receiving an igmp query packet, leading to a kernel information leak.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0584"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2024-0584"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258584"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lore.kernel.org/netdev/170083982540.9628.4546899811301303734.git-patchwork-notify@kernel.org/T/"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T14:15:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-c5j5-hp3j-jpgp/GHSA-c5j5-hp3j-jpgp.json b/advisories/unreviewed/2024/01/GHSA-c5j5-hp3j-jpgp/GHSA-c5j5-hp3j-jpgp.json
index 8f2406bb3b6..4732f6d8071 100644
--- a/advisories/unreviewed/2024/01/GHSA-c5j5-hp3j-jpgp/GHSA-c5j5-hp3j-jpgp.json
+++ b/advisories/unreviewed/2024/01/GHSA-c5j5-hp3j-jpgp/GHSA-c5j5-hp3j-jpgp.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c5j5-hp3j-jpgp",
-  "modified": "2024-01-10T09:30:27Z",
+  "modified": "2024-01-16T15:30:27Z",
   "published": "2024-01-10T09:30:27Z",
   "aliases": [
     "CVE-2020-26628"
   ],
   "details": "A Cross-Site Scripting (XSS) vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile\" page and triggered by another user visiting the profile.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-01-10T09:15:43Z"
diff --git a/advisories/unreviewed/2024/01/GHSA-cfr6-fjfx-m5r2/GHSA-cfr6-fjfx-m5r2.json b/advisories/unreviewed/2024/01/GHSA-cfr6-fjfx-m5r2/GHSA-cfr6-fjfx-m5r2.json
index b4d2ebceee5..15649840748 100644
--- a/advisories/unreviewed/2024/01/GHSA-cfr6-fjfx-m5r2/GHSA-cfr6-fjfx-m5r2.json
+++ b/advisories/unreviewed/2024/01/GHSA-cfr6-fjfx-m5r2/GHSA-cfr6-fjfx-m5r2.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cfr6-fjfx-m5r2",
-  "modified": "2024-01-09T09:30:29Z",
+  "modified": "2024-01-16T15:30:27Z",
   "published": "2024-01-09T09:30:29Z",
   "aliases": [
     "CVE-2023-49237"
   ],
   "details": "An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-77"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-01-09T09:15:42Z"
diff --git a/advisories/unreviewed/2024/01/GHSA-ggmv-p5cx-xjj5/GHSA-ggmv-p5cx-xjj5.json b/advisories/unreviewed/2024/01/GHSA-ggmv-p5cx-xjj5/GHSA-ggmv-p5cx-xjj5.json
index 81de50fefe8..4d3b8d21c37 100644
--- a/advisories/unreviewed/2024/01/GHSA-ggmv-p5cx-xjj5/GHSA-ggmv-p5cx-xjj5.json
+++ b/advisories/unreviewed/2024/01/GHSA-ggmv-p5cx-xjj5/GHSA-ggmv-p5cx-xjj5.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ggmv-p5cx-xjj5",
-  "modified": "2024-01-10T09:30:27Z",
+  "modified": "2024-01-16T15:30:27Z",
   "published": "2024-01-10T09:30:27Z",
   "aliases": [
     "CVE-2020-26630"
   ],
   "details": "A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the 'Doctor Specialization' field under the 'Go to Doctors' tab after logging in as an admin.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-89"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-01-10T09:15:43Z"
diff --git a/advisories/unreviewed/2024/01/GHSA-h2q9-rjqh-c64g/GHSA-h2q9-rjqh-c64g.json b/advisories/unreviewed/2024/01/GHSA-h2q9-rjqh-c64g/GHSA-h2q9-rjqh-c64g.json
index a93b4e49046..5de489efb9b 100644
--- a/advisories/unreviewed/2024/01/GHSA-h2q9-rjqh-c64g/GHSA-h2q9-rjqh-c64g.json
+++ b/advisories/unreviewed/2024/01/GHSA-h2q9-rjqh-c64g/GHSA-h2q9-rjqh-c64g.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h2q9-rjqh-c64g",
-  "modified": "2024-01-10T09:30:27Z",
+  "modified": "2024-01-16T15:30:27Z",
   "published": "2024-01-10T09:30:27Z",
   "aliases": [
     "CVE-2020-26627"
   ],
   "details": "A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries -> Unread Query' tab.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-89"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-01-10T09:15:43Z"
diff --git a/advisories/unreviewed/2024/01/GHSA-h483-rc58-6r6g/GHSA-h483-rc58-6r6g.json b/advisories/unreviewed/2024/01/GHSA-h483-rc58-6r6g/GHSA-h483-rc58-6r6g.json
new file mode 100644
index 00000000000..3f3367f0a12
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-h483-rc58-6r6g/GHSA-h483-rc58-6r6g.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h483-rc58-6r6g",
+  "modified": "2024-01-16T15:30:28Z",
+  "published": "2024-01-16T15:30:28Z",
+  "aliases": [
+    "CVE-2024-0581"
+  ],
+  "details": "An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send a specially crafted shellcode payload to the '/foff' parameter and cause an application shutdown. A malware program could use this shellcode sequence to shut down the application and evade the scan.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0581"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/uncontrolled-resource-consumption-vulnerability-sandsprite-scdbg"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-400"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T14:15:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-h6w6-xx8j-7qv2/GHSA-h6w6-xx8j-7qv2.json b/advisories/unreviewed/2024/01/GHSA-h6w6-xx8j-7qv2/GHSA-h6w6-xx8j-7qv2.json
new file mode 100644
index 00000000000..f6f89b0757f
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-h6w6-xx8j-7qv2/GHSA-h6w6-xx8j-7qv2.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h6w6-xx8j-7qv2",
+  "modified": "2024-01-16T15:30:27Z",
+  "published": "2024-01-16T15:30:27Z",
+  "aliases": [
+    "CVE-2024-0569"
+  ],
+  "details": "A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220905. This affects the function getSysStatusCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument ssid/key leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.5cu.862_B20230228 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-250785 was assigned to this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0569"
+    },
+    {
+      "type": "WEB",
+      "url": "https://drive.google.com/file/d/1WSWrGEKUkvPk8hq1VRng-wbR7T6CknGY/view?usp=sharing"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.250785"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.250785"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T13:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-hc8c-hr5h-hpg5/GHSA-hc8c-hr5h-hpg5.json b/advisories/unreviewed/2024/01/GHSA-hc8c-hr5h-hpg5/GHSA-hc8c-hr5h-hpg5.json
new file mode 100644
index 00000000000..ba69ed5b6ac
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-hc8c-hr5h-hpg5/GHSA-hc8c-hr5h-hpg5.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hc8c-hr5h-hpg5",
+  "modified": "2024-01-16T15:30:28Z",
+  "published": "2024-01-16T15:30:28Z",
+  "aliases": [
+    "CVE-2024-0574"
+  ],
+  "details": "A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this issue is the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument sTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250790 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0574"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/4/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.250790"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.250790"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T15:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-hfr8-9v95-p75f/GHSA-hfr8-9v95-p75f.json b/advisories/unreviewed/2024/01/GHSA-hfr8-9v95-p75f/GHSA-hfr8-9v95-p75f.json
index 59a4f7fb2f7..c4277a659b3 100644
--- a/advisories/unreviewed/2024/01/GHSA-hfr8-9v95-p75f/GHSA-hfr8-9v95-p75f.json
+++ b/advisories/unreviewed/2024/01/GHSA-hfr8-9v95-p75f/GHSA-hfr8-9v95-p75f.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hfr8-9v95-p75f",
-  "modified": "2024-01-10T09:30:27Z",
+  "modified": "2024-01-16T15:30:27Z",
   "published": "2024-01-10T09:30:27Z",
   "aliases": [
     "CVE-2023-51252"
   ],
   "details": "PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-01-10T09:15:44Z"
diff --git a/advisories/unreviewed/2024/01/GHSA-jgv7-84w9-f4h3/GHSA-jgv7-84w9-f4h3.json b/advisories/unreviewed/2024/01/GHSA-jgv7-84w9-f4h3/GHSA-jgv7-84w9-f4h3.json
new file mode 100644
index 00000000000..b001d3609b4
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-jgv7-84w9-f4h3/GHSA-jgv7-84w9-f4h3.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jgv7-84w9-f4h3",
+  "modified": "2024-01-16T15:30:28Z",
+  "published": "2024-01-16T15:30:28Z",
+  "aliases": [
+    "CVE-2024-0572"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pppoeUser leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250788. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0572"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/2/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.250788"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.250788"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T14:15:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-mcx8-9rrj-7qxm/GHSA-mcx8-9rrj-7qxm.json b/advisories/unreviewed/2024/01/GHSA-mcx8-9rrj-7qxm/GHSA-mcx8-9rrj-7qxm.json
new file mode 100644
index 00000000000..587e5b4f29d
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-mcx8-9rrj-7qxm/GHSA-mcx8-9rrj-7qxm.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mcx8-9rrj-7qxm",
+  "modified": "2024-01-16T15:30:27Z",
+  "published": "2024-01-16T15:30:27Z",
+  "aliases": [
+    "CVE-2024-0567"
+  ],
+  "details": "A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0567"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2024-0567"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258544"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.com/gnutls/gnutls/-/issues/1521"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-347"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T14:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-qh26-cpr6-mhm2/GHSA-qh26-cpr6-mhm2.json b/advisories/unreviewed/2024/01/GHSA-qh26-cpr6-mhm2/GHSA-qh26-cpr6-mhm2.json
index 263c9bac142..be60c7dce74 100644
--- a/advisories/unreviewed/2024/01/GHSA-qh26-cpr6-mhm2/GHSA-qh26-cpr6-mhm2.json
+++ b/advisories/unreviewed/2024/01/GHSA-qh26-cpr6-mhm2/GHSA-qh26-cpr6-mhm2.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qh26-cpr6-mhm2",
-  "modified": "2024-01-10T09:30:27Z",
+  "modified": "2024-01-16T15:30:27Z",
   "published": "2024-01-10T09:30:27Z",
   "aliases": [
     "CVE-2020-26629"
   ],
   "details": "A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-434"
     ],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-01-10T09:15:43Z"
diff --git a/advisories/unreviewed/2024/01/GHSA-rvr5-9pgv-pj7m/GHSA-rvr5-9pgv-pj7m.json b/advisories/unreviewed/2024/01/GHSA-rvr5-9pgv-pj7m/GHSA-rvr5-9pgv-pj7m.json
new file mode 100644
index 00000000000..0ba70ef9898
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-rvr5-9pgv-pj7m/GHSA-rvr5-9pgv-pj7m.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rvr5-9pgv-pj7m",
+  "modified": "2024-01-16T15:30:28Z",
+  "published": "2024-01-16T15:30:28Z",
+  "aliases": [
+    "CVE-2024-0575"
+  ],
+  "details": "A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250791. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0575"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/5/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.250791"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.250791"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T15:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-v393-vf8w-rvv7/GHSA-v393-vf8w-rvv7.json b/advisories/unreviewed/2024/01/GHSA-v393-vf8w-rvv7/GHSA-v393-vf8w-rvv7.json
new file mode 100644
index 00000000000..4f77cb60e4e
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-v393-vf8w-rvv7/GHSA-v393-vf8w-rvv7.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v393-vf8w-rvv7",
+  "modified": "2024-01-16T15:30:28Z",
+  "published": "2024-01-16T15:30:28Z",
+  "aliases": [
+    "CVE-2024-0573"
+  ],
+  "details": "A vulnerability has been found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this vulnerability is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250789 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0573"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/3/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.250789"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.250789"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T15:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-v462-3xw3-jqx3/GHSA-v462-3xw3-jqx3.json b/advisories/unreviewed/2024/01/GHSA-v462-3xw3-jqx3/GHSA-v462-3xw3-jqx3.json
new file mode 100644
index 00000000000..3e56e4aa51f
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-v462-3xw3-jqx3/GHSA-v462-3xw3-jqx3.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v462-3xw3-jqx3",
+  "modified": "2024-01-16T15:30:28Z",
+  "published": "2024-01-16T15:30:28Z",
+  "aliases": [
+    "CVE-2021-4432"
+  ],
+  "details": "A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as problematic. This affects an unknown part of the component USER Command Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250719.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4432"
+    },
+    {
+      "type": "WEB",
+      "url": "https://0day.today/exploit/description/36412"
+    },
+    {
+      "type": "WEB",
+      "url": "https://packetstormsecurity.com/files/163104/PCMan-FTP-Server-2.0.7-Denial-Of-Service.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.250719"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.250719"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-404"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T15:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-vqhw-2g88-5gvm/GHSA-vqhw-2g88-5gvm.json b/advisories/unreviewed/2024/01/GHSA-vqhw-2g88-5gvm/GHSA-vqhw-2g88-5gvm.json
new file mode 100644
index 00000000000..713f633c5d6
--- /dev/null
+++ b/advisories/unreviewed/2024/01/GHSA-vqhw-2g88-5gvm/GHSA-vqhw-2g88-5gvm.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vqhw-2g88-5gvm",
+  "modified": "2024-01-16T15:30:28Z",
+  "published": "2024-01-16T15:30:28Z",
+  "aliases": [
+    "CVE-2024-0582"
+  ],
+  "details": "A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0582"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2024-0582"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=2504"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254050"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c392cbecd8eca4c53f2bf508731257d9d0a21c2d"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-01-16T15:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-x2hg-844v-frvh/GHSA-x2hg-844v-frvh.json b/advisories/unreviewed/2024/01/GHSA-x2hg-844v-frvh/GHSA-x2hg-844v-frvh.json
index 093ef956c4d..1e9c79ea624 100644
--- a/advisories/unreviewed/2024/01/GHSA-x2hg-844v-frvh/GHSA-x2hg-844v-frvh.json
+++ b/advisories/unreviewed/2024/01/GHSA-x2hg-844v-frvh/GHSA-x2hg-844v-frvh.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x2hg-844v-frvh",
-  "modified": "2024-01-09T09:30:29Z",
+  "modified": "2024-01-16T15:30:27Z",
   "published": "2024-01-09T09:30:29Z",
   "aliases": [
     "CVE-2024-22368"
   ],
   "details": "The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
 
@@ -35,7 +38,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-01-09T09:15:42Z"