diff --git a/advisories/unreviewed/2024/05/GHSA-897p-94fw-f6m3/GHSA-897p-94fw-f6m3.json b/advisories/unreviewed/2024/05/GHSA-897p-94fw-f6m3/GHSA-897p-94fw-f6m3.json
index 50f3d679442..f99f200bcda 100644
--- a/advisories/unreviewed/2024/05/GHSA-897p-94fw-f6m3/GHSA-897p-94fw-f6m3.json
+++ b/advisories/unreviewed/2024/05/GHSA-897p-94fw-f6m3/GHSA-897p-94fw-f6m3.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-897p-94fw-f6m3",
-  "modified": "2024-05-23T09:30:28Z",
+  "modified": "2025-01-07T00:31:38Z",
   "published": "2024-05-23T09:30:28Z",
   "aliases": [
     "CVE-2024-36011"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HCI: Fix potential null-ptr-deref\n\nFix potential null-ptr-deref in hci_le_big_sync_established_evt().",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-05-23T07:15:08Z"
diff --git a/advisories/unreviewed/2024/05/GHSA-qm69-cr5h-7x64/GHSA-qm69-cr5h-7x64.json b/advisories/unreviewed/2024/05/GHSA-qm69-cr5h-7x64/GHSA-qm69-cr5h-7x64.json
index 546a45c059f..52eb93790d2 100644
--- a/advisories/unreviewed/2024/05/GHSA-qm69-cr5h-7x64/GHSA-qm69-cr5h-7x64.json
+++ b/advisories/unreviewed/2024/05/GHSA-qm69-cr5h-7x64/GHSA-qm69-cr5h-7x64.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qm69-cr5h-7x64",
-  "modified": "2024-05-23T09:30:28Z",
+  "modified": "2025-01-07T00:31:38Z",
   "published": "2024-05-23T09:30:28Z",
   "aliases": [
     "CVE-2024-36012"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: msft: fix slab-use-after-free in msft_do_close()\n\nTying the msft->data lifetime to hdev by freeing it in\nhci_release_dev() to fix the following case:\n\n[use]\nmsft_do_close()\n  msft = hdev->msft_data;\n  if (!msft)                      ...(1) <- passed.\n    return;\n  mutex_lock(&msft->filter_lock); ...(4) <- used after freed.\n\n[free]\nmsft_unregister()\n  msft = hdev->msft_data;\n  hdev->msft_data = NULL;         ...(2)\n  kfree(msft);                    ...(3) <- msft is freed.\n\n==================================================================\nBUG: KASAN: slab-use-after-free in __mutex_lock_common\nkernel/locking/mutex.c:587 [inline]\nBUG: KASAN: slab-use-after-free in __mutex_lock+0x8f/0xc30\nkernel/locking/mutex.c:752\nRead of size 8 at addr ffff888106cbbca8 by task kworker/u5:2/309",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-05-23T07:15:08Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-2g7v-9r87-x6xh/GHSA-2g7v-9r87-x6xh.json b/advisories/unreviewed/2024/06/GHSA-2g7v-9r87-x6xh/GHSA-2g7v-9r87-x6xh.json
index 897652b27af..c53d4f379df 100644
--- a/advisories/unreviewed/2024/06/GHSA-2g7v-9r87-x6xh/GHSA-2g7v-9r87-x6xh.json
+++ b/advisories/unreviewed/2024/06/GHSA-2g7v-9r87-x6xh/GHSA-2g7v-9r87-x6xh.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2g7v-9r87-x6xh",
-  "modified": "2024-06-20T12:31:22Z",
+  "modified": "2025-01-07T00:31:39Z",
   "published": "2024-06-20T12:31:22Z",
   "aliases": [
     "CVE-2022-48766"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU.\n\nMirrors the logic for dcn30. Cue lots of WARNs and some\nkernel panics without this fix.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -25,7 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-20T12:15:14Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-38w9-7cc9-2cwv/GHSA-38w9-7cc9-2cwv.json b/advisories/unreviewed/2024/06/GHSA-38w9-7cc9-2cwv/GHSA-38w9-7cc9-2cwv.json
index b273f7544fb..f3115948b0b 100644
--- a/advisories/unreviewed/2024/06/GHSA-38w9-7cc9-2cwv/GHSA-38w9-7cc9-2cwv.json
+++ b/advisories/unreviewed/2024/06/GHSA-38w9-7cc9-2cwv/GHSA-38w9-7cc9-2cwv.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-38w9-7cc9-2cwv",
-  "modified": "2024-06-20T12:31:22Z",
+  "modified": "2025-01-07T00:31:39Z",
   "published": "2024-06-20T12:31:22Z",
   "aliases": [
     "CVE-2022-48755"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06\n\nJohan reported the below crash with test_bpf on ppc64 e5500:\n\n  test_bpf: #296 ALU_END_FROM_LE 64: 0x0123456789abcdef -> 0x67452301 jited:1\n  Oops: Exception in kernel mode, sig: 4 [#1]\n  BE PAGE_SIZE=4K SMP NR_CPUS=24 QEMU e500\n  Modules linked in: test_bpf(+)\n  CPU: 0 PID: 76 Comm: insmod Not tainted 5.14.0-03771-g98c2059e008a-dirty #1\n  NIP:  8000000000061c3c LR: 80000000006dea64 CTR: 8000000000061c18\n  REGS: c0000000032d3420 TRAP: 0700   Not tainted (5.14.0-03771-g98c2059e008a-dirty)\n  MSR:  0000000080089000 <EE,ME>  CR: 88002822  XER: 20000000 IRQMASK: 0\n  <...>\n  NIP [8000000000061c3c] 0x8000000000061c3c\n  LR [80000000006dea64] .__run_one+0x104/0x17c [test_bpf]\n  Call Trace:\n   .__run_one+0x60/0x17c [test_bpf] (unreliable)\n   .test_bpf_init+0x6a8/0xdc8 [test_bpf]\n   .do_one_initcall+0x6c/0x28c\n   .do_init_module+0x68/0x28c\n   .load_module+0x2460/0x2abc\n   .__do_sys_init_module+0x120/0x18c\n   .system_call_exception+0x110/0x1b8\n   system_call_common+0xf0/0x210\n  --- interrupt: c00 at 0x101d0acc\n  <...>\n  ---[ end trace 47b2bf19090bb3d0 ]---\n\n  Illegal instruction\n\nThe illegal instruction turned out to be 'ldbrx' emitted for\nBPF_FROM_[L|B]E, which was only introduced in ISA v2.06. Guard use of\nthe same and implement an alternative approach for older processors.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -33,7 +38,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-20T12:15:13Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-86c2-5gmm-pc5g/GHSA-86c2-5gmm-pc5g.json b/advisories/unreviewed/2024/06/GHSA-86c2-5gmm-pc5g/GHSA-86c2-5gmm-pc5g.json
index 24d7f079b16..e61a1cda763 100644
--- a/advisories/unreviewed/2024/06/GHSA-86c2-5gmm-pc5g/GHSA-86c2-5gmm-pc5g.json
+++ b/advisories/unreviewed/2024/06/GHSA-86c2-5gmm-pc5g/GHSA-86c2-5gmm-pc5g.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-86c2-5gmm-pc5g",
-  "modified": "2024-06-20T12:31:21Z",
+  "modified": "2025-01-07T00:31:39Z",
   "published": "2024-06-20T12:31:21Z",
   "aliases": [
     "CVE-2022-48739"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: hdmi-codec: Fix OOB memory accesses\n\nCorrect size of iec_status array by changing it to the size of status\narray of the struct snd_aes_iec958. This fixes out-of-bounds slab\nread accesses made by memcpy() of the hdmi-codec driver. This problem\nis reported by KASAN.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-125"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-20T12:15:12Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-88rc-96xj-2mvh/GHSA-88rc-96xj-2mvh.json b/advisories/unreviewed/2024/06/GHSA-88rc-96xj-2mvh/GHSA-88rc-96xj-2mvh.json
index f9bdbe71a1d..0ee71308cbd 100644
--- a/advisories/unreviewed/2024/06/GHSA-88rc-96xj-2mvh/GHSA-88rc-96xj-2mvh.json
+++ b/advisories/unreviewed/2024/06/GHSA-88rc-96xj-2mvh/GHSA-88rc-96xj-2mvh.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-88rc-96xj-2mvh",
-  "modified": "2024-06-20T12:31:21Z",
+  "modified": "2025-01-07T00:31:39Z",
   "published": "2024-06-20T12:31:21Z",
   "aliases": [
     "CVE-2022-48730"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-buf: heaps: Fix potential spectre v1 gadget\n\nIt appears like nr could be a Spectre v1 gadget as it's supplied by a\nuser and used as an array index. Prevent the contents\nof kernel memory from being leaked to userspace via speculative\nexecution by using array_index_nospec.\n\n [sumits: added fixes and cc: stable tags]",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-203"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-20T12:15:11Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-j2qm-vfcf-p3gj/GHSA-j2qm-vfcf-p3gj.json b/advisories/unreviewed/2024/06/GHSA-j2qm-vfcf-p3gj/GHSA-j2qm-vfcf-p3gj.json
index a82cf6bf5be..75b2ec96926 100644
--- a/advisories/unreviewed/2024/06/GHSA-j2qm-vfcf-p3gj/GHSA-j2qm-vfcf-p3gj.json
+++ b/advisories/unreviewed/2024/06/GHSA-j2qm-vfcf-p3gj/GHSA-j2qm-vfcf-p3gj.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j2qm-vfcf-p3gj",
-  "modified": "2024-06-20T12:31:22Z",
+  "modified": "2025-01-07T00:31:39Z",
   "published": "2024-06-20T12:31:22Z",
   "aliases": [
     "CVE-2022-48771"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: Fix stale file descriptors on failed usercopy\n\nA failing usercopy of the fence_rep object will lead to a stale entry in\nthe file descriptor table as put_unused_fd() won't release it. This\nenables userland to refer to a dangling 'file' object through that still\nvalid file descriptor, leading to all kinds of use-after-free\nexploitation scenarios.\n\nFix this by deferring the call to fd_install() until after the usercopy\nhas succeeded.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -44,8 +49,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-20T12:15:15Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-j385-2ppr-7766/GHSA-j385-2ppr-7766.json b/advisories/unreviewed/2024/06/GHSA-j385-2ppr-7766/GHSA-j385-2ppr-7766.json
index f9991d2f578..5084bc5d9ca 100644
--- a/advisories/unreviewed/2024/06/GHSA-j385-2ppr-7766/GHSA-j385-2ppr-7766.json
+++ b/advisories/unreviewed/2024/06/GHSA-j385-2ppr-7766/GHSA-j385-2ppr-7766.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j385-2ppr-7766",
-  "modified": "2024-06-20T12:31:22Z",
+  "modified": "2025-01-07T00:31:39Z",
   "published": "2024-06-20T12:31:22Z",
   "aliases": [
     "CVE-2022-48751"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: Transitional solution for clcsock race issue\n\nWe encountered a crash in smc_setsockopt() and it is caused by\naccessing smc->clcsock after clcsock was released.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000020\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEMPT SMP PTI\n CPU: 1 PID: 50309 Comm: nginx Kdump: loaded Tainted: G E     5.16.0-rc4+ #53\n RIP: 0010:smc_setsockopt+0x59/0x280 [smc]\n Call Trace:\n  <TASK>\n  __sys_setsockopt+0xfc/0x190\n  __x64_sys_setsockopt+0x20/0x30\n  do_syscall_64+0x34/0x90\n  entry_SYSCALL_64_after_hwframe+0x44/0xae\n RIP: 0033:0x7f16ba83918e\n  </TASK>\n\nThis patch tries to fix it by holding clcsock_release_lock and\nchecking whether clcsock has already been released before access.\n\nIn case that a crash of the same reason happens in smc_getsockopt()\nor smc_switch_to_fallback(), this patch also checkes smc->clcsock\nin them too. And the caller of smc_switch_to_fallback() will identify\nwhether fallback succeeds according to the return value.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-20T12:15:13Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-qx5f-76wj-2xm5/GHSA-qx5f-76wj-2xm5.json b/advisories/unreviewed/2024/06/GHSA-qx5f-76wj-2xm5/GHSA-qx5f-76wj-2xm5.json
index 0fe08a51148..b885b4ea052 100644
--- a/advisories/unreviewed/2024/06/GHSA-qx5f-76wj-2xm5/GHSA-qx5f-76wj-2xm5.json
+++ b/advisories/unreviewed/2024/06/GHSA-qx5f-76wj-2xm5/GHSA-qx5f-76wj-2xm5.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qx5f-76wj-2xm5",
-  "modified": "2024-06-20T12:31:22Z",
+  "modified": "2025-01-07T00:31:39Z",
   "published": "2024-06-20T12:31:22Z",
   "aliases": [
     "CVE-2022-48770"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()\n\ntask_pt_regs() can return NULL on powerpc for kernel threads. This is\nthen used in __bpf_get_stack() to check for user mode, resulting in a\nkernel oops. Guard against this by checking return value of\ntask_pt_regs() before trying to obtain the call chain.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-06-20T12:15:14Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-h8m3-2hqh-wxmr/GHSA-h8m3-2hqh-wxmr.json b/advisories/unreviewed/2024/12/GHSA-h8m3-2hqh-wxmr/GHSA-h8m3-2hqh-wxmr.json
index db777251124..e5195418c22 100644
--- a/advisories/unreviewed/2024/12/GHSA-h8m3-2hqh-wxmr/GHSA-h8m3-2hqh-wxmr.json
+++ b/advisories/unreviewed/2024/12/GHSA-h8m3-2hqh-wxmr/GHSA-h8m3-2hqh-wxmr.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h8m3-2hqh-wxmr",
-  "modified": "2024-12-27T15:31:56Z",
+  "modified": "2025-01-07T00:31:39Z",
   "published": "2024-12-27T15:31:56Z",
   "aliases": [
     "CVE-2024-56654"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix using rcu_read_(un)lock while iterating\n\nThe usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is\nnot safe since for the most part entries fetched this way shall be\ntreated as rcu_dereference:\n\n\tNote that the value returned by rcu_dereference() is valid\n\tonly within the enclosing RCU read-side critical section [1]_.\n\tFor example, the following is **not** legal::\n\n\t\trcu_read_lock();\n\t\tp = rcu_dereference(head.next);\n\t\trcu_read_unlock();\n\t\tx = p->address;\t/* BUG!!! */\n\t\trcu_read_lock();\n\t\ty = p->data;\t/* BUG!!! */\n\t\trcu_read_unlock();",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -29,7 +34,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-27T15:15:25Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-jgxj-ff5p-q3r5/GHSA-jgxj-ff5p-q3r5.json b/advisories/unreviewed/2024/12/GHSA-jgxj-ff5p-q3r5/GHSA-jgxj-ff5p-q3r5.json
index d585b28a3de..7a719bdec7e 100644
--- a/advisories/unreviewed/2024/12/GHSA-jgxj-ff5p-q3r5/GHSA-jgxj-ff5p-q3r5.json
+++ b/advisories/unreviewed/2024/12/GHSA-jgxj-ff5p-q3r5/GHSA-jgxj-ff5p-q3r5.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jgxj-ff5p-q3r5",
-  "modified": "2024-12-27T15:31:55Z",
+  "modified": "2025-01-07T00:31:39Z",
   "published": "2024-12-27T15:31:55Z",
   "aliases": [
     "CVE-2024-56653"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btmtk: avoid UAF in btmtk_process_coredump\n\nhci_devcd_append may lead to the release of the skb, so it cannot be\naccessed once it is called.\n\n==================================================================\nBUG: KASAN: slab-use-after-free in btmtk_process_coredump+0x2a7/0x2d0 [btmtk]\nRead of size 4 at addr ffff888033cfabb0 by task kworker/0:3/82\n\nCPU: 0 PID: 82 Comm: kworker/0:3 Tainted: G     U             6.6.40-lockdep-03464-g1d8b4eb3060e #1 b0b3c1cc0c842735643fb411799d97921d1f688c\nHardware name: Google Yaviks_Ufs/Yaviks_Ufs, BIOS Google_Yaviks_Ufs.15217.552.0 05/07/2024\nWorkqueue: events btusb_rx_work [btusb]\nCall Trace:\n <TASK>\n dump_stack_lvl+0xfd/0x150\n print_report+0x131/0x780\n kasan_report+0x177/0x1c0\n btmtk_process_coredump+0x2a7/0x2d0 [btmtk 03edd567dd71a65958807c95a65db31d433e1d01]\n btusb_recv_acl_mtk+0x11c/0x1a0 [btusb 675430d1e87c4f24d0c1f80efe600757a0f32bec]\n btusb_rx_work+0x9e/0xe0 [btusb 675430d1e87c4f24d0c1f80efe600757a0f32bec]\n worker_thread+0xe44/0x2cc0\n kthread+0x2ff/0x3a0\n ret_from_fork+0x51/0x80\n ret_from_fork_asm+0x1b/0x30\n </TASK>\n\nAllocated by task 82:\n stack_trace_save+0xdc/0x190\n kasan_set_track+0x4e/0x80\n __kasan_slab_alloc+0x4e/0x60\n kmem_cache_alloc+0x19f/0x360\n skb_clone+0x132/0xf70\n btusb_recv_acl_mtk+0x104/0x1a0 [btusb]\n btusb_rx_work+0x9e/0xe0 [btusb]\n worker_thread+0xe44/0x2cc0\n kthread+0x2ff/0x3a0\n ret_from_fork+0x51/0x80\n ret_from_fork_asm+0x1b/0x30\n\nFreed by task 1733:\n stack_trace_save+0xdc/0x190\n kasan_set_track+0x4e/0x80\n kasan_save_free_info+0x28/0xb0\n ____kasan_slab_free+0xfd/0x170\n kmem_cache_free+0x183/0x3f0\n hci_devcd_rx+0x91a/0x2060 [bluetooth]\n worker_thread+0xe44/0x2cc0\n kthread+0x2ff/0x3a0\n ret_from_fork+0x51/0x80\n ret_from_fork_asm+0x1b/0x30\n\nThe buggy address belongs to the object at ffff888033cfab40\n which belongs to the cache skbuff_head_cache of size 232\nThe buggy address is located 112 bytes inside of\n freed 232-byte region [ffff888033cfab40, ffff888033cfac28)\n\nThe buggy address belongs to the physical page:\npage:00000000a174ba93 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33cfa\nhead:00000000a174ba93 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0\nanon flags: 0x4000000000000840(slab|head|zone=1)\npage_type: 0xffffffff()\nraw: 4000000000000840 ffff888100848a00 0000000000000000 0000000000000001\nraw: 0000000000000000 0000000080190019 00000001ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff888033cfaa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc\n ffff888033cfab00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb\n>ffff888033cfab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n                                     ^\n ffff888033cfac00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc\n ffff888033cfac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n==================================================================\n\nCheck if we need to call hci_devcd_complete before calling\nhci_devcd_append. That requires that we check data->cd_info.cnt >=\nMTK_COREDUMP_NUM instead of data->cd_info.cnt > MTK_COREDUMP_NUM, as we\nincrement data->cd_info.cnt only once the call to hci_devcd_append\nsucceeds.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-27T15:15:25Z"
diff --git a/advisories/unreviewed/2025/01/GHSA-2wgj-4jrq-2g66/GHSA-2wgj-4jrq-2g66.json b/advisories/unreviewed/2025/01/GHSA-2wgj-4jrq-2g66/GHSA-2wgj-4jrq-2g66.json
new file mode 100644
index 00000000000..49466cd378b
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-2wgj-4jrq-2g66/GHSA-2wgj-4jrq-2g66.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2wgj-4jrq-2g66",
+  "modified": "2025-01-07T00:31:39Z",
+  "published": "2025-01-07T00:31:39Z",
+  "aliases": [
+    "CVE-2024-48456"
+  ],
+  "details": "An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a remote attacker to obtain sensitive information via the parameter password at the change admin password page at the router web interface.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48456"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/users/h00die-gr3y/projects/1/views/1"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-5hp7-929x-xgf8/GHSA-5hp7-929x-xgf8.json b/advisories/unreviewed/2025/01/GHSA-5hp7-929x-xgf8/GHSA-5hp7-929x-xgf8.json
new file mode 100644
index 00000000000..9b618c160f8
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-5hp7-929x-xgf8/GHSA-5hp7-929x-xgf8.json
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5hp7-929x-xgf8",
+  "modified": "2025-01-07T00:31:39Z",
+  "published": "2025-01-07T00:31:39Z",
+  "aliases": [
+    "CVE-2024-53933"
+  ],
+  "details": "The com.callerscreen.colorphone.themes.callflash (aka Color Call Theme & Call Screen) application through 1.0.7 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.android.call.color.app.activities.DialerActivity component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53933"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.callerscreen.colorphone.themes.callflash"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.callerscreen.colorphone.themes.callflash/blob/main/CVE-2024-53933"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-6p8q-94vc-wgp9/GHSA-6p8q-94vc-wgp9.json b/advisories/unreviewed/2025/01/GHSA-6p8q-94vc-wgp9/GHSA-6p8q-94vc-wgp9.json
new file mode 100644
index 00000000000..d6209a10cb8
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-6p8q-94vc-wgp9/GHSA-6p8q-94vc-wgp9.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6p8q-94vc-wgp9",
+  "modified": "2025-01-07T00:31:39Z",
+  "published": "2025-01-07T00:31:39Z",
+  "aliases": [
+    "CVE-2021-27285"
+  ],
+  "details": "An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27285"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/fjh1997/CVE-2021-27285"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-89r5-96wf-852f/GHSA-89r5-96wf-852f.json b/advisories/unreviewed/2025/01/GHSA-89r5-96wf-852f/GHSA-89r5-96wf-852f.json
new file mode 100644
index 00000000000..ec582b639a1
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-89r5-96wf-852f/GHSA-89r5-96wf-852f.json
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-89r5-96wf-852f",
+  "modified": "2025-01-07T00:31:39Z",
+  "published": "2025-01-07T00:31:39Z",
+  "aliases": [
+    "CVE-2024-53934"
+  ],
+  "details": "The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes) application through 1.1.2 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivity component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53934"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.windymob.callscreen.ringtone.callcolor.colorphone"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.windymob.callscreen.ringtone.callcolor.colorphone/blob/main/CVE-2024-53934"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-8w34-gxm3-8xv6/GHSA-8w34-gxm3-8xv6.json b/advisories/unreviewed/2025/01/GHSA-8w34-gxm3-8xv6/GHSA-8w34-gxm3-8xv6.json
new file mode 100644
index 00000000000..99772218fbb
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-8w34-gxm3-8xv6/GHSA-8w34-gxm3-8xv6.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8w34-gxm3-8xv6",
+  "modified": "2025-01-07T00:31:40Z",
+  "published": "2025-01-07T00:31:40Z",
+  "aliases": [
+    "CVE-2024-54764"
+  ],
+  "details": "An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54764"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Shuanunio/CVE_Requests/blob/main/ipTIME/A2004/ipTIME_A2004_unauthorized_access_vulnerability_second.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T23:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-9fw8-mqf2-cw8g/GHSA-9fw8-mqf2-cw8g.json b/advisories/unreviewed/2025/01/GHSA-9fw8-mqf2-cw8g/GHSA-9fw8-mqf2-cw8g.json
new file mode 100644
index 00000000000..e4658c61476
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-9fw8-mqf2-cw8g/GHSA-9fw8-mqf2-cw8g.json
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9fw8-mqf2-cw8g",
+  "modified": "2025-01-07T00:31:39Z",
+  "published": "2025-01-07T00:31:39Z",
+  "aliases": [
+    "CVE-2024-53935"
+  ],
+  "details": "The com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) application through 4.3 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53935"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.callos14.callscreen.colorphone"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.callos14.callscreen.colorphone/blob/main/CVE-2024-53935"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-c3c7-8qc4-fgrg/GHSA-c3c7-8qc4-fgrg.json b/advisories/unreviewed/2025/01/GHSA-c3c7-8qc4-fgrg/GHSA-c3c7-8qc4-fgrg.json
new file mode 100644
index 00000000000..1a15f588684
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-c3c7-8qc4-fgrg/GHSA-c3c7-8qc4-fgrg.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c3c7-8qc4-fgrg",
+  "modified": "2025-01-07T00:31:40Z",
+  "published": "2025-01-07T00:31:40Z",
+  "aliases": [
+    "CVE-2024-54763"
+  ],
+  "details": "An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54763"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Shuanunio/CVE_Requests/blob/main/ipTIME/A2004/ipTIME_A2004_unauthorized_access_vulnerability_first.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-cq9x-f32f-pmw7/GHSA-cq9x-f32f-pmw7.json b/advisories/unreviewed/2025/01/GHSA-cq9x-f32f-pmw7/GHSA-cq9x-f32f-pmw7.json
new file mode 100644
index 00000000000..7b6be731685
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-cq9x-f32f-pmw7/GHSA-cq9x-f32f-pmw7.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cq9x-f32f-pmw7",
+  "modified": "2025-01-07T00:31:39Z",
+  "published": "2025-01-07T00:31:39Z",
+  "aliases": [
+    "CVE-2024-53932"
+  ],
+  "details": "The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.9 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.remi.colorphone.callscreen.calltheme.callerscreen.dialer.DialerActivity component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53932"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.remi.colorphone.callscreen.calltheme.callerscreen/blob/main/CVE-2024-53932"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-fmmw-r3g8-j32w/GHSA-fmmw-r3g8-j32w.json b/advisories/unreviewed/2025/01/GHSA-fmmw-r3g8-j32w/GHSA-fmmw-r3g8-j32w.json
new file mode 100644
index 00000000000..a1b9411baa8
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-fmmw-r3g8-j32w/GHSA-fmmw-r3g8-j32w.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fmmw-r3g8-j32w",
+  "modified": "2025-01-07T00:31:40Z",
+  "published": "2025-01-07T00:31:40Z",
+  "aliases": [
+    "CVE-2024-54767"
+  ],
+  "details": "An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54767"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Shuanunio/CVE_Requests/blob/main/AVM/fritz/AVM_FRITZ%21Box_7530%20AX_unauthorized_access_vulnerability_first.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T23:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-g3qr-v2p6-vv6r/GHSA-g3qr-v2p6-vv6r.json b/advisories/unreviewed/2025/01/GHSA-g3qr-v2p6-vv6r/GHSA-g3qr-v2p6-vv6r.json
new file mode 100644
index 00000000000..0fa5d5543c4
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-g3qr-v2p6-vv6r/GHSA-g3qr-v2p6-vv6r.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g3qr-v2p6-vv6r",
+  "modified": "2025-01-07T00:31:39Z",
+  "published": "2025-01-07T00:31:39Z",
+  "aliases": [
+    "CVE-2024-48457"
+  ],
+  "details": "An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a remote attacker to obtain sensitive information via the endpoint /cgi-bin/skk_set.cgi and binary /bin/scripts/start_wifi.sh",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48457"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/users/h00die-gr3y/projects/1/views/1"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-hrrq-wpmq-47mf/GHSA-hrrq-wpmq-47mf.json b/advisories/unreviewed/2025/01/GHSA-hrrq-wpmq-47mf/GHSA-hrrq-wpmq-47mf.json
new file mode 100644
index 00000000000..92d2fecb466
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-hrrq-wpmq-47mf/GHSA-hrrq-wpmq-47mf.json
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hrrq-wpmq-47mf",
+  "modified": "2025-01-07T00:31:40Z",
+  "published": "2025-01-07T00:31:40Z",
+  "aliases": [
+    "CVE-2024-55553"
+  ],
+  "details": "In FRRouting (FRR) before 10.3, it is possible for an attacker to trigger repeated RIB revalidation by sending approximately 500 RPKI updates, potentially leading to prolonged revalidation times and a Denial of Service (DoS) scenario.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55553"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FRRouting/frr/pull/17586/commits/b0800bfdf04b4fcf48504737ebfe4ba7f05268d3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://frrouting.org/security/cve-2024-55553"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T23:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-jhc7-3m5f-4pm9/GHSA-jhc7-3m5f-4pm9.json b/advisories/unreviewed/2025/01/GHSA-jhc7-3m5f-4pm9/GHSA-jhc7-3m5f-4pm9.json
new file mode 100644
index 00000000000..c6b811236cf
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-jhc7-3m5f-4pm9/GHSA-jhc7-3m5f-4pm9.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jhc7-3m5f-4pm9",
+  "modified": "2025-01-07T00:31:39Z",
+  "published": "2025-01-07T00:31:39Z",
+  "aliases": [
+    "CVE-2024-48455"
+  ],
+  "details": "An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a remote attacker to obtain sensitive information via the mode_name, wl_link parameters of the skk_get.cgi component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48455"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/users/h00die-gr3y/projects/1/views/1"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-pxgr-mfpf-3qxj/GHSA-pxgr-mfpf-3qxj.json b/advisories/unreviewed/2025/01/GHSA-pxgr-mfpf-3qxj/GHSA-pxgr-mfpf-3qxj.json
new file mode 100644
index 00000000000..34dce46fd11
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-pxgr-mfpf-3qxj/GHSA-pxgr-mfpf-3qxj.json
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pxgr-mfpf-3qxj",
+  "modified": "2025-01-07T00:31:40Z",
+  "published": "2025-01-07T00:31:40Z",
+  "aliases": [
+    "CVE-2024-53936"
+  ],
+  "details": "The com.asianmobile.callcolor (aka Color Phone Call Screen App) application through 24 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53936"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.asianmobile.callcolor"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.asianmobile.callcolor/blob/main/CVE-2024-53936"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-q9rp-pmhm-w9f4/GHSA-q9rp-pmhm-w9f4.json b/advisories/unreviewed/2025/01/GHSA-q9rp-pmhm-w9f4/GHSA-q9rp-pmhm-w9f4.json
new file mode 100644
index 00000000000..30c174ef1a4
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-q9rp-pmhm-w9f4/GHSA-q9rp-pmhm-w9f4.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q9rp-pmhm-w9f4",
+  "modified": "2025-01-07T00:31:39Z",
+  "published": "2025-01-07T00:31:39Z",
+  "aliases": [
+    "CVE-2024-53931"
+  ],
+  "details": "The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53931"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/actuator/com.glitter.caller.screen/blob/main/CVE-2024-53931"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-06T22:15:10Z"
+  }
+}
\ No newline at end of file