diff --git a/advisories/unreviewed/2024/03/GHSA-9x6p-vrv7-6f7h/GHSA-9x6p-vrv7-6f7h.json b/advisories/unreviewed/2024/03/GHSA-9x6p-vrv7-6f7h/GHSA-9x6p-vrv7-6f7h.json
index 5892b60a96f..64964d5481b 100644
--- a/advisories/unreviewed/2024/03/GHSA-9x6p-vrv7-6f7h/GHSA-9x6p-vrv7-6f7h.json
+++ b/advisories/unreviewed/2024/03/GHSA-9x6p-vrv7-6f7h/GHSA-9x6p-vrv7-6f7h.json
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-q4g5-rq32-c88r/GHSA-q4g5-rq32-c88r.json b/advisories/unreviewed/2024/03/GHSA-q4g5-rq32-c88r/GHSA-q4g5-rq32-c88r.json
index 744aba67b78..e1a039172c8 100644
--- a/advisories/unreviewed/2024/03/GHSA-q4g5-rq32-c88r/GHSA-q4g5-rq32-c88r.json
+++ b/advisories/unreviewed/2024/03/GHSA-q4g5-rq32-c88r/GHSA-q4g5-rq32-c88r.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q4g5-rq32-c88r",
-  "modified": "2024-03-13T18:31:32Z",
+  "modified": "2025-01-02T18:30:33Z",
   "published": "2024-03-13T18:31:32Z",
   "aliases": [
     "CVE-2024-1038"
@@ -33,7 +33,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-qf28-mwpq-3cww/GHSA-qf28-mwpq-3cww.json b/advisories/unreviewed/2024/03/GHSA-qf28-mwpq-3cww/GHSA-qf28-mwpq-3cww.json
index fc6c3d9cb22..1a47b8c19cd 100644
--- a/advisories/unreviewed/2024/03/GHSA-qf28-mwpq-3cww/GHSA-qf28-mwpq-3cww.json
+++ b/advisories/unreviewed/2024/03/GHSA-qf28-mwpq-3cww/GHSA-qf28-mwpq-3cww.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qf28-mwpq-3cww",
-  "modified": "2024-03-13T18:31:32Z",
+  "modified": "2025-01-02T18:30:33Z",
   "published": "2024-03-13T18:31:32Z",
   "aliases": [
     "CVE-2024-0897"
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-qx3j-75f2-vm27/GHSA-qx3j-75f2-vm27.json b/advisories/unreviewed/2024/03/GHSA-qx3j-75f2-vm27/GHSA-qx3j-75f2-vm27.json
index be38f66725b..df78d4e3d7f 100644
--- a/advisories/unreviewed/2024/03/GHSA-qx3j-75f2-vm27/GHSA-qx3j-75f2-vm27.json
+++ b/advisories/unreviewed/2024/03/GHSA-qx3j-75f2-vm27/GHSA-qx3j-75f2-vm27.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qx3j-75f2-vm27",
-  "modified": "2024-03-13T18:31:32Z",
+  "modified": "2025-01-02T18:30:33Z",
   "published": "2024-03-13T18:31:32Z",
   "aliases": [
     "CVE-2024-1080"
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-rp84-mf2f-2px3/GHSA-rp84-mf2f-2px3.json b/advisories/unreviewed/2024/03/GHSA-rp84-mf2f-2px3/GHSA-rp84-mf2f-2px3.json
index fd7253f4dac..1853f2a089f 100644
--- a/advisories/unreviewed/2024/03/GHSA-rp84-mf2f-2px3/GHSA-rp84-mf2f-2px3.json
+++ b/advisories/unreviewed/2024/03/GHSA-rp84-mf2f-2px3/GHSA-rp84-mf2f-2px3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rp84-mf2f-2px3",
-  "modified": "2024-03-13T18:31:32Z",
+  "modified": "2025-01-02T18:30:33Z",
   "published": "2024-03-13T18:31:32Z",
   "aliases": [
     "CVE-2024-0896"
@@ -33,7 +33,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-w53f-3px7-5433/GHSA-w53f-3px7-5433.json b/advisories/unreviewed/2024/03/GHSA-w53f-3px7-5433/GHSA-w53f-3px7-5433.json
index cad8121313d..075b1764d83 100644
--- a/advisories/unreviewed/2024/03/GHSA-w53f-3px7-5433/GHSA-w53f-3px7-5433.json
+++ b/advisories/unreviewed/2024/03/GHSA-w53f-3px7-5433/GHSA-w53f-3px7-5433.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-w53f-3px7-5433",
-  "modified": "2024-03-13T18:31:32Z",
+  "modified": "2025-01-02T18:30:33Z",
   "published": "2024-03-13T18:31:32Z",
   "aliases": [
     "CVE-2024-1074"
@@ -33,7 +33,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/09/GHSA-53c9-m2h7-5xhr/GHSA-53c9-m2h7-5xhr.json b/advisories/unreviewed/2024/09/GHSA-53c9-m2h7-5xhr/GHSA-53c9-m2h7-5xhr.json
index e1d73624d4c..d048da0ccbc 100644
--- a/advisories/unreviewed/2024/09/GHSA-53c9-m2h7-5xhr/GHSA-53c9-m2h7-5xhr.json
+++ b/advisories/unreviewed/2024/09/GHSA-53c9-m2h7-5xhr/GHSA-53c9-m2h7-5xhr.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/09/GHSA-jcp9-wrqq-gg3h/GHSA-jcp9-wrqq-gg3h.json b/advisories/unreviewed/2024/09/GHSA-jcp9-wrqq-gg3h/GHSA-jcp9-wrqq-gg3h.json
index 3c1ba5ed119..ee5d20a8063 100644
--- a/advisories/unreviewed/2024/09/GHSA-jcp9-wrqq-gg3h/GHSA-jcp9-wrqq-gg3h.json
+++ b/advisories/unreviewed/2024/09/GHSA-jcp9-wrqq-gg3h/GHSA-jcp9-wrqq-gg3h.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-457"
+      "CWE-457",
+      "CWE-908"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/09/GHSA-vhc3-jh5x-7vhv/GHSA-vhc3-jh5x-7vhv.json b/advisories/unreviewed/2024/09/GHSA-vhc3-jh5x-7vhv/GHSA-vhc3-jh5x-7vhv.json
index e7580bf0bcd..860974962cb 100644
--- a/advisories/unreviewed/2024/09/GHSA-vhc3-jh5x-7vhv/GHSA-vhc3-jh5x-7vhv.json
+++ b/advisories/unreviewed/2024/09/GHSA-vhc3-jh5x-7vhv/GHSA-vhc3-jh5x-7vhv.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-787"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/09/GHSA-xrx8-f378-fwph/GHSA-xrx8-f378-fwph.json b/advisories/unreviewed/2024/09/GHSA-xrx8-f378-fwph/GHSA-xrx8-f378-fwph.json
index 88f01096172..277b8fd4652 100644
--- a/advisories/unreviewed/2024/09/GHSA-xrx8-f378-fwph/GHSA-xrx8-f378-fwph.json
+++ b/advisories/unreviewed/2024/09/GHSA-xrx8-f378-fwph/GHSA-xrx8-f378-fwph.json
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/11/GHSA-r4vw-x7gf-4r43/GHSA-r4vw-x7gf-4r43.json b/advisories/unreviewed/2024/11/GHSA-r4vw-x7gf-4r43/GHSA-r4vw-x7gf-4r43.json
index f70db262b4f..eea51a0e8d2 100644
--- a/advisories/unreviewed/2024/11/GHSA-r4vw-x7gf-4r43/GHSA-r4vw-x7gf-4r43.json
+++ b/advisories/unreviewed/2024/11/GHSA-r4vw-x7gf-4r43/GHSA-r4vw-x7gf-4r43.json
@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-190",
       "CWE-472"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2024/12/GHSA-529c-hjgw-g8wj/GHSA-529c-hjgw-g8wj.json b/advisories/unreviewed/2024/12/GHSA-529c-hjgw-g8wj/GHSA-529c-hjgw-g8wj.json
index f97a94e0d52..91defb63b7e 100644
--- a/advisories/unreviewed/2024/12/GHSA-529c-hjgw-g8wj/GHSA-529c-hjgw-g8wj.json
+++ b/advisories/unreviewed/2024/12/GHSA-529c-hjgw-g8wj/GHSA-529c-hjgw-g8wj.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-529c-hjgw-g8wj",
-  "modified": "2024-12-10T18:31:07Z",
+  "modified": "2025-01-02T18:30:35Z",
   "published": "2024-12-10T18:31:07Z",
   "aliases": [
     "CVE-2024-53247"
diff --git a/advisories/unreviewed/2024/12/GHSA-6chf-57fp-7vxm/GHSA-6chf-57fp-7vxm.json b/advisories/unreviewed/2024/12/GHSA-6chf-57fp-7vxm/GHSA-6chf-57fp-7vxm.json
index 58154603357..e63e806052c 100644
--- a/advisories/unreviewed/2024/12/GHSA-6chf-57fp-7vxm/GHSA-6chf-57fp-7vxm.json
+++ b/advisories/unreviewed/2024/12/GHSA-6chf-57fp-7vxm/GHSA-6chf-57fp-7vxm.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6chf-57fp-7vxm",
-  "modified": "2024-12-31T21:30:46Z",
+  "modified": "2025-01-02T18:30:35Z",
   "published": "2024-12-31T21:30:46Z",
   "aliases": [
     "CVE-2024-13079"
@@ -27,6 +27,10 @@
       "type": "WEB",
       "url": "https://phpgurukul.com"
     },
+    {
+      "type": "WEB",
+      "url": "https://phpgurukul.com/land-record-system-using-php-and-mysql"
+    },
     {
       "type": "WEB",
       "url": "https://vuldb.com/?ctiid.289832"
diff --git a/advisories/unreviewed/2024/12/GHSA-wvx7-72hc-rp32/GHSA-wvx7-72hc-rp32.json b/advisories/unreviewed/2024/12/GHSA-wvx7-72hc-rp32/GHSA-wvx7-72hc-rp32.json
new file mode 100644
index 00000000000..c3632d7d3e8
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-wvx7-72hc-rp32/GHSA-wvx7-72hc-rp32.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wvx7-72hc-rp32",
+  "modified": "2025-01-02T18:30:35Z",
+  "published": "2024-12-03T21:31:22Z",
+  "aliases": [
+    "CVE-2024-12053"
+  ],
+  "details": "Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12053"
+    },
+    {
+      "type": "WEB",
+      "url": "https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://issues.chromium.org/issues/379009132"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-843"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-03T19:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-274c-jx98-whwv/GHSA-274c-jx98-whwv.json b/advisories/unreviewed/2025/01/GHSA-274c-jx98-whwv/GHSA-274c-jx98-whwv.json
new file mode 100644
index 00000000000..58525a74cde
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-274c-jx98-whwv/GHSA-274c-jx98-whwv.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-274c-jx98-whwv",
+  "modified": "2025-01-02T18:30:36Z",
+  "published": "2025-01-02T18:30:36Z",
+  "aliases": [
+    "CVE-2024-55543"
+  ],
+  "details": "Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55543"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security-advisory.acronis.com/advisories/SEC-6418"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-427"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-35ff-c49r-m93w/GHSA-35ff-c49r-m93w.json b/advisories/unreviewed/2025/01/GHSA-35ff-c49r-m93w/GHSA-35ff-c49r-m93w.json
new file mode 100644
index 00000000000..db6e2a56a71
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-35ff-c49r-m93w/GHSA-35ff-c49r-m93w.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-35ff-c49r-m93w",
+  "modified": "2025-01-02T18:30:37Z",
+  "published": "2025-01-02T18:30:37Z",
+  "aliases": [
+    "CVE-2025-0173"
+  ],
+  "details": "A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /orders/view_order.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0173"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/listlonely/cve/blob/main/sql.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.289940"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.289940"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.473163"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.sourcecodester.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T18:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-7297-7fmm-32j7/GHSA-7297-7fmm-32j7.json b/advisories/unreviewed/2025/01/GHSA-7297-7fmm-32j7/GHSA-7297-7fmm-32j7.json
new file mode 100644
index 00000000000..cb56a2a647e
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-7297-7fmm-32j7/GHSA-7297-7fmm-32j7.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7297-7fmm-32j7",
+  "modified": "2025-01-02T18:30:35Z",
+  "published": "2025-01-02T18:30:35Z",
+  "aliases": [
+    "CVE-2022-47601"
+  ],
+  "details": "Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Table Manager: from n/a through 3.5.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47601"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wp-table-manager/vulnerability/wordpress-wp-table-manager-plugin-3-5-2-broken-access-control?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-7wpf-4jwj-r2v3/GHSA-7wpf-4jwj-r2v3.json b/advisories/unreviewed/2025/01/GHSA-7wpf-4jwj-r2v3/GHSA-7wpf-4jwj-r2v3.json
new file mode 100644
index 00000000000..c2ec4166270
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-7wpf-4jwj-r2v3/GHSA-7wpf-4jwj-r2v3.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7wpf-4jwj-r2v3",
+  "modified": "2025-01-02T18:30:36Z",
+  "published": "2025-01-02T18:30:36Z",
+  "aliases": [
+    "CVE-2024-11716"
+  ],
+  "details": "While assignment of a user to a team (bracket) in CTFd  should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's bracket and then pick a new one, joining another team while a competition is already ongoing.\nThis issue impacts releases from 3.7.0 up to 3.7.4 and was addressed by  pull request 2636 https://github.com/CTFd/CTFd/pull/2636  included in 3.7.5 release.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11716"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/CTFd/CTFd/pull/2636"
+    },
+    {
+      "type": "WEB",
+      "url": "https://blog.ctfd.io/ctfd-3-7-5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cert.pl/en/posts/2025/01/CVE-2024-11716"
+    },
+    {
+      "type": "WEB",
+      "url": "https://ctfd.io"
+    },
+    {
+      "type": "WEB",
+      "url": "https://seclists.org/fulldisclosure/2024/Dec/21"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-837"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T17:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-98xv-xmh8-55cp/GHSA-98xv-xmh8-55cp.json b/advisories/unreviewed/2025/01/GHSA-98xv-xmh8-55cp/GHSA-98xv-xmh8-55cp.json
new file mode 100644
index 00000000000..6ce09a88640
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-98xv-xmh8-55cp/GHSA-98xv-xmh8-55cp.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-98xv-xmh8-55cp",
+  "modified": "2025-01-02T18:30:35Z",
+  "published": "2025-01-02T18:30:35Z",
+  "aliases": [
+    "CVE-2023-23672"
+  ],
+  "details": "Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23672"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-givewp-plugin-2-25-1-arbitrary-content-deletion-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-9w6g-7jpw-87hf/GHSA-9w6g-7jpw-87hf.json b/advisories/unreviewed/2025/01/GHSA-9w6g-7jpw-87hf/GHSA-9w6g-7jpw-87hf.json
new file mode 100644
index 00000000000..2ad577d482a
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-9w6g-7jpw-87hf/GHSA-9w6g-7jpw-87hf.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9w6g-7jpw-87hf",
+  "modified": "2025-01-02T18:30:37Z",
+  "published": "2025-01-02T18:30:37Z",
+  "aliases": [
+    "CVE-2024-11717"
+  ],
+  "details": "Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. When used, they are sent to the server as a GET parameter and they are not single use, which means, that during token expiration time an on-path attacker might reuse such a token to change user's password and take over the account. Moreover, the tokens also include base64 encoded user email.\n\nThis issue impacts releases up to 3.7.4 and was addressed by  pull request 2679 https://github.com/CTFd/CTFd/pull/2679  included in 3.7.5 release.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11717"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/CTFd/CTFd/pull/2679"
+    },
+    {
+      "type": "WEB",
+      "url": "https://blog.ctfd.io/ctfd-3-7-5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cert.pl/en/posts/2025/01/CVE-2024-11716"
+    },
+    {
+      "type": "WEB",
+      "url": "https://ctfd.io"
+    },
+    {
+      "type": "WEB",
+      "url": "https://seclists.org/fulldisclosure/2024/Dec/21"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-837"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T17:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-c85g-7vc6-q29w/GHSA-c85g-7vc6-q29w.json b/advisories/unreviewed/2025/01/GHSA-c85g-7vc6-q29w/GHSA-c85g-7vc6-q29w.json
new file mode 100644
index 00000000000..014927683f1
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-c85g-7vc6-q29w/GHSA-c85g-7vc6-q29w.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c85g-7vc6-q29w",
+  "modified": "2025-01-02T18:30:36Z",
+  "published": "2025-01-02T18:30:35Z",
+  "aliases": [
+    "CVE-2024-55540"
+  ],
+  "details": "Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55540"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security-advisory.acronis.com/advisories/SEC-2245"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-427"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-f4x6-mr29-4g4q/GHSA-f4x6-mr29-4g4q.json b/advisories/unreviewed/2025/01/GHSA-f4x6-mr29-4g4q/GHSA-f4x6-mr29-4g4q.json
index 8cbac1ce9f8..ffd3eeb3dae 100644
--- a/advisories/unreviewed/2025/01/GHSA-f4x6-mr29-4g4q/GHSA-f4x6-mr29-4g4q.json
+++ b/advisories/unreviewed/2025/01/GHSA-f4x6-mr29-4g4q/GHSA-f4x6-mr29-4g4q.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f4x6-mr29-4g4q",
-  "modified": "2025-01-01T06:34:18Z",
+  "modified": "2025-01-02T18:30:35Z",
   "published": "2025-01-01T06:34:18Z",
   "aliases": [
     "CVE-2024-11846"
   ],
   "details": "The  does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-01-01T06:15:23Z"
diff --git a/advisories/unreviewed/2025/01/GHSA-fpgj-qg8m-8xg3/GHSA-fpgj-qg8m-8xg3.json b/advisories/unreviewed/2025/01/GHSA-fpgj-qg8m-8xg3/GHSA-fpgj-qg8m-8xg3.json
new file mode 100644
index 00000000000..c71245ad759
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-fpgj-qg8m-8xg3/GHSA-fpgj-qg8m-8xg3.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fpgj-qg8m-8xg3",
+  "modified": "2025-01-02T18:30:35Z",
+  "published": "2025-01-02T18:30:35Z",
+  "aliases": [
+    "CVE-2022-45811"
+  ],
+  "details": "Missing Authorization vulnerability in WeyHan Ng Post Teaser.This issue affects Post Teaser: from n/a through 4.1.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45811"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/post-teaser/vulnerability/wordpress-post-teaser-plugin-4-1-5-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-mqq8-g3vp-xw37/GHSA-mqq8-g3vp-xw37.json b/advisories/unreviewed/2025/01/GHSA-mqq8-g3vp-xw37/GHSA-mqq8-g3vp-xw37.json
new file mode 100644
index 00000000000..8e4c3b3b4f0
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-mqq8-g3vp-xw37/GHSA-mqq8-g3vp-xw37.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mqq8-g3vp-xw37",
+  "modified": "2025-01-02T18:30:36Z",
+  "published": "2025-01-02T18:30:36Z",
+  "aliases": [
+    "CVE-2024-55542"
+  ],
+  "details": "Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55542"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security-advisory.acronis.com/advisories/SEC-5342"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-p4mj-rcrm-4875/GHSA-p4mj-rcrm-4875.json b/advisories/unreviewed/2025/01/GHSA-p4mj-rcrm-4875/GHSA-p4mj-rcrm-4875.json
new file mode 100644
index 00000000000..df99f1247d8
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-p4mj-rcrm-4875/GHSA-p4mj-rcrm-4875.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p4mj-rcrm-4875",
+  "modified": "2025-01-02T18:30:36Z",
+  "published": "2025-01-02T18:30:36Z",
+  "aliases": [
+    "CVE-2024-55541"
+  ],
+  "details": "Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39169.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55541"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security-advisory.acronis.com/advisories/SEC-3647"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-pfv5-96r6-w6p5/GHSA-pfv5-96r6-w6p5.json b/advisories/unreviewed/2025/01/GHSA-pfv5-96r6-w6p5/GHSA-pfv5-96r6-w6p5.json
new file mode 100644
index 00000000000..0258e5b4d18
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-pfv5-96r6-w6p5/GHSA-pfv5-96r6-w6p5.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pfv5-96r6-w6p5",
+  "modified": "2025-01-02T18:30:36Z",
+  "published": "2025-01-02T18:30:36Z",
+  "aliases": [
+    "CVE-2024-56414"
+  ],
+  "details": "Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56414"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security-advisory.acronis.com/advisories/SEC-1911"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-328"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-r954-pff6-j82v/GHSA-r954-pff6-j82v.json b/advisories/unreviewed/2025/01/GHSA-r954-pff6-j82v/GHSA-r954-pff6-j82v.json
new file mode 100644
index 00000000000..09150248de7
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-r954-pff6-j82v/GHSA-r954-pff6-j82v.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r954-pff6-j82v",
+  "modified": "2025-01-02T18:30:36Z",
+  "published": "2025-01-02T18:30:36Z",
+  "aliases": [
+    "CVE-2024-56413"
+  ],
+  "details": "Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56413"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security-advisory.acronis.com/advisories/SEC-7612"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-613"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-rwc5-2m33-wmwp/GHSA-rwc5-2m33-wmwp.json b/advisories/unreviewed/2025/01/GHSA-rwc5-2m33-wmwp/GHSA-rwc5-2m33-wmwp.json
new file mode 100644
index 00000000000..b97a0af0da6
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-rwc5-2m33-wmwp/GHSA-rwc5-2m33-wmwp.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rwc5-2m33-wmwp",
+  "modified": "2025-01-02T18:30:36Z",
+  "published": "2025-01-02T18:30:36Z",
+  "aliases": [
+    "CVE-2025-0172"
+  ],
+  "details": "A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0172"
+    },
+    {
+      "type": "WEB",
+      "url": "https://code-projects.org"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Sinon2003/cve/blob/main/chatsystem/sql_inject2.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.289939"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.289939"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.473153"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-w8fj-mj3p-j645/GHSA-w8fj-mj3p-j645.json b/advisories/unreviewed/2025/01/GHSA-w8fj-mj3p-j645/GHSA-w8fj-mj3p-j645.json
new file mode 100644
index 00000000000..1133e869ed2
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-w8fj-mj3p-j645/GHSA-w8fj-mj3p-j645.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w8fj-mj3p-j645",
+  "modified": "2025-01-02T18:30:35Z",
+  "published": "2025-01-02T18:30:35Z",
+  "aliases": [
+    "CVE-2024-12907"
+  ],
+  "details": "Kentico CMS in version 7 is vulnerable to a Reflected XSS attacks through manipulation of  a specific GET request parameter sent to /CMSMessages/AccessDenied.aspx endpoint.\nNotably, support for this version of Kentico ended in 2016. Version 8 was tested as well and does not contain this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12907"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cert.pl/en/posts/2025/01/CVE-2024-12907"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-wc69-m7g2-2pcm/GHSA-wc69-m7g2-2pcm.json b/advisories/unreviewed/2025/01/GHSA-wc69-m7g2-2pcm/GHSA-wc69-m7g2-2pcm.json
new file mode 100644
index 00000000000..96bdf84d36a
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-wc69-m7g2-2pcm/GHSA-wc69-m7g2-2pcm.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wc69-m7g2-2pcm",
+  "modified": "2025-01-02T18:30:36Z",
+  "published": "2025-01-02T18:30:36Z",
+  "aliases": [
+    "CVE-2024-9950"
+  ],
+  "details": "A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows \n\nunauthenticated user to modify compliance scripts due to insecure temporary directory.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9950"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.forescout.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-379"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-02T16:15:08Z"
+  }
+}
\ No newline at end of file