Advisory Database Sync

github · Jan 1, 2025 · b3051d9 · b3051d9
1 parent 469f75b
commit b3051d9
Show file tree

Hide file tree

Showing 86 changed files with 2,227 additions and 2 deletions.
diff --git a/advisories/unreviewed/2024/05/GHSA-vr88-2hv2-5jvf/GHSA-vr88-2hv2-5jvf.json b/advisories/unreviewed/2024/05/GHSA-vr88-2hv2-5jvf/GHSA-vr88-2hv2-5jvf.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vr88-2hv2-5jvf",
-  "modified": "2024-06-10T18:31:03Z",
+  "modified": "2025-01-01T00:30:26Z",
   "published": "2024-05-22T00:30:34Z",
   "aliases": [
     "CVE-2024-21683"

diff --git a/advisories/unreviewed/2024/08/GHSA-gw56-mg6j-26qj/GHSA-gw56-mg6j-26qj.json b/advisories/unreviewed/2024/08/GHSA-gw56-mg6j-26qj/GHSA-gw56-mg6j-26qj.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gw56-mg6j-26qj",
-  "modified": "2024-10-16T03:31:33Z",
+  "modified": "2025-01-01T00:30:26Z",
   "published": "2024-08-08T03:30:49Z",
   "aliases": [
     "CVE-2024-38202"

diff --git a/advisories/unreviewed/2025/01/GHSA-2mh7-vhgj-ccgw/GHSA-2mh7-vhgj-ccgw.json b/advisories/unreviewed/2025/01/GHSA-2mh7-vhgj-ccgw/GHSA-2mh7-vhgj-ccgw.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2mh7-vhgj-ccgw",
+  "modified": "2025-01-01T00:30:29Z",
+  "published": "2025-01-01T00:30:29Z",
+  "aliases": [
+    "CVE-2024-23412"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23412"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:39Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-2xpq-p284-h385/GHSA-2xpq-p284-h385.json b/advisories/unreviewed/2025/01/GHSA-2xpq-p284-h385/GHSA-2xpq-p284-h385.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2xpq-p284-h385",
+  "modified": "2025-01-01T00:30:29Z",
+  "published": "2025-01-01T00:30:29Z",
+  "aliases": [
+    "CVE-2024-21712"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21712"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:37Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-38wq-r4mv-7p28/GHSA-38wq-r4mv-7p28.json b/advisories/unreviewed/2025/01/GHSA-38wq-r4mv-7p28/GHSA-38wq-r4mv-7p28.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-38wq-r4mv-7p28",
+  "modified": "2025-01-01T00:30:29Z",
+  "published": "2025-01-01T00:30:29Z",
+  "aliases": [
+    "CVE-2024-23410"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23410"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:39Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-3h54-6g9g-h4w7/GHSA-3h54-6g9g-h4w7.json b/advisories/unreviewed/2025/01/GHSA-3h54-6g9g-h4w7/GHSA-3h54-6g9g-h4w7.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3h54-6g9g-h4w7",
+  "modified": "2025-01-01T00:30:29Z",
+  "published": "2025-01-01T00:30:29Z",
+  "aliases": [
+    "CVE-2024-21716"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21716"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:37Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-3w7p-r679-pr3g/GHSA-3w7p-r679-pr3g.json b/advisories/unreviewed/2025/01/GHSA-3w7p-r679-pr3g/GHSA-3w7p-r679-pr3g.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3w7p-r679-pr3g",
+  "modified": "2025-01-01T00:30:30Z",
+  "published": "2025-01-01T00:30:30Z",
+  "aliases": [
+    "CVE-2024-23432"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23432"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:40Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-4752-7m4r-c4x8/GHSA-4752-7m4r-c4x8.json b/advisories/unreviewed/2025/01/GHSA-4752-7m4r-c4x8/GHSA-4752-7m4r-c4x8.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4752-7m4r-c4x8",
+  "modified": "2025-01-01T00:30:30Z",
+  "published": "2025-01-01T00:30:30Z",
+  "aliases": [
+    "CVE-2024-56020"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mario Di Pasquale SvegliaT Buttons allows Stored XSS.This issue affects SvegliaT Buttons: from n/a through 1.3.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56020"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/svegliat-buttons/vulnerability/wordpress-svegliat-buttons-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:57Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-47mf-x78f-fj32/GHSA-47mf-x78f-fj32.json b/advisories/unreviewed/2025/01/GHSA-47mf-x78f-fj32/GHSA-47mf-x78f-fj32.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-47mf-x78f-fj32",
+  "modified": "2025-01-01T00:30:30Z",
+  "published": "2025-01-01T00:30:30Z",
+  "aliases": [
+    "CVE-2024-23431"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23431"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:40Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-4mj7-w8fg-qxgf/GHSA-4mj7-w8fg-qxgf.json b/advisories/unreviewed/2025/01/GHSA-4mj7-w8fg-qxgf/GHSA-4mj7-w8fg-qxgf.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4mj7-w8fg-qxgf",
+  "modified": "2025-01-01T00:30:29Z",
+  "published": "2025-01-01T00:30:29Z",
+  "aliases": [
+    "CVE-2024-21708"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21708"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:37Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-4wpr-2633-pxp3/GHSA-4wpr-2633-pxp3.json b/advisories/unreviewed/2025/01/GHSA-4wpr-2633-pxp3/GHSA-4wpr-2633-pxp3.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4wpr-2633-pxp3",
+  "modified": "2025-01-01T00:30:30Z",
+  "published": "2025-01-01T00:30:30Z",
+  "aliases": [
+    "CVE-2024-23427"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23427"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:40Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-4xh9-99mf-xmv6/GHSA-4xh9-99mf-xmv6.json b/advisories/unreviewed/2025/01/GHSA-4xh9-99mf-xmv6/GHSA-4xh9-99mf-xmv6.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4xh9-99mf-xmv6",
+  "modified": "2025-01-01T00:30:29Z",
+  "published": "2025-01-01T00:30:29Z",
+  "aliases": [
+    "CVE-2024-21702"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21702"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:36Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-56p9-cxr7-m8h5/GHSA-56p9-cxr7-m8h5.json b/advisories/unreviewed/2025/01/GHSA-56p9-cxr7-m8h5/GHSA-56p9-cxr7-m8h5.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-56p9-cxr7-m8h5",
+  "modified": "2025-01-01T00:30:29Z",
+  "published": "2025-01-01T00:30:29Z",
+  "aliases": [
+    "CVE-2024-23413"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23413"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:39Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-5vjp-39gc-p5xc/GHSA-5vjp-39gc-p5xc.json b/advisories/unreviewed/2025/01/GHSA-5vjp-39gc-p5xc/GHSA-5vjp-39gc-p5xc.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5vjp-39gc-p5xc",
+  "modified": "2025-01-01T00:30:29Z",
+  "published": "2025-01-01T00:30:29Z",
+  "aliases": [
+    "CVE-2024-23396"
+  ],
+  "details": "Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23396"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-01T00:15:38Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-5vvr-p938-g73g/GHSA-5vvr-p938-g73g.json b/advisories/unreviewed/2025/01/GHSA-5vvr-p938-g73g/GHSA-5vvr-p938-g73g.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5vvr-p938-g73g",
+  "modified": "2025-01-01T00:30:28Z",
+  "published": "2025-01-01T00:30:28Z",
+  "aliases": [
+    "CVE-2024-56062"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.3.987.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56062"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/royal-elementor-addons/vulnerability/wordpress-royal-elementor-addons-and-templates-plugin-1-3-987-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T23:15:41Z"
+  }
+}