From 5b3f134698e978f947fe7585675eb298eec2bdcc Mon Sep 17 00:00:00 2001 From: CVE Team Date: Wed, 26 Jun 2024 11:00:35 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2019/1xxx/CVE-2019-1387.json | 5 ++ 2023/25xxx/CVE-2023-25652.json | 5 ++ 2023/25xxx/CVE-2023-25815.json | 5 ++ 2023/29xxx/CVE-2023-29007.json | 5 ++ 2024/1xxx/CVE-2024-1394.json | 109 +++++++++++++++++-------------- 2024/32xxx/CVE-2024-32002.json | 5 ++ 2024/32xxx/CVE-2024-32004.json | 5 ++ 2024/32xxx/CVE-2024-32021.json | 5 ++ 2024/32xxx/CVE-2024-32465.json | 5 ++ 2024/37xxx/CVE-2024-37098.json | 113 +++++++++++++++++++++++++++++++-- 2024/37xxx/CVE-2024-37252.json | 113 +++++++++++++++++++++++++++++++-- 2024/6xxx/CVE-2024-6344.json | 95 +++++++++++++++++++++++++-- 2024/6xxx/CVE-2024-6346.json | 18 ++++++ 2024/6xxx/CVE-2024-6347.json | 18 ++++++ 2024/6xxx/CVE-2024-6348.json | 18 ++++++ 15 files changed, 464 insertions(+), 60 deletions(-) create mode 100644 2024/6xxx/CVE-2024-6346.json create mode 100644 2024/6xxx/CVE-2024-6347.json create mode 100644 2024/6xxx/CVE-2024-6348.json diff --git a/2019/1xxx/CVE-2019-1387.json b/2019/1xxx/CVE-2019-1387.json index 5184564a334..138d271400d 100644 --- a/2019/1xxx/CVE-2019-1387.json +++ b/2019/1xxx/CVE-2019-1387.json @@ -133,6 +133,11 @@ "refsource": "SUSE", "name": "openSUSE-SU-2020:0598", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" + }, + { + "refsource": "MLIST", + "name": "[debian-lts-announce] 20240626 [SECURITY] [DLA 3844-1] git security update", + "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ] }, diff --git a/2023/25xxx/CVE-2023-25652.json b/2023/25xxx/CVE-2023-25652.json index 9d21e63cff4..1813c7e28ac 100644 --- a/2023/25xxx/CVE-2023-25652.json +++ b/2023/25xxx/CVE-2023-25652.json @@ -138,6 +138,11 @@ "url": "https://security.gentoo.org/glsa/202312-15", "refsource": "MISC", "name": "https://security.gentoo.org/glsa/202312-15" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html", + "refsource": "MISC", + "name": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ] }, diff --git a/2023/25xxx/CVE-2023-25815.json b/2023/25xxx/CVE-2023-25815.json index af776c12d8b..a94cdd7cecc 100644 --- a/2023/25xxx/CVE-2023-25815.json +++ b/2023/25xxx/CVE-2023-25815.json @@ -112,6 +112,11 @@ "url": "https://security.gentoo.org/glsa/202312-15", "refsource": "MISC", "name": "https://security.gentoo.org/glsa/202312-15" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html", + "refsource": "MISC", + "name": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ] }, diff --git a/2023/29xxx/CVE-2023-29007.json b/2023/29xxx/CVE-2023-29007.json index 7d1c31e52bb..411c0b1c38c 100644 --- a/2023/29xxx/CVE-2023-29007.json +++ b/2023/29xxx/CVE-2023-29007.json @@ -128,6 +128,11 @@ "url": "https://security.gentoo.org/glsa/202312-15", "refsource": "MISC", "name": "https://security.gentoo.org/glsa/202312-15" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html", + "refsource": "MISC", + "name": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ] }, diff --git a/2024/1xxx/CVE-2024-1394.json b/2024/1xxx/CVE-2024-1394.json index 45d66c1d37a..97756fb7f50 100644 --- a/2024/1xxx/CVE-2024-1394.json +++ b/2024/1xxx/CVE-2024-1394.json @@ -489,7 +489,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "0:1.25.5-13.1.rhaos4.12.git76343da.el8", + "version": "0:1.25.3-5.2.rhaos4.12.git44a2cb2.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -517,7 +517,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "0:2.14.0-7.1.rhaos4.12.el8", + "version": "0:2.14.0-5.2.rhaos4.12.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -545,7 +545,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "3:4.2.0-7.2.rhaos4.12.el9", + "version": "3:4.4.1-2.1.rhaos4.12.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -594,7 +594,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "1:1.29.1-2.2.rhaos4.13.el8", + "version": "1:1.29.1-2.2.rhaos4.13.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -678,7 +678,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "3:4.4.1-5.2.rhaos4.13.el8", + "version": "3:4.4.1-6.2.rhaos4.13.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -692,7 +692,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "4:1.1.12-1.1.rhaos4.13.el8", + "version": "4:1.1.12-1.1.rhaos4.13.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -797,7 +797,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el9", + "version": "0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -811,7 +811,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el8", + "version": "0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -853,7 +853,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "1:1.29.1-10.4.rhaos4.14.el9", + "version": "1:1.29.1-10.4.rhaos4.14.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -881,7 +881,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "3:2.1.7-3.4.rhaos4.14.el8", + "version": "3:2.1.7-3.4.rhaos4.14.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -993,7 +993,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "0:4.14.0-202404151639.p0.gf7b14a9.assembly.stream.el8", + "version": "0:4.14.0-202404151639.p0.gf7b14a9.assembly.stream.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -1035,7 +1035,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "3:4.4.1-11.4.rhaos4.14.el8", + "version": "3:4.4.1-11.4.rhaos4.14.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -1098,7 +1098,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "1:1.29.1-20.3.rhaos4.15.el9", + "version": "1:1.29.1-20.3.rhaos4.15.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -1196,7 +1196,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "0:4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el9", + "version": "0:4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -1210,7 +1210,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "3:4.4.1-21.1.rhaos4.15.el8", + "version": "3:4.4.1-21.1.rhaos4.15.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -1224,7 +1224,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "4:1.1.12-1.1.rhaos4.15.el8", + "version": "4:1.1.12-1.1.rhaos4.15.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -1238,7 +1238,7 @@ "x_cve_json_5_version_data": { "versions": [ { - "version": "2:1.11.2-21.2.rhaos4.15.el9", + "version": "2:1.11.2-21.2.rhaos4.15.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" @@ -1264,6 +1264,45 @@ ] } }, + { + "product_name": "Red Hat OpenStack Platform 16.2", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "version": "0:3.3.23-16.el8ost", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "defaultStatus": "affected" + } + }, + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "defaultStatus": "affected" + } + }, + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "defaultStatus": "affected" + } + }, + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "defaultStatus": "unaffected" + } + } + ] + } + }, { "product_name": "Red Hat OpenStack Platform 17.1 for RHEL 8", "version": { @@ -1625,37 +1664,6 @@ ] } }, - { - "product_name": "Red Hat OpenStack Platform 16.2", - "version": { - "version_data": [ - { - "version_value": "not down converted", - "x_cve_json_5_version_data": { - "defaultStatus": "affected" - } - }, - { - "version_value": "not down converted", - "x_cve_json_5_version_data": { - "defaultStatus": "affected" - } - }, - { - "version_value": "not down converted", - "x_cve_json_5_version_data": { - "defaultStatus": "affected" - } - }, - { - "version_value": "not down converted", - "x_cve_json_5_version_data": { - "defaultStatus": "unaffected" - } - } - ] - } - }, { "product_name": "Red Hat OpenStack Platform 17.1", "version": { @@ -1850,6 +1858,11 @@ "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3265" }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:3352", + "refsource": "MISC", + "name": "https://access.redhat.com/errata/RHSA-2024:3352" + }, { "url": "https://access.redhat.com/security/cve/CVE-2024-1394", "refsource": "MISC", diff --git a/2024/32xxx/CVE-2024-32002.json b/2024/32xxx/CVE-2024-32002.json index 0741990ad98..9ad92e5fe12 100644 --- a/2024/32xxx/CVE-2024-32002.json +++ b/2024/32xxx/CVE-2024-32002.json @@ -116,6 +116,11 @@ "url": "http://www.openwall.com/lists/oss-security/2024/05/14/2", "refsource": "MISC", "name": "http://www.openwall.com/lists/oss-security/2024/05/14/2" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html", + "refsource": "MISC", + "name": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ] }, diff --git a/2024/32xxx/CVE-2024-32004.json b/2024/32xxx/CVE-2024-32004.json index 8b7fa6ea5e2..cb61dc6a1a7 100644 --- a/2024/32xxx/CVE-2024-32004.json +++ b/2024/32xxx/CVE-2024-32004.json @@ -102,6 +102,11 @@ "url": "http://www.openwall.com/lists/oss-security/2024/05/14/2", "refsource": "MISC", "name": "http://www.openwall.com/lists/oss-security/2024/05/14/2" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html", + "refsource": "MISC", + "name": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ] }, diff --git a/2024/32xxx/CVE-2024-32021.json b/2024/32xxx/CVE-2024-32021.json index 19a1ee57692..55c7d9e50da 100644 --- a/2024/32xxx/CVE-2024-32021.json +++ b/2024/32xxx/CVE-2024-32021.json @@ -92,6 +92,11 @@ "url": "http://www.openwall.com/lists/oss-security/2024/05/14/2", "refsource": "MISC", "name": "http://www.openwall.com/lists/oss-security/2024/05/14/2" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html", + "refsource": "MISC", + "name": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ] }, diff --git a/2024/32xxx/CVE-2024-32465.json b/2024/32xxx/CVE-2024-32465.json index 7bab1e296ac..3b9c5ee23a3 100644 --- a/2024/32xxx/CVE-2024-32465.json +++ b/2024/32xxx/CVE-2024-32465.json @@ -107,6 +107,11 @@ "url": "http://www.openwall.com/lists/oss-security/2024/05/14/2", "refsource": "MISC", "name": "http://www.openwall.com/lists/oss-security/2024/05/14/2" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html", + "refsource": "MISC", + "name": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ] }, diff --git a/2024/37xxx/CVE-2024-37098.json b/2024/37xxx/CVE-2024-37098.json index 0bbeffc09ba..1de1165a182 100644 --- a/2024/37xxx/CVE-2024-37098.json +++ b/2024/37xxx/CVE-2024-37098.json @@ -1,17 +1,122 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-37098", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "audit@patchstack.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Server-Side Request Forgery (SSRF) vulnerability in Blossom Themes BlossomThemes Email Newsletter.This issue affects BlossomThemes Email Newsletter: from n/a through 2.2.6." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-918 Server-Side Request Forgery (SSRF)", + "cweId": "CWE-918" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "Blossom Themes", + "product": { + "product_data": [ + { + "product_name": "BlossomThemes Email Newsletter", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "changes": [ + { + "at": "2.2.7", + "status": "unaffected" + } + ], + "lessThanOrEqual": "2.2.6", + "status": "affected", + "version": "n/a", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://patchstack.com/database/vulnerability/blossomthemes-email-newsletter/wordpress-blossomthemes-email-newsletter-plugin-2-2-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve", + "refsource": "MISC", + "name": "https://patchstack.com/database/vulnerability/blossomthemes-email-newsletter/wordpress-blossomthemes-email-newsletter-plugin-2-2-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve" + } + ] + }, + "generator": { + "engine": "Vulnogram 0.1.0-dev" + }, + "source": { + "discovery": "EXTERNAL" + }, + "solution": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "Update to 2.2.7 or a higher version." + } + ], + "value": "Update to 2.2.7 or a higher version." + } + ], + "credits": [ + { + "lang": "en", + "value": "Yuchen Ji (Patchstack Alliance)" + } + ], + "impact": { + "cvss": [ + { + "attackComplexity": "HIGH", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "privilegesRequired": "HIGH", + "scope": "CHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N", + "version": "3.1" } ] } diff --git a/2024/37xxx/CVE-2024-37252.json b/2024/37xxx/CVE-2024-37252.json index 92a6913a069..62a96e28058 100644 --- a/2024/37xxx/CVE-2024-37252.json +++ b/2024/37xxx/CVE-2024-37252.json @@ -1,17 +1,122 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-37252", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "audit@patchstack.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Icegram Email Subscribers & Newsletters allows SQL Injection.This issue affects Email Subscribers & Newsletters: from n/a through 5.7.25." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "cweId": "CWE-89" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "Icegram", + "product": { + "product_data": [ + { + "product_name": "Email Subscribers & Newsletters", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "changes": [ + { + "at": "5.7.26", + "status": "unaffected" + } + ], + "lessThanOrEqual": "5.7.25", + "status": "affected", + "version": "n/a", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://patchstack.com/database/vulnerability/email-subscribers/wordpress-email-subscribers-by-icegram-express-plugin-5-7-25-sql-injection-vulnerability?_s_id=cve", + "refsource": "MISC", + "name": "https://patchstack.com/database/vulnerability/email-subscribers/wordpress-email-subscribers-by-icegram-express-plugin-5-7-25-sql-injection-vulnerability?_s_id=cve" + } + ] + }, + "generator": { + "engine": "Vulnogram 0.1.0-dev" + }, + "source": { + "discovery": "EXTERNAL" + }, + "solution": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "Update to 5.7.26 or a higher version." + } + ], + "value": "Update to\u00a05.7.26 or a higher version." + } + ], + "credits": [ + { + "lang": "en", + "value": "shaman0x01 (Patchstack Alliance)" + } + ], + "impact": { + "cvss": [ + { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "LOW", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "CHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "version": "3.1" } ] } diff --git a/2024/6xxx/CVE-2024-6344.json b/2024/6xxx/CVE-2024-6344.json index 3647e943e66..582a3deeca0 100644 --- a/2024/6xxx/CVE-2024-6344.json +++ b/2024/6xxx/CVE-2024-6344.json @@ -1,17 +1,104 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-6344", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability, which was classified as problematic, was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. This affects an unknown part of the component Push Configuration Section. The manipulation of the argument Configuration Name leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-269733 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way." + }, + { + "lang": "deu", + "value": "Es wurde eine problematische Schwachstelle in ZKTeco ZKBio CVSecurity V5000 4.1.0 gefunden. Dabei betrifft es einen unbekannter Codeteil der Komponente Push Configuration Section. Mit der Manipulation des Arguments Configuration Name mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-79 Cross Site Scripting", + "cweId": "CWE-79" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "ZKTeco", + "product": { + "product_data": [ + { + "product_name": "ZKBio CVSecurity V5000", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "4.1.0" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://vuldb.com/?id.269733", + "refsource": "MISC", + "name": "https://vuldb.com/?id.269733" + }, + { + "url": "https://vuldb.com/?ctiid.269733", + "refsource": "MISC", + "name": "https://vuldb.com/?ctiid.269733" + }, + { + "url": "https://vuldb.com/?submit.358596", + "refsource": "MISC", + "name": "https://vuldb.com/?submit.358596" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "Stux (VulDB User)" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "baseScore": 2.4, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", + "baseSeverity": "LOW" + }, + { + "version": "3.0", + "baseScore": 2.4, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", + "baseSeverity": "LOW" + }, + { + "version": "2.0", + "baseScore": 3.3, + "vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N" } ] } diff --git a/2024/6xxx/CVE-2024-6346.json b/2024/6xxx/CVE-2024-6346.json new file mode 100644 index 00000000000..115a4de69b6 --- /dev/null +++ b/2024/6xxx/CVE-2024-6346.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-6346", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2024/6xxx/CVE-2024-6347.json b/2024/6xxx/CVE-2024-6347.json new file mode 100644 index 00000000000..c00a977745c --- /dev/null +++ b/2024/6xxx/CVE-2024-6347.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-6347", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2024/6xxx/CVE-2024-6348.json b/2024/6xxx/CVE-2024-6348.json new file mode 100644 index 00000000000..27f9f452df7 --- /dev/null +++ b/2024/6xxx/CVE-2024-6348.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-6348", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file