From 80895e88e162ed8f1ef0e05171238df4c475f3dd Mon Sep 17 00:00:00 2001 From: CVE Team Date: Tue, 2 Jul 2024 12:00:36 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2023/5xxx/CVE-2023-5090.json | 51 +++-- 2024/1xxx/CVE-2024-1062.json | 26 +++ 2024/2xxx/CVE-2024-2199.json | 65 ++++-- 2024/3xxx/CVE-2024-3657.json | 65 ++++-- 2024/4xxx/CVE-2024-4268.json | 125 ++++++++++- 2024/6xxx/CVE-2024-6088.json | 85 +++++++- 2024/6xxx/CVE-2024-6099.json | 80 ++++++- 2024/6xxx/CVE-2024-6264.json | 90 +++++++- 2024/6xxx/CVE-2024-6440.json | 104 ++++++++- 2024/6xxx/CVE-2024-6441.json | 398 ++++++++++++++++++++++++++++++++++- 10 files changed, 1020 insertions(+), 69 deletions(-) diff --git a/2023/5xxx/CVE-2023-5090.json b/2023/5xxx/CVE-2023-5090.json index c41e5e08b4f..52c5797e8b4 100644 --- a/2023/5xxx/CVE-2023-5090.json +++ b/2023/5xxx/CVE-2023-5090.json @@ -35,6 +35,33 @@ "vendor_name": "Red Hat", "product": { "product_data": [ + { + "product_name": "Red Hat Enterprise Linux 8", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "version": "0:4.18.0-553.8.1.el8_10", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "defaultStatus": "affected" + } + }, + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "defaultStatus": "affected" + } + } + ] + } + }, { "product_name": "Red Hat Enterprise Linux 9.2 Extended Update Support", "version": { @@ -102,25 +129,6 @@ ] } }, - { - "product_name": "Red Hat Enterprise Linux 8", - "version": { - "version_data": [ - { - "version_value": "not down converted", - "x_cve_json_5_version_data": { - "defaultStatus": "affected" - } - }, - { - "version_value": "not down converted", - "x_cve_json_5_version_data": { - "defaultStatus": "affected" - } - } - ] - } - }, { "product_name": "Red Hat Enterprise Linux 9", "version": { @@ -158,6 +166,11 @@ "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3855" }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:4211", + "refsource": "MISC", + "name": "https://access.redhat.com/errata/RHSA-2024:4211" + }, { "url": "https://access.redhat.com/security/cve/CVE-2023-5090", "refsource": "MISC", diff --git a/2024/1xxx/CVE-2024-1062.json b/2024/1xxx/CVE-2024-1062.json index a8424335ad9..2a4dab91e0a 100644 --- a/2024/1xxx/CVE-2024-1062.json +++ b/2024/1xxx/CVE-2024-1062.json @@ -56,6 +56,27 @@ ] } }, + { + "product_name": "Red Hat Directory Server 11.8 for RHEL 8", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "version": "8090020240606122459.91529cd0", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "defaultStatus": "affected" + } + } + ] + } + }, { "product_name": "Red Hat Enterprise Linux 8", "version": { @@ -173,6 +194,11 @@ "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3047" }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:4209", + "refsource": "MISC", + "name": "https://access.redhat.com/errata/RHSA-2024:4209" + }, { "url": "https://access.redhat.com/security/cve/CVE-2024-1062", "refsource": "MISC", diff --git a/2024/2xxx/CVE-2024-2199.json b/2024/2xxx/CVE-2024-2199.json index 7027a184a99..00714d04e76 100644 --- a/2024/2xxx/CVE-2024-2199.json +++ b/2024/2xxx/CVE-2024-2199.json @@ -35,6 +35,48 @@ "vendor_name": "Red Hat", "product": { "product_data": [ + { + "product_name": "Red Hat Directory Server 11.8 for RHEL 8", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "version": "8090020240606122459.91529cd0", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "defaultStatus": "affected" + } + } + ] + } + }, + { + "product_name": "Red Hat Directory Server 11.9 for RHEL 8", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "version": "8100020240604161237.37ed7c03", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "defaultStatus": "affected" + } + } + ] + } + }, { "product_name": "Red Hat Directory Server 12.4 for RHEL 9", "version": { @@ -98,19 +140,6 @@ ] } }, - { - "product_name": "Red Hat Directory Server 11", - "version": { - "version_data": [ - { - "version_value": "not down converted", - "x_cve_json_5_version_data": { - "defaultStatus": "affected" - } - } - ] - } - }, { "product_name": "Red Hat Enterprise Linux 6", "version": { @@ -160,6 +189,16 @@ "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4092" }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:4209", + "refsource": "MISC", + "name": "https://access.redhat.com/errata/RHSA-2024:4209" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:4210", + "refsource": "MISC", + "name": "https://access.redhat.com/errata/RHSA-2024:4210" + }, { "url": "https://access.redhat.com/security/cve/CVE-2024-2199", "refsource": "MISC", diff --git a/2024/3xxx/CVE-2024-3657.json b/2024/3xxx/CVE-2024-3657.json index e79bd76a5f1..9533ba33223 100644 --- a/2024/3xxx/CVE-2024-3657.json +++ b/2024/3xxx/CVE-2024-3657.json @@ -35,6 +35,48 @@ "vendor_name": "Red Hat", "product": { "product_data": [ + { + "product_name": "Red Hat Directory Server 11.8 for RHEL 8", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "version": "8090020240606122459.91529cd0", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "defaultStatus": "affected" + } + } + ] + } + }, + { + "product_name": "Red Hat Directory Server 11.9 for RHEL 8", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "version": "8100020240604161237.37ed7c03", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "defaultStatus": "affected" + } + } + ] + } + }, { "product_name": "Red Hat Directory Server 12.4 for RHEL 9", "version": { @@ -98,19 +140,6 @@ ] } }, - { - "product_name": "Red Hat Directory Server 11", - "version": { - "version_data": [ - { - "version_value": "not down converted", - "x_cve_json_5_version_data": { - "defaultStatus": "affected" - } - } - ] - } - }, { "product_name": "Red Hat Enterprise Linux 6", "version": { @@ -160,6 +189,16 @@ "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4092" }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:4209", + "refsource": "MISC", + "name": "https://access.redhat.com/errata/RHSA-2024:4209" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:4210", + "refsource": "MISC", + "name": "https://access.redhat.com/errata/RHSA-2024:4210" + }, { "url": "https://access.redhat.com/security/cve/CVE-2024-3657", "refsource": "MISC", diff --git a/2024/4xxx/CVE-2024-4268.json b/2024/4xxx/CVE-2024-4268.json index 47e529f00d9..c9d80b4942f 100644 --- a/2024/4xxx/CVE-2024-4268.json +++ b/2024/4xxx/CVE-2024-4268.json @@ -1,17 +1,134 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-4268", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "security@wordfence.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "The Ultimate Blocks \u2013 WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "ultimateblocks", + "product": { + "product_data": [ + { + "product_name": "Ultimate Blocks \u2013 WordPress Blocks Plugin", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_name": "*", + "version_value": "3.1.9" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/00b60b53-77bf-4640-bf2b-84e011014623?source=cve", + "refsource": "MISC", + "name": "https://www.wordfence.com/threat-intel/vulnerabilities/id/00b60b53-77bf-4640-bf2b-84e011014623?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/advanced-heading/block.php", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/advanced-heading/block.php" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/styled-box/block.php", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/styled-box/block.php" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/how-to/block.php", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/how-to/block.php" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/image-slider/block.php", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/image-slider/block.php" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/testimonial/block.php", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/blocks/testimonial/block.php" + }, + { + "url": "https://gist.github.com/webber-naut/0a8a4f810da286392a43c4614d31712e", + "refsource": "MISC", + "name": "https://gist.github.com/webber-naut/0a8a4f810da286392a43c4614d31712e" + }, + { + "url": "https://www.dropbox.com/scl/fi/zh7t1qsvxkxk2dfhwd7nn/Ultimate-Blocks-Stored-XSS_POC_4.20.24.mov?rlkey=ws16dcu7f6mjd3h9emsqev7jm&e=2&st=fdr7q9h7&dl=0", + "refsource": "MISC", + "name": "https://www.dropbox.com/scl/fi/zh7t1qsvxkxk2dfhwd7nn/Ultimate-Blocks-Stored-XSS_POC_4.20.24.mov?rlkey=ws16dcu7f6mjd3h9emsqev7jm&e=2&st=fdr7q9h7&dl=0" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3075315/ultimate-blocks", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/changeset/3075315/ultimate-blocks" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/extensions/custom-css/class-custom-css.php?rev=3102541#L173", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/extensions/custom-css/class-custom-css.php?rev=3102541#L173" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3108401/", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/changeset/3108401/" + }, + { + "url": "https://wordpress.org/plugins/ultimate-blocks/#developers", + "refsource": "MISC", + "name": "https://wordpress.org/plugins/ultimate-blocks/#developers" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "Craig Smith" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM" } ] } diff --git a/2024/6xxx/CVE-2024-6088.json b/2024/6xxx/CVE-2024-6088.json index 2092253db48..743d42058ae 100644 --- a/2024/6xxx/CVE-2024-6088.json +++ b/2024/6xxx/CVE-2024-6088.json @@ -1,17 +1,94 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-6088", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "security@wordfence.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized user registration due to a missing capability check on the 'register' function in all versions up to, and including, 4.2.6.8.1. This makes it possible for unauthenticated attackers to bypass disabled user registration to create a new account with the default role." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-862 Missing Authorization" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "thimpress", + "product": { + "product_data": [ + { + "product_name": "LearnPress \u2013 WordPress LMS Plugin", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_name": "*", + "version_value": "4.2.6.8.1" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/04e0ddff-16af-4c85-b5b0-cf767684ee08?source=cve", + "refsource": "MISC", + "name": "https://www.wordfence.com/threat-intel/vulnerabilities/id/04e0ddff-16af-4c85-b5b0-cf767684ee08?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.1/inc/jwt/includes/class-jwt-public.php#L127", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.1/inc/jwt/includes/class-jwt-public.php#L127" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.1/inc/class-lp-forms-handler.php#L235", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.1/inc/class-lp-forms-handler.php#L235" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3109339/", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/changeset/3109339/" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "Khayal Farzaliyev" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM" } ] } diff --git a/2024/6xxx/CVE-2024-6099.json b/2024/6xxx/CVE-2024-6099.json index 0de88dc913c..5d570b2b203 100644 --- a/2024/6xxx/CVE-2024-6099.json +++ b/2024/6xxx/CVE-2024-6099.json @@ -1,17 +1,89 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-6099", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "security@wordfence.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vulnerable to unauthenticated bypass to user registration in versions up to, and including, 4.2.6.8.1. This is due to missing checks in the 'check_validate_fields' function in the checkout. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-420 Unprotected Alternate Channel" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "thimpress", + "product": { + "product_data": [ + { + "product_name": "LearnPress \u2013 WordPress LMS Plugin", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_name": "*", + "version_value": "4.2.6.8.1" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7ee714c7-4c9b-4627-9ba9-f83aeca6a0a5?source=cve", + "refsource": "MISC", + "name": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7ee714c7-4c9b-4627-9ba9-f83aeca6a0a5?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.1/inc/class-lp-checkout.php#L124", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.1/inc/class-lp-checkout.php#L124" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3109339/", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/changeset/3109339/" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "Khayal Farzaliyev" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM" } ] } diff --git a/2024/6xxx/CVE-2024-6264.json b/2024/6xxx/CVE-2024-6264.json index b4b960d03d9..1b0732d6769 100644 --- a/2024/6xxx/CVE-2024-6264.json +++ b/2024/6xxx/CVE-2024-6264.json @@ -1,17 +1,99 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-6264", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "security@wordfence.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "The Post Meta Data Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018$meta_key\u2019 parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "gandhihitesh9", + "product": { + "product_data": [ + { + "product_name": "Post Meta Data Manager", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_name": "*", + "version_value": "1.2.3" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9dd6828b-6235-4284-bce6-be23b79ac70e?source=cve", + "refsource": "MISC", + "name": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9dd6828b-6235-4284-bce6-be23b79ac70e?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/post-meta-data-manager/trunk/includes/admin/html/pmdm_wp_display_post_metadata_html.php#L23", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/post-meta-data-manager/trunk/includes/admin/html/pmdm_wp_display_post_metadata_html.php#L23" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/post-meta-data-manager/trunk/includes/admin/html/pmdm_wp_display_term_metadata_html.php#L32", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/post-meta-data-manager/trunk/includes/admin/html/pmdm_wp_display_term_metadata_html.php#L32" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/post-meta-data-manager/trunk/includes/admin/html/pmdm_wp_display_user_metadata_html.php#L31", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/post-meta-data-manager/trunk/includes/admin/html/pmdm_wp_display_user_metadata_html.php#L31" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3109558/", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/changeset/3109558/" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "Francesco Carlucci" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM" } ] } diff --git a/2024/6xxx/CVE-2024-6440.json b/2024/6xxx/CVE-2024-6440.json index 848c6665009..127afe699cc 100644 --- a/2024/6xxx/CVE-2024-6440.json +++ b/2024/6xxx/CVE-2024-6440.json @@ -1,17 +1,113 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-6440", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-270168." + }, + { + "lang": "deu", + "value": "Es wurde eine kritische Schwachstelle in SourceCodester Home Owners Collection Management System 1.0 ausgemacht. Dabei betrifft es einen unbekannter Codeteil der Datei /classes/Master.php?f=delete_category. Durch Manipulieren des Arguments id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-89 SQL Injection", + "cweId": "CWE-89" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "SourceCodester", + "product": { + "product_data": [ + { + "product_name": "Home Owners Collection Management System", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "1.0" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://vuldb.com/?id.270168", + "refsource": "MISC", + "name": "https://vuldb.com/?id.270168" + }, + { + "url": "https://vuldb.com/?ctiid.270168", + "refsource": "MISC", + "name": "https://vuldb.com/?ctiid.270168" + }, + { + "url": "https://vuldb.com/?submit.366988", + "refsource": "MISC", + "name": "https://vuldb.com/?submit.366988" + }, + { + "url": "https://github.com/reverseD0G/cve/blob/main/sql.md", + "refsource": "MISC", + "name": "https://github.com/reverseD0G/cve/blob/main/sql.md" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "kkgg6888 (VulDB User)" + }, + { + "lang": "en", + "value": "kkgg6888 (VulDB User)" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "baseScore": 6.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "MEDIUM" + }, + { + "version": "3.0", + "baseScore": 6.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "MEDIUM" + }, + { + "version": "2.0", + "baseScore": 6.5, + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P" } ] } diff --git a/2024/6xxx/CVE-2024-6441.json b/2024/6xxx/CVE-2024-6441.json index 5613dc8a967..8474d3f63f1 100644 --- a/2024/6xxx/CVE-2024-6441.json +++ b/2024/6xxx/CVE-2024-6441.json @@ -1,17 +1,407 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-6441", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability was found in ORIPA up to 1.72. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/oripa/persistence/doc/loader/LoaderXML.java. The manipulation leads to deserialization. The attack can be launched remotely. Upgrading to version 1.80 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-270169 was assigned to this vulnerability." + }, + { + "lang": "deu", + "value": "In ORIPA bis 1.72 wurde eine kritische Schwachstelle ausgemacht. Hierbei betrifft es unbekannten Programmcode der Datei src/main/java/oripa/persistence/doc/loader/LoaderXML.java. Durch das Beeinflussen mit unbekannten Daten kann eine deserialization-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff \u00fcber das Netzwerk. Ein Aktualisieren auf die Version 1.80 vermag dieses Problem zu l\u00f6sen. Als bestm\u00f6gliche Massnahme wird das Einspielen eines Upgrades empfohlen." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-502 Deserialization", + "cweId": "CWE-502" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "n/a", + "product": { + "product_data": [ + { + "product_name": "ORIPA", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "1.0" + }, + { + "version_affected": "=", + "version_value": "1.1" + }, + { + "version_affected": "=", + "version_value": "1.2" + }, + { + "version_affected": "=", + "version_value": "1.3" + }, + { + "version_affected": "=", + "version_value": "1.4" + }, + { + "version_affected": "=", + "version_value": "1.5" + }, + { + "version_affected": "=", + "version_value": "1.6" + }, + { + "version_affected": "=", + "version_value": "1.7" + }, + { + "version_affected": "=", + "version_value": "1.8" + }, + { + "version_affected": "=", + "version_value": "1.9" + }, + { + "version_affected": "=", + "version_value": "1.10" + }, + { + "version_affected": "=", + "version_value": "1.11" + }, + { + "version_affected": "=", + "version_value": "1.12" + }, + { + "version_affected": "=", + "version_value": "1.13" + }, + { + "version_affected": "=", + "version_value": "1.14" + }, + { + "version_affected": "=", + "version_value": "1.15" + }, + { + "version_affected": "=", + "version_value": "1.16" + }, + { + "version_affected": "=", + "version_value": "1.17" + }, + { + "version_affected": "=", + "version_value": "1.18" + }, + { + "version_affected": "=", + "version_value": "1.19" + }, + { + "version_affected": "=", + "version_value": "1.20" + }, + { + "version_affected": "=", + "version_value": "1.21" + }, + { + "version_affected": "=", + "version_value": "1.22" + }, + { + "version_affected": "=", + "version_value": "1.23" + }, + { + "version_affected": "=", + "version_value": "1.24" + }, + { + "version_affected": "=", + "version_value": "1.25" + }, + { + "version_affected": "=", + "version_value": "1.26" + }, + { + "version_affected": "=", + "version_value": "1.27" + }, + { + "version_affected": "=", + "version_value": "1.28" + }, + { + "version_affected": "=", + "version_value": "1.29" + }, + { + "version_affected": "=", + "version_value": "1.30" + }, + { + "version_affected": "=", + "version_value": "1.31" + }, + { + "version_affected": "=", + "version_value": "1.32" + }, + { + "version_affected": "=", + "version_value": "1.33" + }, + { + "version_affected": "=", + "version_value": "1.34" + }, + { + "version_affected": "=", + "version_value": "1.35" + }, + { + "version_affected": "=", + "version_value": "1.36" + }, + { + "version_affected": "=", + "version_value": "1.37" + }, + { + "version_affected": "=", + "version_value": "1.38" + }, + { + "version_affected": "=", + "version_value": "1.39" + }, + { + "version_affected": "=", + "version_value": "1.40" + }, + { + "version_affected": "=", + "version_value": "1.41" + }, + { + "version_affected": "=", + "version_value": "1.42" + }, + { + "version_affected": "=", + "version_value": "1.43" + }, + { + "version_affected": "=", + "version_value": "1.44" + }, + { + "version_affected": "=", + "version_value": "1.45" + }, + { + "version_affected": "=", + "version_value": "1.46" + }, + { + "version_affected": "=", + "version_value": "1.47" + }, + { + "version_affected": "=", + "version_value": "1.48" + }, + { + "version_affected": "=", + "version_value": "1.49" + }, + { + "version_affected": "=", + "version_value": "1.50" + }, + { + "version_affected": "=", + "version_value": "1.51" + }, + { + "version_affected": "=", + "version_value": "1.52" + }, + { + "version_affected": "=", + "version_value": "1.53" + }, + { + "version_affected": "=", + "version_value": "1.54" + }, + { + "version_affected": "=", + "version_value": "1.55" + }, + { + "version_affected": "=", + "version_value": "1.56" + }, + { + "version_affected": "=", + "version_value": "1.57" + }, + { + "version_affected": "=", + "version_value": "1.58" + }, + { + "version_affected": "=", + "version_value": "1.59" + }, + { + "version_affected": "=", + "version_value": "1.60" + }, + { + "version_affected": "=", + "version_value": "1.61" + }, + { + "version_affected": "=", + "version_value": "1.62" + }, + { + "version_affected": "=", + "version_value": "1.63" + }, + { + "version_affected": "=", + "version_value": "1.64" + }, + { + "version_affected": "=", + "version_value": "1.65" + }, + { + "version_affected": "=", + "version_value": "1.66" + }, + { + "version_affected": "=", + "version_value": "1.67" + }, + { + "version_affected": "=", + "version_value": "1.68" + }, + { + "version_affected": "=", + "version_value": "1.69" + }, + { + "version_affected": "=", + "version_value": "1.70" + }, + { + "version_affected": "=", + "version_value": "1.71" + }, + { + "version_affected": "=", + "version_value": "1.72" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://vuldb.com/?id.270169", + "refsource": "MISC", + "name": "https://vuldb.com/?id.270169" + }, + { + "url": "https://vuldb.com/?ctiid.270169", + "refsource": "MISC", + "name": "https://vuldb.com/?ctiid.270169" + }, + { + "url": "https://vuldb.com/?submit.367350", + "refsource": "MISC", + "name": "https://vuldb.com/?submit.367350" + }, + { + "url": "https://github.com/oripa/oripa/issues/355", + "refsource": "MISC", + "name": "https://github.com/oripa/oripa/issues/355" + }, + { + "url": "https://github.com/oripa/oripa/pull/356/commits/1abf8eb9b6b173d86d277426db1a551d6490c94a", + "refsource": "MISC", + "name": "https://github.com/oripa/oripa/pull/356/commits/1abf8eb9b6b173d86d277426db1a551d6490c94a" + }, + { + "url": "https://github.com/oripa/oripa/milestone/15", + "refsource": "MISC", + "name": "https://github.com/oripa/oripa/milestone/15" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "aftersnow (VulDB User)" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "baseScore": 6.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "MEDIUM" + }, + { + "version": "3.0", + "baseScore": 6.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "MEDIUM" + }, + { + "version": "2.0", + "baseScore": 6.5, + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P" } ] }