admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-07-11 16:13:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2024-05-25T04:00:37.845495+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2024-05-25 04:03:28 +00:00
parent 4462d476f3
commit 19aaee6b0e
5 changed files with 173 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

51
CVE-2024/CVE-2024-48xx/CVE-2024-4858.json Normal file
View File

@ -0,0 +1,51 @@
{
"id": "CVE-2024-4858",
"sourceIdentifier": "security@wordfence.com",
"published": "2024-05-25T03:15:08.150",
"lastModified": "2024-05-25T03:15:08.150",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The Testimonial Carousel For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_testimonials_option_callback' function in versions up to, and including, 10.2.0. This makes it possible for unauthenticated attackers to update the OpenAI API key, disabling the feature."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security@wordfence.com",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/testimonials-carousel-elementor/trunk/class-testimonials-carousel-elementor.php#L126",
"source": "security@wordfence.com"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3092154/testimonials-carousel-elementor/trunk/class-testimonials-carousel-elementor.php",
"source": "security@wordfence.com"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1f589345-a081-4d27-ac4a-6edc44b96f91?source=cve",
"source": "security@wordfence.com"
}
]
}

51
CVE-2024/CVE-2024-52xx/CVE-2024-5220.json Normal file
View File

@ -0,0 +1,51 @@
{
"id": "CVE-2024-5220",
"sourceIdentifier": "security@wordfence.com",
"published": "2024-05-25T02:15:41.053",
"lastModified": "2024-05-25T02:15:41.053",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The ND Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's upload feature in all versions up to, and including, 7.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security@wordfence.com",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/nd-shortcodes/tags/7.3/nd-shortcodes.php#L63",
"source": "security@wordfence.com"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3091778/nd-shortcodes/trunk/nd-shortcodes.php",
"source": "security@wordfence.com"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5cbd6040-0446-41fe-8fef-c9065beeaa3a?source=cve",
"source": "security@wordfence.com"
}
]
}

59
CVE-2024/CVE-2024-52xx/CVE-2024-5229.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2024-5229",
"sourceIdentifier": "security@wordfence.com",
"published": "2024-05-25T03:15:08.377",
"lastModified": "2024-05-25T03:15:08.377",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "The Primary Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing Table widget in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security@wordfence.com",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/primary-addon-for-elementor/trunk/elementor/widgets/basic/nabasic-pricing-table.php#L775",
"source": "security@wordfence.com"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3092073/#file366",
"source": "security@wordfence.com"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3092073/primary-addon-for-elementor/trunk/elementor/widgets/basic/nabasic-pricing-table.php",
"source": "security@wordfence.com"
},
{
"url": "https://wordpress.org/plugins/primary-addon-for-elementor/#developers",
"source": "security@wordfence.com"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d6ea95b5-9e1c-41b1-9bc5-5fd5cecef65d?source=cve",
"source": "security@wordfence.com"
}
]
}

14
README.md
View File

@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2024-05-24T23:55:29.775114+00:00
2024-05-25T04:00:37.845495+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2024-05-24T22:15:08.413000+00:00
2024-05-25T03:15:08.377000+00:00
```
### Last Data Feed Release
@ -27,20 +27,22 @@ Repository synchronizes with the NVD every 2 hours.
Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest)
```plain
2024-05-24T00:00:20.263718+00:00
2024-05-25T00:00:20.261236+00:00
```
### Total Number of included CVEs
```plain
251768
251771
```
### CVEs added in the last Commit
Recently added CVEs: `1`
Recently added CVEs: `3`
- [CVE-2024-36079](CVE-2024/CVE-2024-360xx/CVE-2024-36079.json) (`2024-05-24T22:15:08.413`)
- [CVE-2024-4858](CVE-2024/CVE-2024-48xx/CVE-2024-4858.json) (`2024-05-25T03:15:08.150`)
- [CVE-2024-5220](CVE-2024/CVE-2024-52xx/CVE-2024-5220.json) (`2024-05-25T02:15:41.053`)
- [CVE-2024-5229](CVE-2024/CVE-2024-52xx/CVE-2024-5229.json) (`2024-05-25T03:15:08.377`)
### CVEs modified in the last Commit

5
_state.csv
View File

@ -250773,7 +250773,7 @@ CVE-2024-36070,0,0,19c2fc8fdc41593f53c176f18e743efa8020d50d8ffdbcbf1475257d2bfa8
CVE-2024-36076,0,0,7bd178b56b4ea91c0d10da16861cc8958caaaa1d0561d3821785629a0cb379df,2024-05-21T20:15:08.970000
CVE-2024-36077,0,0,84ea3304d7a7ffaa84d954db4af07a9c774a90c5eb501916ba471dc7e3d1f499,2024-05-22T18:59:20.240000
CVE-2024-36078,0,0,033f7985523b33a9cd47ae7b39c65b68fc3ef0710dcf434d451eae182ed35127,2024-05-20T13:00:04.957000
CVE-2024-36079,1,1,7a15fc04be6e44e440cbb10b339f2acba72a106eca57d98773e3b9c4a4f0ffbd,2024-05-24T22:15:08.413000
CVE-2024-36079,0,0,7a15fc04be6e44e440cbb10b339f2acba72a106eca57d98773e3b9c4a4f0ffbd,2024-05-24T22:15:08.413000
CVE-2024-36080,0,0,57481f5a54f68f6f7f09dded26dd0588b050980d38ac9c78940318892c2197a1,2024-05-20T13:00:04.957000
CVE-2024-36081,0,0,0aabc3d5ec0a35d1482a2ee38b1087a1798092236c6b1a2ef029f3cd7c35526c,2024-05-20T13:00:04.957000
CVE-2024-3609,0,0,6c3cd77579fee8e9517beb08b888a97a81906e9d1fc4f51c5d372766647e52cb,2024-05-17T18:36:05.263000
@ -251573,6 +251573,7 @@ CVE-2024-4849,0,0,511b2c9f4d511b050df67c62f8e5c632de2018429782be15ee8ee0f13ba543
CVE-2024-4853,0,0,ba76998b2322009a736dfabc746ba873162af9769c26f75eb36eb2d2f5455f10,2024-05-14T16:11:39.510000
CVE-2024-4854,0,0,1544f1fe7b518c3058bbfd199032e2a1672e1211474fa012cf98161e9eb1b9cb,2024-05-14T16:11:39.510000
CVE-2024-4855,0,0,853db3435d2b017e6592b5c0a241408d5ffcf3daf060fdd7c76e2352d5ddd617,2024-05-14T16:11:39.510000
CVE-2024-4858,1,1,865c49be8dcf436928cd5b0857b5d1a1d7f72b422f294f75f9c390619561d1f7,2024-05-25T03:15:08.150000
CVE-2024-4859,0,0,3de5434b35db9344c6a8c9ff1c0891dd93d801d8510e1a23be87da56d66078a2,2024-05-14T19:17:55.627000
CVE-2024-4860,0,0,078ece1acb5f59d15050f08de42942705925d025d9ef9dfb969c99e0b62152d4,2024-05-14T19:17:55.627000
CVE-2024-4865,0,0,329a52916bfd6dfb743076cafa1076f06a8ce9ff30efb7c2cd8c895178c7ad64,2024-05-20T13:00:34.807000
@ -251729,8 +251730,10 @@ CVE-2024-5196,0,0,5d3f231a43c31999680087469716ad4f3327a52b153d985ebb2cb490ce1591
CVE-2024-5201,0,0,81f846161e431f4061849f73f284a647933a16f2dae4eac954a714561d2b5ac6,2024-05-24T01:15:30.977000
CVE-2024-5202,0,0,1c05e157c3d14a467d804b0cdb60f2b737187a0758793a87fe251b0e49272bf0,2024-05-24T01:15:30.977000
CVE-2024-5205,0,0,cb36ec671fed104039900e6835467ad487e54c052bb39844cd3bc6979a6fc551,2024-05-24T13:03:11.993000
CVE-2024-5220,1,1,db5d76a16acffa422f763541aa93b6370a97c5e1e76f123c8b63b8a6f885d2e9,2024-05-25T02:15:41.053000
CVE-2024-5227,0,0,764fb0f16b4be474e014f5b57d633ec17b38b77286d8198d7e553896bd7bbab8,2024-05-24T01:15:30.977000
CVE-2024-5228,0,0,7fbc53a71d297b0e47d7a3142759157603a147b1ae1e469af28fd6a561b32095,2024-05-24T01:15:30.977000
CVE-2024-5229,1,1,cfa44ef4e2e9b2e767dede80ab97f9f6ba863713fc6e5e73d118a30fb5ecf176,2024-05-25T03:15:08.377000
CVE-2024-5230,0,0,1dfdc1f75adf11a1631a2035669fccd144f45320efda1d74487ef2b2c2eb1408,2024-05-24T01:15:30.977000
CVE-2024-5231,0,0,77aaf6c06c39e7a6957d4d84230cd96a9a7b8b69b2c092878c05a8d8a4b1142f,2024-05-24T01:15:30.977000
CVE-2024-5232,0,0,2d619cda6223cd7544d038358d9c03578b253710cd700f688734acc51a6e3712,2024-05-24T01:15:30.977000

Can't render this file because it is too large.