admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-07-09 16:05:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2024-03-17T03:00:37.503825+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2024-03-17 03:03:25 +00:00
parent f8584cb81b
commit 26422c0576
4 changed files with 186 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

88
CVE-2024/CVE-2024-25xx/CVE-2024-2535.json Normal file
View File

@ -0,0 +1,88 @@
{
"id": "CVE-2024-2535",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-17T01:15:50.107",
"lastModified": "2024-03-17T01:15:50.107",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256972. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20users.php.md",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.256972",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.256972",
"source": "cna@vuldb.com"
}
]
}

88
CVE-2024/CVE-2024-25xx/CVE-2024-2546.json Normal file
View File

@ -0,0 +1,88 @@
{
"id": "CVE-2024-2546",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-17T02:15:06.190",
"lastModified": "2024-03-17T02:15:06.190",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in Tenda AC18 15.13.07.09 and classified as critical. Affected by this vulnerability is the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256999. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0
},
"baseSeverity": "HIGH",
"exploitabilityScore": 8.0,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/A18/fromSetWirelessRepeat_a.md",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.256999",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.256999",
"source": "cna@vuldb.com"
}
]
}

12
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2024-03-17T00:55:30.056956+00:00
2024-03-17T03:00:37.503825+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2024-03-17T00:15:06.977000+00:00
2024-03-17T02:15:06.190000+00:00
```
### Last Data Feed Release
@ -23,21 +23,21 @@ Repository synchronizes with the NVD every 2 hours.
Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest)
```plain
2024-03-16T01:00:20.245434+00:00
2024-03-17T01:00:20.248869+00:00
```
### Total Number of included CVEs
```plain
241716
241718
```
### CVEs added in the last Commit
Recently added CVEs: `2`
* [CVE-2024-2533](CVE-2024/CVE-2024-25xx/CVE-2024-2533.json) (`2024-03-16T23:15:06.823`)
* [CVE-2024-2534](CVE-2024/CVE-2024-25xx/CVE-2024-2534.json) (`2024-03-17T00:15:06.977`)
* [CVE-2024-2535](CVE-2024/CVE-2024-25xx/CVE-2024-2535.json) (`2024-03-17T01:15:50.107`)
* [CVE-2024-2546](CVE-2024/CVE-2024-25xx/CVE-2024-2546.json) (`2024-03-17T02:15:06.190`)
### CVEs modified in the last Commit

6
_state.csv
View File

@ -240993,10 +240993,11 @@ CVE-2024-2532,0,0,013aa8b1a5f40605fbb77eb675e3ca9912f6b77d001a82390db4d070e31896
CVE-2024-25320,0,0,56ee093beb049b07518afee56858a8d8ace3b9803f6562a14fef92d8b7d67178,2024-02-16T19:26:55.393000
CVE-2024-25325,0,0,8bc90d1a62ad4d34bac08e20579a9a62b335b7a18a1a28110fe5bb69acbf6c97,2024-03-12T12:40:13.500000
CVE-2024-25327,0,0,ed53fcf930246e366b75ca3dbc41603185b262291cf82ff3e550f2ed4e97b776,2024-03-08T14:02:57.420000
CVE-2024-2533,1,1,b2bc444fc5ada36a166ca65f6521ee7634c6470d9bedcfe200804e523a2cbbb0,2024-03-16T23:15:06.823000
CVE-2024-2533,0,0,b2bc444fc5ada36a166ca65f6521ee7634c6470d9bedcfe200804e523a2cbbb0,2024-03-16T23:15:06.823000
CVE-2024-25331,0,0,60a22b9e40d224a5f3b5e272a457dd70292f6aef15fb2558c273ff847702ea0c,2024-03-12T12:40:13.500000
CVE-2024-2534,1,1,7cfcf332eaf4901fe20668ff7d9fd89e0819edd051d6f2c6bc824ea7cff2b21f,2024-03-17T00:15:06.977000
CVE-2024-2534,0,0,7cfcf332eaf4901fe20668ff7d9fd89e0819edd051d6f2c6bc824ea7cff2b21f,2024-03-17T00:15:06.977000
CVE-2024-25344,0,0,5140bac0aef452b65d54f79c6217b05ec44dd1a460f10a2ceaa1e65877e2e6fa,2024-02-26T16:32:25.577000
CVE-2024-2535,1,1,746176421d07575aeabd6db4316bb90e2f46104766e7280884f2587d44d7cf63,2024-03-17T01:15:50.107000
CVE-2024-25350,0,0,3b5e1a464fb4fcd28f6d7166045a369486403df18ae61c0e2fab4e4e5871d428,2024-02-29T13:49:47.277000
CVE-2024-25351,0,0,28c4ca40865cd756499ab4d2ad9d55bb73b890cae2259528816b47b2a536dca5,2024-02-29T13:49:47.277000
CVE-2024-25360,0,0,3e224bc7b3e9e14e80fd4bf018fb256496be6af2f44b523d9f71f67e98675039,2024-02-12T17:31:21.670000
@ -241036,6 +241037,7 @@ CVE-2024-25451,0,0,8aaab13894f9d8c9bc20e5f87cbbb0f7465b7ebab392320343f563fa59af2
CVE-2024-25452,0,0,7f6490b32da58c4d2007f26b9ae39953cc12f069cff5819d9885da1e8de79dad,2024-02-12T21:38:36.037000
CVE-2024-25453,0,0,d567c478d9ad2a34db1631ee4b7913509829a8e0133b6c0635464e0be7ec6297,2024-02-12T21:38:53.453000
CVE-2024-25454,0,0,04ccee30e42588774fceb08671e32d0b84ce0bcda0b0c36f669ed23e77fb9f7e,2024-02-12T21:39:19.300000
CVE-2024-2546,1,1,06f1c621c56381204bee2854279a3a19dd6978706eefa59c3bb65c10cbbba2c6,2024-03-17T02:15:06.190000
CVE-2024-25461,0,0,ff9c7389dbf883803b3d7ff0b96f823d8c83a19a6abab9dd2ebda71c398b5542,2024-02-22T19:07:27.197000
CVE-2024-25466,0,0,c4ed87974de177e036ba4c046a8b808bfb2e5d37116e1f3dbea09f35fe2aed68,2024-02-16T13:37:51.433000
CVE-2024-25468,0,0,689cbd3de116ed2f097be6892186e0dd30daa2bde9afea2c256b5d624b13afab,2024-02-20T19:50:53.960000

Can't render this file because it is too large.