admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-07-11 16:13:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2024-03-16T17:00:29.502563+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2024-03-16 17:03:17 +00:00
parent ccd6fe4f14
commit 26453580f2
6 changed files with 287 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
CVE-2024/CVE-2024-21xx/CVE-2024-2193.json
View File

@ -2,12 +2,16 @@
"id": "CVE-2024-2193",
"sourceIdentifier": "cret@cert.org",
"published": "2024-03-15T18:15:08.530",
"lastModified": "2024-03-15T18:15:08.530",
"lastModified": "2024-03-16T16:15:07.160",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths."
},
{
"lang": "es",
"value": "Se ha revelado una vulnerabilidad de condici\u00f3n de ejecuci\u00f3n especulativa (SRC) que afecta a las arquitecturas de CPU modernas que admiten la ejecuci\u00f3n especulativa (relacionada con Spectre V1). Un atacante no autenticado puede aprovechar esta vulnerabilidad para revelar datos arbitrarios de la CPU utilizando condiciones de ejecuci\u00f3n para acceder a las rutas de c\u00f3digo ejecutable especulativas."
}
],
"metrics": {},
@ -32,6 +36,10 @@
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7016.html",
"source": "cret@cert.org"
},
{
"url": "https://www.kb.cert.org/vuls/id/488902",
"source": "cret@cert.org"
},
{
"url": "https://www.vusec.net/projects/ghostrace/",
"source": "cret@cert.org"

88
CVE-2024/CVE-2024-25xx/CVE-2024-2519.json Normal file
View File

@ -0,0 +1,88 @@
{
"id": "CVE-2024-2519",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-16T15:15:08.580",
"lastModified": "2024-03-16T15:15:08.580",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as problematic. Affected is an unknown function of the file navbar.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256956. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20navbar.php.md",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.256956",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.256956",
"source": "cna@vuldb.com"
}
]
}

88
CVE-2024/CVE-2024-25xx/CVE-2024-2520.json Normal file
View File

@ -0,0 +1,88 @@
{
"id": "CVE-2024-2520",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-16T16:15:07.270",
"lastModified": "2024-03-16T16:15:07.270",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bookdate.php. The manipulation of the argument room_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256957 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/SQL%20Injection%20-%20bookdate.php.md",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.256957",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.256957",
"source": "cna@vuldb.com"
}
]
}

88
CVE-2024/CVE-2024-25xx/CVE-2024-2521.json Normal file
View File

@ -0,0 +1,88 @@
{
"id": "CVE-2024-2521",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-16T16:15:07.497",
"lastModified": "2024-03-16T16:15:07.497",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/bookdate.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-256958 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20bookdate.php.md",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.256958",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.256958",
"source": "cna@vuldb.com"
}
]
}

15
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2024-03-16T15:00:38.009178+00:00
2024-03-16T17:00:29.502563+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2024-03-16T13:15:05.727000+00:00
2024-03-16T16:15:07.497000+00:00
```
### Last Data Feed Release
@ -29,20 +29,23 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
241700
241703
```
### CVEs added in the last Commit
Recently added CVEs: `1`
Recently added CVEs: `3`
* [CVE-2024-2518](CVE-2024/CVE-2024-25xx/CVE-2024-2518.json) (`2024-03-16T13:15:05.727`)
* [CVE-2024-2519](CVE-2024/CVE-2024-25xx/CVE-2024-2519.json) (`2024-03-16T15:15:08.580`)
* [CVE-2024-2520](CVE-2024/CVE-2024-25xx/CVE-2024-2520.json) (`2024-03-16T16:15:07.270`)
* [CVE-2024-2521](CVE-2024/CVE-2024-25xx/CVE-2024-2521.json) (`2024-03-16T16:15:07.497`)
### CVEs modified in the last Commit
Recently modified CVEs: `0`
Recently modified CVEs: `1`
* [CVE-2024-2193](CVE-2024/CVE-2024-21xx/CVE-2024-2193.json) (`2024-03-16T16:15:07.160`)
## Download and Usage

7
_state.csv
View File

@ -239617,7 +239617,7 @@ CVE-2024-21911,0,0,30b0952621022b198f37c9fc7c47e2aaa3233be56e7cd5684ca7f588e4860
CVE-2024-21915,0,0,37ba536bf668637545b4dc7be0d8e2b8dd5a196f32352bf8da3b31f0b239e591,2024-02-16T19:26:55.393000
CVE-2024-21916,0,0,9f2b20d343ff64e569a6727c28d35277f9cb0ae2a13059d88274004570b48dd2,2024-02-08T01:34:49.067000
CVE-2024-21917,0,0,f716c6e174b4d85e6dd9ac9a5c0d15320474c17d34b338ef8fe8fa8f22be68b7,2024-02-08T01:29:32.367000
CVE-2024-2193,0,0,469d813504b29d8834659f1f37fff8eac51472c61999bfb73a02e0e82498dddb,2024-03-15T18:15:08.530000
CVE-2024-2193,0,1,7d05594e7513306e752d0a77812979684a1b028d34ebee4b390ff8083ecdd2a8,2024-03-16T16:15:07.160000
CVE-2024-2194,0,0,e66d1886576950c3cc2788bd7fbc7cf127b4cc7097217924653f49641c7f6c67,2024-03-13T18:15:58.530000
CVE-2024-21982,0,0,994386f15521161d8cc5450a9cd855c84b7920a60d3a57eb970483fe82fbbf1f,2024-01-18T20:16:20.420000
CVE-2024-21983,0,0,ded146d4808fc5f83424e373b65cdad37794b676d9611f5162836ce6d86d8bd7,2024-02-20T19:51:05.510000
@ -240911,21 +240911,24 @@ CVE-2024-25166,0,0,129a95ebe90cc2b383c4fe37f7a5c2e5cdcb882bd64dbe64af9759fbd5ff7
CVE-2024-25169,0,0,085f93c697cbc9b87909098278959f0cd92cdefab08c3f134d9cf1b867f4821c,2024-02-29T13:49:47.277000
CVE-2024-2517,0,0,0bc257e22d6e02189773bba1c8d38b16477a100c6445c7cc8d7766be487ddd51,2024-03-16T12:15:15.630000
CVE-2024-25170,0,0,8c10b04ca5b0dc9d98ec03819b8af4a2061c2ed0e688a9769189e27171052682,2024-02-29T13:49:47.277000
CVE-2024-2518,1,1,e7a2d5e8b89ed3a0f985235f90b67493f8c61417b6652ac4be349074cd30e8bf,2024-03-16T13:15:05.727000
CVE-2024-2518,0,0,e7a2d5e8b89ed3a0f985235f90b67493f8c61417b6652ac4be349074cd30e8bf,2024-03-16T13:15:05.727000
CVE-2024-25180,0,0,dfb589c05c1e9278a8bc73271695ffb0b4516c86eacf76026c100edaaf3aeb4f,2024-03-01T14:04:26.010000
CVE-2024-25189,0,0,1d7cfa2fabf5895c762903d790e93c25bf340820dfaf308e4a90bf0e023f8d31,2024-02-26T16:27:58.813000
CVE-2024-2519,1,1,432c06a0cc5ccdacc9017c4c12ecdbe81858f6e40356bd1175b96f1bb47f6c62,2024-03-16T15:15:08.580000
CVE-2024-25190,0,0,0b17f2f2ea995d7258b5b23efd7256f476d5e214b06ad4b138007808b72ba049,2024-02-15T05:03:08.533000
CVE-2024-25191,0,0,a20e0e30e62d8bdc585e7a677b7caca2e4d45737935fdadf8b21b1e8c72a3745,2024-02-15T05:03:05.180000
CVE-2024-25196,0,0,b6c0d681824eeb40003ae1de8e5ec891375b96bc8ca696da9c52ebeee976797e,2024-02-20T19:50:53.960000
CVE-2024-25197,0,0,f88efdc4e29c7c6ba755c45df716b208f7c38bf3b203fb81efb24a9080042dea,2024-02-20T19:50:53.960000
CVE-2024-25198,0,0,8b4024e60f871c76602fecb0152519496407fa53a46a195f21141146c8618cc6,2024-02-20T19:50:53.960000
CVE-2024-25199,0,0,633725c6a8fb3b98edd79b77d04beba3772199f893fd1dc52d18b3d5b4d30d5a,2024-02-20T19:50:53.960000
CVE-2024-2520,1,1,75da3cf635dc2a2d2d206968233059d58e9c06208be3ea7e261b8c6968225bb6,2024-03-16T16:15:07.270000
CVE-2024-25200,0,0,1274a79d375d34fee92825da3e942b670613a4d255fa242e04ccd2d32c35b298,2024-02-15T15:22:25.980000
CVE-2024-25201,0,0,bfe46b1bf114bcec0e6979818328c95472b0f2a68d7c4d63c6c58cdf16d9a244,2024-02-15T15:21:30.993000
CVE-2024-25202,0,0,c422e9401b4db774c0f691c7b5ea2ed61f0503ab63d1f7e46beff47ddd901d16,2024-03-11T22:15:55.080000
CVE-2024-25207,0,0,522bd19ce7b2ddffc5be36f745ae847668b3400b09298028269262ddb75d3c09,2024-02-15T06:26:56.397000
CVE-2024-25208,0,0,742eb42fda465b287aa7e8d41245379c8031d383095e8531f215f5845758ed8a,2024-02-15T06:27:02.687000
CVE-2024-25209,0,0,44b8425e5bf16406937e1b3f814f6db05503cf2471da19fc8018aa7c48221faf,2024-02-14T16:13:16.563000
CVE-2024-2521,1,1,7eb3e788f37b83124ce8b29b37c56565808d58c3bf5b3a48120698469bcbdf62,2024-03-16T16:15:07.497000
CVE-2024-25210,0,0,13175542fbd860efeeee9fe5b56857a097afd67ab8f98de2656d43e55fe91f17,2024-02-14T16:13:16.563000
CVE-2024-25211,0,0,9281419cd076fc33c307096c179ea30d54ddd56621e65d04af6ce4fa790210fa,2024-02-14T16:13:16.563000
CVE-2024-25212,0,0,dc2351f7ff810a6e6cab609b2192e423f12f0c41bc2660fd3559a4e7cb672d9d,2024-02-15T06:27:12.610000

Can't render this file because it is too large.