Auto-Update: 2024-03-03T11:00:24.756529+00:00

This commit is contained in:
cad-safe-bot 2024-03-03 11:00:28 +00:00
parent 079cf181b6
commit 282771be61
6 changed files with 110 additions and 9 deletions

View File

@ -0,0 +1,20 @@
{
"id": "CVE-2024-24302",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-03T09:15:06.100",
"lastModified": "2024-03-03T09:15:06.100",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Tunis Soft \"Product Designer\" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess() method."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-productdesigner-502.md",
"source": "cve@mitre.org"
}
]
}

View File

@ -0,0 +1,20 @@
{
"id": "CVE-2024-25839",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-03T09:15:06.163",
"lastModified": "2024-03-03T09:15:06.163",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Webbax \"Super Newsletter\" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-supernewsletter.md",
"source": "cve@mitre.org"
}
]
}

View File

@ -0,0 +1,20 @@
{
"id": "CVE-2024-25842",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-03T09:15:06.210",
"lastModified": "2024-03-03T09:15:06.210",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Presta World \"Account Manager - Sales Representative & Dealers - CRM\" (prestasalesmanager) module for PrestaShop before version 9.0, allows remote attackers to escalate privilege and obtain sensitive information via the uploadLogo() and postProcess methods."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-prestasalesmanager.md",
"source": "cve@mitre.org"
}
]
}

View File

@ -0,0 +1,20 @@
{
"id": "CVE-2024-25847",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-03T09:15:06.253",
"lastModified": "2024-03-03T09:15:06.253",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "SQL Injection vulnerability in MyPrestaModules \"Product Catalog (CSV, Excel) Import\" (simpleimportproduct) modules for PrestaShop versions 6.5.0 and before, allows attackers to escalate privileges and obtain sensitive information via Send::__construct() and importProducts::_addDataToDb methods."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-simpleimportproduct.md",
"source": "cve@mitre.org"
}
]
}

View File

@ -0,0 +1,20 @@
{
"id": "CVE-2024-26469",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-03T10:15:06.813",
"lastModified": "2024-03-03T10:15:06.813",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft \"Product Designer\" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service (DoS) and escalate privileges via the url parameter in the postProcess() method."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-02-29-productdesigner-918.md",
"source": "cve@mitre.org"
}
]
}

View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2024-03-03T09:00:24.562269+00:00
2024-03-03T11:00:24.756529+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2024-03-03T08:15:08.280000+00:00
2024-03-03T10:15:06.813000+00:00
```
### Last Data Feed Release
@ -29,23 +29,24 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
240363
240368
```
### CVEs added in the last Commit
Recently added CVEs: `3`
Recently added CVEs: `5`
* [CVE-2024-24307](CVE-2024/CVE-2024-243xx/CVE-2024-24307.json) (`2024-03-03T08:15:08.140`)
* [CVE-2024-25551](CVE-2024/CVE-2024-255xx/CVE-2024-25551.json) (`2024-03-03T08:15:08.223`)
* [CVE-2024-25844](CVE-2024/CVE-2024-258xx/CVE-2024-25844.json) (`2024-03-03T08:15:08.280`)
* [CVE-2024-24302](CVE-2024/CVE-2024-243xx/CVE-2024-24302.json) (`2024-03-03T09:15:06.100`)
* [CVE-2024-25839](CVE-2024/CVE-2024-258xx/CVE-2024-25839.json) (`2024-03-03T09:15:06.163`)
* [CVE-2024-25842](CVE-2024/CVE-2024-258xx/CVE-2024-25842.json) (`2024-03-03T09:15:06.210`)
* [CVE-2024-25847](CVE-2024/CVE-2024-258xx/CVE-2024-25847.json) (`2024-03-03T09:15:06.253`)
* [CVE-2024-26469](CVE-2024/CVE-2024-264xx/CVE-2024-26469.json) (`2024-03-03T10:15:06.813`)
### CVEs modified in the last Commit
Recently modified CVEs: `1`
Recently modified CVEs: `0`
* [CVE-2023-52466](CVE-2023/CVE-2023-524xx/CVE-2023-52466.json) (`2024-03-03T08:15:07.860`)
## Download and Usage