From 2c68bc4da5dd34ef5e932c74be8c31ea6efd07b0 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Mon, 13 Nov 2023 11:00:22 +0000 Subject: [PATCH] Auto-Update: 2023-11-13T11:00:18.647634+00:00 --- CVE-2023/CVE-2023-403xx/CVE-2023-40335.json | 55 +++++++++++++++++++++ CVE-2023/CVE-2023-460xx/CVE-2023-46092.json | 55 +++++++++++++++++++++ CVE-2023/CVE-2023-478xx/CVE-2023-47801.json | 20 ++++++++ CVE-2023/CVE-2023-57xx/CVE-2023-5747.json | 45 +++++++++++++++-- README.md | 18 +++---- 5 files changed, 181 insertions(+), 12 deletions(-) create mode 100644 CVE-2023/CVE-2023-403xx/CVE-2023-40335.json create mode 100644 CVE-2023/CVE-2023-460xx/CVE-2023-46092.json create mode 100644 CVE-2023/CVE-2023-478xx/CVE-2023-47801.json diff --git a/CVE-2023/CVE-2023-403xx/CVE-2023-40335.json b/CVE-2023/CVE-2023-403xx/CVE-2023-40335.json new file mode 100644 index 00000000000..44c8176d030 --- /dev/null +++ b/CVE-2023/CVE-2023-403xx/CVE-2023-40335.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-40335", + "sourceIdentifier": "audit@patchstack.com", + "published": "2023-11-13T10:15:07.540", + "lastModified": "2023-11-13T10:15:07.540", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Jeremy O'Connell Cleverwise Daily Quotes allows Stored XSS.This issue affects Cleverwise Daily Quotes: from n/a through 3.2.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseScore": 7.1, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/vulnerability/cleverwise-daily-quotes/wordpress-cleverwise-daily-quotes-plugin-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-460xx/CVE-2023-46092.json b/CVE-2023/CVE-2023-460xx/CVE-2023-46092.json new file mode 100644 index 00000000000..b3db29fac20 --- /dev/null +++ b/CVE-2023/CVE-2023-460xx/CVE-2023-46092.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-46092", + "sourceIdentifier": "audit@patchstack.com", + "published": "2023-11-13T10:15:07.747", + "lastModified": "2023-11-13T10:15:07.747", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in LionScripts.Com Webmaster Tools allows Stored XSS.This issue affects Webmaster Tools: from n/a through 2.0.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseScore": 7.1, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/vulnerability/webmaster-tools/wordpress-webmaster-tools-plugin-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-478xx/CVE-2023-47801.json b/CVE-2023/CVE-2023-478xx/CVE-2023-47801.json new file mode 100644 index 00000000000..37ee4679a51 --- /dev/null +++ b/CVE-2023/CVE-2023-478xx/CVE-2023-47801.json @@ -0,0 +1,20 @@ +{ + "id": "CVE-2023-47801", + "sourceIdentifier": "cve@mitre.org", + "published": "2023-11-13T09:15:25.637", + "lastModified": "2023-11-13T09:15:25.637", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in Click Studios Passwordstate before 9811. Existing users (Security Administrators) could use the System Wide API Key to read or delete private password records when specifically used with the PasswordHistory API endpoint. It is also possible to use the Copy/Move Password Record API Key to Copy/Move private password records." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://www.clickstudios.com.au/security/advisories/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-57xx/CVE-2023-5747.json b/CVE-2023/CVE-2023-57xx/CVE-2023-5747.json index b5992288ca2..8c3fb097749 100644 --- a/CVE-2023/CVE-2023-57xx/CVE-2023-5747.json +++ b/CVE-2023/CVE-2023-57xx/CVE-2023-5747.json @@ -2,15 +2,54 @@ "id": "CVE-2023-5747", "sourceIdentifier": "fc9afe74-3f80-4fb7-a313-e6f036a89882", "published": "2023-11-13T08:15:26.530", - "lastModified": "2023-11-13T08:15:26.530", + "lastModified": "2023-11-13T09:15:25.720", "vulnStatus": "Received", "descriptions": [ { "lang": "en", - "value": "Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has released patched firmware for the highlighted flaw. Please refer to the hanwhavision security report for more information and solution." + "value": "Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has released patched firmware for the highlighted flaw. Please refer to the hanwhavision security report for more information and solution.\"" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "fc9afe74-3f80-4fb7-a313-e6f036a89882", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 7.2, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "fc9afe74-3f80-4fb7-a313-e6f036a89882", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-345" + }, + { + "lang": "en", + "value": "CWE-347" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://www.hanwhavision.com/wp-content/uploads/2023/11/Camera-Vulnerability-Report-CVE-2023-5747_20231113.pdf", diff --git a/README.md b/README.md index 00d9026eea0..65472ceb206 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2023-11-13T09:00:19.069065+00:00 +2023-11-13T11:00:18.647634+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2023-11-13T08:15:26.530000+00:00 +2023-11-13T10:15:07.747000+00:00 ``` ### Last Data Feed Release @@ -29,23 +29,23 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -230421 +230424 ``` ### CVEs added in the last Commit -Recently added CVEs: `4` +Recently added CVEs: `3` -* [CVE-2023-4775](CVE-2023/CVE-2023-47xx/CVE-2023-4775.json) (`2023-11-13T08:15:25.790`) -* [CVE-2023-5037](CVE-2023/CVE-2023-50xx/CVE-2023-5037.json) (`2023-11-13T08:15:26.107`) -* [CVE-2023-5741](CVE-2023/CVE-2023-57xx/CVE-2023-5741.json) (`2023-11-13T08:15:26.317`) -* [CVE-2023-5747](CVE-2023/CVE-2023-57xx/CVE-2023-5747.json) (`2023-11-13T08:15:26.530`) +* [CVE-2023-47801](CVE-2023/CVE-2023-478xx/CVE-2023-47801.json) (`2023-11-13T09:15:25.637`) +* [CVE-2023-40335](CVE-2023/CVE-2023-403xx/CVE-2023-40335.json) (`2023-11-13T10:15:07.540`) +* [CVE-2023-46092](CVE-2023/CVE-2023-460xx/CVE-2023-46092.json) (`2023-11-13T10:15:07.747`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `1` +* [CVE-2023-5747](CVE-2023/CVE-2023-57xx/CVE-2023-5747.json) (`2023-11-13T09:15:25.720`) ## Download and Usage