admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-07 19:16:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2024-03-20T23:00:48.930443+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2024-03-20 23:03:38 +00:00
parent eaa339d5d7
commit 2e7d576a88
20 changed files with 964 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
CVE-2024/CVE-2024-240xx/CVE-2024-24050.json Normal file
View File

@ -0,0 +1,21 @@
{
"id": "CVE-2024-24050",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-20T22:15:08.487",
"lastModified": "2024-03-20T22:15:08.487",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross Site Scripting (XSS) vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php."
}
],
"metrics": {},
"references": [
{
"url": "https://www.muratcagrialis.com/workout-journal-app-stored-xss-cve-2024-24050",
"source": "cve@mitre.org"
}
]
}

29
CVE-2024/CVE-2024-252xx/CVE-2024-25294.json Normal file
View File

@ -0,0 +1,29 @@
{
"id": "CVE-2024-25294",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-20T21:15:30.877",
"lastModified": "2024-03-20T21:15:30.877",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters."
}
],
"metrics": {},
"references": [
{
"url": "http://rebuild.com",
"source": "cve@mitre.org"
},
{
"url": "https://deeply-capri-1c8.notion.site/REBUILD-V3-5-2023-12-11-SSRF-30324be04e00477eae472bf75f4f5e0d",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/getrebuild/rebuild/",
"source": "cve@mitre.org"
}
]
}

89
CVE-2024/CVE-2024-27xx/CVE-2024-2717.json Normal file
View File

@ -0,0 +1,89 @@
{
"id": "CVE-2024-2717",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-20T21:15:32.570",
"lastModified": "2024-03-20T21:15:32.570",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257470 is the identifier assigned to this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%206.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.257470",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.257470",
"source": "cna@vuldb.com"
}
]
}

89
CVE-2024/CVE-2024-27xx/CVE-2024-2718.json Normal file
View File

@ -0,0 +1,89 @@
{
"id": "CVE-2024-2718",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-20T21:15:32.830",
"lastModified": "2024-03-20T21:15:32.830",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/booking-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257471."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%207.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.257471",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.257471",
"source": "cna@vuldb.com"
}
]
}

89
CVE-2024/CVE-2024-27xx/CVE-2024-2719.json Normal file
View File

@ -0,0 +1,89 @@
{
"id": "CVE-2024-2719",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-20T21:15:33.073",
"lastModified": "2024-03-20T21:15:33.073",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as problematic has been found in Campcodes Complete Online DJ Booking System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257472."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%208.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.257472",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.257472",
"source": "cna@vuldb.com"
}
]
}

89
CVE-2024/CVE-2024-27xx/CVE-2024-2720.json Normal file
View File

@ -0,0 +1,89 @@
{
"id": "CVE-2024-2720",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-20T22:15:08.813",
"lastModified": "2024-03-20T22:15:08.813",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as problematic was found in Campcodes Complete Online DJ Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257473 was assigned to this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%209.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.257473",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.257473",
"source": "cna@vuldb.com"
}
]
}

60
CVE-2024/CVE-2024-290xx/CVE-2024-29018.json Normal file
View File

@ -0,0 +1,60 @@
{
"id": "CVE-2024-29018",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-20T21:15:31.113",
"lastModified": "2024-03-20T21:15:31.113",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature is frequently referred to as custom networks, as each network can have a different driver, set of parameters and thus behaviors. When creating a network, the `--internal` flag is used to designate a network as _internal_. The `internal` attribute in a docker-compose.yml file may also be used to mark a network _internal_, and other API clients may specify the `internal` parameter as well.\n\nWhen containers with networking are created, they are assigned unique network interfaces and IP addresses. The host serves as a router for non-internal networks, with a gateway IP that provides SNAT/DNAT to/from container IPs.\n\nContainers on an internal network may communicate between each other, but are precluded from communicating with any networks the host has access to (LAN or WAN) as no default route is configured, and firewall rules are set up to drop all outgoing traffic. Communication with the gateway IP address (and thus appropriately configured host services) is possible, and the host may communicate with any container IP directly.\n\nIn addition to configuring the Linux kernel's various networking features to enable container networking, `dockerd` directly provides some services to container networks. Principal among these is serving as a resolver, enabling service discovery, and resolution of names from an upstream resolver.\n\nWhen a DNS request for a name that does not correspond to a container is received, the request is forwarded to the configured upstream resolver. This request is made from the container's network namespace: the level of access and routing of traffic is the same as if the request was made by the container itself.\n\nAs a consequence of this design, containers solely attached to an internal network will be unable to resolve names using the upstream resolver, as the container itself is unable to communicate with that nameserver. Only the names of containers also attached to the internal network are able to be resolved.\n\nMany systems run a local forwarding DNS resolver. As the host and any containers have separate loopback devices, a consequence of the design described above is that containers are unable to resolve names from the host's configured resolver, as they cannot reach these addresses on the host loopback device. To bridge this gap, and to allow containers to properly resolve names even when a local forwarding resolver is used on a loopback address, `dockerd` detects this scenario and instead forward DNS requests from the host namework namespace. The loopback resolver then forwards the requests to its configured upstream resolvers, as expected.\n\nBecause `dockerd` forwards DNS requests to the host loopback device, bypassing the container network namespace's normal routing semantics entirely, internal networks can unexpectedly forward DNS requests to an external nameserver. By registering a domain for which they control the authoritative nameservers, an attacker could arrange for a compromised container to exfiltrate data by encoding it in DNS queries that will eventually be answered by their nameservers.\n\nDocker Desktop is not affected, as Docker Desktop always runs an internal resolver on a RFC 1918 address.\n\nMoby releases 26.0.0, 25.0.4, and 23.0.11 are patched to prevent forwarding any DNS requests from internal networks. As a workaround, run containers intended to be solely attached to internal networks with a custom upstream address, which will force all upstream DNS queries to be resolved from the container's network namespace."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-669"
}
]
}
],
"references": [
{
"url": "https://github.com/moby/moby/pull/46609",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx",
"source": "security-advisories@github.com"
}
]
}

68
CVE-2024/CVE-2024-290xx/CVE-2024-29026.json Normal file
View File

@ -0,0 +1,68 @@
{
"id": "CVE-2024-29026",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-20T22:15:08.557",
"lastModified": "2024-03-20T22:15:08.557",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a lenient CORS policy allows attackers to make a cross origin request, reading privileged information. This can be used to leak the admin password. Commit 9215d9ba0f29d62201d3feea9e77dcd274581624 fixes this issue."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.2
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-352"
},
{
"lang": "en",
"value": "CWE-697"
}
]
}
],
"references": [
{
"url": "https://github.com/owncast/owncast/blob/v0.1.2/router/middleware/auth.go#L32",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/owncast/owncast/commit/9215d9ba0f29d62201d3feea9e77dcd274581624",
"source": "security-advisories@github.com"
},
{
"url": "https://securitylab.github.com/advisories/GHSL-2023-261_Owncast/",
"source": "security-advisories@github.com"
}
]
}

64
CVE-2024/CVE-2024-290xx/CVE-2024-29032.json Normal file
View File

@ -0,0 +1,64 @@
{
"id": "CVE-2024-29032",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-20T21:15:31.370",
"lastModified": "2024-03-20T21:15:31.370",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Qiskit IBM Runtime is an environment that streamlines quantum computations and provides optimal implementations of the Qiskit quantum computing SDK. Starting in version 0.1.0 and prior to version 0.21.2, deserializing json data using `qiskit_ibm_runtime.RuntimeDecoder` can lead to arbitrary code execution given a correctly formatted input string. Version 0.21.2 contains a fix for this issue."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.8,
"impactScore": 3.4
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"references": [
{
"url": "https://github.com/Qiskit/qiskit-ibm-runtime/blob/16e90f475e78a9d2ae77daa139ef750cfa84ca82/qiskit_ibm_runtime/utils/json.py#L156-L159",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/Qiskit/qiskit-ibm-runtime/commit/b78fca114133051805d00043a404b25a33835f4d",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/Qiskit/qiskit-ibm-runtime/security/advisories/GHSA-x4x5-jv3x-9c7m",
"source": "security-advisories@github.com"
}
]
}

64
CVE-2024/CVE-2024-290xx/CVE-2024-29033.json Normal file
View File

@ -0,0 +1,64 @@
{
"id": "CVE-2024-29033",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-20T21:15:31.593",
"lastModified": "2024-03-20T21:15:31.593",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OAuthenticator provides plugins for JupyterHub to use common OAuth providers, as well as base classes for writing one's own Authenticators with any OAuth 2.0 provider. `GoogleOAuthenticator.hosted_domain` is used to restrict what Google accounts can be authorized access to a JupyterHub. The restriction is intented to be to Google accounts part of one or more Google organization verified to control specified domain(s). Prior to version 16.3.0, the actual restriction has been to Google accounts with emails ending with the domain. Such accounts could have been created by anyone which at one time was able to read an email associated with the domain. This was described by Dylan Ayrey (@dxa4481) in this [blog post] from 15th December 2023). OAuthenticator 16.3.0 contains a patch for this issue. As a workaround, restrict who can login another way, such as `allowed_users` or `allowed_google_groups`."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-285"
}
]
}
],
"references": [
{
"url": "https://github.com/jupyterhub/oauthenticator/commit/5246b09675501b09fb6ed64022099b7644812f60",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/jupyterhub/oauthenticator/security/advisories/GHSA-55m3-44xf-hg4h",
"source": "security-advisories@github.com"
},
{
"url": "https://trufflesecurity.com/blog/google-oauth-is-broken-sort-of",
"source": "security-advisories@github.com"
}
]
}

68
CVE-2024/CVE-2024-290xx/CVE-2024-29036.json Normal file
View File

@ -0,0 +1,68 @@
{
"id": "CVE-2024-29036",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-20T21:15:31.817",
"lastModified": "2024-03-20T21:15:31.817",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Saleor Storefront is software for building e-commerce experiences. Prior to commit 579241e75a5eb332ccf26e0bcdd54befa33f4783, when any user authenticates in the storefront, anonymous users are able to access their data. The session is leaked through cache and can be accessed by anyone. Users should upgrade to a version that incorporates commit 579241e75a5eb332ccf26e0bcdd54befa33f4783 or later to receive a patch. A possible workaround is to temporarily disable authentication by changing the usage of `createSaleorAuthClient()`."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://github.com/saleor/auth-sdk/commit/56db13407aa35d00b85ec2df042692edd4aea9da",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/saleor/saleor-docs/pull/1120",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/saleor/storefront/commit/579241e75a5eb332ccf26e0bcdd54befa33f4783",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/saleor/storefront/security/advisories/GHSA-52cq-c7x7-cqw4",
"source": "security-advisories@github.com"
}
]
}

60
CVE-2024/CVE-2024-290xx/CVE-2024-29037.json Normal file
View File

@ -0,0 +1,60 @@
{
"id": "CVE-2024-29037",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-20T21:15:32.040",
"lastModified": "2024-03-20T21:15:32.040",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster. Starting in version 0.1.143 and prior to version 0.2.182, due to configuration issues in the helm chart, if there was a successful initial deployment during a limited window of time, personal access tokens were possibly created with a default secret key. Since the secret key is a static, publicly available value, someone could inspect the algorithm used to generate personal access tokens and generate their own for an instance. Deploying with Metadata Service Authentication enabled would have been difficult during window of releases. If someone circumvented the helm settings and manually set Metadata Service Authentication to be enabled using environment variables directly, this would skip over the autogeneration logic for the Kubernetes Secrets and DataHub GMS would default to the signing key specified statically in the application.yml. Most deployments probably did not attempt to circumvent the helm settings to enable Metadata Service Authentication during this time, so impact is most likely limited. Any deployments with Metadata Service Authentication enabled should ensure that their secret values are properly randomized. Version 0.2.182 contains a patch for this issue. As a workaround, one may reset the token signing key to be a random value, which will invalidate active personal access tokens."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "security-advisories@github.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1394"
}
]
}
],
"references": [
{
"url": "https://github.com/acryldata/datahub-helm/commit/ea8a17860f053c63387b8309e1f77c0e1462a1b3",
"source": "security-advisories@github.com"
},
{
"url": "https://github.com/acryldata/datahub-helm/security/advisories/GHSA-82p6-9h7m-9h8j",
"source": "security-advisories@github.com"
}
]
}

21
CVE-2024/CVE-2024-294xx/CVE-2024-29469.json Normal file
View File

@ -0,0 +1,21 @@
{
"id": "CVE-2024-29469",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-20T21:15:32.267",
"lastModified": "2024-03-20T21:15:32.267",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category List parameter under the Lab module."
}
],
"metrics": {},
"references": [
{
"url": "https://gitee.com/yadong.zhang/DBlog/issues/I98O8V",
"source": "cve@mitre.org"
}
]
}

21
CVE-2024/CVE-2024-294xx/CVE-2024-29470.json Normal file
View File

@ -0,0 +1,21 @@
{
"id": "CVE-2024-29470",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-20T21:15:32.323",
"lastModified": "2024-03-20T21:15:32.323",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component {{rootpath}}/links."
}
],
"metrics": {},
"references": [
{
"url": "https://gitee.com/yadong.zhang/DBlog/issues/I98O8V",
"source": "cve@mitre.org"
}
]
}

21
CVE-2024/CVE-2024-294xx/CVE-2024-29471.json Normal file
View File

@ -0,0 +1,21 @@
{
"id": "CVE-2024-29471",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-20T21:15:32.370",
"lastModified": "2024-03-20T21:15:32.370",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notice Manage module."
}
],
"metrics": {},
"references": [
{
"url": "https://gitee.com/yadong.zhang/DBlog/issues/I98O8V",
"source": "cve@mitre.org"
}
]
}

21
CVE-2024/CVE-2024-294xx/CVE-2024-29472.json Normal file
View File

@ -0,0 +1,21 @@
{
"id": "CVE-2024-29472",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-20T21:15:32.423",
"lastModified": "2024-03-20T21:15:32.423",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Privilege Management module."
}
],
"metrics": {},
"references": [
{
"url": "https://gitee.com/yadong.zhang/DBlog/issues/I98O8V",
"source": "cve@mitre.org"
}
]
}

21
CVE-2024/CVE-2024-294xx/CVE-2024-29473.json Normal file
View File

@ -0,0 +1,21 @@
{
"id": "CVE-2024-29473",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-20T21:15:32.473",
"lastModified": "2024-03-20T21:15:32.473",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Role Management module."
}
],
"metrics": {},
"references": [
{
"url": "https://gitee.com/yadong.zhang/DBlog/issues/I98O8V",
"source": "cve@mitre.org"
}
]
}

21
CVE-2024/CVE-2024-294xx/CVE-2024-29474.json Normal file
View File

@ -0,0 +1,21 @@
{
"id": "CVE-2024-29474",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-20T21:15:32.523",
"lastModified": "2024-03-20T21:15:32.523",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Management module."
}
],
"metrics": {},
"references": [
{
"url": "https://gitee.com/yadong.zhang/DBlog/issues/I98O8V",
"source": "cve@mitre.org"
}
]
}

34
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2024-03-20T21:01:01.478574+00:00
2024-03-20T23:00:48.930443+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2024-03-20T20:15:09.823000+00:00
2024-03-20T22:15:08.813000+00:00
```
### Last Data Feed Release
@ -29,21 +29,31 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
242212
242230
```
### CVEs added in the last Commit
Recently added CVEs: `8`
Recently added CVEs: `18`
* [CVE-2024-23721](CVE-2024/CVE-2024-237xx/CVE-2024-23721.json) (`2024-03-20T20:15:07.757`)
* [CVE-2024-2714](CVE-2024/CVE-2024-27xx/CVE-2024-2714.json) (`2024-03-20T20:15:09.303`)
* [CVE-2024-2715](CVE-2024/CVE-2024-27xx/CVE-2024-2715.json) (`2024-03-20T20:15:09.570`)
* [CVE-2024-2716](CVE-2024/CVE-2024-27xx/CVE-2024-2716.json) (`2024-03-20T20:15:09.823`)
* [CVE-2024-27286](CVE-2024/CVE-2024-272xx/CVE-2024-27286.json) (`2024-03-20T20:15:08.407`)
* [CVE-2024-28179](CVE-2024/CVE-2024-281xx/CVE-2024-28179.json) (`2024-03-20T20:15:08.680`)
* [CVE-2024-28231](CVE-2024/CVE-2024-282xx/CVE-2024-28231.json) (`2024-03-20T20:15:08.893`)
* [CVE-2024-28868](CVE-2024/CVE-2024-288xx/CVE-2024-28868.json) (`2024-03-20T20:15:09.110`)
* [CVE-2024-24050](CVE-2024/CVE-2024-240xx/CVE-2024-24050.json) (`2024-03-20T22:15:08.487`)
* [CVE-2024-25294](CVE-2024/CVE-2024-252xx/CVE-2024-25294.json) (`2024-03-20T21:15:30.877`)
* [CVE-2024-2717](CVE-2024/CVE-2024-27xx/CVE-2024-2717.json) (`2024-03-20T21:15:32.570`)
* [CVE-2024-2718](CVE-2024/CVE-2024-27xx/CVE-2024-2718.json) (`2024-03-20T21:15:32.830`)
* [CVE-2024-2719](CVE-2024/CVE-2024-27xx/CVE-2024-2719.json) (`2024-03-20T21:15:33.073`)
* [CVE-2024-2720](CVE-2024/CVE-2024-27xx/CVE-2024-2720.json) (`2024-03-20T22:15:08.813`)
* [CVE-2024-29018](CVE-2024/CVE-2024-290xx/CVE-2024-29018.json) (`2024-03-20T21:15:31.113`)
* [CVE-2024-29026](CVE-2024/CVE-2024-290xx/CVE-2024-29026.json) (`2024-03-20T22:15:08.557`)
* [CVE-2024-29032](CVE-2024/CVE-2024-290xx/CVE-2024-29032.json) (`2024-03-20T21:15:31.370`)
* [CVE-2024-29033](CVE-2024/CVE-2024-290xx/CVE-2024-29033.json) (`2024-03-20T21:15:31.593`)
* [CVE-2024-29036](CVE-2024/CVE-2024-290xx/CVE-2024-29036.json) (`2024-03-20T21:15:31.817`)
* [CVE-2024-29037](CVE-2024/CVE-2024-290xx/CVE-2024-29037.json) (`2024-03-20T21:15:32.040`)
* [CVE-2024-29469](CVE-2024/CVE-2024-294xx/CVE-2024-29469.json) (`2024-03-20T21:15:32.267`)
* [CVE-2024-29470](CVE-2024/CVE-2024-294xx/CVE-2024-29470.json) (`2024-03-20T21:15:32.323`)
* [CVE-2024-29471](CVE-2024/CVE-2024-294xx/CVE-2024-29471.json) (`2024-03-20T21:15:32.370`)
* [CVE-2024-29472](CVE-2024/CVE-2024-294xx/CVE-2024-29472.json) (`2024-03-20T21:15:32.423`)
* [CVE-2024-29473](CVE-2024/CVE-2024-294xx/CVE-2024-29473.json) (`2024-03-20T21:15:32.473`)
* [CVE-2024-29474](CVE-2024/CVE-2024-294xx/CVE-2024-29474.json) (`2024-03-20T21:15:32.523`)
### CVEs modified in the last Commit

34
_state.csv
View File

@ -240473,7 +240473,7 @@ CVE-2024-23689,0,0,d7d4e018343e45ab929852f091e2e71006911f05a5c0cdd59769a6f5a80fd
CVE-2024-2370,0,0,b4d60e1047325278ac8b0d4698ddbabcf9cce9ef3d3d19d6f7eb18094f826686,2024-03-20T16:15:08.270000
CVE-2024-2371,0,0,3cb4c1ed0c9b08d07eacc5252cd2248e3436e0fe77ed1216887d9a3f973c7f13,2024-03-12T12:40:13.500000
CVE-2024-23717,0,0,6124f28576b39881108c8f8a6a5c6f0e66ec8c6ba51a289d578374ba7fe9cba6,2024-03-12T12:40:13.500000
CVE-2024-23721,1,1,183e0259d1c05e2f05dda08cf0004a7c3c54ce8d7836b068f6d498a2feff474b,2024-03-20T20:15:07.757000
CVE-2024-23721,0,0,183e0259d1c05e2f05dda08cf0004a7c3c54ce8d7836b068f6d498a2feff474b,2024-03-20T20:15:07.757000
CVE-2024-23724,0,0,ce25237b1b8be392e772c83f957fdb1e42b10b520f1a3f65fb6dea0241ad88c3,2024-02-11T22:29:15.837000
CVE-2024-23725,0,0,e7109aa5ed154918326c3254d584acf7e8190c7c6acd985ea1145474ef362350,2024-01-29T15:25:48.110000
CVE-2024-23726,0,0,1e6b5838c3bbe1bdea4cff85e0dab09275e17fdbeddbc74981e476f308132713,2024-01-29T15:25:36.090000
@ -240664,6 +240664,7 @@ CVE-2024-24035,0,0,77bbb29060dad0a4e27b56775f789e0b578831621d3fa9615a4c8def660cc
CVE-2024-24041,0,0,f96650c9700d93c943d8efc95d65c599a8e77cc1d7aaa4ba87820d6237153959,2024-02-07T17:14:41.607000
CVE-2024-24042,0,0,4a4e7ea160d5d0244b906cb4642841160ba9374fd30aaa87521360ed2e8ecd1a,2024-03-19T13:26:46
CVE-2024-24043,0,0,8fe33813863354c4eead332dc6243b19fd5b77f5e3a94ddd813814cf68659374,2024-03-19T13:26:46
CVE-2024-24050,1,1,9906b38de33576a7d3ef0d5b5d9b9a18692ffd3f8ff0d6d5039ee70f37fa3a45,2024-03-20T22:15:08.487000
CVE-2024-24059,0,0,3da8cffbcfd869f14b04835347f156c5cf1a6025fa9627a3ec1ec79a41a9d0be,2024-02-03T00:40:43.793000
CVE-2024-2406,0,0,93c22b844fdd3e9e5d23091d0d4a49fe9aed9112f23dba2ad0e01fb92984ecfa,2024-03-13T12:33:51.697000
CVE-2024-24060,0,0,3a6250076b98d97024da5e52a26f1f0c29807ef38de327e60f431783e4f1deaa,2024-02-03T00:40:48.600000
@ -241150,6 +241151,7 @@ CVE-2024-2529,0,0,b35f8f3f67ea8374226b559d981253a23056720f418995c7c7d989988a773e
CVE-2024-25291,0,0,bc77bf07b7f0885dcc53f309d4c8551c9d231ccb3e5075560ca429ae43d295cd,2024-02-29T13:49:29.390000
CVE-2024-25292,0,0,93d2b7f6141fe539a29ae7e5b673c657afb26540dc5e8da909caf90c01b33dc8,2024-02-29T13:49:29.390000
CVE-2024-25293,0,0,0b85db10c32bd0ffaa51c674a448c6fa3593e795a8c8cebcd511335821521f83,2024-03-01T14:04:26.010000
CVE-2024-25294,1,1,824d1f455658717ae4c88f751075b3123b7ef99bb02fd1bc4f933b691e5597b1,2024-03-20T21:15:30.877000
CVE-2024-25297,0,0,c19c73677945e62fe080022a44c0cbc836550b8fdff36961566daa131754b5e5,2024-02-20T19:50:53.960000
CVE-2024-25298,0,0,4fa4ef0f63750c476b0b4a4ba066ec9d8bbe95d9ab83d566e2b5ec729231bb8a,2024-02-20T19:50:53.960000
CVE-2024-2530,0,0,b5c1c5fd6156850c12a7bc01aa2f0581b231848029206217e8db2aa6de871a72,2024-03-17T22:38:29.433000
@ -241789,11 +241791,14 @@ CVE-2024-27133,0,0,1abfe171f722b9df6ead5b24935068c395a52a06c146ec300701d2b7e8652
CVE-2024-27135,0,0,dc76c2c208b53579d0bb7d97b6b2e7e902c0fb1c8b5922e51dabb309b530b2bd,2024-03-13T12:33:51.697000
CVE-2024-27138,0,0,1ec0ded3b41c12b07651e921188be783731716c54fb55c30f65f5b3e8197e8cc,2024-03-01T22:22:25.913000
CVE-2024-27139,0,0,66ddd9efc34252e5e972ac0e5a31e042faa3995b86c5ae6f0f108c10e1d7b562,2024-03-01T22:22:25.913000
CVE-2024-2714,1,1,1d05e3ee0245bc677278aa91d6e2bfa68dd12eb51b3d5387e7c95af13df82657,2024-03-20T20:15:09.303000
CVE-2024-2714,0,0,1d05e3ee0245bc677278aa91d6e2bfa68dd12eb51b3d5387e7c95af13df82657,2024-03-20T20:15:09.303000
CVE-2024-27140,0,0,34daddef6e0d13f2bea16bc1184887cdd01053137a36a3bc5699d2875c449127,2024-03-01T22:22:25.913000
CVE-2024-2715,1,1,fabde0c4d5f8cfdebd1a586efcc59b6ef2dd5dbe89e09ecc72409d97e7a6dda6,2024-03-20T20:15:09.570000
CVE-2024-2716,1,1,a4c7c684af879ea345a8564102d06ae89ae40bcd30de707e4e91b5aee58820aa,2024-03-20T20:15:09.823000
CVE-2024-2715,0,0,fabde0c4d5f8cfdebd1a586efcc59b6ef2dd5dbe89e09ecc72409d97e7a6dda6,2024-03-20T20:15:09.570000
CVE-2024-2716,0,0,a4c7c684af879ea345a8564102d06ae89ae40bcd30de707e4e91b5aee58820aa,2024-03-20T20:15:09.823000
CVE-2024-2717,1,1,e4c602489b09bd8dd25b34b01afb1b1ee9b5506d377688091c12782c093a2ffd,2024-03-20T21:15:32.570000
CVE-2024-2718,1,1,8c12c722875ee0843b8717b46068bb7a0ba1910045404df63beb1827217927d4,2024-03-20T21:15:32.830000
CVE-2024-27189,0,0,515e61fa1831b3fd92525b0004dfafde618646c72fb29e4527e0a2fb9466806f,2024-03-15T16:26:49.320000
CVE-2024-2719,1,1,fa9b3b0cacf1d19eb8beb384efcceb0836993657fbc443eb9c0dc7787803cd80,2024-03-20T21:15:33.073000
CVE-2024-27192,0,0,0ff7a489a9c185cda73564233ae30b76c3279bb0d352bc83dbf6b8e10c6212e5,2024-03-15T16:26:49.320000
CVE-2024-27193,0,0,1a2f1126258ed9b0f5281770f95fad5056f0f1e4993150f3d871f6ef458a3533,2024-03-15T16:26:49.320000
CVE-2024-27194,0,0,b8200fea2f0a79d9b8f1fbf40aca3e6d111a7a732357978a250e1964deaa7251,2024-03-17T22:38:29.433000
@ -241802,6 +241807,7 @@ CVE-2024-27196,0,0,6fce97c6f4107f378eda089ebc48fb5d5f287df09544c285bd2116fb3c48a
CVE-2024-27197,0,0,78aca5045460ef7da4ea40b21e3ad45b2151c6d7e43b2c297841492788bc4d39,2024-03-17T22:38:29.433000
CVE-2024-27198,0,0,e4259fe3d4611134ab5dfb0d4f88f5b563c21b8238f30b4253811838ad004753,2024-03-11T15:15:47.483000
CVE-2024-27199,0,0,3dd3bfb58b796a8c7735f0a6f342852f32998fc13795786d35eb3d4375df0417,2024-03-11T15:15:47.663000
CVE-2024-2720,1,1,77ba459283ba91d425f680772db9411909f0940ae296cbb2e28410a3ca2f3953,2024-03-20T22:15:08.813000
CVE-2024-27204,0,0,2f9f2ac2078c33addc2c698f165f7aff9339fcf3fa26f2cdd29a6de3328c8c2a,2024-03-12T12:40:13.500000
CVE-2024-27205,0,0,52855ef1396675bf7ce515be434e694f795d99891e26fffa6e36d6a889b1c72f,2024-03-15T20:15:08.703000
CVE-2024-27206,0,0,7a39e0c9f0f47b5a6e43427d7518d5d862cb34ba539b01bd0717056c4e6dcf42,2024-03-15T20:15:08.743000
@ -241840,7 +241846,7 @@ CVE-2024-27279,0,0,a0a465925dfcee0f633443a4d3db070f2bf023c10d4135b020d1a0fbe76c5
CVE-2024-27283,0,0,d0d6cc69e38ce7977029c4d3a011dff4f743808fa73bec6f0327124024522ffa,2024-02-22T19:07:27.197000
CVE-2024-27284,0,0,175f1326a6788bb22369d3d45f083399d573a3449ac45961b1b25c8fedd102cb,2024-02-29T13:49:29.390000
CVE-2024-27285,0,0,b841c234627c5270e595cda0ce9ff961da8dfede93f4e4fd350e864c6c175a71,2024-03-06T23:15:07.363000
CVE-2024-27286,1,1,8a09f586959bf61aa150fa7fd4c64a7618ffd70fd3991a1b4bbb4d16725e805a,2024-03-20T20:15:08.407000
CVE-2024-27286,0,0,8a09f586959bf61aa150fa7fd4c64a7618ffd70fd3991a1b4bbb4d16725e805a,2024-03-20T20:15:08.407000
CVE-2024-27287,0,0,96465809344cbcc6a220cf7039ee3d89a4728a2d926c9f0159f2fed33f45f5f1,2024-03-06T21:42:48.053000
CVE-2024-27288,0,0,685da6c0a91cdc766652ee65cd5efab798677105318456444efa72ae60d87f3d,2024-03-06T21:42:48.053000
CVE-2024-27289,0,0,47af4bc7cdfd8b932586f8ab9b118be2b9049675bb63c3d42c32ea7c51cb15b3,2024-03-06T21:42:48.053000
@ -242013,7 +242019,7 @@ CVE-2024-28173,0,0,e0fed71b03fa1080cdfc47a71a0b80da5e87b19e624557c11c0e172f4b2c0
CVE-2024-28174,0,0,fa1674b985861bddf4d0ff5ab075ec0e4328a9665c668bfe339f9f0de580d6b1,2024-03-06T21:42:54.697000
CVE-2024-28175,0,0,c8f25bff8e97476e2963865ef2e9cf777aae8f2ef724b2ba6f372c990cea8179,2024-03-14T12:52:16.723000
CVE-2024-28176,0,0,5bb6d329167995170bd276a45554624691bdda8cbb6c83c2d08f42eba9f617aa,2024-03-11T01:32:39.697000
CVE-2024-28179,1,1,55da2e6f83c439f2a02740801f00ce7c39c7c9ae2b0cdd7cf70b1a1019de68cb,2024-03-20T20:15:08.680000
CVE-2024-28179,0,0,55da2e6f83c439f2a02740801f00ce7c39c7c9ae2b0cdd7cf70b1a1019de68cb,2024-03-20T20:15:08.680000
CVE-2024-28180,0,0,1e73ce45496cde15ab7710e8895a9f7d4caf4d2dcdb0d6de4d94afa753e9a64b,2024-03-11T01:32:39.697000
CVE-2024-28181,0,0,43f0a809bba9c8c0eb02896e0986a3f9ccb9b3e30fc3eda1da963f37d0308dd8,2024-03-14T20:11:36.180000
CVE-2024-28184,0,0,043b0bc7533d0fc96bb6df4be7b21b8477ffe807b0ac6ed0c4b06cf7d8241c3c,2024-03-11T01:32:39.697000
@ -242037,7 +242043,7 @@ CVE-2024-28222,0,0,fc2bb6625872999de46c3fec787964c81811fbafba85fd6aa0a9c0c190c12
CVE-2024-28228,0,0,fafeac90b4103ecc037c0d15d4376f652ba43048a680a73a3c13807568e40859,2024-03-07T13:52:27.110000
CVE-2024-28229,0,0,7bfc3b59e790a5126732ec4d8d480f9938166a41475488b32e066c1e064ccb9f,2024-03-07T13:52:27.110000
CVE-2024-28230,0,0,3036aa70102b53b9cc695265dc4a11e5a4f5b8d26f6120835dbd1a9c3d93e7ec,2024-03-07T13:52:27.110000
CVE-2024-28231,1,1,63bcd6751adeb279429359b6df2ad64fd0922baed02240fbfa54111c115e0bcd,2024-03-20T20:15:08.893000
CVE-2024-28231,0,0,63bcd6751adeb279429359b6df2ad64fd0922baed02240fbfa54111c115e0bcd,2024-03-20T20:15:08.893000
CVE-2024-28236,0,0,ea7d34bffb060eb0191757ceb4c446ee8bfa4166cb7d1e0d8e67e75c651ba966,2024-03-13T12:33:51.697000
CVE-2024-28237,0,0,e54564ebce9f53fbf47a1a617d4c2539d1d06a16522000543afac14f934cf25f,2024-03-19T13:26:46
CVE-2024-28238,0,0,38219e010007b7fe5426826144cd2eabd2e22d36d31c50aa8471901674b524b3,2024-03-13T12:33:51.697000
@ -242157,8 +242163,14 @@ CVE-2024-28859,0,0,2d0407c7b83f2786a493b842ae3fe3ce3f906494adee8b0e0f61c75557fcb
CVE-2024-28862,0,0,b0dc40150b0e5f15633ecb26c2614b37fe6eefbb423911349887989b36d78640,2024-03-17T22:38:29.433000
CVE-2024-28864,0,0,6556868d08f3b43cf56ee8c0e31629a1275e8137bc2387bf2430488f9854bd36,2024-03-19T13:26:46
CVE-2024-28865,0,0,346bb195552b29118071ab302fbe331daaaa3a5da7b31ab976886613f922d084,2024-03-19T13:26:46
CVE-2024-28868,1,1,589bb87368a858fe4f8feaf70a2c3474897418a7853ade7bc32cbd53d0746fa4,2024-03-20T20:15:09.110000
CVE-2024-28868,0,0,589bb87368a858fe4f8feaf70a2c3474897418a7853ade7bc32cbd53d0746fa4,2024-03-20T20:15:09.110000
CVE-2024-29018,1,1,e4653e5f95400a89cec5d0a523d7f3782008a55a485395aeeee3cc1f1534f45d,2024-03-20T21:15:31.113000
CVE-2024-29026,1,1,c964b0b33205a62b5db229967883dfc42090c46ca6654942dc1ee3d9d1643aff,2024-03-20T22:15:08.557000
CVE-2024-29027,0,0,0443c0a5c3d136c6828a405e5e82a90c05a4f9edd7fbc1d30ba3bd5c5a4c0f72,2024-03-20T13:00:16.367000
CVE-2024-29032,1,1,1e87d9f4b9a9b31cb987473f4978f48ab9a1b8cc54b166d4e06bf2a875386529,2024-03-20T21:15:31.370000
CVE-2024-29033,1,1,eed18c9026939ca37327278434c1413b85f276478de543b575a6f181157f6a1e,2024-03-20T21:15:31.593000
CVE-2024-29036,1,1,f533b5a31e423cf000f5139354674b27c53b3fdd392a83d327838e4310c3d4d9,2024-03-20T21:15:31.817000
CVE-2024-29037,1,1,c0df291aa4c42cb4c63f63da2afca0d1ed7ad3191dad7a362b874608009b583f,2024-03-20T21:15:32.040000
CVE-2024-29089,0,0,e5fbae925c9da8d587d9573cbc1c34db123c4510c1c1616d472538493a08c59e,2024-03-20T13:00:16.367000
CVE-2024-29091,0,0,b1cb764a2082d02939e32c22f722543dd831cf608e6c39b51eb933f990788962,2024-03-20T13:00:16.367000
CVE-2024-29092,0,0,beafae19b6703c9fc1f01dec7ad304174a985adb5a44a4613a96bd5d1cef6a8d,2024-03-20T13:00:16.367000
@ -242211,3 +242223,9 @@ CVE-2024-29151,0,0,ef852a662e1eaee7e15d971ee7451f2c3e954b3d808a30cb9a36bbe68bb24
CVE-2024-29154,0,0,dab131c9ff393e828252009730d8617a5e1a4fb5cfb7f2db054056bc6f27c2ba,2024-03-18T12:38:25.490000
CVE-2024-29156,0,0,98cbc37d07cb77607ab83580cc50ba5a01141613b7a3bb770966a3d6831e2326,2024-03-18T12:38:25.490000
CVE-2024-29419,0,0,1f113c646466febbefbd1317ecc5036f9bdf6e219db156971cfdda70e05f32f0,2024-03-20T17:18:21.343000
CVE-2024-29469,1,1,a3555b2a395385edca38a763eb99568dc7147e942c47ed212788ec39f2af6355,2024-03-20T21:15:32.267000
CVE-2024-29470,1,1,6e65d719a149c2af272351ae55d95cbd75633894e605ee251f622aede94f79c4,2024-03-20T21:15:32.323000
CVE-2024-29471,1,1,61e1cd7a490da4d979a6976ee2771a23cf02bc833028f97c4db4d71029ce2ff5,2024-03-20T21:15:32.370000
CVE-2024-29472,1,1,29df7d4d407d3ab4ee781ea9eb875f134c1f1fe0ca9d9aeb8a2d764308ba690b,2024-03-20T21:15:32.423000
CVE-2024-29473,1,1,f3ae32bce6469de3f26c9d18f26819d8d20147f733985f72575c8bab2119ea9f,2024-03-20T21:15:32.473000
CVE-2024-29474,1,1,947ec3b76c349b751ce3494a24a290abd870205946fa7f4c5dc37beb43e7bad5,2024-03-20T21:15:32.523000

Can't render this file because it is too large.