Auto-Update: 2024-05-26T20:00:37.266395+00:00

This commit is contained in:
cad-safe-bot 2024-05-26 20:03:30 +00:00
parent b0f0aaa77b
commit 6261556e9a
6 changed files with 382 additions and 8 deletions

View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5370",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-26T18:15:08.547",
"lastModified": "2024-05-26T18:15:08.547",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file submit_enroll_staff.php. The manipulation of the argument class_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266282 is the identifier assigned to this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%204.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.266282",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.266282",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.343450",
"source": "cna@vuldb.com"
}
]
}

View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5371",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-26T18:15:08.840",
"lastModified": "2024-05-26T18:15:08.840",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the file submit_enroll_student.php. The manipulation of the argument class_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266283."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%205.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.266283",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.266283",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.343451",
"source": "cna@vuldb.com"
}
]
}

View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5372",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-26T19:15:08.167",
"lastModified": "2024-05-26T19:15:08.167",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as problematic was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file submit_extracurricular_activity.php. The manipulation of the argument activity_contact leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266284."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%206.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.266284",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.266284",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.343452",
"source": "cna@vuldb.com"
}
]
}

View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5373",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-26T19:15:08.447",
"lastModified": "2024-05-26T19:15:08.447",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability, which was classified as problematic, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file submit_login.php. The manipulation of the argument usertype leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266285 was assigned to this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%207.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.266285",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.266285",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.343453",
"source": "cna@vuldb.com"
}
]
}

View File

@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2024-05-26T18:00:37.329792+00:00
2024-05-26T20:00:37.266395+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2024-05-26T17:15:21.760000+00:00
2024-05-26T19:15:08.447000+00:00
```
### Last Data Feed Release
@ -33,15 +33,17 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
251808
251812
```
### CVEs added in the last Commit
Recently added CVEs: `2`
Recently added CVEs: `4`
- [CVE-2024-5368](CVE-2024/CVE-2024-53xx/CVE-2024-5368.json) (`2024-05-26T16:15:08.367`)
- [CVE-2024-5369](CVE-2024/CVE-2024-53xx/CVE-2024-5369.json) (`2024-05-26T17:15:21.760`)
- [CVE-2024-5370](CVE-2024/CVE-2024-53xx/CVE-2024-5370.json) (`2024-05-26T18:15:08.547`)
- [CVE-2024-5371](CVE-2024/CVE-2024-53xx/CVE-2024-5371.json) (`2024-05-26T18:15:08.840`)
- [CVE-2024-5372](CVE-2024/CVE-2024-53xx/CVE-2024-5372.json) (`2024-05-26T19:15:08.167`)
- [CVE-2024-5373](CVE-2024/CVE-2024-53xx/CVE-2024-5373.json) (`2024-05-26T19:15:08.447`)
### CVEs modified in the last Commit

View File

@ -251805,5 +251805,9 @@ CVE-2024-5364,0,0,e537969bdfb6345339b48b4c00a2b452e1565f0e60fd02fb6b0097d4a0eb23
CVE-2024-5365,0,0,70b3c437e8b7950cc163bdbadb7706ed3eced9f522fa752b27315af8ad62f703,2024-05-26T13:15:08.653000
CVE-2024-5366,0,0,bf478e2423ea330984c07fcf6891653c1ec41613dd2091419a99e76a3459beef,2024-05-26T14:15:10.773000
CVE-2024-5367,0,0,cd319ddccfc2a6b214cf2d698c9b0f989c7d05592c560094a48ee8a65d0168a4,2024-05-26T15:15:08.010000
CVE-2024-5368,1,1,73e825460777a3e62c0a017f586fea2dc5e71098be77ac75e6dcf66080548075,2024-05-26T16:15:08.367000
CVE-2024-5369,1,1,cb938916fbbaf5d3bfd5dbd91451b9fd0b3f2a81bdcbedbcec51524b9209d366,2024-05-26T17:15:21.760000
CVE-2024-5368,0,0,73e825460777a3e62c0a017f586fea2dc5e71098be77ac75e6dcf66080548075,2024-05-26T16:15:08.367000
CVE-2024-5369,0,0,cb938916fbbaf5d3bfd5dbd91451b9fd0b3f2a81bdcbedbcec51524b9209d366,2024-05-26T17:15:21.760000
CVE-2024-5370,1,1,14c7da2672eebae3d0b6cc8f462bf25de07a9cdd18132cb75ccf40464a389f30,2024-05-26T18:15:08.547000
CVE-2024-5371,1,1,9be98f02c5bebf424f04dde153f2a2e0e5c2fe8e37ffcd67c91789c7cb6596ff,2024-05-26T18:15:08.840000
CVE-2024-5372,1,1,5700614e120a534fc657827564720978aa920a95dad497630c378bb58fd2314e,2024-05-26T19:15:08.167000
CVE-2024-5373,1,1,bcdbc2e3e8e68c792329b221d0cb16965d0e8233638979f1406ed5c709c008a7,2024-05-26T19:15:08.447000

Can't render this file because it is too large.