mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-30 10:10:41 +00:00
Auto-Update: 2024-11-18T07:00:20.243446+00:00
This commit is contained in:
parent
8a709442f8
commit
8a2b62e4b7
60
CVE-2024/CVE-2024-113xx/CVE-2024-11308.json
Normal file
60
CVE-2024/CVE-2024-113xx/CVE-2024-11308.json
Normal file
@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2024-11308",
|
||||
"sourceIdentifier": "twcert@cert.org.tw",
|
||||
"published": "2024-11-18T06:15:04.263",
|
||||
"lastModified": "2024-11-18T06:15:04.263",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore the original content."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "twcert@cert.org.tw",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 6.2,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"exploitabilityScore": 2.5,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "twcert@cert.org.tw",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-321"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-8241-1af92-2.html",
|
||||
"source": "twcert@cert.org.tw"
|
||||
},
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-8240-562c3-1.html",
|
||||
"source": "twcert@cert.org.tw"
|
||||
}
|
||||
]
|
||||
}
|
60
CVE-2024/CVE-2024-113xx/CVE-2024-11309.json
Normal file
60
CVE-2024/CVE-2024-113xx/CVE-2024-11309.json
Normal file
@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2024-11309",
|
||||
"sourceIdentifier": "twcert@cert.org.tw",
|
||||
"published": "2024-11-18T06:15:04.673",
|
||||
"lastModified": "2024-11-18T06:15:04.673",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "twcert@cert.org.tw",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "twcert@cert.org.tw",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-23"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-8243-3d818-2.html",
|
||||
"source": "twcert@cert.org.tw"
|
||||
},
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-8242-384a1-1.html",
|
||||
"source": "twcert@cert.org.tw"
|
||||
}
|
||||
]
|
||||
}
|
60
CVE-2024/CVE-2024-113xx/CVE-2024-11310.json
Normal file
60
CVE-2024/CVE-2024-113xx/CVE-2024-11310.json
Normal file
@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2024-11310",
|
||||
"sourceIdentifier": "twcert@cert.org.tw",
|
||||
"published": "2024-11-18T06:15:04.987",
|
||||
"lastModified": "2024-11-18T06:15:04.987",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "twcert@cert.org.tw",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "twcert@cert.org.tw",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-23"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-8245-ad7d7-2.html",
|
||||
"source": "twcert@cert.org.tw"
|
||||
},
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-8244-c45b5-1.html",
|
||||
"source": "twcert@cert.org.tw"
|
||||
}
|
||||
]
|
||||
}
|
33
CVE-2024/CVE-2024-437xx/CVE-2024-43704.json
Normal file
33
CVE-2024/CVE-2024-437xx/CVE-2024-43704.json
Normal file
@ -0,0 +1,33 @@
|
||||
{
|
||||
"id": "CVE-2024-43704",
|
||||
"sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
|
||||
"published": "2024-11-18T05:15:04.687",
|
||||
"lastModified": "2024-11-18T05:15:04.687",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-668"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/",
|
||||
"source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"
|
||||
}
|
||||
]
|
||||
}
|
21
CVE-2024/CVE-2024-50xx/CVE-2024-5030.json
Normal file
21
CVE-2024/CVE-2024-50xx/CVE-2024-5030.json
Normal file
@ -0,0 +1,21 @@
|
||||
{
|
||||
"id": "CVE-2024-5030",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-11-18T06:15:06.593",
|
||||
"lastModified": "2024-11-18T06:15:06.593",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin perform such action via a CSRF attack"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/2c2e994c-31bd-4de4-9480-b86f980d4130/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
29
CVE-2024/CVE-2024-529xx/CVE-2024-52940.json
Normal file
29
CVE-2024/CVE-2024-529xx/CVE-2024-52940.json
Normal file
@ -0,0 +1,29 @@
|
||||
{
|
||||
"id": "CVE-2024-52940",
|
||||
"sourceIdentifier": "cve@mitre.org",
|
||||
"published": "2024-11-18T05:15:05.200",
|
||||
"lastModified": "2024-11-18T05:15:05.200",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://download.anydesk.com/changelog.txt",
|
||||
"source": "cve@mitre.org"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ebrasha/abdal-anydesk-remote-ip-detector",
|
||||
"source": "cve@mitre.org"
|
||||
},
|
||||
{
|
||||
"url": "https://x.com/ProfShafiei/status/1850856458017009830",
|
||||
"source": "cve@mitre.org"
|
||||
}
|
||||
]
|
||||
}
|
44
CVE-2024/CVE-2024-529xx/CVE-2024-52941.json
Normal file
44
CVE-2024/CVE-2024-529xx/CVE-2024-52941.json
Normal file
@ -0,0 +1,44 @@
|
||||
{
|
||||
"id": "CVE-2024-52941",
|
||||
"sourceIdentifier": "cve@mitre.org",
|
||||
"published": "2024-11-18T06:15:05.283",
|
||||
"lastModified": "2024-11-18T06:15:05.283",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "cve@mitre.org",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"exploitabilityScore": 2.3,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.veritas.com/support/en_US/security/VTS24-013",
|
||||
"source": "cve@mitre.org"
|
||||
}
|
||||
]
|
||||
}
|
44
CVE-2024/CVE-2024-529xx/CVE-2024-52942.json
Normal file
44
CVE-2024/CVE-2024-529xx/CVE-2024-52942.json
Normal file
@ -0,0 +1,44 @@
|
||||
{
|
||||
"id": "CVE-2024-52942",
|
||||
"sourceIdentifier": "cve@mitre.org",
|
||||
"published": "2024-11-18T06:15:05.543",
|
||||
"lastModified": "2024-11-18T06:15:05.543",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "cve@mitre.org",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"exploitabilityScore": 2.3,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.veritas.com/support/en_US/security/VTS24-013",
|
||||
"source": "cve@mitre.org"
|
||||
}
|
||||
]
|
||||
}
|
44
CVE-2024/CVE-2024-529xx/CVE-2024-52943.json
Normal file
44
CVE-2024/CVE-2024-529xx/CVE-2024-52943.json
Normal file
@ -0,0 +1,44 @@
|
||||
{
|
||||
"id": "CVE-2024-52943",
|
||||
"sourceIdentifier": "cve@mitre.org",
|
||||
"published": "2024-11-18T06:15:05.793",
|
||||
"lastModified": "2024-11-18T06:15:05.793",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "cve@mitre.org",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"exploitabilityScore": 2.3,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.veritas.com/support/en_US/security/VTS24-013",
|
||||
"source": "cve@mitre.org"
|
||||
}
|
||||
]
|
||||
}
|
44
CVE-2024/CVE-2024-529xx/CVE-2024-52944.json
Normal file
44
CVE-2024/CVE-2024-529xx/CVE-2024-52944.json
Normal file
@ -0,0 +1,44 @@
|
||||
{
|
||||
"id": "CVE-2024-52944",
|
||||
"sourceIdentifier": "cve@mitre.org",
|
||||
"published": "2024-11-18T06:15:06.017",
|
||||
"lastModified": "2024-11-18T06:15:06.017",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "cve@mitre.org",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"exploitabilityScore": 2.3,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.veritas.com/support/en_US/security/VTS24-013",
|
||||
"source": "cve@mitre.org"
|
||||
}
|
||||
]
|
||||
}
|
44
CVE-2024/CVE-2024-529xx/CVE-2024-52945.json
Normal file
44
CVE-2024/CVE-2024-529xx/CVE-2024-52945.json
Normal file
@ -0,0 +1,44 @@
|
||||
{
|
||||
"id": "CVE-2024-52945",
|
||||
"sourceIdentifier": "cve@mitre.org",
|
||||
"published": "2024-11-18T06:15:06.250",
|
||||
"lastModified": "2024-11-18T06:15:06.250",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "cve@mitre.org",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.veritas.com/content/support/en_US/security/VTS24-012",
|
||||
"source": "cve@mitre.org"
|
||||
}
|
||||
]
|
||||
}
|
21
CVE-2024/CVE-2024-529xx/CVE-2024-52946.json
Normal file
21
CVE-2024/CVE-2024-529xx/CVE-2024-52946.json
Normal file
@ -0,0 +1,21 @@
|
||||
{
|
||||
"id": "CVE-2024-52946",
|
||||
"sourceIdentifier": "cve@mitre.org",
|
||||
"published": "2024-11-18T06:15:06.460",
|
||||
"lastModified": "2024-11-18T06:15:06.460",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an \"Adaptative authentication rule\" with an increment instead of an absolute value."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3255",
|
||||
"source": "cve@mitre.org"
|
||||
}
|
||||
]
|
||||
}
|
21
CVE-2024/CVE-2024-529xx/CVE-2024-52947.json
Normal file
21
CVE-2024/CVE-2024-529xx/CVE-2024-52947.json
Normal file
@ -0,0 +1,21 @@
|
||||
{
|
||||
"id": "CVE-2024-52947",
|
||||
"sourceIdentifier": "cve@mitre.org",
|
||||
"published": "2024-11-18T06:15:06.530",
|
||||
"lastModified": "2024-11-18T06:15:06.530",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter of the upgrade session confirmation page (upgradeSession / forceUpgrade) if the \"Upgrade session\" plugin has been enabled by an admin"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3257",
|
||||
"source": "cve@mitre.org"
|
||||
}
|
||||
]
|
||||
}
|
36
README.md
36
README.md
@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2024-11-18T05:00:20.129397+00:00
|
||||
2024-11-18T07:00:20.243446+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2024-11-18T04:15:05.140000+00:00
|
||||
2024-11-18T06:15:06.593000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@ -33,28 +33,26 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
270092
|
||||
270105
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `15`
|
||||
Recently added CVEs: `13`
|
||||
|
||||
- [CVE-2015-20111](CVE-2015/CVE-2015-201xx/CVE-2015-20111.json) (`2024-11-18T04:15:03.987`)
|
||||
- [CVE-2019-25220](CVE-2019/CVE-2019-252xx/CVE-2019-25220.json) (`2024-11-18T04:15:04.107`)
|
||||
- [CVE-2024-38828](CVE-2024/CVE-2024-388xx/CVE-2024-38828.json) (`2024-11-18T04:15:04.233`)
|
||||
- [CVE-2024-52912](CVE-2024/CVE-2024-529xx/CVE-2024-52912.json) (`2024-11-18T04:15:04.443`)
|
||||
- [CVE-2024-52913](CVE-2024/CVE-2024-529xx/CVE-2024-52913.json) (`2024-11-18T04:15:04.500`)
|
||||
- [CVE-2024-52914](CVE-2024/CVE-2024-529xx/CVE-2024-52914.json) (`2024-11-18T04:15:04.567`)
|
||||
- [CVE-2024-52915](CVE-2024/CVE-2024-529xx/CVE-2024-52915.json) (`2024-11-18T04:15:04.633`)
|
||||
- [CVE-2024-52916](CVE-2024/CVE-2024-529xx/CVE-2024-52916.json) (`2024-11-18T04:15:04.697`)
|
||||
- [CVE-2024-52917](CVE-2024/CVE-2024-529xx/CVE-2024-52917.json) (`2024-11-18T04:15:04.760`)
|
||||
- [CVE-2024-52918](CVE-2024/CVE-2024-529xx/CVE-2024-52918.json) (`2024-11-18T04:15:04.823`)
|
||||
- [CVE-2024-52919](CVE-2024/CVE-2024-529xx/CVE-2024-52919.json) (`2024-11-18T04:15:04.890`)
|
||||
- [CVE-2024-52920](CVE-2024/CVE-2024-529xx/CVE-2024-52920.json) (`2024-11-18T04:15:04.960`)
|
||||
- [CVE-2024-52921](CVE-2024/CVE-2024-529xx/CVE-2024-52921.json) (`2024-11-18T04:15:05.023`)
|
||||
- [CVE-2024-52922](CVE-2024/CVE-2024-529xx/CVE-2024-52922.json) (`2024-11-18T04:15:05.083`)
|
||||
- [CVE-2024-52926](CVE-2024/CVE-2024-529xx/CVE-2024-52926.json) (`2024-11-18T04:15:05.140`)
|
||||
- [CVE-2024-11308](CVE-2024/CVE-2024-113xx/CVE-2024-11308.json) (`2024-11-18T06:15:04.263`)
|
||||
- [CVE-2024-11309](CVE-2024/CVE-2024-113xx/CVE-2024-11309.json) (`2024-11-18T06:15:04.673`)
|
||||
- [CVE-2024-11310](CVE-2024/CVE-2024-113xx/CVE-2024-11310.json) (`2024-11-18T06:15:04.987`)
|
||||
- [CVE-2024-43704](CVE-2024/CVE-2024-437xx/CVE-2024-43704.json) (`2024-11-18T05:15:04.687`)
|
||||
- [CVE-2024-5030](CVE-2024/CVE-2024-50xx/CVE-2024-5030.json) (`2024-11-18T06:15:06.593`)
|
||||
- [CVE-2024-52940](CVE-2024/CVE-2024-529xx/CVE-2024-52940.json) (`2024-11-18T05:15:05.200`)
|
||||
- [CVE-2024-52941](CVE-2024/CVE-2024-529xx/CVE-2024-52941.json) (`2024-11-18T06:15:05.283`)
|
||||
- [CVE-2024-52942](CVE-2024/CVE-2024-529xx/CVE-2024-52942.json) (`2024-11-18T06:15:05.543`)
|
||||
- [CVE-2024-52943](CVE-2024/CVE-2024-529xx/CVE-2024-52943.json) (`2024-11-18T06:15:05.793`)
|
||||
- [CVE-2024-52944](CVE-2024/CVE-2024-529xx/CVE-2024-52944.json) (`2024-11-18T06:15:06.017`)
|
||||
- [CVE-2024-52945](CVE-2024/CVE-2024-529xx/CVE-2024-52945.json) (`2024-11-18T06:15:06.250`)
|
||||
- [CVE-2024-52946](CVE-2024/CVE-2024-529xx/CVE-2024-52946.json) (`2024-11-18T06:15:06.460`)
|
||||
- [CVE-2024-52947](CVE-2024/CVE-2024-529xx/CVE-2024-52947.json) (`2024-11-18T06:15:06.530`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
43
_state.csv
43
_state.csv
@ -75498,7 +75498,7 @@ CVE-2015-20108,0,0,21da06c49057dd628ef555452e3e9bd810c2450fa7d89f7f653876999915b
|
||||
CVE-2015-20109,0,0,9cb8da9ecb3bce418797f531c05f0e93aa193a8d4c42b668e720979e9cf4c4f7,2023-07-31T19:15:15.193000
|
||||
CVE-2015-2011,0,0,61d60065c4d9a27a384562d47157e7d17ec4b69637c71c6e03f9186b07f9e836,2015-10-05T20:45:49.797000
|
||||
CVE-2015-20110,0,0,0445d6d0ca3138e608d8dea02eca2c4821b24b60f5f7348cc113799dfc998f69,2023-11-08T17:39:35.023000
|
||||
CVE-2015-20111,1,1,1386c28c18b4228695f39f9ffcdca786b0b23bb3b24ac1df4cdfce89baee7b8a,2024-11-18T04:15:03.987000
|
||||
CVE-2015-20111,0,0,1386c28c18b4228695f39f9ffcdca786b0b23bb3b24ac1df4cdfce89baee7b8a,2024-11-18T04:15:03.987000
|
||||
CVE-2015-2012,0,0,b091328ea1ba25cebffe83d6058517f77080ce9c044b54ff169eaf8f318d73b2,2016-12-06T02:59:34.630000
|
||||
CVE-2015-2013,0,0,d834046f9b7c5715d0be7ef9a360a1f6cc2c0ec8e4c3bd252ca65ceaf10ca9bd,2016-12-22T02:59:36.050000
|
||||
CVE-2015-2014,0,0,70b4f3199eb352fb008fb7bfd415a14be72c3527ffc3e270eea366da5763a2c4,2019-10-16T12:40:30.513000
|
||||
@ -138429,7 +138429,7 @@ CVE-2019-25217,0,0,30c2571b4837240b6da6c51001318f4e94ce56e8b309a54c15bcaa6ac6286
|
||||
CVE-2019-25218,0,0,21c49c97c651fc97c66cf571583cc6d3b9dbe9aac07bb039252027c58d0caa37,2024-10-30T21:18:08.167000
|
||||
CVE-2019-25219,0,0,c0661fefcab12f624a8e90ae1fecb5c0217e7a2ecb68ecb3cfdaf3aa46c317ec,2024-11-01T12:57:35.843000
|
||||
CVE-2019-2522,0,0,438e5228ba492857a388b8016b2219394ce3508b8a36f1f8aede8ea3eeec2072,2020-08-24T17:37:01.140000
|
||||
CVE-2019-25220,1,1,19e034043d8e903af9715bbd02524d646613f700a33c40a30976219842755e57,2024-11-18T04:15:04.107000
|
||||
CVE-2019-25220,0,0,19e034043d8e903af9715bbd02524d646613f700a33c40a30976219842755e57,2024-11-18T04:15:04.107000
|
||||
CVE-2019-2523,0,0,4a0e4915f05e6fa4b1849fafb208e6fb024214d6840b1c8202b1873b064ed383,2020-08-24T17:37:01.140000
|
||||
CVE-2019-2524,0,0,bee2c79f8df3b71e86ab52db9d5dee51c63979ccd70534be30c64d8fa54a9384,2020-08-24T17:37:01.140000
|
||||
CVE-2019-2525,0,0,50acd94d676e609a5e4bb6ec79d969df7d635700b8568337f59b3718fd26dc20,2020-08-24T17:37:01.140000
|
||||
@ -243282,6 +243282,9 @@ CVE-2024-1129,0,0,bb6d36851ed2d72741a575302302ac57d511f2bf349c6ca7db7385fd53c352
|
||||
CVE-2024-1130,0,0,19461582000c347e1c07ca83a1d00e23feee8e20532d52fc093ba50686691b5b,2024-02-29T13:49:29.390000
|
||||
CVE-2024-11305,0,0,5328a95bbf7e662e12a857ef5dea77eab4ecc316fb4f536e8772e1db4fed63e6,2024-11-18T01:15:16.307000
|
||||
CVE-2024-11306,0,0,f77aaaa67be9242d576d27dffde714b37bfb854f091ee9b96d0ca7ce4c9e08c4,2024-11-18T02:15:15.577000
|
||||
CVE-2024-11308,1,1,7e0a566461a1a25058b504b1b076a10b434fc2fde4d7646a8b9f4bf31fc5a5d5,2024-11-18T06:15:04.263000
|
||||
CVE-2024-11309,1,1,9411965c35ece716f8c90dd545a21d618e8ac858b01683f6ff41a9045699a6fe,2024-11-18T06:15:04.673000
|
||||
CVE-2024-11310,1,1,2d4d611d5e61ee3d47de293865eca5b79be60453c907c37cedc531a8bacc72a0,2024-11-18T06:15:04.987000
|
||||
CVE-2024-1132,0,0,3de6e62885ac8497a4c1d8f4950ebedc171b13b33dfedd6a9eea9ae164fd993a,2024-07-03T01:45:01.507000
|
||||
CVE-2024-1133,0,0,b8b851364368259dd533f1c71b437f741276dcf99770b03558b5d9cd5d3f095a,2024-02-29T13:49:29.390000
|
||||
CVE-2024-1134,0,0,92ca7b611a6a52333e888fa3a581b5dbc5c29b22a5e7e62eb553cb40e2cb6d77,2024-05-24T13:03:05.093000
|
||||
@ -258270,7 +258273,7 @@ CVE-2024-3882,0,0,8cf286ca42c3a62eccb821d9ac0678dabad594eee248c127390ddaf169987d
|
||||
CVE-2024-38820,0,0,50758758d32f5bb9d0664ab5254e279459d398846823826c47d2a8b01a7200dc,2024-11-05T21:35:09.393000
|
||||
CVE-2024-38821,0,0,bb251b2231aa5ec8776de9aee89d7b4c729d7a41bc68ac186fa12d01aa093b81,2024-10-28T13:58:09.230000
|
||||
CVE-2024-38826,0,0,d2dc3bc0b0f77945ea4b1900d4b45fc9041d9a4783cdeb176eb488aedabdfbeb,2024-11-12T13:55:21.227000
|
||||
CVE-2024-38828,1,1,7a9334885cb0985de2254595b4efa0f6b1f0200d2341d7d4f7731bcfb54ab030,2024-11-18T04:15:04.233000
|
||||
CVE-2024-38828,0,0,7a9334885cb0985de2254595b4efa0f6b1f0200d2341d7d4f7731bcfb54ab030,2024-11-18T04:15:04.233000
|
||||
CVE-2024-3883,0,0,e6bda202b9fd54c10f25f29dd8ae0cebb83b1538aee636944c2fd66bf4045fff,2024-05-02T13:27:25.103000
|
||||
CVE-2024-3885,0,0,9b28a2ee85edfe77753e71858fb1438bd68a9b6ee299843f3a5752cca4753d01,2024-05-02T18:00:37.360000
|
||||
CVE-2024-38856,0,0,cf2c30abb1c3c3e6b03acfa253b7bd98efa464ab76b49fddc2034ce3ce8a3be1,2024-08-28T16:15:58.043000
|
||||
@ -261487,6 +261490,7 @@ CVE-2024-43699,0,0,78534d33d290678062dddcdfe24e803feecb99e21dbcb3ac97f746608e5c5
|
||||
CVE-2024-4370,0,0,3c1f5b342c087fc6587c8bc9012541b58d80e50fdee9d14eea44daecdec82901,2024-05-15T16:40:19.330000
|
||||
CVE-2024-43700,0,0,0a06b833e6fd1b1e874ef27bf2dcddebe6eeed2fb3b70101d743561cb29959e0,2024-10-15T14:35:01.987000
|
||||
CVE-2024-43701,0,0,806d05bc9a9c57505164825be7dbf8680f4cf63f26e698ce90f59cb6324208a0,2024-10-15T15:35:16.050000
|
||||
CVE-2024-43704,1,1,d894d800767f4d24d5db8cc651f3e2467718438c0e1b54995e70dd32d1bdb36d,2024-11-18T05:15:04.687000
|
||||
CVE-2024-4371,0,0,a0b0e0fb8c98057b2328743d7da5c32e9a585001a67e08f1632ceab0df487dfa,2024-07-15T16:42:39.107000
|
||||
CVE-2024-4372,0,0,9ae4f43bf2d0d90214ce2e4715e0031799e31627a4319bb26ad2a73cf60988cf,2024-05-21T12:37:59.687000
|
||||
CVE-2024-4373,0,0,95ffe3cd6afce20664a5281c9740358c7cd9b7c7a4c9be8031ba5b0e36cac33d,2024-05-15T16:40:19.330000
|
||||
@ -265425,6 +265429,7 @@ CVE-2024-50261,0,0,946c442cc56e3e8af45dc6329602e8261cd21844e512a68f35505737590fc
|
||||
CVE-2024-50262,0,0,491da488ea3f6be70bbe09eed55bf84625143c296910fe98f090fd0f0e85c13c,2024-11-13T21:10:44.267000
|
||||
CVE-2024-50263,0,0,031640c798eb6a3a8aeb817df2908ddb318a337ddb803a116f07c15a4af2eba6,2024-11-14T16:23:08.347000
|
||||
CVE-2024-5028,0,0,6e4747168a055d3478d0389157f1378a0e5efd7245fc9814fa65e0cf7f805db7,2024-08-01T13:59:38.360000
|
||||
CVE-2024-5030,1,1,a8ed0b3101399e3382eaf8f46c697791821accee3744c8ef02673180c6c5138d,2024-11-18T06:15:06.593000
|
||||
CVE-2024-50305,0,0,b03fd6d501d19d7b209a06f202d725af272151828bcd7418064455026a0a9df5,2024-11-15T13:58:08.913000
|
||||
CVE-2024-50306,0,0,99b8de1207b2fdc71c13146c7372e7163a77f6f60a3176c55d7bfb57d63fa38c,2024-11-15T13:58:08.913000
|
||||
CVE-2024-50307,0,0,6d2dcfccb50c0c30fd7d9bda3b36490982da8110db31d087befc4509a1d360cd,2024-10-28T13:58:09.230000
|
||||
@ -266414,21 +266419,29 @@ CVE-2024-5288,0,0,099c1d3c2643003d52a5f473484a6d38731263e3329a5baa027f91acf14938
|
||||
CVE-2024-5289,0,0,a02da373ddf627c39a88f09ba37230dcf191b29c84a32613f97fcb834cd9c524,2024-06-28T13:13:36.980000
|
||||
CVE-2024-5290,0,0,35d091933943d3d7227642594800fb6801417d7c5ce37502d2fb6d1c6a076c33,2024-09-17T13:09:13.683000
|
||||
CVE-2024-5291,0,0,a73212295ca40d57df3fe276c935be7cf4995dc49a26ea7361780508749e211f,2024-05-24T01:15:30.977000
|
||||
CVE-2024-52912,1,1,f6c1192b6c6e7b973cf0a3f1c19bd1c2c8355f10e0f30c2623e48f245f378667,2024-11-18T04:15:04.443000
|
||||
CVE-2024-52913,1,1,bbc05683b850cc8065457412bf8f03a18ead18e211cbaa2fbadfdc7d9cc379d3,2024-11-18T04:15:04.500000
|
||||
CVE-2024-52914,1,1,924e32a0e8cb2e7d1ecdbe0ee7b3f2c66ed32847346d79911d4f8baefa620c88,2024-11-18T04:15:04.567000
|
||||
CVE-2024-52915,1,1,be019f94aea0804cc75808dd760669ab2fad40f58ce2f89d0dc6e8ab5b36a7e9,2024-11-18T04:15:04.633000
|
||||
CVE-2024-52916,1,1,7690ba750470f1aed7b8dec92fc0c098aebe3f9dc0fe3e8692e203def3168778,2024-11-18T04:15:04.697000
|
||||
CVE-2024-52917,1,1,9102f7f7d9fc47b956c15891e67881de133ff5748cc9634cc20d81cef98ffac0,2024-11-18T04:15:04.760000
|
||||
CVE-2024-52918,1,1,a73d0f2cdf700c0012dca3c759d37cceed4e616528ee91c077b20e1d7d92071e,2024-11-18T04:15:04.823000
|
||||
CVE-2024-52919,1,1,cef0a539618282146f102d0fe98c0422c62e8d82425975ab449c00d92ce22375,2024-11-18T04:15:04.890000
|
||||
CVE-2024-52912,0,0,f6c1192b6c6e7b973cf0a3f1c19bd1c2c8355f10e0f30c2623e48f245f378667,2024-11-18T04:15:04.443000
|
||||
CVE-2024-52913,0,0,bbc05683b850cc8065457412bf8f03a18ead18e211cbaa2fbadfdc7d9cc379d3,2024-11-18T04:15:04.500000
|
||||
CVE-2024-52914,0,0,924e32a0e8cb2e7d1ecdbe0ee7b3f2c66ed32847346d79911d4f8baefa620c88,2024-11-18T04:15:04.567000
|
||||
CVE-2024-52915,0,0,be019f94aea0804cc75808dd760669ab2fad40f58ce2f89d0dc6e8ab5b36a7e9,2024-11-18T04:15:04.633000
|
||||
CVE-2024-52916,0,0,7690ba750470f1aed7b8dec92fc0c098aebe3f9dc0fe3e8692e203def3168778,2024-11-18T04:15:04.697000
|
||||
CVE-2024-52917,0,0,9102f7f7d9fc47b956c15891e67881de133ff5748cc9634cc20d81cef98ffac0,2024-11-18T04:15:04.760000
|
||||
CVE-2024-52918,0,0,a73d0f2cdf700c0012dca3c759d37cceed4e616528ee91c077b20e1d7d92071e,2024-11-18T04:15:04.823000
|
||||
CVE-2024-52919,0,0,cef0a539618282146f102d0fe98c0422c62e8d82425975ab449c00d92ce22375,2024-11-18T04:15:04.890000
|
||||
CVE-2024-5292,0,0,46d8600092b67d78419e8396a0475f44ad2d697d614c735fcdb066f1cf0c44cc,2024-05-24T01:15:30.977000
|
||||
CVE-2024-52920,1,1,a5f6c9eff299a4ba09a42ed0c9241c846d22d91b7cedf4d695f05a6d58b5554c,2024-11-18T04:15:04.960000
|
||||
CVE-2024-52921,1,1,ed4278ef3df36ef30c2cce649cf44a8b2eae7bac125243cbe22628ba15916306,2024-11-18T04:15:05.023000
|
||||
CVE-2024-52922,1,1,41064221b415d208b3430f5d1dea9756de777280fa574c29151d5624fd8d3f24,2024-11-18T04:15:05.083000
|
||||
CVE-2024-52926,1,1,85aa8f8bcf430bff337ab36716ca6d5e43ae2b3bc9930c2ea3ecc1651d8bcbe9,2024-11-18T04:15:05.140000
|
||||
CVE-2024-52920,0,0,a5f6c9eff299a4ba09a42ed0c9241c846d22d91b7cedf4d695f05a6d58b5554c,2024-11-18T04:15:04.960000
|
||||
CVE-2024-52921,0,0,ed4278ef3df36ef30c2cce649cf44a8b2eae7bac125243cbe22628ba15916306,2024-11-18T04:15:05.023000
|
||||
CVE-2024-52922,0,0,41064221b415d208b3430f5d1dea9756de777280fa574c29151d5624fd8d3f24,2024-11-18T04:15:05.083000
|
||||
CVE-2024-52926,0,0,85aa8f8bcf430bff337ab36716ca6d5e43ae2b3bc9930c2ea3ecc1651d8bcbe9,2024-11-18T04:15:05.140000
|
||||
CVE-2024-5293,0,0,a0cc00d9353625760ac0d77b1ffd0d6d05d987e18d154ce46567c1580d6373f0,2024-05-24T01:15:30.977000
|
||||
CVE-2024-5294,0,0,717ff7ad64d7503e40c366bff13431a98da71a0fd2586ca956ddf2437b8cbb81,2024-05-24T01:15:30.977000
|
||||
CVE-2024-52940,1,1,0c271ed0a167b4f1afbe1b4098784f97280b8973c797d78180215b56523d8f3d,2024-11-18T05:15:05.200000
|
||||
CVE-2024-52941,1,1,51bd162e4da9767520d98371683fa483d51db8ae6c0a2ab66abeacc7ad6102a6,2024-11-18T06:15:05.283000
|
||||
CVE-2024-52942,1,1,d5f0c1b9ccae7646bd21c522a86a46043c2ba2722459ffc9f37022ea81793ad5,2024-11-18T06:15:05.543000
|
||||
CVE-2024-52943,1,1,817be99dbe39212ecb7762443fb6d8592291e04f1acdaf485485b5924fdeb77a,2024-11-18T06:15:05.793000
|
||||
CVE-2024-52944,1,1,1d9415c3df1effaf2fdd768ecef7969eb9d7287485995e406bc8593dede48522,2024-11-18T06:15:06.017000
|
||||
CVE-2024-52945,1,1,e54042d64c703df9e8ef816c66f3cff2051889def833fc918055f834dff7d703,2024-11-18T06:15:06.250000
|
||||
CVE-2024-52946,1,1,92efe9cbd4f19ea913955a20e2df0ccae22f1fbb17a5e4b04f9c5102bfcb8f14,2024-11-18T06:15:06.460000
|
||||
CVE-2024-52947,1,1,3bd8f19a79d240e4f25235fb45fb41049f946a153f7d95e5b110d65d1353d027,2024-11-18T06:15:06.530000
|
||||
CVE-2024-5295,0,0,a4e592514ef2498b5a4a173dae0a6cbcfb9c607b7fa3ff86ebe7c3784f138898,2024-05-24T01:15:30.977000
|
||||
CVE-2024-5296,0,0,9bd527352a89f2b4ccfc677e3fc5feb9bb09c1923dac2d4ba397c3469bcfc648,2024-05-24T01:15:30.977000
|
||||
CVE-2024-5297,0,0,d1218091e3a48aa0835b7de76e914f2fa4d051775431f4beee97941e4c178297,2024-05-24T01:15:30.977000
|
||||
|
Can't render this file because it is too large.
|
Loading…
x
Reference in New Issue
Block a user