mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-30 10:10:41 +00:00
Auto-Update: 2024-05-02T08:00:37.602771+00:00
This commit is contained in:
parent
f29e06cfb0
commit
8feb9450db
20
CVE-2024/CVE-2024-24xx/CVE-2024-2405.json
Normal file
20
CVE-2024/CVE-2024-24xx/CVE-2024-2405.json
Normal file
@ -0,0 +1,20 @@
|
||||
{
|
||||
"id": "CVE-2024-2405",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-05-02T06:15:49.947",
|
||||
"lastModified": "2024-05-02T06:15:49.947",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Float menu WordPress plugin before 6.0.1 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admin delete arbitrary menu via a CSRF attack."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/c42ffa15-6ebe-4c70-9e51-b95bd05ea04d/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
75
CVE-2024/CVE-2024-328xx/CVE-2024-32882.json
Normal file
75
CVE-2024/CVE-2024-328xx/CVE-2024-32882.json
Normal file
@ -0,0 +1,75 @@
|
||||
{
|
||||
"id": "CVE-2024-32882",
|
||||
"sourceIdentifier": "security-advisories@github.com",
|
||||
"published": "2024-05-02T07:15:20.967",
|
||||
"lastModified": "2024-05-02T07:15:20.967",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Wagtail is an open source content management system built on Django. In affected versions if a model has been made available for editing through the `wagtail.contrib.settings` module or `ModelViewSet`, and the `permission` argument on `FieldPanel` has been used to further restrict access to one or more fields of the model, a user with edit permission over the model but not the specific field can craft an HTTP POST request that bypasses the permission check on the individual field, allowing them to update its value. This vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin, or by a user who has not been granted edit access to the model in question. The editing interfaces for pages and snippets are also unaffected. Patched versions have been released as Wagtail 6.0.3 and 6.1. Wagtail releases prior to 6.0 are unaffected. Users are advised to upgrade. Site owners who are unable to upgrade to a patched version can avoid the vulnerability as follows: 1.For models registered through `ModelViewSet`, register the model as a snippet instead; 2. For settings models, place the restricted fields in a separate settings model, and configure permission at the model level."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "security-advisories@github.com",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 2.7,
|
||||
"baseSeverity": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "security-advisories@github.com",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-280"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-281"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://docs.wagtail.org/en/stable/extending/generic_views.html#modelviewset",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://docs.wagtail.org/en/stable/reference/contrib/settings.html",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://docs.wagtail.org/en/stable/reference/pages/panels.html#wagtail.admin.panels.FieldPanel.permission",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/wagtail/wagtail/commit/ab2a5d82b4ee3c909d2456704388ccf90e367c9b",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/wagtail/wagtail/security/advisories/GHSA-w2v8-php4-p8hc",
|
||||
"source": "security-advisories@github.com"
|
||||
}
|
||||
]
|
||||
}
|
75
CVE-2024/CVE-2024-329xx/CVE-2024-32962.json
Normal file
75
CVE-2024/CVE-2024-329xx/CVE-2024-32962.json
Normal file
@ -0,0 +1,75 @@
|
||||
{
|
||||
"id": "CVE-2024-32962",
|
||||
"sourceIdentifier": "security-advisories@github.com",
|
||||
"published": "2024-05-02T07:15:21.420",
|
||||
"lastModified": "2024-05-02T07:15:21.420",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "xml-crypto is an xml digital signature and encryption library for Node.js. In affected versions the default configuration does not check authorization of the signer, it only checks the validity of the signature per section 3.2.2 of the w3 xmldsig-core-20080610 spec. As such, without additional validation steps, the default configuration allows a malicious actor to re-sign an XML document, place the certificate in a `<KeyInfo />` element, and pass `xml-crypto` default validation checks. As a result `xml-crypto` trusts by default any certificate provided via digitally signed XML document's `<KeyInfo />`. `xml-crypto` prefers to use any certificate provided via digitally signed XML document's `<KeyInfo />` even if library was configured to use specific certificate (`publicCert`) for signature verification purposes. An attacker can spoof signature verification by modifying XML document and replacing existing signature with signature generated with malicious private key (created by attacker) and by attaching that private key's certificate to `<KeyInfo />` element. This vulnerability is combination of changes introduced to `4.0.0` on pull request 301 / commit `c2b83f98` and has been addressed in version 6.0.0 with pull request 445 / commit `21201723d`. Users are advised to upgrade. Users unable to upgrade may either check the certificate extracted via `getCertFromKeyInfo` against trusted certificates before accepting the results of the validation or set `xml-crypto's getCertFromKeyInfo` to `() => undefined` forcing `xml-crypto` to use an explicitly configured `publicCert` or `privateKey` for signature verification."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "security-advisories@github.com",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 10.0,
|
||||
"baseSeverity": "CRITICAL"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.8
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "security-advisories@github.com",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-347"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/node-saml/xml-crypto/commit/21201723d2ca9bc11288f62cf72552b7d659b000",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/node-saml/xml-crypto/commit/c2b83f984049edb68ad1d7c6ad0739ec92af11ca",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/node-saml/xml-crypto/pull/301",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/node-saml/xml-crypto/pull/445",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/node-saml/xml-crypto/security/advisories/GHSA-2xp3-57p7-qf4v",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://www.w3.org/TR/2008/REC-xmldsig-core-20080610/#sec-CoreValidation",
|
||||
"source": "security-advisories@github.com"
|
||||
}
|
||||
]
|
||||
}
|
71
CVE-2024/CVE-2024-329xx/CVE-2024-32971.json
Normal file
71
CVE-2024/CVE-2024-329xx/CVE-2024-32971.json
Normal file
@ -0,0 +1,71 @@
|
||||
{
|
||||
"id": "CVE-2024-32971",
|
||||
"sourceIdentifier": "security-advisories@github.com",
|
||||
"published": "2024-05-02T07:15:21.733",
|
||||
"lastModified": "2024-05-02T07:15:21.733",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. The affected versions of Apollo Router contain a bug that in limited circumstances, could lead to unexpected operations being executed which can result in unintended data or effects. This only affects Router instances configured to use distributed query plan caching. The root cause of this defect is a bug in Apollo Router\u2019s cache retrieval logic: When this defect is present and distributed query planning caching is enabled, asking the Router to execute an operation (whether it is a query, a mutation, or a subscription) may result in an unexpected variation of that operation being executed or the generation of unexpected errors. The issue stems from inadvertently executing a modified version of a previously executed operation, whose query plan is stored in the underlying cache (specifically, Redis). Depending on the type of the operation, the result may vary. For a query, results may be fetched that don\u2019t match what was requested (e.g., rather than running `fetchUsers(type: ENTERPRISE)` the Router may run `fetchUsers(type: TRIAL)`. For a mutation, this may result in incorrect mutations being sent to underlying subgraph servers (e.g., rather than sending `deleteUser(id: 10)` to a subgraph, the Router may run `deleteUser(id: 12)`. Users who are using distributed query plan caching, are advised to either upgrade to version 1.45.1 or above or downgrade to version 1.43.2 of the Apollo Router. Apollo Router versions 1.44.0 or 1.45.0 are not recommended for use and have been withdrawn. Users unable to upgrade can disable distributed query plan caching to mitigate this issue."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "security-advisories@github.com",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.0,
|
||||
"baseSeverity": "CRITICAL"
|
||||
},
|
||||
"exploitabilityScore": 2.2,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "security-advisories@github.com",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-440"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-670"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/apollographql/router/commit/ff9f666598cd17661880fe7fc6e9c9611316e529",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/apollographql/router/releases/tag/v1.45.1",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/apollographql/router/security/advisories/GHSA-q9p4-hw9m-fj2v",
|
||||
"source": "security-advisories@github.com"
|
||||
},
|
||||
{
|
||||
"url": "https://www.apollographql.com/docs/router/configuration/distributed-caching/#distributed-query-plan-caching",
|
||||
"source": "security-advisories@github.com"
|
||||
}
|
||||
]
|
||||
}
|
20
CVE-2024/CVE-2024-34xx/CVE-2024-3471.json
Normal file
20
CVE-2024/CVE-2024-34xx/CVE-2024-3471.json
Normal file
@ -0,0 +1,20 @@
|
||||
{
|
||||
"id": "CVE-2024-3471",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-05-02T06:15:50.350",
|
||||
"lastModified": "2024-05-02T06:15:50.350",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Button Generator WordPress plugin before 3.0 does not have CSRF check in place when bulk deleting, which could allow attackers to make a logged in admin delete buttons via a CSRF attack"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/a3c282fb-81b8-48bf-8c18-8366ea8ad9af/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
20
CVE-2024/CVE-2024-34xx/CVE-2024-3472.json
Normal file
20
CVE-2024/CVE-2024-34xx/CVE-2024-3472.json
Normal file
@ -0,0 +1,20 @@
|
||||
{
|
||||
"id": "CVE-2024-3472",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-05-02T06:15:50.453",
|
||||
"lastModified": "2024-05-02T06:15:50.453",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/d42f74dd-520f-40aa-9cf0-3544db9562c7/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
20
CVE-2024/CVE-2024-34xx/CVE-2024-3474.json
Normal file
20
CVE-2024/CVE-2024-34xx/CVE-2024-3474.json
Normal file
@ -0,0 +1,20 @@
|
||||
{
|
||||
"id": "CVE-2024-3474",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-05-02T06:15:50.527",
|
||||
"lastModified": "2024-05-02T06:15:50.527",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Wow Skype Buttons WordPress plugin before 4.0.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/e5c3e145-6738-4d85-8507-43ca1b1d5877/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
20
CVE-2024/CVE-2024-34xx/CVE-2024-3475.json
Normal file
20
CVE-2024/CVE-2024-34xx/CVE-2024-3475.json
Normal file
@ -0,0 +1,20 @@
|
||||
{
|
||||
"id": "CVE-2024-3475",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-05-02T06:15:50.660",
|
||||
"lastModified": "2024-05-02T06:15:50.660",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Sticky Buttons WordPress plugin before 3.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/bf540242-5306-4c94-ad50-782d0d5b127f/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
20
CVE-2024/CVE-2024-34xx/CVE-2024-3476.json
Normal file
20
CVE-2024/CVE-2024-34xx/CVE-2024-3476.json
Normal file
@ -0,0 +1,20 @@
|
||||
{
|
||||
"id": "CVE-2024-3476",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-05-02T06:15:50.887",
|
||||
"lastModified": "2024-05-02T06:15:50.887",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Side Menu Lite WordPress plugin before 4.2.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/46f74493-9082-48b2-90bc-2c1d1db64ccd/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
20
CVE-2024/CVE-2024-34xx/CVE-2024-3477.json
Normal file
20
CVE-2024/CVE-2024-34xx/CVE-2024-3477.json
Normal file
@ -0,0 +1,20 @@
|
||||
{
|
||||
"id": "CVE-2024-3477",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-05-02T06:15:50.950",
|
||||
"lastModified": "2024-05-02T06:15:50.950",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Popup Box WordPress plugin before 2.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting popups via CSRF attacks"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/ca5e59e6-c500-4129-997b-391cdf9aa9c7/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
20
CVE-2024/CVE-2024-34xx/CVE-2024-3478.json
Normal file
20
CVE-2024/CVE-2024-34xx/CVE-2024-3478.json
Normal file
@ -0,0 +1,20 @@
|
||||
{
|
||||
"id": "CVE-2024-3478",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-05-02T06:15:51.033",
|
||||
"lastModified": "2024-05-02T06:15:51.033",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Herd Effects WordPress plugin before 5.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting effects via CSRF attacks"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/09f1a696-86ee-47cc-99de-57cfd2a3219d/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
20
CVE-2024/CVE-2024-34xx/CVE-2024-3481.json
Normal file
20
CVE-2024/CVE-2024-34xx/CVE-2024-3481.json
Normal file
@ -0,0 +1,20 @@
|
||||
{
|
||||
"id": "CVE-2024-3481",
|
||||
"sourceIdentifier": "contact@wpscan.com",
|
||||
"published": "2024-05-02T06:15:51.130",
|
||||
"lastModified": "2024-05-02T06:15:51.130",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such deleting counters via CSRF attacks"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://wpscan.com/vulnerability/0c441293-e7f9-4634-8f3a-09925cd2b696/",
|
||||
"source": "contact@wpscan.com"
|
||||
}
|
||||
]
|
||||
}
|
47
CVE-2024/CVE-2024-34xx/CVE-2024-3490.json
Normal file
47
CVE-2024/CVE-2024-34xx/CVE-2024-3490.json
Normal file
@ -0,0 +1,47 @@
|
||||
{
|
||||
"id": "CVE-2024-3490",
|
||||
"sourceIdentifier": "security@wordfence.com",
|
||||
"published": "2024-05-02T07:15:22.040",
|
||||
"lastModified": "2024-05-02T07:15:22.040",
|
||||
"vulnStatus": "Received",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wprm-recipe-roundup-item shortcode in all versions up to, and including, 9.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "security@wordfence.com",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 6.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"exploitabilityScore": 3.1,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/changeset/3078644/wp-recipe-maker",
|
||||
"source": "security@wordfence.com"
|
||||
},
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/69cc7b6c-b6c2-4bba-afb4-86ba1b36b295?source=cve",
|
||||
"source": "security@wordfence.com"
|
||||
}
|
||||
]
|
||||
}
|
29
README.md
29
README.md
@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2024-05-02T04:00:40.076746+00:00
|
||||
2024-05-02T08:00:37.602771+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2024-05-02T03:15:15.027000+00:00
|
||||
2024-05-02T07:15:22.040000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@ -33,25 +33,32 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
247505
|
||||
247518
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `0`
|
||||
Recently added CVEs: `13`
|
||||
|
||||
- [CVE-2024-2405](CVE-2024/CVE-2024-24xx/CVE-2024-2405.json) (`2024-05-02T06:15:49.947`)
|
||||
- [CVE-2024-32882](CVE-2024/CVE-2024-328xx/CVE-2024-32882.json) (`2024-05-02T07:15:20.967`)
|
||||
- [CVE-2024-32962](CVE-2024/CVE-2024-329xx/CVE-2024-32962.json) (`2024-05-02T07:15:21.420`)
|
||||
- [CVE-2024-32971](CVE-2024/CVE-2024-329xx/CVE-2024-32971.json) (`2024-05-02T07:15:21.733`)
|
||||
- [CVE-2024-3471](CVE-2024/CVE-2024-34xx/CVE-2024-3471.json) (`2024-05-02T06:15:50.350`)
|
||||
- [CVE-2024-3472](CVE-2024/CVE-2024-34xx/CVE-2024-3472.json) (`2024-05-02T06:15:50.453`)
|
||||
- [CVE-2024-3474](CVE-2024/CVE-2024-34xx/CVE-2024-3474.json) (`2024-05-02T06:15:50.527`)
|
||||
- [CVE-2024-3475](CVE-2024/CVE-2024-34xx/CVE-2024-3475.json) (`2024-05-02T06:15:50.660`)
|
||||
- [CVE-2024-3476](CVE-2024/CVE-2024-34xx/CVE-2024-3476.json) (`2024-05-02T06:15:50.887`)
|
||||
- [CVE-2024-3477](CVE-2024/CVE-2024-34xx/CVE-2024-3477.json) (`2024-05-02T06:15:50.950`)
|
||||
- [CVE-2024-3478](CVE-2024/CVE-2024-34xx/CVE-2024-3478.json) (`2024-05-02T06:15:51.033`)
|
||||
- [CVE-2024-3481](CVE-2024/CVE-2024-34xx/CVE-2024-3481.json) (`2024-05-02T06:15:51.130`)
|
||||
- [CVE-2024-3490](CVE-2024/CVE-2024-34xx/CVE-2024-3490.json) (`2024-05-02T07:15:22.040`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
Recently modified CVEs: `6`
|
||||
Recently modified CVEs: `0`
|
||||
|
||||
- [CVE-2022-48257](CVE-2022/CVE-2022-482xx/CVE-2022-48257.json) (`2024-05-02T03:15:14.590`)
|
||||
- [CVE-2022-48258](CVE-2022/CVE-2022-482xx/CVE-2022-48258.json) (`2024-05-02T03:15:14.693`)
|
||||
- [CVE-2023-26130](CVE-2023/CVE-2023-261xx/CVE-2023-26130.json) (`2024-05-02T03:15:14.767`)
|
||||
- [CVE-2024-22640](CVE-2024/CVE-2024-226xx/CVE-2024-22640.json) (`2024-05-02T03:15:14.890`)
|
||||
- [CVE-2024-27306](CVE-2024/CVE-2024-273xx/CVE-2024-27306.json) (`2024-05-02T03:15:14.943`)
|
||||
- [CVE-2024-4369](CVE-2024/CVE-2024-43xx/CVE-2024-4369.json) (`2024-05-02T03:15:15.027`)
|
||||
|
||||
|
||||
## Download and Usage
|
||||
|
25
_state.csv
25
_state.csv
@ -211197,8 +211197,8 @@ CVE-2022-48253,0,0,6eb8ff0cd5f6734280504f3d5fe03886755c16ec8224c98ddfec3db8f4ba3
|
||||
CVE-2022-48254,0,0,6925a4df600a7000446a3a404dd4b64d9967365a1efcb244f9ec8f02cc6b7b35,2023-08-08T14:21:49.707000
|
||||
CVE-2022-48255,0,0,3cbf1ddba730d5caf3f7423a5c549035ffcdbe678f4e42bc4805868c6fd1ad40,2023-03-07T18:38:58.063000
|
||||
CVE-2022-48256,0,0,e94a8e05106a8a949f74672bcd48a961b65d1b30efd6d65a990aa297d3d1280a,2023-01-23T18:04:32.710000
|
||||
CVE-2022-48257,0,1,70468e551dc39c178c5e20054263ac42dd3964f643f07d910eb95209c7a5784e,2024-05-02T03:15:14.590000
|
||||
CVE-2022-48258,0,1,43c27d453b865bb27c5e2225ef75dba503abab663b37f095349f50fd0813e676,2024-05-02T03:15:14.693000
|
||||
CVE-2022-48257,0,0,70468e551dc39c178c5e20054263ac42dd3964f643f07d910eb95209c7a5784e,2024-05-02T03:15:14.590000
|
||||
CVE-2022-48258,0,0,43c27d453b865bb27c5e2225ef75dba503abab663b37f095349f50fd0813e676,2024-05-02T03:15:14.693000
|
||||
CVE-2022-48259,0,0,0e2cef1a85dccefb3e2ab28e5cf6b4c620b2ffb4c4184c85d7b321af90f6465f,2023-03-07T18:43:49.737000
|
||||
CVE-2022-4826,0,0,636570c589ead8dcc775f0d4dc8f696c8f6fa7be3be11604756d8ab1eb671044,2023-11-07T03:59:01.397000
|
||||
CVE-2022-48260,0,0,c446a558c3c5a6f3168c47bb384e408cb2529eb0b8c0f811a355e785f276c611,2023-03-07T18:46:19.987000
|
||||
@ -218617,7 +218617,7 @@ CVE-2023-26126,0,0,67dcdc1a3cc3fc8902e9ba54f6954a17abc89ceda99c0cc113cd591c90812
|
||||
CVE-2023-26127,0,0,6236517c369a07149faee2a6aab63f4a59cccc8ec9a5d851123c6fef17702c72,2023-11-07T04:09:24.477000
|
||||
CVE-2023-26128,0,0,a4880daee1bfa268b9583d67005a6ffeccf642e95c41bc32cb205befed5deb09,2023-11-07T04:09:24.700000
|
||||
CVE-2023-26129,0,0,20bc9cb4312699827e73da7bf77ae453e81c62726f54f4c5cd6c40e6f103a8fc,2023-11-07T04:09:24.900000
|
||||
CVE-2023-26130,0,1,7304a8a2b23cfdb4f195343eb2fd8a318578c83b3848ca31221d7d54c0d4c756,2024-05-02T03:15:14.767000
|
||||
CVE-2023-26130,0,0,7304a8a2b23cfdb4f195343eb2fd8a318578c83b3848ca31221d7d54c0d4c756,2024-05-02T03:15:14.767000
|
||||
CVE-2023-26131,0,0,14c2413b019a28dbfebe3045b3b81ccd0832fa2f5d0205be699df65a92b1bbdc,2023-11-07T04:09:25.290000
|
||||
CVE-2023-26132,0,0,f0ea5935c5598d1eb4dddaa3267dcfd5bbb4104bfb3ed080792a7a1004f1f4fa,2023-11-07T04:09:25.510000
|
||||
CVE-2023-26133,0,0,54e487f52c66a8dcca22566f37bb763d4495864419103360faef064bfe0dc6ca,2023-11-07T04:09:25.713000
|
||||
@ -241473,7 +241473,7 @@ CVE-2024-22637,0,0,26b297452537f73426f9b1e1c51d8375cdf08e35ab6ae3bee9824c37bc50f
|
||||
CVE-2024-22638,0,0,60058d6cb515c8aa3a8ab899f954be18d8e911ef19644ca8cbcf96f8a8fef453,2024-04-23T20:15:07.290000
|
||||
CVE-2024-22639,0,0,d147d90780a694ff1383e30f52d6dbe1e7da032a2cc352a3c7766915866417f2,2024-01-29T15:57:50.477000
|
||||
CVE-2024-2264,0,0,974a3209feed4d6057f1020f41685c0d8e8695fcbf79c0fbc4c6d1a61e8e6de4,2024-04-11T01:25:20.247000
|
||||
CVE-2024-22640,0,1,ca252cbd019ab7bfc4e81259b4d024e00b654964f9b62d3c108ed3ffeed36caf,2024-05-02T03:15:14.890000
|
||||
CVE-2024-22640,0,0,ca252cbd019ab7bfc4e81259b4d024e00b654964f9b62d3c108ed3ffeed36caf,2024-05-02T03:15:14.890000
|
||||
CVE-2024-22643,0,0,acc61f08a1073b7993a535a7dc4ecf3492177f02866390d4f33a88b7ebfb7b1f,2024-02-03T00:28:40.073000
|
||||
CVE-2024-22646,0,0,3a86f6cf8b5df97f2d3aadd50de49f432e2c6ccdb28c2bf8f4f8ba9395ea6ba2,2024-02-03T00:28:48.987000
|
||||
CVE-2024-22647,0,0,f5b1dd2a2a8d6bf59702fabeb8c7980f0d8f3bad989f2d108737cfc5f26f6a2b,2024-02-03T00:29:11.063000
|
||||
@ -242210,6 +242210,7 @@ CVE-2024-2404,0,0,bb119e7c54353aa80d96b0c40c09b73768b3e9de919c9d8afc1368ad1d5506
|
||||
CVE-2024-24041,0,0,f96650c9700d93c943d8efc95d65c599a8e77cc1d7aaa4ba87820d6237153959,2024-02-07T17:14:41.607000
|
||||
CVE-2024-24042,0,0,4a4e7ea160d5d0244b906cb4642841160ba9374fd30aaa87521360ed2e8ecd1a,2024-03-19T13:26:46
|
||||
CVE-2024-24043,0,0,8fe33813863354c4eead332dc6243b19fd5b77f5e3a94ddd813814cf68659374,2024-03-19T13:26:46
|
||||
CVE-2024-2405,1,1,ca5ba74f3b1e356b2b6f78e8802858483445502ae4c688933a3c7d0fa75fd8a5,2024-05-02T06:15:49.947000
|
||||
CVE-2024-24050,0,0,ccdf8a4463bf6582ad99a29c76e6e3640436eaa4075881cd577d9e7450feacb8,2024-03-21T12:58:51.093000
|
||||
CVE-2024-24059,0,0,3da8cffbcfd869f14b04835347f156c5cf1a6025fa9627a3ec1ec79a41a9d0be,2024-02-03T00:40:43.793000
|
||||
CVE-2024-2406,0,0,8d2b09ba3140c788e70ce565b39b21e35552b7351d8b624734dbaec586875fdb,2024-04-11T01:25:23.690000
|
||||
@ -244216,7 +244217,7 @@ CVE-2024-27302,0,0,1d89d4e993b760e97bde0be7bbf0ab174b73b3040fcfa7b093617ace631fa
|
||||
CVE-2024-27303,0,0,450d9542da26a401d8f005b41e132f874f1ba7c3e0584547e2b3156afe4dd5b7,2024-03-06T21:42:48.053000
|
||||
CVE-2024-27304,0,0,155072b4116a6c289f8b0a15c5da71f228ce1e237d59e0438c2b50d864bdf9fd,2024-03-06T21:42:48.053000
|
||||
CVE-2024-27305,0,0,b3f2edbf169d953c39bcc940e16d0680bda3e4c24593a205df513ed3ad926817,2024-03-13T12:33:51.697000
|
||||
CVE-2024-27306,0,1,e3c8bceedc02ff93d1109367053f304eaec63b774580e568b9873e57c8ef131a,2024-05-02T03:15:14.943000
|
||||
CVE-2024-27306,0,0,e3c8bceedc02ff93d1109367053f304eaec63b774580e568b9873e57c8ef131a,2024-05-02T03:15:14.943000
|
||||
CVE-2024-27307,0,0,0637b05d2a36e47d121bc1fe1beac809e09e2be90d0aa4c4cb901114110f37d2,2024-03-06T21:42:48.053000
|
||||
CVE-2024-27308,0,0,2c1853ceb0d45fb092e9c133d6553571b7b9f8a855fc6b4950edbdaad595214f,2024-03-06T21:42:48.053000
|
||||
CVE-2024-27309,0,0,4ff276f1fa3a42e9cba86006da159d603e23baa66b2db98c085aa5a6c3adaee2,2024-05-01T18:15:15.967000
|
||||
@ -246879,6 +246880,7 @@ CVE-2024-32878,0,0,d8e3ab888c6aa88a915625acc211c2c1d2f518e2e93c8d03f4a103f476f0c
|
||||
CVE-2024-32879,0,0,0b0046e51a12ad5b1f4492d6cff2d6482480cc94626283d2a6f79bd97479ab0a,2024-04-25T13:18:20.370000
|
||||
CVE-2024-32880,0,0,5c7d6aa44fda3ee69a48104785812fedaa6d3ea7fbc26c71102dbf3b2182bded,2024-04-26T19:59:19.793000
|
||||
CVE-2024-32881,0,0,537bd0e70a49a0bbbedab5b33f25129a5e0bd4c96a0fa7233edc0c7a221f4717,2024-04-29T12:42:03.667000
|
||||
CVE-2024-32882,1,1,77e2d4e38a68544e2d04b1615ce5bd2ca0a83a57d1e3fbe19af21f16f9eee751,2024-05-02T07:15:20.967000
|
||||
CVE-2024-32883,0,0,a9c9fca2091d1c27f409014c2160b5507d3c163d519fd25861f91b38d4e5bf24,2024-04-29T12:42:03.667000
|
||||
CVE-2024-32884,0,0,feb09aaeaf00882860d9891266c7a76bef3350941384b117a7f5be081c117262,2024-04-26T19:59:19.793000
|
||||
CVE-2024-32887,0,0,b5ae3b4b1b4138c74179295fbe12f89b3d44be2f4f1d80d57b3f63df33aa8023,2024-04-29T12:42:03.667000
|
||||
@ -246897,10 +246899,12 @@ CVE-2024-32957,0,0,346b5f65dd888f3e9cb1b26dea7ac5e5c32edd9cfc4549cda79654054cc98
|
||||
CVE-2024-32958,0,0,6e18b56f26294982072f644e4fa58f1addf07815dbbad1f52ebebe6c09cb7d66,2024-04-24T17:16:50.397000
|
||||
CVE-2024-3296,0,0,bcc39314c1e9f6d53aa0ccc8e7e7cac7c279f7f6ee5a27f19287b128ea2ed6c7,2024-04-05T12:15:37.777000
|
||||
CVE-2024-32961,0,0,37957fa4fcdb7f781bae6e07abfae16d232866e70e85a1248b96c2770b0e66b0,2024-04-25T13:18:13.537000
|
||||
CVE-2024-32962,1,1,cffd765d2dc7e2918662878421ad7e9abc0fd21eb6caa1737b404d451742f73e,2024-05-02T07:15:21.420000
|
||||
CVE-2024-32963,0,0,f743abd9aa526f3db97a21eadfaf4dc2f78a15d414daa21cc895f590ee32aaa6,2024-05-01T13:01:51.263000
|
||||
CVE-2024-32966,0,0,a2baf3fb2b5c80cd4610837ff7bcc9d3104b6f5e43dec9799ce3ae8e928c9347,2024-05-01T13:01:51.263000
|
||||
CVE-2024-32967,0,0,33de1e5d8e137ccf9d9b5b41849c40d635d06fe85dd3137a481db57c2b683f2c,2024-05-01T13:01:51.263000
|
||||
CVE-2024-32970,0,0,2982e33a9b9fd795c78b587d4b9af475752bff8fc1f960ef793d6562bbaa4d4c,2024-05-01T13:02:20.750000
|
||||
CVE-2024-32971,1,1,1ce587cf771e56839dbc652517f8efd235dc7989393d175fd24d10b1f9281038,2024-05-02T07:15:21.733000
|
||||
CVE-2024-32973,0,0,26b1e65a2b333830ce66544334f5113e1beaf6a050e56e0aaddd733df67df7d2,2024-05-01T13:01:51.263000
|
||||
CVE-2024-32979,0,0,4609f2e37347930e20422fd7d03fe2a9f10f1e16fc9069624b36f432c125737a,2024-05-01T13:01:51.263000
|
||||
CVE-2024-3298,0,0,35145d829af4d19541380a93e6723503e514b69e11aa4b007b05099610c37f21,2024-04-04T16:33:06.610000
|
||||
@ -247187,6 +247191,15 @@ CVE-2024-3464,0,0,0c53100717f2f28c54c57fbaaef472d29e3cb0ff81ebf61eb104a899922afe
|
||||
CVE-2024-3465,0,0,a42aecf57f43969ec60c90b90013ebe0e449783aa33103b39be184486d2b2ca9,2024-04-11T01:26:03.697000
|
||||
CVE-2024-3466,0,0,06b3d0b5c629cfcd72994ab03bcc3d914522a60f9b439b6d13775db50704418a,2024-04-11T01:26:03.777000
|
||||
CVE-2024-3470,0,0,736c8b21abac392de8987478bb4430873353b2c43829321b68bed57cd49a65ed,2024-04-19T16:19:49.043000
|
||||
CVE-2024-3471,1,1,e541290d721d2b5e7cc32c8a1d842931b0d359aad1fcbb12cc9dfcca3abc212f,2024-05-02T06:15:50.350000
|
||||
CVE-2024-3472,1,1,e66d94a260f396cd2818a7e0fb014bcdd72caed7f142c32f42d8f202a4d6f234,2024-05-02T06:15:50.453000
|
||||
CVE-2024-3474,1,1,19256a603288843ef4957f755876dda44d2ff7236c5c87e71a9744bb3a115e2f,2024-05-02T06:15:50.527000
|
||||
CVE-2024-3475,1,1,5ab7580b07fdcc174360630058d4e84c427107435d0ba2262027ed3024bbf325,2024-05-02T06:15:50.660000
|
||||
CVE-2024-3476,1,1,51e1c923f1df0f86e114d870c961d0bafe1f0be0b2c57ccf5e916dc6715bb10c,2024-05-02T06:15:50.887000
|
||||
CVE-2024-3477,1,1,6a6e64dbf9c90af7cfc44f0b75391927494f4071435a4181b76c104182a02dd0,2024-05-02T06:15:50.950000
|
||||
CVE-2024-3478,1,1,f8a37bb4ffffb5ad2048f3d48be4ff9deef053a6c4502828e1728418c54dd747,2024-05-02T06:15:51.033000
|
||||
CVE-2024-3481,1,1,3bd1195a471d42f599c39971cba83ae972241d10ef31e66b5133987c56bb6c5b,2024-05-02T06:15:51.130000
|
||||
CVE-2024-3490,1,1,0e9f7f2bbbdc9a59708ede1ee3d312621701cfcf2d134fb6e542d2086ba6d7b2,2024-05-02T07:15:22.040000
|
||||
CVE-2024-3491,0,0,155e981c246f1ab173bd75da38bee4b8800ff4b0566c01179dcadac412465c38,2024-04-23T12:52:09.397000
|
||||
CVE-2024-3493,0,0,63ead7e160b6b2cbd834dd6075f87d345af3361e8d55520f11e81a53e2086aaa,2024-04-16T13:24:07.103000
|
||||
CVE-2024-3505,0,0,d46d6b7d35449c168e9ff66f3c93f973f2e1e579109b94b88c63ad7baac2b7b8,2024-04-15T13:15:31.997000
|
||||
@ -247503,4 +247516,4 @@ CVE-2024-4340,0,0,0fa7c6bfc883a29aea545d51036f6541f96be5c069cd1c4a978687e541eb6f
|
||||
CVE-2024-4348,0,0,e7b124fabadce54e64f93427ccac854d8236c12068cde76cb264464f6c1464d3,2024-05-01T13:02:20.750000
|
||||
CVE-2024-4349,0,0,7787a2614cf25f09e0deb4024609a2d9883c20f9e3d304ea70240ed6b8d0b8ed,2024-05-01T13:02:20.750000
|
||||
CVE-2024-4368,0,0,da5ba1c74713d97d9d0a9df0af3354799ffff595ba88b7f94b290319376e91da,2024-05-01T19:50:25.633000
|
||||
CVE-2024-4369,0,1,352391da6a6ef399397c7f9abf94d5a6fda2875f0f06f0b38dacd9a1a940e5cb,2024-05-02T03:15:15.027000
|
||||
CVE-2024-4369,0,0,352391da6a6ef399397c7f9abf94d5a6fda2875f0f06f0b38dacd9a1a940e5cb,2024-05-02T03:15:15.027000
|
||||
|
Can't render this file because it is too large.
|
Loading…
x
Reference in New Issue
Block a user