From 970daa1be1913d182a82f188403f3b7d9e897258 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Wed, 28 Feb 2024 03:00:28 +0000 Subject: [PATCH] Auto-Update: 2024-02-28T03:00:24.553271+00:00 --- CVE-2023/CVE-2023-503xx/CVE-2023-50303.json | 59 +++++++++++++++++++++ CVE-2023/CVE-2023-507xx/CVE-2023-50734.json | 55 +++++++++++++++++++ CVE-2023/CVE-2023-70xx/CVE-2023-7033.json | 6 ++- CVE-2024/CVE-2024-15xx/CVE-2024-1597.json | 10 +++- README.md | 21 ++++---- 5 files changed, 138 insertions(+), 13 deletions(-) create mode 100644 CVE-2023/CVE-2023-503xx/CVE-2023-50303.json create mode 100644 CVE-2023/CVE-2023-507xx/CVE-2023-50734.json diff --git a/CVE-2023/CVE-2023-503xx/CVE-2023-50303.json b/CVE-2023/CVE-2023-503xx/CVE-2023-50303.json new file mode 100644 index 00000000000..cf0f3910344 --- /dev/null +++ b/CVE-2023/CVE-2023-503xx/CVE-2023-50303.json @@ -0,0 +1,59 @@ +{ + "id": "CVE-2023-50303", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2024-02-28T01:15:07.560", + "lastModified": "2024-02-28T01:15:07.560", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 273333." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseScore": 6.1, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273333", + "source": "psirt@us.ibm.com" + }, + { + "url": "https://www.ibm.com/support/pages/node/7116120", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-507xx/CVE-2023-50734.json b/CVE-2023/CVE-2023-507xx/CVE-2023-50734.json new file mode 100644 index 00000000000..f5b07452b24 --- /dev/null +++ b/CVE-2023/CVE-2023-507xx/CVE-2023-50734.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-50734", + "sourceIdentifier": "7bc73191-a2b6-4c63-9918-753964601853", + "published": "2024-02-28T02:15:23.957", + "lastModified": "2024-02-28T02:15:23.957", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "7bc73191-a2b6-4c63-9918-753964601853", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 9.0, + "baseSeverity": "CRITICAL" + }, + "exploitabilityScore": 2.2, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "7bc73191-a2b6-4c63-9918-753964601853", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], + "references": [ + { + "url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html", + "source": "7bc73191-a2b6-4c63-9918-753964601853" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-70xx/CVE-2023-7033.json b/CVE-2023/CVE-2023-70xx/CVE-2023-7033.json index 9dd499e1e5e..660bbcd43c6 100644 --- a/CVE-2023/CVE-2023-70xx/CVE-2023-7033.json +++ b/CVE-2023/CVE-2023-70xx/CVE-2023-7033.json @@ -2,7 +2,7 @@ "id": "CVE-2023-7033", "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "published": "2024-02-27T04:15:06.473", - "lastModified": "2024-02-27T14:20:06.637", + "lastModified": "2024-02-28T01:15:07.780", "vulnStatus": "Awaiting Analysis", "descriptions": [ { @@ -55,6 +55,10 @@ "url": "https://jvn.jp/vu/JVNVU96145466/index.html", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp" }, + { + "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-058-01", + "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp" + }, { "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp" diff --git a/CVE-2024/CVE-2024-15xx/CVE-2024-1597.json b/CVE-2024/CVE-2024-15xx/CVE-2024-1597.json index 08098238673..9d978011685 100644 --- a/CVE-2024/CVE-2024-15xx/CVE-2024-1597.json +++ b/CVE-2024/CVE-2024-15xx/CVE-2024-1597.json @@ -2,7 +2,7 @@ "id": "CVE-2024-1597", "sourceIdentifier": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "published": "2024-02-19T13:15:07.740", - "lastModified": "2024-02-20T19:50:53.960", + "lastModified": "2024-02-28T02:15:24.200", "vulnStatus": "Awaiting Analysis", "descriptions": [ { @@ -54,6 +54,14 @@ { "url": "https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56", "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007" + }, + { + "url": "https://www.enterprisedb.com/docs/jdbc_connector/latest/01_jdbc_rel_notes/", + "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007" + }, + { + "url": "https://www.enterprisedb.com/docs/security/assessments/cve-2024-1597/", + "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007" } ] } \ No newline at end of file diff --git a/README.md b/README.md index e9c7dfb675d..88429b43d5b 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2024-02-28T00:55:24.337052+00:00 +2024-02-28T03:00:24.553271+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2024-02-28T00:15:54.093000+00:00 +2024-02-28T02:15:24.200000+00:00 ``` ### Last Data Feed Release @@ -23,30 +23,29 @@ Repository synchronizes with the NVD every 2 hours. Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest) ```plain -2024-02-27T01:00:20.238205+00:00 +2024-02-28T01:00:28.258593+00:00 ``` ### Total Number of included CVEs ```plain -239684 +239686 ``` ### CVEs added in the last Commit -Recently added CVEs: `5` +Recently added CVEs: `2` -* [CVE-2024-26300](CVE-2024/CVE-2024-263xx/CVE-2024-26300.json) (`2024-02-27T23:15:07.277`) -* [CVE-2024-26301](CVE-2024/CVE-2024-263xx/CVE-2024-26301.json) (`2024-02-27T23:15:07.450`) -* [CVE-2024-26302](CVE-2024/CVE-2024-263xx/CVE-2024-26302.json) (`2024-02-27T23:15:07.627`) -* [CVE-2024-1892](CVE-2024/CVE-2024-18xx/CVE-2024-1892.json) (`2024-02-28T00:15:53.897`) -* [CVE-2024-1932](CVE-2024/CVE-2024-19xx/CVE-2024-1932.json) (`2024-02-28T00:15:54.093`) +* [CVE-2023-50303](CVE-2023/CVE-2023-503xx/CVE-2023-50303.json) (`2024-02-28T01:15:07.560`) +* [CVE-2023-50734](CVE-2023/CVE-2023-507xx/CVE-2023-50734.json) (`2024-02-28T02:15:23.957`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `2` +* [CVE-2023-7033](CVE-2023/CVE-2023-70xx/CVE-2023-7033.json) (`2024-02-28T01:15:07.780`) +* [CVE-2024-1597](CVE-2024/CVE-2024-15xx/CVE-2024-1597.json) (`2024-02-28T02:15:24.200`) ## Download and Usage