Auto-Update: 2024-02-28T03:00:24.553271+00:00

CVE-2023/CVE-2023-503xx/CVE-2023-50303.json

@@ -0,0 +1,59 @@
+{
+  "id": "CVE-2023-50303",
+  "sourceIdentifier": "psirt@us.ibm.com",
+  "published": "2024-02-28T01:15:07.560",
+  "lastModified": "2024-02-28T01:15:07.560",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  273333."
+    }
+  ],
+  "metrics": {
+    "cvssMetricV31": [
+      {
+        "source": "psirt@us.ibm.com",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE",
+          "baseScore": 6.1,
+          "baseSeverity": "MEDIUM"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 2.7
+      }
+    ]
+  },
+  "weaknesses": [
+    {
+      "source": "psirt@us.ibm.com",
+      "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273333",
+      "source": "psirt@us.ibm.com"
+    },
+    {
+      "url": "https://www.ibm.com/support/pages/node/7116120",
+      "source": "psirt@us.ibm.com"
+    }
+  ]
+}

CVE-2023/CVE-2023-507xx/CVE-2023-50734.json

@@ -0,0 +1,55 @@
+{
+  "id": "CVE-2023-50734",
+  "sourceIdentifier": "7bc73191-a2b6-4c63-9918-753964601853",
+  "published": "2024-02-28T02:15:23.957",
+  "lastModified": "2024-02-28T02:15:23.957",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\n"
+    }
+  ],
+  "metrics": {
+    "cvssMetricV31": [
+      {
+        "source": "7bc73191-a2b6-4c63-9918-753964601853",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+          "attackVector": "NETWORK",
+          "attackComplexity": "HIGH",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "CHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH",
+          "baseScore": 9.0,
+          "baseSeverity": "CRITICAL"
+        },
+        "exploitabilityScore": 2.2,
+        "impactScore": 6.0
+      }
+    ]
+  },
+  "weaknesses": [
+    {
+      "source": "7bc73191-a2b6-4c63-9918-753964601853",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-121"
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html",
+      "source": "7bc73191-a2b6-4c63-9918-753964601853"
+    }
+  ]
+}

CVE-2023/CVE-2023-70xx/CVE-2023-7033.json

@@ -2,7 +2,7 @@
   "id": "CVE-2023-7033",
   "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
   "published": "2024-02-27T04:15:06.473",
-  "lastModified": "2024-02-27T14:20:06.637",
+  "lastModified": "2024-02-28T01:15:07.780",
   "vulnStatus": "Awaiting Analysis",
   "descriptions": [
     {
@@ -55,6 +55,10 @@
       "url": "https://jvn.jp/vu/JVNVU96145466/index.html",
       "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
+    {
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-058-01",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
+    },
     {
       "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf",
       "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"

CVE-2024/CVE-2024-15xx/CVE-2024-1597.json

@@ -2,7 +2,7 @@
   "id": "CVE-2024-1597",
   "sourceIdentifier": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
   "published": "2024-02-19T13:15:07.740",
-  "lastModified": "2024-02-20T19:50:53.960",
+  "lastModified": "2024-02-28T02:15:24.200",
   "vulnStatus": "Awaiting Analysis",
   "descriptions": [
     {
@@ -54,6 +54,14 @@
     {
       "url": "https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56",
       "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
+    },
+    {
+      "url": "https://www.enterprisedb.com/docs/jdbc_connector/latest/01_jdbc_rel_notes/",
+      "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
+    },
+    {
+      "url": "https://www.enterprisedb.com/docs/security/assessments/cve-2024-1597/",
+      "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
     }
   ]
 }

README.md

@@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
 ### Last Repository Update
 
 ```plain
-2024-02-28T00:55:24.337052+00:00
+2024-02-28T03:00:24.553271+00:00
 ```
 
 ### Most recent CVE Modification Timestamp synchronized with NVD
 
 ```plain
-2024-02-28T00:15:54.093000+00:00
+2024-02-28T02:15:24.200000+00:00
 ```
 
 ### Last Data Feed Release
@@ -23,30 +23,29 @@ Repository synchronizes with the NVD every 2 hours.
 Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest)
 
 ```plain
-2024-02-27T01:00:20.238205+00:00
+2024-02-28T01:00:28.258593+00:00
 ```
 
 ### Total Number of included CVEs
 
 ```plain
-239684
+239686
 ```
 
 ### CVEs added in the last Commit
 
-Recently added CVEs: `5`
+Recently added CVEs: `2`
 
-* [CVE-2024-26300](CVE-2024/CVE-2024-263xx/CVE-2024-26300.json) (`2024-02-27T23:15:07.277`)
+* [CVE-2023-50303](CVE-2023/CVE-2023-503xx/CVE-2023-50303.json) (`2024-02-28T01:15:07.560`)
-* [CVE-2024-26301](CVE-2024/CVE-2024-263xx/CVE-2024-26301.json) (`2024-02-27T23:15:07.450`)
+* [CVE-2023-50734](CVE-2023/CVE-2023-507xx/CVE-2023-50734.json) (`2024-02-28T02:15:23.957`)
-* [CVE-2024-26302](CVE-2024/CVE-2024-263xx/CVE-2024-26302.json) (`2024-02-27T23:15:07.627`)
-* [CVE-2024-1892](CVE-2024/CVE-2024-18xx/CVE-2024-1892.json) (`2024-02-28T00:15:53.897`)
-* [CVE-2024-1932](CVE-2024/CVE-2024-19xx/CVE-2024-1932.json) (`2024-02-28T00:15:54.093`)
 
 
 ### CVEs modified in the last Commit
 
-Recently modified CVEs: `0`
+Recently modified CVEs: `2`
 
+* [CVE-2023-7033](CVE-2023/CVE-2023-70xx/CVE-2023-7033.json) (`2024-02-28T01:15:07.780`)
+* [CVE-2024-1597](CVE-2024/CVE-2024-15xx/CVE-2024-1597.json) (`2024-02-28T02:15:24.200`)
 
 
 ## Download and Usage