admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-07-09 16:05:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2024-05-19T23:55:29.442695+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2024-05-19 23:58:20 +00:00
parent 8247bc5754
commit 9e2da3617e
6 changed files with 352 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
CVE-2024/CVE-2024-42xx/CVE-2024-4284.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2024-4284",
"sourceIdentifier": "security@huntr.dev",
"published": "2024-05-19T23:15:06.960",
"lastModified": "2024-05-19T23:15:06.960",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through the modification of a user's `id` attribute to a value of 0. This issue affects the current version of the software, with the latest commit id `57984fa85c31988b2eff429adfc654c46e0c342a`. By exploiting this vulnerability, an attacker, with manager or admin privileges, can render a chosen account completely inaccessible. The application's mechanism for suspending accounts does not provide a means to reverse this condition through the UI, leading to uncontrolled resource consumption. The vulnerability is introduced due to the lack of input validation and sanitization in the user modification endpoint and the middleware's token validation logic. This issue has been addressed in version 1.0.0 of the software."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "security@huntr.dev",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "security@huntr.dev",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"references": [
{
"url": "https://github.com/mintplex-labs/anything-llm/commit/1b35bcbeab10b77e6dbd263cceecf1b965a40789",
"source": "security@huntr.dev"
},
{
"url": "https://huntr.com/bounties/a5f45596-0aef-49e0-9f7d-63f1955a1552",
"source": "security@huntr.dev"
}
]
}

92
CVE-2024/CVE-2024-51xx/CVE-2024-5104.json Normal file
View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5104",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-19T22:15:24.520",
"lastModified": "2024-05-19T22:15:24.520",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/student_grade_wise.php. The manipulation of the argument grade leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265094 is the identifier assigned to this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%209.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.265094",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.265094",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.338507",
"source": "cna@vuldb.com"
}
]
}

92
CVE-2024/CVE-2024-51xx/CVE-2024-5105.json Normal file
View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5105",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-19T23:15:07.320",
"lastModified": "2024-05-19T23:15:07.320",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/student_payment_details.php. The manipulation of the argument index leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265095."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2010.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.265095",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.265095",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.338508",
"source": "cna@vuldb.com"
}
]
}

92
CVE-2024/CVE-2024-51xx/CVE-2024-5106.json Normal file
View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5106",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-19T23:15:07.600",
"lastModified": "2024-05-19T23:15:07.600",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file /view/student_payment_details3.php. The manipulation of the argument index leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265096."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2011.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.265096",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.265096",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.338509",
"source": "cna@vuldb.com"
}
]
}

17
README.md
View File

@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update ### Last Repository Update
```plain ```plain
2024-05-19T22:00:37.570715+00:00 2024-05-19T23:55:29.442695+00:00
``` ```
### Most recent CVE Modification Timestamp synchronized with NVD ### Most recent CVE Modification Timestamp synchronized with NVD
```plain ```plain
2024-05-19T21:15:06.893000+00:00 2024-05-19T23:15:07.600000+00:00
``` ```
### Last Data Feed Release ### Last Data Feed Release
@ -33,18 +33,17 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs ### Total Number of included CVEs
```plain ```plain
250751 250755
``` ```
### CVEs added in the last Commit ### CVEs added in the last Commit
Recently added CVEs: `5` Recently added CVEs: `4`
- [CVE-2024-36076](CVE-2024/CVE-2024-360xx/CVE-2024-36076.json) (`2024-05-19T20:15:07.970`) - [CVE-2024-4284](CVE-2024/CVE-2024-42xx/CVE-2024-4284.json) (`2024-05-19T23:15:06.960`)
- [CVE-2024-36078](CVE-2024/CVE-2024-360xx/CVE-2024-36078.json) (`2024-05-19T20:15:08.043`) - [CVE-2024-5104](CVE-2024/CVE-2024-51xx/CVE-2024-5104.json) (`2024-05-19T22:15:24.520`)
- [CVE-2024-36080](CVE-2024/CVE-2024-360xx/CVE-2024-36080.json) (`2024-05-19T20:15:08.107`) - [CVE-2024-5105](CVE-2024/CVE-2024-51xx/CVE-2024-5105.json) (`2024-05-19T23:15:07.320`)
- [CVE-2024-36081](CVE-2024/CVE-2024-360xx/CVE-2024-36081.json) (`2024-05-19T20:15:08.287`) - [CVE-2024-5106](CVE-2024/CVE-2024-51xx/CVE-2024-5106.json) (`2024-05-19T23:15:07.600`)
- [CVE-2024-5103](CVE-2024/CVE-2024-51xx/CVE-2024-5103.json) (`2024-05-19T21:15:06.893`)
### CVEs modified in the last Commit ### CVEs modified in the last Commit

14
_state.csv
View File

@ -249924,10 +249924,10 @@ CVE-2024-36053,0,0,d51c9a75127f54998ecb6ee58b412865a9dfdd688bdb7147c71644ad15266
CVE-2024-3606,0,0,aad549bdf5ff1831d91b9701456650bb1ccc1938c3f938f0c7eb426394ab8356,2024-05-02T18:00:37.360000 CVE-2024-3606,0,0,aad549bdf5ff1831d91b9701456650bb1ccc1938c3f938f0c7eb426394ab8356,2024-05-02T18:00:37.360000
CVE-2024-3607,0,0,af4721086df8378a380a0243b924575fce7196863af6b8319186a0a7c6039e9f,2024-05-02T18:00:37.360000 CVE-2024-3607,0,0,af4721086df8378a380a0243b924575fce7196863af6b8319186a0a7c6039e9f,2024-05-02T18:00:37.360000
CVE-2024-36070,0,0,de05fa573555501b450b607d3a0cbcf86f8b56d7ce5d38b83850f99163fba56c,2024-05-19T19:15:48.550000 CVE-2024-36070,0,0,de05fa573555501b450b607d3a0cbcf86f8b56d7ce5d38b83850f99163fba56c,2024-05-19T19:15:48.550000
CVE-2024-36076,1,1,de56b684acd44fab306e3d4f3e900b1defa82aecf47673f3ee1edf1ffb6e9c64,2024-05-19T20:15:07.970000 CVE-2024-36076,0,0,de56b684acd44fab306e3d4f3e900b1defa82aecf47673f3ee1edf1ffb6e9c64,2024-05-19T20:15:07.970000
CVE-2024-36078,1,1,fbdb754fd263eb534eff9145151d70c09cf3881bfaf985f38b529acbb20b379f,2024-05-19T20:15:08.043000 CVE-2024-36078,0,0,fbdb754fd263eb534eff9145151d70c09cf3881bfaf985f38b529acbb20b379f,2024-05-19T20:15:08.043000
CVE-2024-36080,1,1,35e4409f3385e60e1679f0ddb0b14af2c392237344ea75664d5ab569f94830db,2024-05-19T20:15:08.107000 CVE-2024-36080,0,0,35e4409f3385e60e1679f0ddb0b14af2c392237344ea75664d5ab569f94830db,2024-05-19T20:15:08.107000
CVE-2024-36081,1,1,137f97cfef519ce61017992cae8c63613ff3bad7c58d1db3768106d1f2e0623e,2024-05-19T20:15:08.287000 CVE-2024-36081,0,0,137f97cfef519ce61017992cae8c63613ff3bad7c58d1db3768106d1f2e0623e,2024-05-19T20:15:08.287000
CVE-2024-3609,0,0,6c3cd77579fee8e9517beb08b888a97a81906e9d1fc4f51c5d372766647e52cb,2024-05-17T18:36:05.263000 CVE-2024-3609,0,0,6c3cd77579fee8e9517beb08b888a97a81906e9d1fc4f51c5d372766647e52cb,2024-05-17T18:36:05.263000
CVE-2024-3612,0,0,d6528427cbb589467c111cbd40a18dd09640d3302d8baf887860f351407e958e,2024-05-17T02:40:01.520000 CVE-2024-3612,0,0,d6528427cbb589467c111cbd40a18dd09640d3302d8baf887860f351407e958e,2024-05-17T02:40:01.520000
CVE-2024-3613,0,0,d7eb1ddde521e54e1fe9acae408bd9221d7036e0a03927b308a853106c490093,2024-05-17T02:40:01.607000 CVE-2024-3613,0,0,d7eb1ddde521e54e1fe9acae408bd9221d7036e0a03927b308a853106c490093,2024-05-17T02:40:01.607000
@ -250343,6 +250343,7 @@ CVE-2024-4277,0,0,0e2597ca58054c89bbcbec7f866e9744f2b63f46782c4e0a7d31ae57f95293
CVE-2024-4279,0,0,d3b17e17d1b5650487c2ef2a762ae7d90400bd6e48ec29863d7d603500f64a36,2024-05-16T13:03:05.353000 CVE-2024-4279,0,0,d3b17e17d1b5650487c2ef2a762ae7d90400bd6e48ec29863d7d603500f64a36,2024-05-16T13:03:05.353000
CVE-2024-4280,0,0,822fb2b67d813f28d851bea5074e022fd3fb44cbbe8e0abea23d2c25f8583cfd,2024-05-14T16:11:39.510000 CVE-2024-4280,0,0,822fb2b67d813f28d851bea5074e022fd3fb44cbbe8e0abea23d2c25f8583cfd,2024-05-14T16:11:39.510000
CVE-2024-4281,0,0,f2f6c94941e4ed7f1c98ab6351686f1d868a8657bf9b3ff2bb73d7d016e69d14,2024-05-08T13:15:00.690000 CVE-2024-4281,0,0,f2f6c94941e4ed7f1c98ab6351686f1d868a8657bf9b3ff2bb73d7d016e69d14,2024-05-08T13:15:00.690000
CVE-2024-4284,1,1,e8f0284ae501bf7cac5188e8f1eb36adcaceaeb9f03f4a182afdd102fc74ba14,2024-05-19T23:15:06.960000
CVE-2024-4288,0,0,9367649ffe77365cb201f95bc69986ffb5e481ba50542c3f0953c5f2e0eb0d2a,2024-05-16T13:03:05.353000 CVE-2024-4288,0,0,9367649ffe77365cb201f95bc69986ffb5e481ba50542c3f0953c5f2e0eb0d2a,2024-05-16T13:03:05.353000
CVE-2024-4291,0,0,dcab47edda64598994b6d35eea1a5bae28c719351e51b2665b279255f64e7970,2024-05-17T02:40:21.667000 CVE-2024-4291,0,0,dcab47edda64598994b6d35eea1a5bae28c719351e51b2665b279255f64e7970,2024-05-17T02:40:21.667000
CVE-2024-4292,0,0,3a853b90a84b704f0ceeeca9f33221358bfd4e7e30200ef38bb21c91a07a856b,2024-05-17T02:40:21.770000 CVE-2024-4292,0,0,3a853b90a84b704f0ceeeca9f33221358bfd4e7e30200ef38bb21c91a07a856b,2024-05-17T02:40:21.770000
@ -250749,4 +250750,7 @@ CVE-2024-5098,0,0,27e182691f6df2f6e5de66c3e5527fb52eb62e6c11728f25b5e5f30216127d
CVE-2024-5099,0,0,4293f4c81987dc00fde1b446c94f0fb96801ad62e3b48b03d925386f0d01f996,2024-05-19T08:15:06.367000 CVE-2024-5099,0,0,4293f4c81987dc00fde1b446c94f0fb96801ad62e3b48b03d925386f0d01f996,2024-05-19T08:15:06.367000
CVE-2024-5100,0,0,c6616e790fe9d0055566f7986afbbf39bedb52a3fb1f8f9cf3fd594fbdcbac45,2024-05-19T12:15:08.310000 CVE-2024-5100,0,0,c6616e790fe9d0055566f7986afbbf39bedb52a3fb1f8f9cf3fd594fbdcbac45,2024-05-19T12:15:08.310000
CVE-2024-5101,0,0,fc10060049ea504f994e085091d4ed1d41b5c3f4a4a5b1cf97b8ade4d9f392f6,2024-05-19T14:15:35.700000 CVE-2024-5101,0,0,fc10060049ea504f994e085091d4ed1d41b5c3f4a4a5b1cf97b8ade4d9f392f6,2024-05-19T14:15:35.700000
CVE-2024-5103,1,1,8f9f7277326c932fb90531905ddffa42bb6c2181d40ea72c0c326203870b4d89,2024-05-19T21:15:06.893000 CVE-2024-5103,0,0,8f9f7277326c932fb90531905ddffa42bb6c2181d40ea72c0c326203870b4d89,2024-05-19T21:15:06.893000
CVE-2024-5104,1,1,a5a0713749ec620297cddbca4c95bf643e7f496e5f898f627063cadf306b77eb,2024-05-19T22:15:24.520000
CVE-2024-5105,1,1,430374e7f06bded06fc293b0cf69ce11b4bbc557a02a3e1ab024027b253e59c5,2024-05-19T23:15:07.320000
CVE-2024-5106,1,1,a35f1cb13dd5ab38b2268ec92caa3710fedf8c6f13fc3dd6bd072516656df8b2,2024-05-19T23:15:07.600000

Can't render this file because it is too large.