admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-07-09 16:05:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2024-05-19T23:55:29.442695+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2024-05-19 23:58:20 +00:00
parent 8247bc5754
commit 9e2da3617e
6 changed files with 352 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
CVE-2024/CVE-2024-42xx/CVE-2024-4284.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2024-4284",
"sourceIdentifier": "security@huntr.dev",
"published": "2024-05-19T23:15:06.960",
"lastModified": "2024-05-19T23:15:06.960",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through the modification of a user's `id` attribute to a value of 0. This issue affects the current version of the software, with the latest commit id `57984fa85c31988b2eff429adfc654c46e0c342a`. By exploiting this vulnerability, an attacker, with manager or admin privileges, can render a chosen account completely inaccessible. The application's mechanism for suspending accounts does not provide a means to reverse this condition through the UI, leading to uncontrolled resource consumption. The vulnerability is introduced due to the lack of input validation and sanitization in the user modification endpoint and the middleware's token validation logic. This issue has been addressed in version 1.0.0 of the software."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "security@huntr.dev",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "security@huntr.dev",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"references": [
{
"url": "https://github.com/mintplex-labs/anything-llm/commit/1b35bcbeab10b77e6dbd263cceecf1b965a40789",
"source": "security@huntr.dev"
},
{
"url": "https://huntr.com/bounties/a5f45596-0aef-49e0-9f7d-63f1955a1552",
"source": "security@huntr.dev"
}
]
}

92
CVE-2024/CVE-2024-51xx/CVE-2024-5104.json Normal file
View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5104",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-19T22:15:24.520",
"lastModified": "2024-05-19T22:15:24.520",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/student_grade_wise.php. The manipulation of the argument grade leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265094 is the identifier assigned to this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%209.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.265094",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.265094",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.338507",
"source": "cna@vuldb.com"
}
]
}

92
CVE-2024/CVE-2024-51xx/CVE-2024-5105.json Normal file
View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5105",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-19T23:15:07.320",
"lastModified": "2024-05-19T23:15:07.320",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/student_payment_details.php. The manipulation of the argument index leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265095."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2010.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.265095",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.265095",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.338508",
"source": "cna@vuldb.com"
}
]
}

92
CVE-2024/CVE-2024-51xx/CVE-2024-5106.json Normal file
View File

@ -0,0 +1,92 @@
{
"id": "CVE-2024-5106",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-05-19T23:15:07.600",
"lastModified": "2024-05-19T23:15:07.600",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file /view/student_payment_details3.php. The manipulation of the argument index leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265096."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2011.pdf",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.265096",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.265096",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.338509",
"source": "cna@vuldb.com"
}
]
}

17
README.md
View File

@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2024-05-19T22:00:37.570715+00:00
2024-05-19T23:55:29.442695+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2024-05-19T21:15:06.893000+00:00
2024-05-19T23:15:07.600000+00:00
```
### Last Data Feed Release
@ -33,18 +33,17 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
250751
250755
```
### CVEs added in the last Commit
Recently added CVEs: `5`
Recently added CVEs: `4`
- [CVE-2024-36076](CVE-2024/CVE-2024-360xx/CVE-2024-36076.json) (`2024-05-19T20:15:07.970`)
- [CVE-2024-36078](CVE-2024/CVE-2024-360xx/CVE-2024-36078.json) (`2024-05-19T20:15:08.043`)
- [CVE-2024-36080](CVE-2024/CVE-2024-360xx/CVE-2024-36080.json) (`2024-05-19T20:15:08.107`)
- [CVE-2024-36081](CVE-2024/CVE-2024-360xx/CVE-2024-36081.json) (`2024-05-19T20:15:08.287`)
- [CVE-2024-5103](CVE-2024/CVE-2024-51xx/CVE-2024-5103.json) (`2024-05-19T21:15:06.893`)
- [CVE-2024-4284](CVE-2024/CVE-2024-42xx/CVE-2024-4284.json) (`2024-05-19T23:15:06.960`)
- [CVE-2024-5104](CVE-2024/CVE-2024-51xx/CVE-2024-5104.json) (`2024-05-19T22:15:24.520`)
- [CVE-2024-5105](CVE-2024/CVE-2024-51xx/CVE-2024-5105.json) (`2024-05-19T23:15:07.320`)
- [CVE-2024-5106](CVE-2024/CVE-2024-51xx/CVE-2024-5106.json) (`2024-05-19T23:15:07.600`)
### CVEs modified in the last Commit

14
_state.csv
View File

@ -249924,10 +249924,10 @@ CVE-2024-36053,0,0,d51c9a75127f54998ecb6ee58b412865a9dfdd688bdb7147c71644ad15266
CVE-2024-3606,0,0,aad549bdf5ff1831d91b9701456650bb1ccc1938c3f938f0c7eb426394ab8356,2024-05-02T18:00:37.360000
CVE-2024-3607,0,0,af4721086df8378a380a0243b924575fce7196863af6b8319186a0a7c6039e9f,2024-05-02T18:00:37.360000
CVE-2024-36070,0,0,de05fa573555501b450b607d3a0cbcf86f8b56d7ce5d38b83850f99163fba56c,2024-05-19T19:15:48.550000
CVE-2024-36076,1,1,de56b684acd44fab306e3d4f3e900b1defa82aecf47673f3ee1edf1ffb6e9c64,2024-05-19T20:15:07.970000
CVE-2024-36078,1,1,fbdb754fd263eb534eff9145151d70c09cf3881bfaf985f38b529acbb20b379f,2024-05-19T20:15:08.043000
CVE-2024-36080,1,1,35e4409f3385e60e1679f0ddb0b14af2c392237344ea75664d5ab569f94830db,2024-05-19T20:15:08.107000
CVE-2024-36081,1,1,137f97cfef519ce61017992cae8c63613ff3bad7c58d1db3768106d1f2e0623e,2024-05-19T20:15:08.287000
CVE-2024-36076,0,0,de56b684acd44fab306e3d4f3e900b1defa82aecf47673f3ee1edf1ffb6e9c64,2024-05-19T20:15:07.970000
CVE-2024-36078,0,0,fbdb754fd263eb534eff9145151d70c09cf3881bfaf985f38b529acbb20b379f,2024-05-19T20:15:08.043000
CVE-2024-36080,0,0,35e4409f3385e60e1679f0ddb0b14af2c392237344ea75664d5ab569f94830db,2024-05-19T20:15:08.107000
CVE-2024-36081,0,0,137f97cfef519ce61017992cae8c63613ff3bad7c58d1db3768106d1f2e0623e,2024-05-19T20:15:08.287000
CVE-2024-3609,0,0,6c3cd77579fee8e9517beb08b888a97a81906e9d1fc4f51c5d372766647e52cb,2024-05-17T18:36:05.263000
CVE-2024-3612,0,0,d6528427cbb589467c111cbd40a18dd09640d3302d8baf887860f351407e958e,2024-05-17T02:40:01.520000
CVE-2024-3613,0,0,d7eb1ddde521e54e1fe9acae408bd9221d7036e0a03927b308a853106c490093,2024-05-17T02:40:01.607000
@ -250343,6 +250343,7 @@ CVE-2024-4277,0,0,0e2597ca58054c89bbcbec7f866e9744f2b63f46782c4e0a7d31ae57f95293
CVE-2024-4279,0,0,d3b17e17d1b5650487c2ef2a762ae7d90400bd6e48ec29863d7d603500f64a36,2024-05-16T13:03:05.353000
CVE-2024-4280,0,0,822fb2b67d813f28d851bea5074e022fd3fb44cbbe8e0abea23d2c25f8583cfd,2024-05-14T16:11:39.510000
CVE-2024-4281,0,0,f2f6c94941e4ed7f1c98ab6351686f1d868a8657bf9b3ff2bb73d7d016e69d14,2024-05-08T13:15:00.690000
CVE-2024-4284,1,1,e8f0284ae501bf7cac5188e8f1eb36adcaceaeb9f03f4a182afdd102fc74ba14,2024-05-19T23:15:06.960000
CVE-2024-4288,0,0,9367649ffe77365cb201f95bc69986ffb5e481ba50542c3f0953c5f2e0eb0d2a,2024-05-16T13:03:05.353000
CVE-2024-4291,0,0,dcab47edda64598994b6d35eea1a5bae28c719351e51b2665b279255f64e7970,2024-05-17T02:40:21.667000
CVE-2024-4292,0,0,3a853b90a84b704f0ceeeca9f33221358bfd4e7e30200ef38bb21c91a07a856b,2024-05-17T02:40:21.770000
@ -250749,4 +250750,7 @@ CVE-2024-5098,0,0,27e182691f6df2f6e5de66c3e5527fb52eb62e6c11728f25b5e5f30216127d
CVE-2024-5099,0,0,4293f4c81987dc00fde1b446c94f0fb96801ad62e3b48b03d925386f0d01f996,2024-05-19T08:15:06.367000
CVE-2024-5100,0,0,c6616e790fe9d0055566f7986afbbf39bedb52a3fb1f8f9cf3fd594fbdcbac45,2024-05-19T12:15:08.310000
CVE-2024-5101,0,0,fc10060049ea504f994e085091d4ed1d41b5c3f4a4a5b1cf97b8ade4d9f392f6,2024-05-19T14:15:35.700000
CVE-2024-5103,1,1,8f9f7277326c932fb90531905ddffa42bb6c2181d40ea72c0c326203870b4d89,2024-05-19T21:15:06.893000
CVE-2024-5103,0,0,8f9f7277326c932fb90531905ddffa42bb6c2181d40ea72c0c326203870b4d89,2024-05-19T21:15:06.893000
CVE-2024-5104,1,1,a5a0713749ec620297cddbca4c95bf643e7f496e5f898f627063cadf306b77eb,2024-05-19T22:15:24.520000
CVE-2024-5105,1,1,430374e7f06bded06fc293b0cf69ce11b4bbc557a02a3e1ab024027b253e59c5,2024-05-19T23:15:07.320000
CVE-2024-5106,1,1,a35f1cb13dd5ab38b2268ec92caa3710fedf8c6f13fc3dd6bd072516656df8b2,2024-05-19T23:15:07.600000

Can't render this file because it is too large.