From bc76613e00173168cadb32c80374ca282af1c977 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Fri, 24 Jan 2025 07:03:47 +0000 Subject: [PATCH] Auto-Update: 2025-01-24T07:00:20.516088+00:00 --- CVE-2024/CVE-2024-136xx/CVE-2024-13659.json | 64 +++++++++++++++++++++ CVE-2024/CVE-2024-14xx/CVE-2024-1488.json | 10 ++-- README.md | 14 ++--- _state.csv | 7 ++- 4 files changed, 80 insertions(+), 15 deletions(-) create mode 100644 CVE-2024/CVE-2024-136xx/CVE-2024-13659.json diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13659.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13659.json new file mode 100644 index 00000000000..b8a3f00b56e --- /dev/null +++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13659.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2024-13659", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-01-24T06:15:26.557", + "lastModified": "2025-01-24T06:15:26.557", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Listamester plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listamester' shortcode in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/listamester/trunk/includes/class-listamester.php#L105", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3225538%40listamester&new=3225538%40listamester&sfp_email=&sfph_mail=", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/68b4358d-d4b4-415b-a19f-e58b155ceac9?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-14xx/CVE-2024-1488.json b/CVE-2024/CVE-2024-14xx/CVE-2024-1488.json index 5524b614de7..2618cb4d522 100644 --- a/CVE-2024/CVE-2024-14xx/CVE-2024-1488.json +++ b/CVE-2024/CVE-2024-14xx/CVE-2024-1488.json @@ -2,8 +2,8 @@ "id": "CVE-2024-1488", "sourceIdentifier": "secalert@redhat.com", "published": "2024-02-15T05:15:10.257", - "lastModified": "2025-01-23T17:41:40.350", - "vulnStatus": "Analyzed", + "lastModified": "2025-01-24T06:15:26.913", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -62,17 +62,17 @@ "weaknesses": [ { "source": "secalert@redhat.com", - "type": "Secondary", + "type": "Primary", "description": [ { "lang": "en", - "value": "CWE-15" + "value": "CWE-276" } ] }, { "source": "nvd@nist.gov", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/README.md b/README.md index 2033397fe4e..dd709cba486 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-01-24T05:00:24.648490+00:00 +2025-01-24T07:00:20.516088+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-01-24T03:15:07.320000+00:00 +2025-01-24T06:15:26.913000+00:00 ``` ### Last Data Feed Release @@ -33,21 +33,21 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -278732 +278733 ``` ### CVEs added in the last Commit -Recently added CVEs: `2` +Recently added CVEs: `1` -- [CVE-2024-11931](CVE-2024/CVE-2024-119xx/CVE-2024-11931.json) (`2025-01-24T03:15:06.590`) -- [CVE-2025-0314](CVE-2025/CVE-2025-03xx/CVE-2025-0314.json) (`2025-01-24T03:15:07.320`) +- [CVE-2024-13659](CVE-2024/CVE-2024-136xx/CVE-2024-13659.json) (`2025-01-24T06:15:26.557`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `1` +- [CVE-2024-1488](CVE-2024/CVE-2024-14xx/CVE-2024-1488.json) (`2025-01-24T06:15:26.913`) ## Download and Usage diff --git a/_state.csv b/_state.csv index d066657e161..5f39eedc283 100644 --- a/_state.csv +++ b/_state.csv @@ -245011,7 +245011,7 @@ CVE-2024-11928,0,0,4eb81c3b991253e17b093831750d2f60d8030675796e16e7e29cc29429037 CVE-2024-11929,0,0,66064f3187dd0089c2014740486de1ebf4355d01734d9e211585842b939a7710,2025-01-09T11:15:11.447000 CVE-2024-1193,0,0,dfff57fc9ce7a1dbebe4335de503e2f3e62619c8f53eebdea960e5ff40a71456,2024-11-21T08:50:00.427000 CVE-2024-11930,0,0,b88c23e4935b7f2e83397c155514381d560f1027e29cea30bba30e9bb3837da0,2025-01-04T09:15:05.880000 -CVE-2024-11931,1,1,d5dece3c18d15e15aa4a217db191f3bc9d5668e12f3e305df11068f8cafec908,2025-01-24T03:15:06.590000 +CVE-2024-11931,0,0,d5dece3c18d15e15aa4a217db191f3bc9d5668e12f3e305df11068f8cafec908,2025-01-24T03:15:06.590000 CVE-2024-11933,0,0,ff719b80c8b04b1955877df42e564ce90eac2c09e4f59c20e785f18a1e8804d6,2024-12-03T16:04:10.350000 CVE-2024-11934,0,0,744a72b875229eda9af00bf8cde59d77110b18803c7442665bf58299c9e4d643,2025-01-07T04:15:07.520000 CVE-2024-11935,0,0,f2a8d43d6f9999d38415d9b41f66ab77f7c4f7c94de5d0bc77beeed93d88f487,2024-12-04T13:15:05.910000 @@ -246153,6 +246153,7 @@ CVE-2024-1362,0,0,ebe61894e3dd1fecb8d4711188e9d8f7e6a2ff043508a2ee93131b033a0336 CVE-2024-1363,0,0,d8d6ccccee9c9def4bc84105015213aa12c981523f1a518cfb483c29cffbd734,2024-11-21T08:50:25.093000 CVE-2024-1364,0,0,47f33fd19586ab96196a2cb0337c2030aca42f1bd8c4ab84cfa2e52c3dbe5e59,2024-11-21T08:50:25.223000 CVE-2024-1365,0,0,0f6156fbf2b7d3a217bf5d4ee39b3ca345099663b38e102dcb249b872d4e92ab,2024-11-21T08:50:25.350000 +CVE-2024-13659,1,1,3bad85b2b4f19e010a7bf4a45d7356a00001ab23b97f9cf072e6e1686c91a9b1,2025-01-24T06:15:26.557000 CVE-2024-1366,0,0,41f2af73acb5e76ac7c2022807fff2e016bc9ca7fb30dc8ea18cd52e10cae6bb,2025-01-07T18:21:27.007000 CVE-2024-1367,0,0,3f60d63c26ab9e28e6dceb27e57632b2e7fb2cc7ac1eb4673458558449b3c5c8,2024-11-21T08:50:25.600000 CVE-2024-1368,0,0,e78cd290aff3eda879ea71814281e9fb9dbaef60630fac7d18ff14dae3d223f0,2024-11-21T08:50:25.737000 @@ -246273,7 +246274,7 @@ CVE-2024-1484,0,0,9a32df126759987e5250b83dcafa91beffdf56c507b193272d399891f10765 CVE-2024-1485,0,0,a1102d636093aae5526e62d4563fc2a331d4ec97c0bcd4b7a9835d6f29d54493,2024-11-21T08:50:41.090000 CVE-2024-1486,0,0,94a421c2203bd3bbfc3e3f87675332dfca46e0ee2e1454f84651bf7b647d4382,2024-11-21T08:50:41.247000 CVE-2024-1487,0,0,4bf4dc233cedcf1304e22719e3f6a10f2632e690cb333bf8786ae34bb05e7089,2024-11-21T08:50:41.383000 -CVE-2024-1488,0,0,7ffce3de8a2718c819ca47d7256254eb5db8d93d6ef6c994acfa6b2935472b4c,2025-01-23T17:41:40.350000 +CVE-2024-1488,0,1,05fd1f5b51446658fa063dfafdb885da66cb82f65503a858653fb976e97b16a3,2025-01-24T06:15:26.913000 CVE-2024-1489,0,0,afea3aca1b285be7aec593bac44b1d70889e5ff452f20f2949bf1810002f41ac,2024-11-21T08:50:41.657000 CVE-2024-1491,0,0,f8c906d36296d24716d3f1699c8be966291b4ddbcb9b5f082cca20cf66fb517b,2024-11-21T08:50:41.773000 CVE-2024-1492,0,0,1639bcc1c5a688973fe7c2ddc64c02acd6aaac9cda8a0ad97ec52db83771b7b2,2024-11-21T08:50:41.923000 @@ -277471,7 +277472,7 @@ CVE-2025-0301,0,0,cda9ba0b82510401c2a22912601ff18ed3f9b7d844758d6122fa1a90dc462c CVE-2025-0306,0,0,4d323f73db0781dad08a71cd877278ed734b33cabf11626e82510c57e39603e9,2025-01-09T04:15:13 CVE-2025-0308,0,0,f89e0b2f51bdc31095df6c5f8dd7a032387c24a0f205d06445d4128d7f7c613d,2025-01-18T06:15:27.880000 CVE-2025-0311,0,0,366f4de7a1625931fb622647148fc1b4e4ac9da9319c64a1d46f443dbcb2d417,2025-01-16T21:29:36.977000 -CVE-2025-0314,1,1,80ca5f927f75e0b60dc3f48da0cdffb06a6e0f021c4ff3fd3ad16896077ecbd6,2025-01-24T03:15:07.320000 +CVE-2025-0314,0,0,80ca5f927f75e0b60dc3f48da0cdffb06a6e0f021c4ff3fd3ad16896077ecbd6,2025-01-24T03:15:07.320000 CVE-2025-0318,0,0,18fbca098a2261f52e0f9c17a94d13e877ff02eac8f34202aac0d050b892d79d,2025-01-18T06:15:28.017000 CVE-2025-0328,0,0,983a37850e7593e52c7049d9c87a360510a226adf3c659d5ad2fe111082fc07f,2025-01-09T17:15:17.330000 CVE-2025-0331,0,0,dbc642b98482c7a868d38d7a4b1240421a9e262e76044ff9bb695321876694a4,2025-01-09T17:15:17.933000