admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-07-11 16:13:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-11-14T07:00:17.817725+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2023-11-14 07:00:21 +00:00
parent 22ceeb60b7
commit d54105cc38
10 changed files with 198 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
CVE-2023/CVE-2023-423xx/CVE-2023-42326.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-42326",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-11-14T05:15:08.587",
"lastModified": "2023-11-14T05:15:08.587",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components."
}
],
"metrics": {},
"references": [
{
"url": "https://docs.netgate.com/downloads/pfSense-SA-23_10.webgui.asc",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-439xx/CVE-2023-43900.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-43900",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-11-14T05:15:08.700",
"lastModified": "2023-11-14T05:15:08.700",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters."
}
],
"metrics": {},
"references": [
{
"url": "https://secpro.llc/emsigner-cve-3/",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-439xx/CVE-2023-43901.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-43901",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-11-14T05:15:08.767",
"lastModified": "2023-11-14T05:15:08.767",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user."
}
],
"metrics": {},
"references": [
{
"url": "https://secpro.llc/EMSigner-CVE-1/",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-439xx/CVE-2023-43902.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-43902",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-11-14T05:15:08.833",
"lastModified": "2023-11-14T05:15:08.833",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Incorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token."
}
],
"metrics": {},
"references": [
{
"url": "https://secpro.llc/emsigner-cve-2/",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-458xx/CVE-2023-45878.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-45878",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-11-14T06:15:29.040",
"lastModified": "2023-11-14T06:15:29.040",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set, the defined path is used as the destination folder, concatenated with the absolute path of the installation directory. The content of the img parameter is base64 decoded and written to the defined file path. This allows creation of PHP files that permit Remote Code Execution (unauthenticated)."
}
],
"metrics": {},
"references": [
{
"url": "https://herolab.usd.de/security-advisories/usd-2023-0025/",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-458xx/CVE-2023-45879.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-45879",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-11-14T06:15:29.150",
"lastModified": "2023-11-14T06:15:29.150",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component."
}
],
"metrics": {},
"references": [
{
"url": "https://herolab.usd.de/security-advisories/usd-2023-0019/",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-458xx/CVE-2023-45880.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-45880",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-11-14T06:15:29.203",
"lastModified": "2023-11-14T06:15:29.203",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension). This allows creation of PHP files outside of the uploads directory, directly in the webroot."
}
],
"metrics": {},
"references": [
{
"url": "https://herolab.usd.de/security-advisories/usd-2023-0022/",
"source": "cve@mitre.org"
}
]
}

20
CVE-2023/CVE-2023-458xx/CVE-2023-45881.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-45881",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-11-14T06:15:29.257",
"lastModified": "2023-11-14T06:15:29.257",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response."
}
],
"metrics": {},
"references": [
{
"url": "https://herolab.usd.de/security-advisories/usd-2023-0024/",
"source": "cve@mitre.org"
}
]
}

24
CVE-2023/CVE-2023-476xx/CVE-2023-47609.json Normal file
View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-47609",
"sourceIdentifier": "vultures@jpcert.or.jp",
"published": "2023-11-14T06:15:29.310",
"lastModified": "2023-11-14T06:15:29.310",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request."
}
],
"metrics": {},
"references": [
{
"url": "https://jvn.jp/en/jp/JVN67822421/",
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://oss-calendar.com/news/20231113/",
"source": "vultures@jpcert.or.jp"
}
]
}

52
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-11-14T05:00:17.701463+00:00
2023-11-14T07:00:17.817725+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-11-14T04:15:07.850000+00:00
2023-11-14T06:15:29.310000+00:00
```
### Last Data Feed Release
@ -29,52 +29,28 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
230494
230503
```
### CVEs added in the last Commit
Recently added CVEs: `8`
Recently added CVEs: `9`
* [CVE-2023-45558](CVE-2023/CVE-2023-455xx/CVE-2023-45558.json) (`2023-11-14T03:15:09.210`)
* [CVE-2023-45560](CVE-2023/CVE-2023-455xx/CVE-2023-45560.json) (`2023-11-14T03:15:09.263`)
* [CVE-2023-46445](CVE-2023/CVE-2023-464xx/CVE-2023-46445.json) (`2023-11-14T03:15:09.470`)
* [CVE-2023-46446](CVE-2023/CVE-2023-464xx/CVE-2023-46446.json) (`2023-11-14T03:15:09.573`)
* [CVE-2023-31754](CVE-2023/CVE-2023-317xx/CVE-2023-31754.json) (`2023-11-14T04:15:07.697`)
* [CVE-2023-42325](CVE-2023/CVE-2023-423xx/CVE-2023-42325.json) (`2023-11-14T04:15:07.753`)
* [CVE-2023-42327](CVE-2023/CVE-2023-423xx/CVE-2023-42327.json) (`2023-11-14T04:15:07.800`)
* [CVE-2023-6006](CVE-2023/CVE-2023-60xx/CVE-2023-6006.json) (`2023-11-14T04:15:07.850`)
* [CVE-2023-42326](CVE-2023/CVE-2023-423xx/CVE-2023-42326.json) (`2023-11-14T05:15:08.587`)
* [CVE-2023-43900](CVE-2023/CVE-2023-439xx/CVE-2023-43900.json) (`2023-11-14T05:15:08.700`)
* [CVE-2023-43901](CVE-2023/CVE-2023-439xx/CVE-2023-43901.json) (`2023-11-14T05:15:08.767`)
* [CVE-2023-43902](CVE-2023/CVE-2023-439xx/CVE-2023-43902.json) (`2023-11-14T05:15:08.833`)
* [CVE-2023-45878](CVE-2023/CVE-2023-458xx/CVE-2023-45878.json) (`2023-11-14T06:15:29.040`)
* [CVE-2023-45879](CVE-2023/CVE-2023-458xx/CVE-2023-45879.json) (`2023-11-14T06:15:29.150`)
* [CVE-2023-45880](CVE-2023/CVE-2023-458xx/CVE-2023-45880.json) (`2023-11-14T06:15:29.203`)
* [CVE-2023-45881](CVE-2023/CVE-2023-458xx/CVE-2023-45881.json) (`2023-11-14T06:15:29.257`)
* [CVE-2023-47609](CVE-2023/CVE-2023-476xx/CVE-2023-47609.json) (`2023-11-14T06:15:29.310`)
### CVEs modified in the last Commit
Recently modified CVEs: `43`
Recently modified CVEs: `0`
* [CVE-2023-4259](CVE-2023/CVE-2023-42xx/CVE-2023-4259.json) (`2023-11-14T03:15:09.983`)
* [CVE-2023-4260](CVE-2023/CVE-2023-42xx/CVE-2023-4260.json) (`2023-11-14T03:15:10.120`)
* [CVE-2023-4262](CVE-2023/CVE-2023-42xx/CVE-2023-4262.json) (`2023-11-14T03:15:10.237`)
* [CVE-2023-4263](CVE-2023/CVE-2023-42xx/CVE-2023-4263.json) (`2023-11-14T03:15:10.343`)
* [CVE-2023-4264](CVE-2023/CVE-2023-42xx/CVE-2023-4264.json) (`2023-11-14T03:15:10.447`)
* [CVE-2023-4265](CVE-2023/CVE-2023-42xx/CVE-2023-4265.json) (`2023-11-14T03:15:10.553`)
* [CVE-2023-4322](CVE-2023/CVE-2023-43xx/CVE-2023-4322.json) (`2023-11-14T03:15:10.667`)
* [CVE-2023-5139](CVE-2023/CVE-2023-51xx/CVE-2023-5139.json) (`2023-11-14T03:15:10.780`)
* [CVE-2023-5184](CVE-2023/CVE-2023-51xx/CVE-2023-5184.json) (`2023-11-14T03:15:10.893`)
* [CVE-2023-5480](CVE-2023/CVE-2023-54xx/CVE-2023-5480.json) (`2023-11-14T03:15:11.000`)
* [CVE-2023-5482](CVE-2023/CVE-2023-54xx/CVE-2023-5482.json) (`2023-11-14T03:15:11.093`)
* [CVE-2023-5686](CVE-2023/CVE-2023-56xx/CVE-2023-5686.json) (`2023-11-14T03:15:11.160`)
* [CVE-2023-5753](CVE-2023/CVE-2023-57xx/CVE-2023-5753.json) (`2023-11-14T03:15:11.257`)
* [CVE-2023-5849](CVE-2023/CVE-2023-58xx/CVE-2023-5849.json) (`2023-11-14T03:15:11.357`)
* [CVE-2023-5850](CVE-2023/CVE-2023-58xx/CVE-2023-5850.json) (`2023-11-14T03:15:11.433`)
* [CVE-2023-5851](CVE-2023/CVE-2023-58xx/CVE-2023-5851.json) (`2023-11-14T03:15:11.493`)
* [CVE-2023-5852](CVE-2023/CVE-2023-58xx/CVE-2023-5852.json) (`2023-11-14T03:15:11.560`)
* [CVE-2023-5853](CVE-2023/CVE-2023-58xx/CVE-2023-5853.json) (`2023-11-14T03:15:11.630`)
* [CVE-2023-5854](CVE-2023/CVE-2023-58xx/CVE-2023-5854.json) (`2023-11-14T03:15:11.693`)
* [CVE-2023-5855](CVE-2023/CVE-2023-58xx/CVE-2023-5855.json) (`2023-11-14T03:15:11.833`)
* [CVE-2023-5856](CVE-2023/CVE-2023-58xx/CVE-2023-5856.json) (`2023-11-14T03:15:11.907`)
* [CVE-2023-5857](CVE-2023/CVE-2023-58xx/CVE-2023-5857.json) (`2023-11-14T03:15:11.987`)
* [CVE-2023-5858](CVE-2023/CVE-2023-58xx/CVE-2023-5858.json) (`2023-11-14T03:15:12.060`)
* [CVE-2023-5859](CVE-2023/CVE-2023-58xx/CVE-2023-5859.json) (`2023-11-14T03:15:12.153`)
* [CVE-2023-5996](CVE-2023/CVE-2023-59xx/CVE-2023-5996.json) (`2023-11-14T03:15:12.240`)
## Download and Usage