diff --git a/CVE-2024/CVE-2024-19xx/CVE-2024-1957.json b/CVE-2024/CVE-2024-19xx/CVE-2024-1957.json new file mode 100644 index 00000000000..fd0ba056d19 --- /dev/null +++ b/CVE-2024/CVE-2024-19xx/CVE-2024-1957.json @@ -0,0 +1,47 @@ +{ + "id": "CVE-2024-1957", + "sourceIdentifier": "security@wordfence.com", + "published": "2024-04-13T02:15:06.593", + "lastModified": "2024-04-13T02:15:06.593", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'give_form' shortcode in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseScore": 6.4, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "references": [ + { + "url": "https://plugins.trac.wordpress.org/changeset/3068610/give/tags/3.7.0/includes/shortcodes.php", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/61901d83-0d05-4be8-a318-43bea086293a?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-268xx/CVE-2024-26811.json b/CVE-2024/CVE-2024-268xx/CVE-2024-26811.json index 373d86547ed..ef1fd3a532a 100644 --- a/CVE-2024/CVE-2024-268xx/CVE-2024-26811.json +++ b/CVE-2024/CVE-2024-268xx/CVE-2024-26811.json @@ -2,7 +2,7 @@ "id": "CVE-2024-26811", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-08T10:15:08.540", - "lastModified": "2024-04-10T15:16:04.640", + "lastModified": "2024-04-13T02:15:06.780", "vulnStatus": "Awaiting Analysis", "descriptions": [ { @@ -31,6 +31,10 @@ { "url": "https://git.kernel.org/stable/c/a677ebd8ca2f2632ccdecbad7b87641274e15aac", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RO3RO34MLQ6WT3A7O6STQUVXW43N6W3K/", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-30xx/CVE-2024-3027.json b/CVE-2024/CVE-2024-30xx/CVE-2024-3027.json new file mode 100644 index 00000000000..d5142e5f06b --- /dev/null +++ b/CVE-2024/CVE-2024-30xx/CVE-2024-3027.json @@ -0,0 +1,47 @@ +{ + "id": "CVE-2024-3027", + "sourceIdentifier": "security@wordfence.com", + "published": "2024-04-13T02:15:06.860", + "lastModified": "2024-04-13T02:15:06.860", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the upload function in all versions up to, and including, 3.5.1.22. This makes it possible for authenticated attackers, with contributor-level access and above, to upload files, including SVG files, which can be used to conduct stored cross-site scripting attacks." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseScore": 6.4, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "references": [ + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3069057%40smart-slider-3&old=2996377%40smart-slider-3&sfp_email=&sfph_mail=", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/915f464f-449d-4ad2-9f43-6ce5d93ccb05?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index ca14182c04e..c1c5544a8d8 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2024-04-13T02:00:38.182295+00:00 +2024-04-13T04:00:37.989239+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2024-04-13T01:00:01.407000+00:00 +2024-04-13T02:15:06.860000+00:00 ``` ### Last Data Feed Release @@ -33,20 +33,22 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -245400 +245402 ``` ### CVEs added in the last Commit -Recently added CVEs: `0` +Recently added CVEs: `2` +- [CVE-2024-1957](CVE-2024/CVE-2024-19xx/CVE-2024-1957.json) (`2024-04-13T02:15:06.593`) +- [CVE-2024-3027](CVE-2024/CVE-2024-30xx/CVE-2024-3027.json) (`2024-04-13T02:15:06.860`) ### CVEs modified in the last Commit Recently modified CVEs: `1` -- [CVE-2024-3400](CVE-2024/CVE-2024-34xx/CVE-2024-3400.json) (`2024-04-13T01:00:01.407`) +- [CVE-2024-26811](CVE-2024/CVE-2024-268xx/CVE-2024-26811.json) (`2024-04-13T02:15:06.780`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 812403fff55..674e4d40c76 100644 --- a/_state.csv +++ b/_state.csv @@ -239694,6 +239694,7 @@ CVE-2024-1952,0,0,4f51a0a2619e0b7d7585d4f5094fabc08d8671ca4cd7813916ceff95c94fce CVE-2024-1953,0,0,953ea70933b18c1b5068610a47d8a866bc2c7077f3ab729f06b51449c0c4e529,2024-02-29T13:49:29.390000 CVE-2024-1954,0,0,7fadc688eebc9f9d8a117615a238e699db3daf8bc72b3b9023cf31ebedfa45c8,2024-02-28T14:06:45.783000 CVE-2024-1956,0,0,5d6f6903c59c264faff18a7d730514ef8c8f257378e253aea7524c9395e9f82e,2024-04-08T18:48:40.217000 +CVE-2024-1957,1,1,374e26fd5ef5c7f4d127290cf43f59d975dd627c1635927490965197747f47aa,2024-04-13T02:15:06.593000 CVE-2024-1958,0,0,37958071a5e3626b0202aace46631ba6fa86579be41bc6a7a46ba3505e19759c,2024-04-08T18:48:40.217000 CVE-2024-1960,0,0,c86a049feb90aee5a9d0b328d538593c01d3ceb4e322c67edb3077bc0b513c5d,2024-04-10T13:23:38.787000 CVE-2024-1962,0,0,8c71ccd644902c0f670c27728543c4472e05aeb359cd7fb7b0615991cb743fd6,2024-03-25T13:47:14.087000 @@ -243160,7 +243161,7 @@ CVE-2024-26808,0,0,4f31bc304a07232a3baf91061957b820ea1892642e797b2566eb9414b09af CVE-2024-26809,0,0,9fe73261a4fc78e6c4eacdd5a51592c430457963a39614d59847053f3066f6fb,2024-04-04T12:48:22.650000 CVE-2024-2681,0,0,cb05086c2c8d183d14408cf45e04435cc7af702ab8c219dc1bd4df4ce50beae6,2024-04-11T01:25:32.153000 CVE-2024-26810,0,0,8258d06b87c2ee0865663681013faa6f86b788a0534c70735d33ebe3382a5082,2024-04-10T15:16:04.580000 -CVE-2024-26811,0,0,bc1175976b5c3050e71cec6e947ee7fdcff2d063130538e3c64bb71d06a76c19,2024-04-10T15:16:04.640000 +CVE-2024-26811,0,1,de5d9b39eb0d791203be1211b49fd1459b264616489e5a09ac1ce8a204f3fb0c,2024-04-13T02:15:06.780000 CVE-2024-26812,0,0,a664584a1298bea5471d70ccbf705e6ceec4d310a83d2767afd1b5c2c1bf40b8,2024-04-10T15:16:04.683000 CVE-2024-26813,0,0,4c4f638ce8eee2493d635f8fa9fa2dcfa78bcffda2b95c03bd9897a64272ebf6,2024-04-10T15:16:04.730000 CVE-2024-26814,0,0,be227a06b909e3857d6aa06ff8430a4cb98fc8ed8c299e693a9519701c6ff75a,2024-04-10T15:16:04.777000 @@ -244550,6 +244551,7 @@ CVE-2024-30264,0,0,a36afcbf82744a440a1fca3c8df613ac17f10025eaa77ba35cbe326ee3634 CVE-2024-30265,0,0,8b7bd77316a7922f3fb99eedf42325c9dfd214ba3a070dae26dd8c71a6913b9c,2024-04-04T12:48:41.700000 CVE-2024-30266,0,0,e3c467c9914201aad848d0a5b4b17739ce57c9b602514a7cf905d903659d55fa,2024-04-04T16:33:06.610000 CVE-2024-30269,0,0,08dc53837ae3c49db915ca6fbf68dbca18e8552aca089682c64e540b3e2addf0,2024-04-08T18:48:40.217000 +CVE-2024-3027,1,1,9eadd140bfa232490291001160e1fd6b5fec9887d94ba5f220c2713059b562ff,2024-04-13T02:15:06.860000 CVE-2024-30270,0,0,1d63c3afc5f402042a52c95204320e8698a660fcf024b4b1cd2dbe82419521bf,2024-04-05T12:40:52.763000 CVE-2024-30271,0,0,7934d49c76a773104fea3a055c8dca49939c18c3dc4eab227ecf5b491d16669d,2024-04-12T12:44:04.930000 CVE-2024-30272,0,0,fe18d25a398b5738660bb343d4a7fb499e0a8c129d952f35b1144eb8f7e44fa0,2024-04-12T12:44:04.930000 @@ -245300,7 +245302,7 @@ CVE-2024-3385,0,0,dafd55987e5738b5d6ec37d523526a7e0269d60d96cd780933abafbc800645 CVE-2024-3386,0,0,d08d523d066834a85bfe06023f05a033d8631a6197479f66bfb86438af143c6d,2024-04-10T19:49:51.183000 CVE-2024-3387,0,0,59a783d7f5a632f1312dc02ccd745e7c758f93e478c4554a0dbc9aba27d256c0,2024-04-10T19:49:51.183000 CVE-2024-3388,0,0,9a13547aa29d2171bfe252870fb3dde44261a463a11a31d9062dc130e0f3c4f3,2024-04-10T19:49:51.183000 -CVE-2024-3400,0,1,f05f675d530dcecc2483b3a39974a75127b0e65a5a071e269c21f968cf7cc0dc,2024-04-13T01:00:01.407000 +CVE-2024-3400,0,0,f05f675d530dcecc2483b3a39974a75127b0e65a5a071e269c21f968cf7cc0dc,2024-04-13T01:00:01.407000 CVE-2024-3413,0,0,7c0263f5aa26015f580f259b17ac76e3fb232807ce6eb6b3e0fa4a42d34def58,2024-04-11T01:26:00.727000 CVE-2024-3414,0,0,fcf8b2012e3dcab7048965e9d40e8c26f25a86217cc70e6c24a2ae712b119943,2024-04-11T01:26:00.803000 CVE-2024-3415,0,0,80d83d8ba89e3620cb20eb7a8b2b10e1c5fbd8b76c068e7c00b4af6deadd81dd,2024-04-11T01:26:00.900000