Auto-Update: 2025-01-21T23:00:21.354447+00:00

fkie-cad · Jan 21, 2025 · c0ba651 · c0ba651
1 parent c4166b5
commit c0ba651
Show file tree

Hide file tree

Showing 145 changed files with 9,839 additions and 258 deletions.
diff --git a/CVE-2022/CVE-2022-48xx/CVE-2022-4870.json b/CVE-2022/CVE-2022-48xx/CVE-2022-4870.json
@@ -2,7 +2,7 @@
   "id": "CVE-2022-4870",
   "sourceIdentifier": "[email protected]",
   "published": "2023-05-18T00:15:09.103",
-  "lastModified": "2024-11-21T07:36:06.513",
+  "lastModified": "2025-01-21T21:15:08.203",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -32,6 +32,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 1.4
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+          "baseScore": 5.3,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 1.4
       }
     ]
   },
@@ -45,6 +65,16 @@
           "value": "CWE-209"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-209"
+        }
+      ]
     }
   ],
   "configurations": [

diff --git a/CVE-2023/CVE-2023-235xx/CVE-2023-23557.json b/CVE-2023/CVE-2023-235xx/CVE-2023-23557.json
@@ -2,7 +2,7 @@
   "id": "CVE-2023-23557",
   "sourceIdentifier": "[email protected]",
   "published": "2023-05-18T22:15:09.540",
-  "lastModified": "2024-11-21T07:46:24.980",
+  "lastModified": "2025-01-21T22:15:09.520",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -32,6 +32,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -45,6 +65,16 @@
           "value": "CWE-843"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-843"
+        }
+      ]
     }
   ],
   "configurations": [

diff --git a/CVE-2023/CVE-2023-237xx/CVE-2023-23759.json b/CVE-2023/CVE-2023-237xx/CVE-2023-23759.json
@@ -2,7 +2,7 @@
   "id": "CVE-2023-23759",
   "sourceIdentifier": "[email protected]",
   "published": "2023-05-18T22:15:09.597",
-  "lastModified": "2024-11-21T07:46:46.670",
+  "lastModified": "2025-01-21T21:15:08.963",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -32,6 +32,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
       }
     ]
   },
@@ -45,6 +65,16 @@
           "value": "CWE-617"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-617"
+        }
+      ]
     }
   ],
   "configurations": [

diff --git a/CVE-2023/CVE-2023-237xx/CVE-2023-23775.json b/CVE-2023/CVE-2023-237xx/CVE-2023-23775.json
@@ -2,8 +2,8 @@
   "id": "CVE-2023-23775",
   "sourceIdentifier": "[email protected]",
   "published": "2024-06-11T15:15:53.723",
-  "lastModified": "2024-11-21T07:46:48.370",
-  "vulnStatus": "Undergoing Analysis",
+  "lastModified": "2025-01-21T21:56:39.483",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 8.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -51,14 +71,39 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "7.0.0",
+              "versionEndExcluding": "7.2.1",
+              "matchCriteriaId": "C649B619-D676-440E-9329-8467A2DD769E"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://fortiguard.com/psirt/FG-IR-22-448",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Broken Link"
+      ]
     },
     {
       "url": "https://fortiguard.com/psirt/FG-IR-22-448",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Broken Link"
+      ]
     }
   ]
 }
diff --git a/CVE-2023/CVE-2023-248xx/CVE-2023-24832.json b/CVE-2023/CVE-2023-248xx/CVE-2023-24832.json
@@ -2,7 +2,7 @@
   "id": "CVE-2023-24832",
   "sourceIdentifier": "[email protected]",
   "published": "2023-05-18T22:15:09.650",
-  "lastModified": "2024-11-21T07:48:29.167",
+  "lastModified": "2025-01-21T21:15:09.160",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -32,6 +32,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
       }
     ]
   },

diff --git a/CVE-2023/CVE-2023-248xx/CVE-2023-24833.json b/CVE-2023/CVE-2023-248xx/CVE-2023-24833.json
@@ -2,7 +2,7 @@
   "id": "CVE-2023-24833",
   "sourceIdentifier": "[email protected]",
   "published": "2023-05-18T22:15:09.700",
-  "lastModified": "2024-11-21T07:48:29.273",
+  "lastModified": "2025-01-21T21:15:09.350",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -32,6 +32,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
       }
     ]
   },

diff --git a/CVE-2023/CVE-2023-259xx/CVE-2023-25933.json b/CVE-2023/CVE-2023-259xx/CVE-2023-25933.json
@@ -2,7 +2,7 @@
   "id": "CVE-2023-25933",
   "sourceIdentifier": "[email protected]",
   "published": "2023-05-18T22:15:09.750",
-  "lastModified": "2024-11-21T07:50:26.823",
+  "lastModified": "2025-01-21T21:15:09.530",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -32,6 +32,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -45,6 +65,16 @@
           "value": "CWE-843"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-843"
+        }
+      ]
     }
   ],
   "configurations": [

diff --git a/CVE-2023/CVE-2023-271xx/CVE-2023-27112.json b/CVE-2023/CVE-2023-271xx/CVE-2023-27112.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-27112",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T22:15:09.710",
+  "lastModified": "2025-01-21T22:15:09.710",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://github.com/a54552239/pearProjectApi/issues/32",
+      "source": "[email protected]"
+    }
+  ]
+}