Auto-Update: 2024-11-25T17:04:15.383492+00:00

fkie-cad · Nov 25, 2024 · 7c617f4 · 7c617f4
1 parent 5d0dee7
commit 7c617f4
Show file tree

Hide file tree

Showing 52 changed files with 2,824 additions and 391 deletions.
diff --git a/CVE-2023/CVE-2023-18xx/CVE-2023-1895.json b/CVE-2023/CVE-2023-18xx/CVE-2023-1895.json
@@ -2,9 +2,8 @@
   "id": "CVE-2023-1895",
   "sourceIdentifier": "[email protected]",
   "published": "2023-06-09T06:15:58.997",
-  "lastModified": "2023-11-07T04:05:18.237",
+  "lastModified": "2024-11-25T16:47:33.943",
   "vulnStatus": "Modified",
-  "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
@@ -14,44 +13,44 @@
   "metrics": {
     "cvssMetricV31": [
       {
-        "source": "[email protected]",
-        "type": "Primary",
+        "source": "[email protected]",
+        "type": "Secondary",
         "cvssData": {
           "version": "3.1",
-          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
+          "baseScore": 8.5,
+          "baseSeverity": "HIGH",
           "attackVector": "NETWORK",
           "attackComplexity": "LOW",
           "privilegesRequired": "LOW",
           "userInteraction": "NONE",
           "scope": "CHANGED",
           "confidentialityImpact": "HIGH",
-          "integrityImpact": "HIGH",
-          "availabilityImpact": "NONE",
-          "baseScore": 9.6,
-          "baseSeverity": "CRITICAL"
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
         },
         "exploitabilityScore": 3.1,
-        "impactScore": 5.8
+        "impactScore": 4.7
       },
       {
-        "source": "[email protected]",
-        "type": "Secondary",
+        "source": "[email protected]",
+        "type": "Primary",
         "cvssData": {
           "version": "3.1",
-          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
+          "baseScore": 9.6,
+          "baseSeverity": "CRITICAL",
           "attackVector": "NETWORK",
           "attackComplexity": "LOW",
           "privilegesRequired": "LOW",
           "userInteraction": "NONE",
           "scope": "CHANGED",
           "confidentialityImpact": "HIGH",
-          "integrityImpact": "LOW",
-          "availabilityImpact": "NONE",
-          "baseScore": 8.5,
-          "baseSeverity": "HIGH"
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "NONE"
         },
         "exploitabilityScore": 3.1,
-        "impactScore": 4.7
+        "impactScore": 5.8
       }
     ]
   },
@@ -64,9 +63,9 @@
           "cpeMatch": [
             {
               "vulnerable": true,
-              "criteria": "cpe:2.3:a:motopress:getwid_-_gutenberg_blocks:*:*:*:*:*:wordpress:*:*",
+              "criteria": "cpe:2.3:a:motopress:getwid:*:*:*:*:*:wordpress:*:*",
               "versionEndIncluding": "1.8.3",
-              "matchCriteriaId": "9B36C972-5CBB-4405-B193-C592A3BDCDA1"
+              "matchCriteriaId": "F49655FF-F97A-44F9-BF00-D0EF8661E0D1"
             }
           ]
         }
@@ -87,6 +86,20 @@
       "tags": [
         "Third Party Advisory"
       ]
+    },
+    {
+      "url": "https://plugins.trac.wordpress.org/browser/getwid/tags/1.8.3/includes/rest-api.php",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Issue Tracking"
+      ]
+    },
+    {
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e9c2a942-c14c-4b59-92a7-6946b2e4731b?source=cve",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }
diff --git a/CVE-2023/CVE-2023-19xx/CVE-2023-1910.json b/CVE-2023/CVE-2023-19xx/CVE-2023-1910.json
@@ -2,9 +2,8 @@
   "id": "CVE-2023-1910",
   "sourceIdentifier": "[email protected]",
   "published": "2023-06-09T06:15:59.433",
-  "lastModified": "2023-11-07T04:05:20.877",
+  "lastModified": "2024-11-25T16:47:33.943",
   "vulnStatus": "Modified",
-  "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
@@ -14,41 +13,41 @@
   "metrics": {
     "cvssMetricV31": [
       {
-        "source": "[email protected]",
-        "type": "Primary",
+        "source": "[email protected]",
+        "type": "Secondary",
         "cvssData": {
           "version": "3.1",
           "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
+          "baseScore": 4.3,
+          "baseSeverity": "MEDIUM",
           "attackVector": "NETWORK",
           "attackComplexity": "LOW",
           "privilegesRequired": "LOW",
           "userInteraction": "NONE",
           "scope": "UNCHANGED",
           "confidentialityImpact": "NONE",
           "integrityImpact": "LOW",
-          "availabilityImpact": "NONE",
-          "baseScore": 4.3,
-          "baseSeverity": "MEDIUM"
+          "availabilityImpact": "NONE"
         },
         "exploitabilityScore": 2.8,
         "impactScore": 1.4
       },
       {
-        "source": "[email protected]",
-        "type": "Secondary",
+        "source": "[email protected]",
+        "type": "Primary",
         "cvssData": {
           "version": "3.1",
           "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
+          "baseScore": 4.3,
+          "baseSeverity": "MEDIUM",
           "attackVector": "NETWORK",
           "attackComplexity": "LOW",
           "privilegesRequired": "LOW",
           "userInteraction": "NONE",
           "scope": "UNCHANGED",
           "confidentialityImpact": "NONE",
           "integrityImpact": "LOW",
-          "availabilityImpact": "NONE",
-          "baseScore": 4.3,
-          "baseSeverity": "MEDIUM"
+          "availabilityImpact": "NONE"
         },
         "exploitabilityScore": 2.8,
         "impactScore": 1.4
@@ -64,9 +63,9 @@
           "cpeMatch": [
             {
               "vulnerable": true,
-              "criteria": "cpe:2.3:a:motopress:getwid_-_gutenberg_blocks:*:*:*:*:*:wordpress:*:*",
+              "criteria": "cpe:2.3:a:motopress:getwid:*:*:*:*:*:wordpress:*:*",
               "versionEndIncluding": "1.8.3",
-              "matchCriteriaId": "9B36C972-5CBB-4405-B193-C592A3BDCDA1"
+              "matchCriteriaId": "F49655FF-F97A-44F9-BF00-D0EF8661E0D1"
             }
           ]
         }
@@ -87,6 +86,20 @@
       "tags": [
         "Third Party Advisory"
       ]
+    },
+    {
+      "url": "https://plugins.trac.wordpress.org/browser/getwid/tags/1.8.3/includes/rest-api.php",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Issue Tracking"
+      ]
+    },
+    {
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6cd64ab0-007b-4778-9d92-06e530638fad?source=cve",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }
diff --git a/CVE-2023/CVE-2023-262xx/CVE-2023-26280.json b/CVE-2023/CVE-2023-262xx/CVE-2023-26280.json
@@ -0,0 +1,55 @@
+{
+  "id": "CVE-2023-26280",
+  "sourceIdentifier": "[email protected]",
+  "published": "2024-11-25T16:15:06.243",
+  "lastModified": "2024-11-25T16:15:06.243",
+  "vulnStatus": "Received",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "IBM Jazz Foundation 7.0.2 and 7.0.3\n\n\u00a0could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control."
+    }
+  ],
+  "metrics": {
+    "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+          "baseScore": 5.3,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 1.4
+      }
+    ]
+  },
+  "weaknesses": [
+    {
+      "source": "[email protected]",
+      "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-266"
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://www.ibm.com/support/pages/node/7176207",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-284xx/CVE-2023-28461.json b/CVE-2023/CVE-2023-284xx/CVE-2023-28461.json
@@ -2,9 +2,8 @@
   "id": "CVE-2023-28461",
   "sourceIdentifier": "[email protected]",
   "published": "2023-03-15T23:15:10.070",
-  "lastModified": "2023-03-24T14:57:23.997",
-  "vulnStatus": "Analyzed",
-  "cveTags": [],
+  "lastModified": "2024-11-25T16:15:07.803",
+  "vulnStatus": "Modified",
   "descriptions": [
     {
       "lang": "en",
@@ -19,16 +18,36 @@
         "cvssData": {
           "version": "3.1",
           "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
           "attackVector": "NETWORK",
           "attackComplexity": "LOW",
           "privilegesRequired": "NONE",
           "userInteraction": "NONE",
           "scope": "UNCHANGED",
           "confidentialityImpact": "HIGH",
           "integrityImpact": "HIGH",
-          "availabilityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
           "baseScore": 9.8,
-          "baseSeverity": "CRITICAL"
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
@@ -45,6 +64,16 @@
           "value": "CWE-287"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-862"
+        }
+      ]
     }
   ],
   "configurations": [
@@ -145,6 +174,14 @@
         "Mitigation",
         "Vendor Advisory"
       ]
+    },
+    {
+      "url": "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Mitigation",
+        "Vendor Advisory"
+      ]
     }
   ]
 }