Auto-Update: 2024-01-11T21:00:24.605863+00:00

fkie-cad · Jan 11, 2024 · a70c5a4 · a70c5a4
1 parent ede2f09
commit a70c5a4
Show file tree

Hide file tree

Showing 109 changed files with 5,354 additions and 361 deletions.
diff --git a/CVE-2021/CVE-2021-448xx/CVE-2021-44879.json b/CVE-2021/CVE-2021-448xx/CVE-2021-44879.json
@@ -2,7 +2,7 @@
   "id": "CVE-2021-44879",
   "sourceIdentifier": "[email protected]",
   "published": "2022-02-14T12:15:15.697",
-  "lastModified": "2023-11-07T03:39:44.303",
+  "lastModified": "2024-01-11T19:15:08.583",
   "vulnStatus": "Modified",
   "descriptions": [
     {
@@ -120,6 +120,10 @@
         "Vendor Advisory"
       ]
     },
+    {
+      "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html",
+      "source": "[email protected]"
+    },
     {
       "url": "https://lore.kernel.org/linux-f2fs-devel/20211206144421.3735-3-chao%40kernel.org/T/",
       "source": "[email protected]"

diff --git a/CVE-2022/CVE-2022-343xx/CVE-2022-34344.json b/CVE-2022/CVE-2022-343xx/CVE-2022-34344.json
@@ -2,8 +2,8 @@
   "id": "CVE-2022-34344",
   "sourceIdentifier": "[email protected]",
   "published": "2024-01-08T22:15:44.540",
-  "lastModified": "2024-01-09T14:01:44.900",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2024-01-11T20:06:48.290",
+  "vulnStatus": "Analyzed",
   "descriptions": [
     {
       "lang": "en",
@@ -16,6 +16,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH",
+          "baseScore": 8.8,
+          "baseSeverity": "HIGH"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 5.9
+      },
       {
         "source": "[email protected]",
         "type": "Secondary",
@@ -50,10 +70,31 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:rymera:wholesale_suite:*:*:*:*:*:wordpress:*:*",
+              "versionEndIncluding": "2.1.5",
+              "matchCriteriaId": "77798B58-A903-4381-8650-5A3D5C6E05B7"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://patchstack.com/database/vulnerability/woocommerce-wholesale-prices/wordpress-wholesale-suite-plugin-2-1-5-auth-plugin-settings-change-vulnerability?_s_id=cve",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }
diff --git a/CVE-2022/CVE-2022-363xx/CVE-2022-36352.json b/CVE-2022/CVE-2022-363xx/CVE-2022-36352.json
@@ -2,8 +2,8 @@
   "id": "CVE-2022-36352",
   "sourceIdentifier": "[email protected]",
   "published": "2024-01-08T22:15:44.760",
-  "lastModified": "2024-01-09T14:01:44.900",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2024-01-11T20:06:12.277",
+  "vulnStatus": "Analyzed",
   "descriptions": [
     {
       "lang": "en",
@@ -16,6 +16,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH",
+          "baseScore": 8.8,
+          "baseSeverity": "HIGH"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 5.9
+      },
       {
         "source": "[email protected]",
         "type": "Secondary",
@@ -50,10 +70,31 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:metagauss:profilegrid:*:*:*:*:*:wordpress:*:*",
+              "versionEndIncluding": "5.0.3",
+              "matchCriteriaId": "305392CC-8998-43F0-9DFF-E82FB289BB56"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://patchstack.com/database/vulnerability/profilegrid-user-profiles-groups-and-communities/wordpress-profilegrid-plugin-5-0-3-broken-access-control-vulnerability?_s_id=cve",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }
diff --git a/CVE-2022/CVE-2022-406xx/CVE-2022-40696.json b/CVE-2022/CVE-2022-406xx/CVE-2022-40696.json
@@ -2,8 +2,8 @@
   "id": "CVE-2022-40696",
   "sourceIdentifier": "[email protected]",
   "published": "2024-01-08T22:15:44.970",
-  "lastModified": "2024-01-09T14:01:44.900",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2024-01-11T20:05:58.770",
+  "vulnStatus": "Analyzed",
   "descriptions": [
     {
       "lang": "en",
@@ -16,6 +16,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
+      },
       {
         "source": "[email protected]",
         "type": "Secondary",
@@ -40,8 +60,18 @@
   },
   "weaknesses": [
     {
-      "source": "[email protected]",
+      "source": "[email protected]",
       "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "NVD-CWE-noinfo"
+        }
+      ]
+    },
+    {
+      "source": "[email protected]",
+      "type": "Secondary",
       "description": [
         {
           "lang": "en",
@@ -50,10 +80,32 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:advancedcustomfields:advanced_custom_fields:*:*:*:*:*:wordpress:*:*",
+              "versionStartIncluding": "3.1.1",
+              "versionEndIncluding": "6.0.2",
+              "matchCriteriaId": "CE847C43-BE85-418E-BF75-9AD9903CA4A6"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://patchstack.com/database/vulnerability/advanced-custom-fields/wordpress-advanced-custom-fields-plugin-3-1-1-6-0-2-custom-field-value-exposure?_s_id=cve",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }
diff --git a/CVE-2022/CVE-2022-453xx/CVE-2022-45354.json b/CVE-2022/CVE-2022-453xx/CVE-2022-45354.json
@@ -2,8 +2,8 @@
   "id": "CVE-2022-45354",
   "sourceIdentifier": "[email protected]",
   "published": "2024-01-08T21:15:08.260",
-  "lastModified": "2024-01-09T14:01:44.900",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2024-01-11T19:57:20.993",
+  "vulnStatus": "Analyzed",
   "descriptions": [
     {
       "lang": "en",
@@ -16,6 +16,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
+      },
       {
         "source": "[email protected]",
         "type": "Secondary",
@@ -40,8 +60,18 @@
   },
   "weaknesses": [
     {
-      "source": "[email protected]",
+      "source": "[email protected]",
       "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "NVD-CWE-noinfo"
+        }
+      ]
+    },
+    {
+      "source": "[email protected]",
+      "type": "Secondary",
       "description": [
         {
           "lang": "en",
@@ -50,10 +80,31 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:wpchill:download_monitor:*:*:*:*:*:wordpress:*:*",
+              "versionEndIncluding": "4.7.60",
+              "matchCriteriaId": "1B62342C-5140-473C-8B2D-2904607E27E1"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-7-60-sensitive-data-exposure-vulnerability?_s_id=cve",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }
diff --git a/CVE-2023/CVE-2023-05xx/CVE-2023-0590.json b/CVE-2023/CVE-2023-05xx/CVE-2023-0590.json
@@ -2,7 +2,7 @@
   "id": "CVE-2023-0590",
   "sourceIdentifier": "[email protected]",
   "published": "2023-03-23T21:15:19.150",
-  "lastModified": "2023-11-07T04:00:55.317",
+  "lastModified": "2024-01-11T19:15:08.700",
   "vulnStatus": "Modified",
   "descriptions": [
     {
@@ -46,7 +46,7 @@
       ]
     },
     {
-      "source": "53f830b8-0a3f-465b-8143-3b8a9948e749",
+      "source": "[email protected]",
       "type": "Secondary",
       "description": [
         {
@@ -80,6 +80,10 @@
     }
   ],
   "references": [
+    {
+      "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html",
+      "source": "[email protected]"
+    },
     {
       "url": "https://lore.kernel.org/all/20221018203258.2793282-1-edumazet%40google.com/",
       "source": "[email protected]"