Auto-Update: 2024-10-09T14:00:52.103800+00:00

fkie-cad · Oct 9, 2024 · d00a058 · d00a058
1 parent 9e2ff0b
commit d00a058
Show file tree

Hide file tree

Showing 16 changed files with 784 additions and 135 deletions.
diff --git a/CVE-2022/CVE-2022-225xx/CVE-2022-22590.json b/CVE-2022/CVE-2022-225xx/CVE-2022-22590.json
@@ -2,8 +2,8 @@
  "id": "CVE-2022-22590",
  "sourceIdentifier": "[email protected]",
  "published": "2022-03-18T18:15:12.623",
- "lastModified": "2022-09-09T20:43:04.573",
- "vulnStatus": "Undergoing Analysis",
+ "lastModified": "2024-10-09T13:40:58.817",
+ "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
  {
@@ -83,6 +83,12 @@
  "operator": "OR",
  "negate": false,
  "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "15.3",
+ "matchCriteriaId": "556E3C87-7083-4145-8D61-C8F9A1EBC440"
+ },
  {
  "vulnerable": true,
  "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
@@ -102,12 +108,6 @@
  "versionEndExcluding": "12.2",
  "matchCriteriaId": "5BD8A840-1C3E-4D4B-B497-250712283BCC"
  },
- {
- "vulnerable": true,
- "criteria": "cpe:2.3:o:apple:safari:*:*:*:*:*:*:*:*",
- "versionEndExcluding": "15.3",
- "matchCriteriaId": "707C6063-5091-455F-8E41-5035CB4D8CC6"
- },
  {
  "vulnerable": true,
  "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
@@ -123,6 +123,22 @@
  ]
  }
  ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "2.36.7",
+ "matchCriteriaId": "BA0CF181-BD0B-43B5-B5B6-9BB9B9D28BB9"
+ }
+ ]
+ }
+ ]
  }
  ],
  "references": [

diff --git a/CVE-2022/CVE-2022-300xx/CVE-2022-30050.json b/CVE-2022/CVE-2022-300xx/CVE-2022-30050.json
@@ -2,8 +2,8 @@
  "id": "CVE-2022-30050",
  "sourceIdentifier": "[email protected]",
  "published": "2022-05-16T17:15:09.537",
- "lastModified": "2022-05-24T22:23:08.480",
- "vulnStatus": "Undergoing Analysis",
+ "lastModified": "2024-10-09T13:46:28.867",
+ "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
  {
@@ -85,13 +85,13 @@
  "cpeMatch": [
  {
  "vulnerable": true,
- "criteria": "cpe:2.3:a:sir:gnuboard:5.55:*:*:*:*:*:*:*",
- "matchCriteriaId": "3CA1CB2A-84E3-484B-8513-DEFC64A4DD41"
+ "criteria": "cpe:2.3:a:sir:gnuboard:5.5.5:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A0D5F8C5-75C4-4586-AEAB-C1868E9E8463"
  },
  {
  "vulnerable": true,
- "criteria": "cpe:2.3:a:sir:gnuboard:5.56:*:*:*:*:*:*:*",
- "matchCriteriaId": "C1D25BEA-7619-4E7C-B5FC-9EB347765AE5"
+ "criteria": "cpe:2.3:a:sir:gnuboard:5.5.6:*:*:*:*:*:*:*",
+ "matchCriteriaId": "47061CBC-7C39-4483-B940-B44516B5FDB6"
  }
  ]
  }

diff --git a/CVE-2023/CVE-2023-62xx/CVE-2023-6294.json b/CVE-2023/CVE-2023-62xx/CVE-2023-6294.json
@@ -2,8 +2,8 @@
  "id": "CVE-2023-6294",
  "sourceIdentifier": "[email protected]",
  "published": "2024-02-12T16:15:08.167",
- "lastModified": "2024-08-01T18:35:05.917",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2024-10-09T13:24:04.700",
+ "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
  {
@@ -17,6 +17,26 @@
  ],
  "metrics": {
  "cvssMetricV31": [
+ {
+ "source": "[email protected]",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH",
+ "baseScore": 7.2,
+ "baseSeverity": "HIGH"
+ },
+ "exploitabilityScore": 1.2,
+ "impactScore": 5.9
+ },
  {
  "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
  "type": "Secondary",
@@ -40,6 +60,20 @@
  ]
  },
  "weaknesses": [
+ {
+ "source": "[email protected]",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-22"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-918"
+ }
+ ]
+ },
  {
  "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
  "type": "Secondary",
@@ -51,10 +85,32 @@
  ]
  }
  ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:sygnoos:popup_builder:*:*:*:*:*:wordpress:*:*",
+ "versionEndExcluding": "4.2.6",
+ "matchCriteriaId": "94B0DED4-72C8-4177-B7EF-CF8F9CD467E6"
+ }
+ ]
+ }
+ ]
+ }
+ ],
  "references": [
  {
  "url": "https://wpscan.com/vulnerability/eaeb5706-b19c-4266-b7df-889558ee2614/",
- "source": "[email protected]"
+ "source": "[email protected]",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
  }
  ]
 }
diff --git a/CVE-2024/CVE-2024-02xx/CVE-2024-0248.json b/CVE-2024/CVE-2024-02xx/CVE-2024-0248.json
@@ -2,8 +2,8 @@
  "id": "CVE-2024-0248",
  "sourceIdentifier": "[email protected]",
  "published": "2024-02-12T16:15:08.443",
- "lastModified": "2024-02-12T17:31:21.670",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2024-10-09T13:11:10.553",
+ "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
  {
@@ -15,11 +15,68 @@
  "value": "El complemento EazyDocs de WordPress anterior a 2.4.0 reintrodujo CVE-2023-6029 (https://wpscan.com/vulnerability/7a0aaf85-8130-4fd7-8f09-f8edc929597e/) en 2.3.8, lo que permite a cualquier usuario autenticado, como suscriptor para eliminar publicaciones arbitrarias, as\u00ed como agregar y eliminar documentos/secciones. El problema se solucion\u00f3 parcialmente en 2.3.9."
  }
  ],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "[email protected]",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE",
+ "baseScore": 4.3,
+ "baseSeverity": "MEDIUM"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "[email protected]",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:spider-themes:eazydocs:*:*:*:*:*:wordpress:*:*",
+ "versionEndExcluding": "2.4.0",
+ "matchCriteriaId": "E24DCD0E-0D46-49D1-80FE-AEB553CE140F"
+ }
+ ]
+ }
+ ]
+ }
+ ],
  "references": [
  {
  "url": "https://wpscan.com/vulnerability/faf50bc0-64c5-4ccc-a8ac-e73ed44a74df/",
- "source": "[email protected]"
+ "source": "[email protected]",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
  }
  ]
 }
diff --git a/CVE-2024/CVE-2024-02xx/CVE-2024-0250.json b/CVE-2024/CVE-2024-02xx/CVE-2024-0250.json
@@ -2,8 +2,8 @@
  "id": "CVE-2024-0250",
  "sourceIdentifier": "[email protected]",
  "published": "2024-02-12T16:15:08.500",
- "lastModified": "2024-02-12T17:31:21.670",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2024-10-09T13:19:36.667",
+ "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
  {
@@ -15,11 +15,68 @@
  "value": "El complemento Analytics Insights for Google Analytics 4 (AIWP) de WordPress anterior a 6.3 es vulnerable a Open Redirect debido a una validaci\u00f3n insuficiente en el archivo de redireccionamiento oauth2callback.php. Esto hace posible que atacantes no autenticados redirijan a los usuarios a sitios potencialmente maliciosos si logran enga\u00f1arlos para que realicen una acci\u00f3n."
  }
  ],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "[email protected]",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "[email protected]",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-601"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:deconf:analytics_insights:*:*:*:*:*:wordpress:*:*",
+ "versionEndExcluding": "6.3",
+ "matchCriteriaId": "87CD0207-50C9-47B0-8156-247A1B2C9C0B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
  "references": [
  {
  "url": "https://wpscan.com/vulnerability/321b07d1-692f-48e9-a8e5-a15b38efa979/",
- "source": "[email protected]"
+ "source": "[email protected]",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
  }
  ]
 }