Skip to content

Commit bc976c1

Browse files
author
cvelistV5 Github Action
committed
9 changes (1 new | 8 updated):
 - 1 new CVEs: CVE-2024-40110 - 8 updated CVEs: CVE-2024-22155, CVE-2024-2858, CVE-2024-31277, CVE-2024-37082, CVE-2024-39512, CVE-2024-39558, CVE-2024-3418, CVE-2024-3768
1 parent 48cf410 commit bc976c1

11 files changed

Lines changed: 515 additions & 101 deletions

‎cves/2024/22xxx/CVE-2024-22155.json‎

Lines changed: 37 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
{
22
"dataType": "CVE_RECORD",
3-
"dataVersion": "5.0",
3+
"dataVersion": "5.1",
44
"cveMetadata": {
55
"cveId": "CVE-2024-22155",
66
"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
77
"state": "PUBLISHED",
88
"assignerShortName": "Patchstack",
99
"dateReserved": "2024-01-05T11:18:51.829Z",
1010
"datePublished": "2024-04-07T17:56:05.844Z",
11-
"dateUpdated": "2024-04-07T17:56:05.844Z"
11+
"dateUpdated": "2024-07-12T16:19:50.558Z"
1212
},
1313
"containers": {
1414
"cna": {
@@ -126,6 +126,40 @@
126126
"x_generator": {
127127
"engine": "Vulnogram 0.1.0-dev"
128128
}
129-
}
129+
},
130+
"adp": [
131+
{
132+
"metrics": [
133+
{
134+
"other": {
135+
"type": "ssvc",
136+
"content": {
137+
"timestamp": "2024-07-12T16:19:31.454004Z",
138+
"id": "CVE-2024-22155",
139+
"options": [
140+
{
141+
"Exploitation": "none"
142+
},
143+
{
144+
"Automatable": "no"
145+
},
146+
{
147+
"Technical Impact": "partial"
148+
}
149+
],
150+
"role": "CISA Coordinator",
151+
"version": "2.0.3"
152+
}
153+
}
154+
}
155+
],
156+
"title": "CISA ADP Vulnrichment",
157+
"providerMetadata": {
158+
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
159+
"shortName": "CISA-ADP",
160+
"dateUpdated": "2024-07-12T16:19:50.558Z"
161+
}
162+
}
163+
]
130164
}
131165
}

‎cves/2024/2xxx/CVE-2024-2858.json‎

Lines changed: 71 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
{
22
"dataType": "CVE_RECORD",
3-
"dataVersion": "5.0",
3+
"dataVersion": "5.1",
44
"cveMetadata": {
55
"cveId": "CVE-2024-2858",
66
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
77
"state": "PUBLISHED",
88
"assignerShortName": "WPScan",
99
"dateReserved": "2024-03-23T17:40:22.513Z",
1010
"datePublished": "2024-04-15T05:00:06.077Z",
11-
"dateUpdated": "2024-04-15T05:00:06.077Z"
11+
"dateUpdated": "2024-07-12T16:25:49.288Z"
1212
},
1313
"containers": {
1414
"cna": {
@@ -78,6 +78,74 @@
7878
"x_generator": {
7979
"engine": "WPScan CVE Generator"
8080
}
81-
}
81+
},
82+
"adp": [
83+
{
84+
"affected": [
85+
{
86+
"vendor": "wordpress_plugin",
87+
"product": "simple_buttons_creator",
88+
"cpes": [
89+
"cpe:2.3:a:wordpress_plugin:simple_buttons_creator:*:*:*:*:*:*:*:*"
90+
],
91+
"defaultStatus": "unknown",
92+
"versions": [
93+
{
94+
"version": "0",
95+
"status": "affected",
96+
"lessThanOrEqual": "1.04",
97+
"versionType": "semver"
98+
}
99+
]
100+
}
101+
],
102+
"metrics": [
103+
{
104+
"cvssV3_1": {
105+
"scope": "UNCHANGED",
106+
"version": "3.1",
107+
"baseScore": 4.8,
108+
"attackVector": "LOCAL",
109+
"baseSeverity": "MEDIUM",
110+
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
111+
"integrityImpact": "LOW",
112+
"userInteraction": "REQUIRED",
113+
"attackComplexity": "LOW",
114+
"availabilityImpact": "LOW",
115+
"privilegesRequired": "LOW",
116+
"confidentialityImpact": "LOW"
117+
}
118+
},
119+
{
120+
"other": {
121+
"type": "ssvc",
122+
"content": {
123+
"timestamp": "2024-07-12T16:20:43.028402Z",
124+
"id": "CVE-2024-2858",
125+
"options": [
126+
{
127+
"Exploitation": "poc"
128+
},
129+
{
130+
"Automatable": "no"
131+
},
132+
{
133+
"Technical Impact": "partial"
134+
}
135+
],
136+
"role": "CISA Coordinator",
137+
"version": "2.0.3"
138+
}
139+
}
140+
}
141+
],
142+
"title": "CISA ADP Vulnrichment",
143+
"providerMetadata": {
144+
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
145+
"shortName": "CISA-ADP",
146+
"dateUpdated": "2024-07-12T16:25:49.288Z"
147+
}
148+
}
149+
]
82150
}
83151
}

‎cves/2024/31xxx/CVE-2024-31277.json‎

Lines changed: 55 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
{
22
"dataType": "CVE_RECORD",
3-
"dataVersion": "5.0",
3+
"dataVersion": "5.1",
44
"cveMetadata": {
55
"cveId": "CVE-2024-31277",
66
"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
77
"state": "PUBLISHED",
88
"assignerShortName": "Patchstack",
99
"dateReserved": "2024-03-29T16:02:32.141Z",
1010
"datePublished": "2024-04-07T17:24:01.823Z",
11-
"dateUpdated": "2024-04-07T17:24:01.823Z"
11+
"dateUpdated": "2024-07-12T16:18:14.534Z"
1212
},
1313
"containers": {
1414
"cna": {
@@ -126,6 +126,58 @@
126126
"x_generator": {
127127
"engine": "Vulnogram 0.1.0-dev"
128128
}
129-
}
129+
},
130+
"adp": [
131+
{
132+
"affected": [
133+
{
134+
"vendor": "pickplugins",
135+
"product": "product_designer",
136+
"cpes": [
137+
"cpe:2.3:a:pickplugins:product_designer:1.0.3:*:*:*:*:wordpress:*:*"
138+
],
139+
"defaultStatus": "unknown",
140+
"versions": [
141+
{
142+
"version": "0",
143+
"status": "affected",
144+
"lessThanOrEqual": "1.0.32",
145+
"versionType": "custom"
146+
}
147+
]
148+
}
149+
],
150+
"metrics": [
151+
{
152+
"other": {
153+
"type": "ssvc",
154+
"content": {
155+
"timestamp": "2024-07-12T16:14:39.729108Z",
156+
"id": "CVE-2024-31277",
157+
"options": [
158+
{
159+
"Exploitation": "poc"
160+
},
161+
{
162+
"Automatable": "no"
163+
},
164+
{
165+
"Technical Impact": "total"
166+
}
167+
],
168+
"role": "CISA Coordinator",
169+
"version": "2.0.3"
170+
}
171+
}
172+
}
173+
],
174+
"title": "CISA ADP Vulnrichment",
175+
"providerMetadata": {
176+
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
177+
"shortName": "CISA-ADP",
178+
"dateUpdated": "2024-07-12T16:18:14.534Z"
179+
}
180+
}
181+
]
130182
}
131183
}

‎cves/2024/37xxx/CVE-2024-37082.json‎

Lines changed: 27 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
"assignerShortName": "vmware",
99
"dateReserved": "2024-06-03T05:40:17.631Z",
1010
"datePublished": "2024-07-03T06:08:46.299Z",
11-
"dateUpdated": "2024-07-12T15:38:05.256Z"
11+
"dateUpdated": "2024-07-12T16:22:02.363Z"
1212
},
1313
"containers": {
1414
"cna": {
@@ -40,6 +40,31 @@
4040
"value": "When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP requests that bypass mTLS authentication to Cloud Foundry applications. \n\nYou are affected if you have route-services enabled in routing-release and have configured the haproxy-boshrelease property “ha_proxy.forwarded_client_cert” to “forward_only_if_route_service”."
4141
}
4242
],
43+
"metrics": [
44+
{
45+
"cvssV3_1": {
46+
"attackComplexity": "LOW",
47+
"attackVector": "NETWORK",
48+
"availabilityImpact": "NONE",
49+
"baseScore": 9.1,
50+
"baseSeverity": "CRITICAL",
51+
"confidentialityImpact": "HIGH",
52+
"integrityImpact": "HIGH",
53+
"privilegesRequired": "NONE",
54+
"scope": "UNCHANGED",
55+
"userInteraction": "NONE",
56+
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
57+
"version": "3.1"
58+
},
59+
"format": "CVSS",
60+
"scenarios": [
61+
{
62+
"lang": "en",
63+
"value": "GENERAL"
64+
}
65+
]
66+
}
67+
],
4368
"problemTypes": [
4469
{
4570
"descriptions": [
@@ -55,7 +80,7 @@
5580
"providerMetadata": {
5681
"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
5782
"shortName": "vmware",
58-
"dateUpdated": "2024-07-12T15:38:05.256Z"
83+
"dateUpdated": "2024-07-12T16:22:02.363Z"
5984
},
6085
"references": [
6186
{

‎cves/2024/39xxx/CVE-2024-39512.json‎

Lines changed: 60 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
"assignerShortName": "juniper",
99
"dateReserved": "2024-06-25T15:12:53.237Z",
1010
"datePublished": "2024-07-10T23:02:05.458Z",
11-
"dateUpdated": "2024-07-10T23:02:05.458Z"
11+
"dateUpdated": "2024-07-12T16:25:36.401Z"
1212
},
1313
"containers": {
1414
"cna": {
@@ -179,6 +179,64 @@
179179
"x_generator": {
180180
"engine": "Vulnogram 0.1.0-dev"
181181
}
182-
}
182+
},
183+
"adp": [
184+
{
185+
"affected": [
186+
{
187+
"vendor": "juniper",
188+
"product": "junos_evolved",
189+
"cpes": [
190+
"cpe:2.3:o:juniper:junos_evolved:*:*:*:*:*:*:*:*"
191+
],
192+
"defaultStatus": "unknown",
193+
"versions": [
194+
{
195+
"version": "23.2R2-EVO",
196+
"status": "affected",
197+
"lessThan": "23.2R2-S1-EVO",
198+
"versionType": "semver"
199+
},
200+
{
201+
"version": "23.4R1-EVO",
202+
"status": "affected",
203+
"lessThan": "23.4R2-EVO",
204+
"versionType": "semver"
205+
}
206+
]
207+
}
208+
],
209+
"metrics": [
210+
{
211+
"other": {
212+
"type": "ssvc",
213+
"content": {
214+
"timestamp": "2024-07-12T15:12:54.866035Z",
215+
"id": "CVE-2024-39512",
216+
"options": [
217+
{
218+
"Exploitation": "none"
219+
},
220+
{
221+
"Automatable": "no"
222+
},
223+
{
224+
"Technical Impact": "total"
225+
}
226+
],
227+
"role": "CISA Coordinator",
228+
"version": "2.0.3"
229+
}
230+
}
231+
}
232+
],
233+
"title": "CISA ADP Vulnrichment",
234+
"providerMetadata": {
235+
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
236+
"shortName": "CISA-ADP",
237+
"dateUpdated": "2024-07-12T16:25:36.401Z"
238+
}
239+
}
240+
]
183241
}
184242
}

0 commit comments

Comments
 (0)