4 changes (0 new | 4 updated):

- 0 new CVEs: - 4 updated CVEs: CVE-2023-35925, CVE-2024-31484, CVE-2024-51364, CVE-2024-52951
CVEProject · Nov 27, 2024 · 2b4dd24 · 2b4dd24
1 parent 1afe42b
commit 2b4dd24
Show file tree

Hide file tree

Showing 6 changed files with 195 additions and 440 deletions.
diff --git a/cves/2023/35xxx/CVE-2023-35925.json b/cves/2023/35xxx/CVE-2023-35925.json
@@ -8,7 +8,7 @@
         "assignerShortName": "GitHub_M",
         "dateReserved": "2023-06-20T14:02:45.592Z",
         "datePublished": "2023-06-23T15:07:03.431Z",
-        "dateUpdated": "2024-08-02T16:37:40.084Z"
+        "dateUpdated": "2024-11-27T21:02:52.576Z"
     },
     "containers": {
         "cna": {
@@ -128,6 +128,38 @@
                         "url": "https://github.com/IntellectualSites/FastAsyncWorldEdit/releases/tag/2.6.3"
                     }
                 ]
+            },
+            {
+                "metrics": [
+                    {
+                        "other": {
+                            "type": "ssvc",
+                            "content": {
+                                "timestamp": "2024-11-27T21:02:44.922770Z",
+                                "id": "CVE-2023-35925",
+                                "options": [
+                                    {
+                                        "Exploitation": "poc"
+                                    },
+                                    {
+                                        "Automatable": "no"
+                                    },
+                                    {
+                                        "Technical Impact": "partial"
+                                    }
+                                ],
+                                "role": "CISA Coordinator",
+                                "version": "2.0.3"
+                            }
+                        }
+                    }
+                ],
+                "title": "CISA ADP Vulnrichment",
+                "providerMetadata": {
+                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+                    "shortName": "CISA-ADP",
+                    "dateUpdated": "2024-11-27T21:02:52.576Z"
+                }
             }
         ]
     }

diff --git a/cves/2024/31xxx/CVE-2024-31484.json b/cves/2024/31xxx/CVE-2024-31484.json
@@ -7,7 +7,7 @@
         "assignerShortName": "siemens",
         "dateReserved": "2024-04-04T11:43:06.066Z",
         "datePublished": "2024-05-14T10:02:23.871Z",
-        "dateUpdated": "2024-08-02T01:52:57.126Z"
+        "dateUpdated": "2024-11-27T21:02:39.703Z"
     },
     "containers": {
         "cna": {
@@ -212,11 +212,6 @@
                 }
             },
             {
-                "providerMetadata": {
-                    "orgId": "af854a3a-2127-422b-91ae-364da2661108",
-                    "shortName": "CVE",
-                    "dateUpdated": "2024-08-02T01:52:57.126Z"
-                },
                 "title": "CVE Program Container",
                 "references": [
                     {
@@ -236,8 +231,16 @@
                         "tags": [
                             "x_transferred"
                         ]
+                    },
+                    {
+                        "url": "http://seclists.org/fulldisclosure/2024/Nov/18"
                     }
-                ]
+                ],
+                "providerMetadata": {
+                    "orgId": "af854a3a-2127-422b-91ae-364da2661108",
+                    "shortName": "CVE",
+                    "dateUpdated": "2024-11-27T21:02:39.703Z"
+                }
             }
         ]
     },

diff --git a/cves/2024/51xxx/CVE-2024-51364.json b/cves/2024/51xxx/CVE-2024-51364.json
@@ -5,7 +5,7 @@
         "cveId": "CVE-2024-51364",
         "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
         "assignerShortName": "mitre",
-        "dateUpdated": "2024-11-21T19:36:40.593719",
+        "dateUpdated": "2024-11-27T21:04:13.312Z",
         "dateReserved": "2024-10-28T00:00:00",
         "datePublished": "2024-11-21T00:00:00"
     },
@@ -53,7 +53,87 @@
                     ]
                 }
             ]
-        }
+        },
+        "adp": [
+            {
+                "problemTypes": [
+                    {
+                        "descriptions": [
+                            {
+                                "type": "CWE",
+                                "cweId": "CWE-434",
+                                "lang": "en",
+                                "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"
+                            }
+                        ]
+                    }
+                ],
+                "affected": [
+                    {
+                        "vendor": "gelcon",
+                        "product": "modbusmechanic",
+                        "cpes": [
+                            "cpe:2.3:a:gelcon:modbusmechanic:*:*:*:*:*:*:*:*"
+                        ],
+                        "defaultStatus": "unknown",
+                        "versions": [
+                            {
+                                "version": "0",
+                                "status": "affected",
+                                "lessThanOrEqual": "3.0",
+                                "versionType": "custom"
+                            }
+                        ]
+                    }
+                ],
+                "metrics": [
+                    {
+                        "cvssV3_1": {
+                            "scope": "UNCHANGED",
+                            "version": "3.1",
+                            "baseScore": 8.8,
+                            "attackVector": "NETWORK",
+                            "baseSeverity": "HIGH",
+                            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+                            "integrityImpact": "HIGH",
+                            "userInteraction": "NONE",
+                            "attackComplexity": "LOW",
+                            "availabilityImpact": "HIGH",
+                            "privilegesRequired": "LOW",
+                            "confidentialityImpact": "HIGH"
+                        }
+                    },
+                    {
+                        "other": {
+                            "type": "ssvc",
+                            "content": {
+                                "timestamp": "2024-11-27T21:02:22.248349Z",
+                                "id": "CVE-2024-51364",
+                                "options": [
+                                    {
+                                        "Exploitation": "poc"
+                                    },
+                                    {
+                                        "Automatable": "no"
+                                    },
+                                    {
+                                        "Technical Impact": "total"
+                                    }
+                                ],
+                                "role": "CISA Coordinator",
+                                "version": "2.0.3"
+                            }
+                        }
+                    }
+                ],
+                "title": "CISA ADP Vulnrichment",
+                "providerMetadata": {
+                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+                    "shortName": "CISA-ADP",
+                    "dateUpdated": "2024-11-27T21:04:13.312Z"
+                }
+            }
+        ]
     },
     "dataVersion": "5.1"
 }
diff --git a/cves/2024/52xxx/CVE-2024-52951.json b/cves/2024/52xxx/CVE-2024-52951.json
@@ -5,7 +5,7 @@
         "cveId": "CVE-2024-52951",
         "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
         "assignerShortName": "mitre",
-        "dateUpdated": "2024-11-27T20:06:30.536Z",
+        "dateUpdated": "2024-11-27T21:02:40.713Z",
         "dateReserved": "2024-11-18T00:00:00",
         "datePublished": "2024-11-27T00:00:00"
     },
@@ -135,6 +135,19 @@
                     "shortName": "CISA-ADP",
                     "dateUpdated": "2024-11-27T20:06:30.536Z"
                 }
+            },
+            {
+                "title": "CVE Program Container",
+                "references": [
+                    {
+                        "url": "http://seclists.org/fulldisclosure/2024/Nov/19"
+                    }
+                ],
+                "providerMetadata": {
+                    "orgId": "af854a3a-2127-422b-91ae-364da2661108",
+                    "shortName": "CVE",
+                    "dateUpdated": "2024-11-27T21:02:40.713Z"
+                }
             }
         ]
     },

diff --git a/cves/delta.json b/cves/delta.json
@@ -1,13 +1,31 @@
 {
-  "fetchTime": "2024-11-27T20:59:45.638Z",
-  "numberOfChanges": 1,
+  "fetchTime": "2024-11-27T21:09:53.912Z",
+  "numberOfChanges": 4,
   "new": [],
   "updated": [
     {
-      "cveId": "CVE-2024-10492",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-10492",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/10xxx/CVE-2024-10492.json",
-      "dateUpdated": "2024-11-27T20:52:27.520Z"
+      "cveId": "CVE-2023-35925",
+      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-35925",
+      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35925.json",
+      "dateUpdated": "2024-11-27T21:02:52.576Z"
+    },
+    {
+      "cveId": "CVE-2024-31484",
+      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-31484",
+      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/31xxx/CVE-2024-31484.json",
+      "dateUpdated": "2024-11-27T21:02:39.703Z"
+    },
+    {
+      "cveId": "CVE-2024-51364",
+      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-51364",
+      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/51xxx/CVE-2024-51364.json",
+      "dateUpdated": "2024-11-27T21:04:13.312Z"
+    },
+    {
+      "cveId": "CVE-2024-52951",
+      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-52951",
+      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/52xxx/CVE-2024-52951.json",
+      "dateUpdated": "2024-11-27T21:02:40.713Z"
     }
   ],
   "error": []