generated content from 2024-02-11

dod-cyber-crime-center · Feb 11, 2024 · 3a77501 · 3a77501
1 parent 070113e
commit 3a77501
Show file tree

Hide file tree

Showing 31 changed files with 690 additions and 0 deletions.
diff --git a/mapping.csv b/mapping.csv
@@ -225001,3 +225001,33 @@ vulnerability,CVE-2023-45187,vulnerability--286b40e2-537b-4bc4-9d5c-492a4fb6f53a
 vulnerability,CVE-2023-45191,vulnerability--a24a65b2-b6a3-4888-aabb-354516982e48
 vulnerability,CVE-2023-45716,vulnerability--2462d4f0-0f86-48fe-8f23-48707b672faa
 vulnerability,CVE-2023-43609,vulnerability--d980ce6a-0440-4d09-9f5c-620c4416ce85
+vulnerability,CVE-2024-21490,vulnerability--b2cd49fd-309c-4300-a833-62227a5eafc4
+vulnerability,CVE-2024-1405,vulnerability--ce8062a1-d1f4-4255-9d90-8d0d77bc08e8
+vulnerability,CVE-2024-1406,vulnerability--86e92c26-076b-44a9-88ab-5cddf51d6156
+vulnerability,CVE-2024-0594,vulnerability--dd4af632-975f-4f0e-8cdd-017f4e7ee406
+vulnerability,CVE-2024-0596,vulnerability--d1e17223-a118-4ffb-97ff-a8579403d63f
+vulnerability,CVE-2024-0595,vulnerability--ee334560-571a-4be2-b323-5ef540b9c060
+vulnerability,CVE-2024-24717,vulnerability--46b74e92-22a5-4d1b-99b7-4de38a6f2e1d
+vulnerability,CVE-2024-24801,vulnerability--956e41ae-e61e-4d82-9980-f0c74a494e70
+vulnerability,CVE-2024-24803,vulnerability--d462fa8d-852b-495a-9103-ebd9e96d4ff2
+vulnerability,CVE-2024-24831,vulnerability--e0849055-710c-48a6-b085-7a9537007426
+vulnerability,CVE-2024-24713,vulnerability--33622ba2-f0b7-4658-a57f-6cd3c6b0117c
+vulnerability,CVE-2024-24712,vulnerability--261ce11b-ee69-45cc-b40f-c8bfeb06d876
+vulnerability,CVE-2024-24804,vulnerability--d9f3ac99-ddd8-4851-8df5-c5a412d29527
+vulnerability,CVE-2024-23516,vulnerability--20df50f4-b350-4462-bb7c-f5c217781bc1
+vulnerability,CVE-2024-23517,vulnerability--ae3686e8-4edd-43b3-9668-ecdb3561f8ad
+vulnerability,CVE-2024-23514,vulnerability--9c6a67b7-0cd1-410b-8117-638898f1e1eb
+vulnerability,CVE-2024-22312,vulnerability--6acc320d-ed03-4221-9959-9570e4a2fa08
+vulnerability,CVE-2024-22361,vulnerability--919314d6-41d0-4df4-be88-89cc73096717
+vulnerability,CVE-2024-22313,vulnerability--96a37c6b-05e2-4b19-bb43-4a3a1c18096a
+vulnerability,CVE-2023-50957,vulnerability--ae3198dd-d25f-4827-9401-1e758a27ab56
+vulnerability,CVE-2023-51404,vulnerability--29164dd6-227a-4d32-bddc-e3bcea11421a
+vulnerability,CVE-2023-51485,vulnerability--5f31cf20-f89a-45a1-b49c-69cab852e168
+vulnerability,CVE-2023-51480,vulnerability--b08a7120-e6a2-48db-ba4f-d4711513da5e
+vulnerability,CVE-2023-51415,vulnerability--3f43808a-4974-40b3-b2b3-e87306dbbfdc
+vulnerability,CVE-2023-51488,vulnerability--34b59527-3f5f-4e8b-99f3-a4bfcbd1bdfc
+vulnerability,CVE-2023-51492,vulnerability--1a01a5b8-0323-459e-8ab0-428f78d1486a
+vulnerability,CVE-2023-51493,vulnerability--8d99e425-67c4-4e7a-9297-5ba9b71a8a57
+vulnerability,CVE-2023-45696,vulnerability--bd3a54c6-fadd-4d88-aa94-19589a111a47
+vulnerability,CVE-2023-45698,vulnerability--bad52233-8f97-43dd-a82a-1a3b2bcd2a78
+vulnerability,CVE-2023-28077,vulnerability--d326c604-886d-408f-8cb8-031c4081ef38
diff --git a/objects/vulnerability/vulnerability--1a01a5b8-0323-459e-8ab0-428f78d1486a.json b/objects/vulnerability/vulnerability--1a01a5b8-0323-459e-8ab0-428f78d1486a.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--6c2ddf14-91fe-4fba-951f-f15b1bf888cd",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--1a01a5b8-0323-459e-8ab0-428f78d1486a",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:11.466101Z",
+            "modified": "2024-02-11T00:30:11.466101Z",
+            "name": "CVE-2023-51492",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6.3.1.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-51492"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--20df50f4-b350-4462-bb7c-f5c217781bc1.json b/objects/vulnerability/vulnerability--20df50f4-b350-4462-bb7c-f5c217781bc1.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--d70014cf-77eb-46eb-aa28-597e490eef9d",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--20df50f4-b350-4462-bb7c-f5c217781bc1",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:07.529397Z",
+            "modified": "2024-02-11T00:30:07.529397Z",
+            "name": "CVE-2024-23516",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Calculators World CC BMI Calculator allows Stored XSS.This issue affects CC BMI Calculator: from n/a through 2.0.1.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-23516"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--261ce11b-ee69-45cc-b40f-c8bfeb06d876.json b/objects/vulnerability/vulnerability--261ce11b-ee69-45cc-b40f-c8bfeb06d876.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--d3fcc65c-ed8b-4255-8298-dcd6fb933b2a",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--261ce11b-ee69-45cc-b40f-c8bfeb06d876",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:07.495345Z",
+            "modified": "2024-02-11T00:30:07.495345Z",
+            "name": "CVE-2024-24712",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Heateor Social Login WordPress allows Stored XSS.This issue affects Heateor Social Login WordPress: from n/a through 1.1.30.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-24712"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--29164dd6-227a-4d32-bddc-e3bcea11421a.json b/objects/vulnerability/vulnerability--29164dd6-227a-4d32-bddc-e3bcea11421a.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--66fc9246-d79f-4f91-8978-7522f66e4f7b",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--29164dd6-227a-4d32-bddc-e3bcea11421a",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:11.425732Z",
+            "modified": "2024-02-11T00:30:11.425732Z",
+            "name": "CVE-2023-51404",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyAgilePrivacy My Agile Privacy – The only GDPR solution for WordPress that you can truly trust allows Stored XSS.This issue affects My Agile Privacy – The only GDPR solution for WordPress that you can truly trust: from n/a through 2.1.7.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-51404"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--33622ba2-f0b7-4658-a57f-6cd3c6b0117c.json b/objects/vulnerability/vulnerability--33622ba2-f0b7-4658-a57f-6cd3c6b0117c.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--5705430b-d412-47ed-bbf8-9a8f2ecacd14",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--33622ba2-f0b7-4658-a57f-6cd3c6b0117c",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:07.491683Z",
+            "modified": "2024-02-11T00:30:07.491683Z",
+            "name": "CVE-2024-24713",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Auto Listings Auto Listings – Car Listings & Car Dealership Plugin for WordPress allows Stored XSS.This issue affects Auto Listings – Car Listings & Car Dealership Plugin for WordPress: from n/a through 2.6.5.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-24713"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--34b59527-3f5f-4e8b-99f3-a4bfcbd1bdfc.json b/objects/vulnerability/vulnerability--34b59527-3f5f-4e8b-99f3-a4bfcbd1bdfc.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--fd3ad723-fa43-4c4b-9fe0-31c1f63ca265",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--34b59527-3f5f-4e8b-99f3-a4bfcbd1bdfc",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:11.462784Z",
+            "modified": "2024-02-11T00:30:11.462784Z",
+            "name": "CVE-2023-51488",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more allows Reflected XSS.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through 3.0.11.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-51488"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--3f43808a-4974-40b3-b2b3-e87306dbbfdc.json b/objects/vulnerability/vulnerability--3f43808a-4974-40b3-b2b3-e87306dbbfdc.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--8a0f0c05-d316-4158-9992-9321e94a7df8",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--3f43808a-4974-40b3-b2b3-e87306dbbfdc",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:11.461039Z",
+            "modified": "2024-02-11T00:30:11.461039Z",
+            "name": "CVE-2023-51415",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform allows Stored XSS.This issue affects GiveWP – Donation Plugin and Fundraising Platform: from n/a through 3.2.2.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-51415"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--46b74e92-22a5-4d1b-99b7-4de38a6f2e1d.json b/objects/vulnerability/vulnerability--46b74e92-22a5-4d1b-99b7-4de38a6f2e1d.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--2876db40-8dee-4fa6-b798-30bca235205d",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--46b74e92-22a5-4d1b-99b7-4de38a6f2e1d",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:07.464894Z",
+            "modified": "2024-02-11T00:30:07.464894Z",
+            "name": "CVE-2024-24717",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.23.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-24717"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--5f31cf20-f89a-45a1-b49c-69cab852e168.json b/objects/vulnerability/vulnerability--5f31cf20-f89a-45a1-b49c-69cab852e168.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--41ecab07-eb50-4ea7-8e7c-6520a3a553bd",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--5f31cf20-f89a-45a1-b49c-69cab852e168",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:11.450983Z",
+            "modified": "2024-02-11T00:30:11.450983Z",
+            "name": "CVE-2023-51485",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Hosting Pay with Vipps and MobilePay for WooCommerce allows Stored XSS.This issue affects Pay with Vipps and MobilePay for WooCommerce: from n/a through 1.14.13.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-51485"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--6acc320d-ed03-4221-9959-9570e4a2fa08.json b/objects/vulnerability/vulnerability--6acc320d-ed03-4221-9959-9570e4a2fa08.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--555b98ea-5210-48ca-9e41-f2d9aa487c11",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--6acc320d-ed03-4221-9959-9570e4a2fa08",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:07.569446Z",
+            "modified": "2024-02-11T00:30:07.569446Z",
+            "name": "CVE-2024-22312",
+            "description": "IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local user.  IBM X-Force ID:  278748.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-22312"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--86e92c26-076b-44a9-88ab-5cddf51d6156.json b/objects/vulnerability/vulnerability--86e92c26-076b-44a9-88ab-5cddf51d6156.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--5827c0b8-bbd7-4f17-96bd-502d3f5cc5fc",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--86e92c26-076b-44a9-88ab-5cddf51d6156",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:07.38999Z",
+            "modified": "2024-02-11T00:30:07.38999Z",
+            "name": "CVE-2024-1406",
+            "description": "A vulnerability was found in Linksys WRT54GL 4.30.18. It has been declared as problematic. This vulnerability affects unknown code of the file /SysInfo1.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. VDB-253330 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-1406"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--8d99e425-67c4-4e7a-9297-5ba9b71a8a57.json b/objects/vulnerability/vulnerability--8d99e425-67c4-4e7a-9297-5ba9b71a8a57.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--b06de5da-fc03-407a-acf8-bf46f57f9abf",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--8d99e425-67c4-4e7a-9297-5ba9b71a8a57",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:11.469927Z",
+            "modified": "2024-02-11T00:30:11.469927Z",
+            "name": "CVE-2023-51493",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Howard Ehrenberg Custom Post Carousels with Owl allows Stored XSS.This issue affects Custom Post Carousels with Owl: from n/a through 1.4.6.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-51493"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--919314d6-41d0-4df4-be88-89cc73096717.json b/objects/vulnerability/vulnerability--919314d6-41d0-4df4-be88-89cc73096717.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--ee17142f-6019-42e6-aa07-4efe888c7b88",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--919314d6-41d0-4df4-be88-89cc73096717",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:07.57793Z",
+            "modified": "2024-02-11T00:30:07.57793Z",
+            "name": "CVE-2024-22361",
+            "description": "IBM Semeru Runtime 8.0.302.0 through 8.0.392.0, 11.0.12.0 through 11.0.21.0, 17.0.1.0 - 17.0.9.0, and 21.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  281222.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-22361"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--956e41ae-e61e-4d82-9980-f0c74a494e70.json b/objects/vulnerability/vulnerability--956e41ae-e61e-4d82-9980-f0c74a494e70.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--a554885d-3cf7-4114-8666-8732b36ace59",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--956e41ae-e61e-4d82-9980-f0c74a494e70",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:07.473242Z",
+            "modified": "2024-02-11T00:30:07.473242Z",
+            "name": "CVE-2024-24801",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-24801"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--96a37c6b-05e2-4b19-bb43-4a3a1c18096a.json b/objects/vulnerability/vulnerability--96a37c6b-05e2-4b19-bb43-4a3a1c18096a.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--61c04343-b5fe-46af-bdcf-18ef54f181fa",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--96a37c6b-05e2-4b19-bb43-4a3a1c18096a",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-02-11T00:30:07.59549Z",
+            "modified": "2024-02-11T00:30:07.59549Z",
+            "name": "CVE-2024-22313",
+            "description": "IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.  IBM X-Force ID:  278749.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-22313"
+                }
+            ]
+        }
+    ]
+}