"-Synchronized-Data."

This commit is contained in:
CVE Team 2020-07-28 17:01:40 +00:00
parent 280291a8b3
commit 09686ca8e5
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
18 changed files with 185 additions and 10 deletions

View File

@ -93,6 +93,16 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-508df53719",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-93cc9c3ef2",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/"
}
]
}

View File

@ -84,6 +84,11 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-93cc9c3ef2",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/"
}
]
}

View File

@ -84,6 +84,11 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-93cc9c3ef2",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/"
}
]
}

View File

@ -93,6 +93,16 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-508df53719",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-93cc9c3ef2",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/"
}
]
}

View File

@ -83,6 +83,11 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-508df53719",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/"
}
]
}

View File

@ -83,6 +83,11 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-508df53719",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/"
}
]
}

View File

@ -93,6 +93,16 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-508df53719",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-93cc9c3ef2",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/"
}
]
}

View File

@ -93,6 +93,16 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-508df53719",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-93cc9c3ef2",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/"
}
]
}

View File

@ -93,6 +93,16 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-508df53719",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-93cc9c3ef2",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/"
}
]
}

View File

@ -93,6 +93,16 @@
"refsource": "DEBIAN",
"name": "DSA-4734",
"url": "https://www.debian.org/security/2020/dsa-4734"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-508df53719",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-93cc9c3ef2",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/"
}
]
}

View File

@ -76,6 +76,11 @@
"refsource": "SUSE",
"name": "openSUSE-SU-2020:1095",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00082.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-d75360e2b0",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCR6LAKCVKL55KJQPPBBWVQGOP7RL2RW/"
}
]
}

View File

@ -56,6 +56,11 @@
"url": "https://support.zabbix.com/browse/ZBX-18057",
"refsource": "MISC",
"name": "https://support.zabbix.com/browse/ZBX-18057"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-519516feec",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TIRIMOXH6GSBAANDCB3ANLJK4CRLWRXT/"
}
]
}

View File

@ -1,17 +1,66 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-15899",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2020-15899",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/mimblewimble/grin/compare/v3.1.1...v4.0.0",
"refsource": "MISC",
"name": "https://github.com/mimblewimble/grin/compare/v3.1.1...v4.0.0"
},
{
"refsource": "CONFIRM",
"name": "https://github.com/mimblewimble/grin-security/blob/master/CVEs/CVE-2020-15899.md",
"url": "https://github.com/mimblewimble/grin-security/blob/master/CVEs/CVE-2020-15899.md"
}
]
}

View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "A memory corruption issue was found in Artifex Ghostscript 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b."
"value": "A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b."
}
]
},
@ -71,6 +71,11 @@
"refsource": "MISC",
"name": "https://github.com/ArtifexSoftware/ghostpdl/commit/5d499272b95a6b890a1397e11d20937de000d31b",
"url": "https://github.com/ArtifexSoftware/ghostpdl/commit/5d499272b95a6b890a1397e11d20937de000d31b"
},
{
"refsource": "CONFIRM",
"name": "https://artifex.com/security-advisories/CVE-2020-15900",
"url": "https://artifex.com/security-advisories/CVE-2020-15900"
}
]
}

View File

@ -119,6 +119,16 @@
"refsource": "GENTOO",
"name": "GLSA-202007-23",
"url": "https://security.gentoo.org/glsa/202007-23"
},
{
"refsource": "UBUNTU",
"name": "USN-4435-1",
"url": "https://usn.ubuntu.com/4435-1/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-dd0c20d985",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QM7EXJHDEZJLWM2NKH6TCDXOBP5NNYIN/"
}
]
},

View File

@ -76,6 +76,16 @@
"refsource": "GENTOO",
"name": "GLSA-202007-23",
"url": "https://security.gentoo.org/glsa/202007-23"
},
{
"refsource": "UBUNTU",
"name": "USN-4435-1",
"url": "https://usn.ubuntu.com/4435-1/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-dd0c20d985",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QM7EXJHDEZJLWM2NKH6TCDXOBP5NNYIN/"
}
]
},

View File

@ -80,6 +80,16 @@
"refsource": "GENTOO",
"name": "GLSA-202007-23",
"url": "https://security.gentoo.org/glsa/202007-23"
},
{
"refsource": "UBUNTU",
"name": "USN-4435-1",
"url": "https://usn.ubuntu.com/4435-1/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-dd0c20d985",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QM7EXJHDEZJLWM2NKH6TCDXOBP5NNYIN/"
}
]
},

View File

@ -48,8 +48,9 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://snyk.io/vuln/SNYK-DOTNET-UMBRACOFORMS-595765"
"refsource": "MISC",
"url": "https://snyk.io/vuln/SNYK-DOTNET-UMBRACOFORMS-595765",
"name": "https://snyk.io/vuln/SNYK-DOTNET-UMBRACOFORMS-595765"
}
]
},
@ -57,7 +58,7 @@
"description_data": [
{
"lang": "eng",
"value": "This affects all versions of package UmbracoForms.\n When using the default configuration for upload forms, it is possible to upload arbitrary file types.\r\n\r\nThe package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that blocks certain file types, depending on their security needs and policies.\r\n\r\n"
"value": "This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that blocks certain file types, depending on their security needs and policies."
}
]
},