From 11a87ef4eff1b47035559ae929038ba4b8a1eedc Mon Sep 17 00:00:00 2001 From: CVE Team Date: Thu, 18 Apr 2019 23:00:42 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2018/16xxx/CVE-2018-16517.json | 5 +++ 2019/11xxx/CVE-2019-11332.json | 62 ++++++++++++++++++++++++++++++++++ 2019/11xxx/CVE-2019-11333.json | 18 ++++++++++ 2019/11xxx/CVE-2019-11334.json | 18 ++++++++++ 2019/11xxx/CVE-2019-11335.json | 18 ++++++++++ 2019/3xxx/CVE-2019-3396.json | 5 +++ 2019/9xxx/CVE-2019-9161.json | 48 ++++++++++++++++++++++++-- 7 files changed, 172 insertions(+), 2 deletions(-) create mode 100644 2019/11xxx/CVE-2019-11332.json create mode 100644 2019/11xxx/CVE-2019-11333.json create mode 100644 2019/11xxx/CVE-2019-11334.json create mode 100644 2019/11xxx/CVE-2019-11335.json diff --git a/2018/16xxx/CVE-2018-16517.json b/2018/16xxx/CVE-2018-16517.json index f062294965c..c5420e5550f 100644 --- a/2018/16xxx/CVE-2018-16517.json +++ b/2018/16xxx/CVE-2018-16517.json @@ -66,6 +66,11 @@ "refsource": "EXPLOIT-DB", "name": "46726", "url": "https://www.exploit-db.com/exploits/46726/" + }, + { + "refsource": "MISC", + "name": "http://packetstormsecurity.com/files/152566/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html", + "url": "http://packetstormsecurity.com/files/152566/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html" } ] } diff --git a/2019/11xxx/CVE-2019-11332.json b/2019/11xxx/CVE-2019-11332.json new file mode 100644 index 00000000000..354df4921a6 --- /dev/null +++ b/2019/11xxx/CVE-2019-11332.json @@ -0,0 +1,62 @@ +{ + "CVE_data_meta": { + "ASSIGNER": "cve@mitre.org", + "ID": "CVE-2019-11332", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "description": { + "description_data": [ + { + "lang": "eng", + "value": "MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://cisk123456.blogspot.com/2019/04/mkcms-v50.html", + "refsource": "MISC", + "name": "https://cisk123456.blogspot.com/2019/04/mkcms-v50.html" + } + ] + } +} \ No newline at end of file diff --git a/2019/11xxx/CVE-2019-11333.json b/2019/11xxx/CVE-2019-11333.json new file mode 100644 index 00000000000..473740c5303 --- /dev/null +++ b/2019/11xxx/CVE-2019-11333.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2019-11333", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2019/11xxx/CVE-2019-11334.json b/2019/11xxx/CVE-2019-11334.json new file mode 100644 index 00000000000..98c22ec23dc --- /dev/null +++ b/2019/11xxx/CVE-2019-11334.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2019-11334", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2019/11xxx/CVE-2019-11335.json b/2019/11xxx/CVE-2019-11335.json new file mode 100644 index 00000000000..56aad424f93 --- /dev/null +++ b/2019/11xxx/CVE-2019-11335.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2019-11335", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2019/3xxx/CVE-2019-3396.json b/2019/3xxx/CVE-2019-3396.json index 767786d08c4..5992a1a94f8 100644 --- a/2019/3xxx/CVE-2019-3396.json +++ b/2019/3xxx/CVE-2019-3396.json @@ -82,6 +82,11 @@ "url": "https://jira.atlassian.com/browse/CONFSERVER-57974", "refsource": "MISC", "name": "https://jira.atlassian.com/browse/CONFSERVER-57974" + }, + { + "refsource": "MISC", + "name": "http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html", + "url": "http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html" } ] } diff --git a/2019/9xxx/CVE-2019-9161.json b/2019/9xxx/CVE-2019-9161.json index f624287a108..f562c8cfc90 100644 --- a/2019/9xxx/CVE-2019-9161.json +++ b/2019/9xxx/CVE-2019-9161.json @@ -2,7 +2,30 @@ "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-9161", - "STATE": "RESERVED" + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } }, "data_format": "MITRE", "data_type": "CVE", @@ -11,7 +34,28 @@ "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginx_webconsole.php Cookie header can be used to read an etc/config/wac/wns_cfg_admin_detail.xml file containing the admin password. (The password for root is the WebUI admin password concatenated with a static string.)" + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "refsource": "MISC", + "name": "http://www.cnvd.org.cn/flaw/show/CNVD-2019-07679", + "url": "http://www.cnvd.org.cn/flaw/show/CNVD-2019-07679" } ] }