diff --git a/2019/13xxx/CVE-2019-13372.json b/2019/13xxx/CVE-2019-13372.json index d36aaa6bc89..fa7e13e5238 100644 --- a/2019/13xxx/CVE-2019-13372.json +++ b/2019/13xxx/CVE-2019-13372.json @@ -66,6 +66,11 @@ "refsource": "CONFIRM", "name": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117", "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117" + }, + { + "refsource": "MISC", + "name": "http://packetstormsecurity.com/files/158904/D-Link-Central-WiFi-Manager-CWM-100-Remote-Code-Execution.html", + "url": "http://packetstormsecurity.com/files/158904/D-Link-Central-WiFi-Manager-CWM-100-Remote-Code-Execution.html" } ] } diff --git a/2020/16xxx/CVE-2020-16186.json b/2020/16xxx/CVE-2020-16186.json index f14211f7411..57e627dc437 100644 --- a/2020/16xxx/CVE-2020-16186.json +++ b/2020/16xxx/CVE-2020-16186.json @@ -1,61 +1,17 @@ { - "CVE_data_meta": { - "ASSIGNER": "cve@mitre.org", - "ID": "CVE-2020-16186", - "STATE": "PUBLIC" - }, - "affects": { - "vendor": { - "vendor_data": [ - { - "product": { - "product_data": [ - { - "product_name": "n/a", - "version": { - "version_data": [ - { - "version_value": "n/a" - } - ] - } - } - ] - }, - "vendor_name": "n/a" - } - ] - } - }, - "data_format": "MITRE", "data_type": "CVE", + "data_format": "MITRE", "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2020-16186", + "ASSIGNER": "cve@mitre.org", + "STATE": "REJECT" + }, "description": { "description_data": [ { "lang": "eng", - "value": "A stored Cross-site scripting (XSS) vulnerability in Firco Continuity 6.2.0.0 allows remote unauthenticated attackers to inject arbitrary web script or HTML through the username field of the login page." - } - ] - }, - "problemtype": { - "problemtype_data": [ - { - "description": [ - { - "lang": "eng", - "value": "n/a" - } - ] - } - ] - }, - "references": { - "reference_data": [ - { - "url": "https://accuity.com/product/firco-continuity/?intcmp=mega-menu-product-firco-continuity", - "refsource": "MISC", - "name": "https://accuity.com/product/firco-continuity/?intcmp=mega-menu-product-firco-continuity" + "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none." } ] } diff --git a/2020/9xxx/CVE-2020-9415.json b/2020/9xxx/CVE-2020-9415.json index f04e84761e8..2a7f5baae19 100644 --- a/2020/9xxx/CVE-2020-9415.json +++ b/2020/9xxx/CVE-2020-9415.json @@ -1,117 +1,117 @@ { - "CVE_data_meta": { - "ASSIGNER": "security@tibco.com", - "DATE_PUBLIC": "2020-08-18T17:00:00Z", - "ID": "CVE-2020-9415", - "STATE": "PUBLIC", - "TITLE": "TIBCO Data Virtualization" - }, - "affects": { - "vendor": { - "vendor_data": [ - { - "product": { - "product_data": [ - { - "product_name": " TIBCO Data Virtualization", - "version": { - "version_data": [ - { - "version_affected": "<=", - "version_value": "7.0.8" - }, - { - "version_affected": "=", - "version_value": "8.0.0" - }, - { - "version_affected": "=", - "version_value": "8.1.0" - }, - { - "version_affected": "=", - "version_value": "8.1.1" - }, - { - "version_affected": "=", - "version_value": "8.2.0" - } - ] - } - }, - { - "product_name": " TIBCO Data Virtualization for AWS Marketplace", - "version": { - "version_data": [ - { - "version_affected": "<=", - "version_value": "8.2.0" - } - ] - } - } - ] - }, - "vendor_name": "TIBCO Software Inc." - } - ] - } - }, - "data_format": "MITRE", - "data_type": "CVE", - "data_version": "4.0", - "description": { - "description_data": [ - { - "lang": "eng", - "value": "The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user must be authenticated and have privileges required to monitor the server in an operational capacity.\n\nAffected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 7.0.8 and below, versions 8.0.0, 8.1.0, 8.1.1, and 8.2.0 and TIBCO Data Virtualization for AWS Marketplace: versions 8.2.0 and below.\n" - } - ] - }, - "impact": { - "cvss": { - "attackComplexity": "HIGH", - "attackVector": "NETWORK", - "availabilityImpact": "NONE", - "baseScore": 5.3, - "baseSeverity": "MEDIUM", - "confidentialityImpact": "HIGH", - "integrityImpact": "NONE", - "privilegesRequired": "LOW", - "scope": "UNCHANGED", - "userInteraction": "NONE", - "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", - "version": "3.0" - } - }, - "problemtype": { - "problemtype_data": [ - { - "description": [ - { - "lang": "eng", - "value": "The impact of these vulnerabilities includes the theoretical possibility that a malicious user could exfiltrate any data file on the affected system. The malicious user cannot modify or delete any files on the affected system with this vulnerability." - } - ] - } - ] - }, - "references": { - "reference_data": [ - { - "name": "http://www.tibco.com/services/support/advisories", - "refsource": "CONFIRM", - "url": "http://www.tibco.com/services/support/advisories" - } - ] - }, - "solution": [ - { - "lang": "eng", - "value": "TIBCO has released updated versions of the affected components which address these issues.\n\n TIBCO Data Virtualization versions 7.0.8 and below update to version 7.0.9 or higher\n TIBCO Data Virtualization versions 8.0.0, 8.1.0, 8.1.1, and 8.2.0 update to version 8.3.0 or higher\n TIBCO Data Virtualization for AWS Marketplace versions 8.2.0 and below update to version 8.3.0 or higher" - } - ], - "source": { - "discovery": "USER" - } -} + "CVE_data_meta": { + "ASSIGNER": "security@tibco.com", + "DATE_PUBLIC": "2020-08-18T17:00:00Z", + "ID": "CVE-2020-9415", + "STATE": "PUBLIC", + "TITLE": "TIBCO Data Virtualization" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": " TIBCO Data Virtualization", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_value": "7.0.8" + }, + { + "version_affected": "=", + "version_value": "8.0.0" + }, + { + "version_affected": "=", + "version_value": "8.1.0" + }, + { + "version_affected": "=", + "version_value": "8.1.1" + }, + { + "version_affected": "=", + "version_value": "8.2.0" + } + ] + } + }, + { + "product_name": " TIBCO Data Virtualization for AWS Marketplace", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_value": "8.2.0" + } + ] + } + } + ] + }, + "vendor_name": "TIBCO Software Inc." + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "description": { + "description_data": [ + { + "lang": "eng", + "value": "The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user must be authenticated and have privileges required to monitor the server in an operational capacity. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 7.0.8 and below, versions 8.0.0, 8.1.0, 8.1.1, and 8.2.0 and TIBCO Data Virtualization for AWS Marketplace: versions 8.2.0 and below." + } + ] + }, + "impact": { + "cvss": { + "attackComplexity": "HIGH", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", + "version": "3.0" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "The impact of these vulnerabilities includes the theoretical possibility that a malicious user could exfiltrate any data file on the affected system. The malicious user cannot modify or delete any files on the affected system with this vulnerability." + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "name": "http://www.tibco.com/services/support/advisories", + "refsource": "CONFIRM", + "url": "http://www.tibco.com/services/support/advisories" + } + ] + }, + "solution": [ + { + "lang": "eng", + "value": "TIBCO has released updated versions of the affected components which address these issues.\n\n TIBCO Data Virtualization versions 7.0.8 and below update to version 7.0.9 or higher\n TIBCO Data Virtualization versions 8.0.0, 8.1.0, 8.1.1, and 8.2.0 update to version 8.3.0 or higher\n TIBCO Data Virtualization for AWS Marketplace versions 8.2.0 and below update to version 8.3.0 or higher" + } + ], + "source": { + "discovery": "USER" + } +} \ No newline at end of file