From 1820f046c80d5bb8fd466fdd76d071c8d8f77c1d Mon Sep 17 00:00:00 2001 From: CVE Team Date: Tue, 24 Sep 2019 22:00:52 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2019/13xxx/CVE-2019-13527.json | 62 ++++++++++++++++++++++++++++++++++ 2019/13xxx/CVE-2019-13528.json | 62 ++++++++++++++++++++++++++++++++++ 2019/13xxx/CVE-2019-13923.json | 5 +++ 2019/16xxx/CVE-2019-16759.json | 62 ++++++++++++++++++++++++++++++++++ 2019/5xxx/CVE-2019-5094.json | 58 +++++++++++++++++++++++++++---- 5 files changed, 242 insertions(+), 7 deletions(-) create mode 100644 2019/13xxx/CVE-2019-13527.json create mode 100644 2019/13xxx/CVE-2019-13528.json create mode 100644 2019/16xxx/CVE-2019-16759.json diff --git a/2019/13xxx/CVE-2019-13527.json b/2019/13xxx/CVE-2019-13527.json new file mode 100644 index 00000000000..03d2c3355ac --- /dev/null +++ b/2019/13xxx/CVE-2019-13527.json @@ -0,0 +1,62 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2019-13527", + "ASSIGNER": "ics-cert@hq.dhs.gov", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "n/a", + "product": { + "product_data": [ + { + "product_name": "Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier", + "version": { + "version_data": [ + { + "version_value": "Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier" + } + ] + } + } + ] + } + } + ] + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "ACCESS OF UNINITIALIZED POINTER CWE-824" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "refsource": "MISC", + "name": "https://www.us-cert.gov/ics/advisories/icsa-19-213-05", + "url": "https://www.us-cert.gov/ics/advisories/icsa-19-213-05" + } + ] + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized." + } + ] + } +} \ No newline at end of file diff --git a/2019/13xxx/CVE-2019-13528.json b/2019/13xxx/CVE-2019-13528.json new file mode 100644 index 00000000000..45ad76b3be8 --- /dev/null +++ b/2019/13xxx/CVE-2019-13528.json @@ -0,0 +1,62 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2019-13528", + "ASSIGNER": "ics-cert@hq.dhs.gov", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "n/a", + "product": { + "product_data": [ + { + "product_name": "Niagara", + "version": { + "version_data": [ + { + "version_value": "Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.7u1 (JACE-8000, Edge 10)" + } + ] + } + } + ] + } + } + ] + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "Improper Authorization CWE-285" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "refsource": "MISC", + "name": "https://www.us-cert.gov/ics/advisories/icsa-19-262-01", + "url": "https://www.us-cert.gov/ics/advisories/icsa-19-262-01" + } + ] + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), and Niagara 4.7u1 (JACE-8000, Edge 10)." + } + ] + } +} \ No newline at end of file diff --git a/2019/13xxx/CVE-2019-13923.json b/2019/13xxx/CVE-2019-13923.json index 2b799ba6f38..e27b41e390e 100644 --- a/2019/13xxx/CVE-2019-13923.json +++ b/2019/13xxx/CVE-2019-13923.json @@ -48,6 +48,11 @@ "refsource": "MISC", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdf", "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdf" + }, + { + "refsource": "MISC", + "name": "https://www.us-cert.gov/ics/advisories/icsa-19-253-04", + "url": "https://www.us-cert.gov/ics/advisories/icsa-19-253-04" } ] }, diff --git a/2019/16xxx/CVE-2019-16759.json b/2019/16xxx/CVE-2019-16759.json new file mode 100644 index 00000000000..f7b643cf168 --- /dev/null +++ b/2019/16xxx/CVE-2019-16759.json @@ -0,0 +1,62 @@ +{ + "CVE_data_meta": { + "ASSIGNER": "cve@mitre.org", + "ID": "CVE-2019-16759", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "description": { + "description_data": [ + { + "lang": "eng", + "value": "vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://seclists.org/fulldisclosure/2019/Sep/31", + "refsource": "MISC", + "name": "https://seclists.org/fulldisclosure/2019/Sep/31" + } + ] + } +} \ No newline at end of file diff --git a/2019/5xxx/CVE-2019-5094.json b/2019/5xxx/CVE-2019-5094.json index 44e04ed7b08..5c56b8dfd3d 100644 --- a/2019/5xxx/CVE-2019-5094.json +++ b/2019/5xxx/CVE-2019-5094.json @@ -1,17 +1,61 @@ { - "CVE_data_meta": { - "ASSIGNER": "cve@mitre.org", - "ID": "CVE-2019-5094", - "STATE": "RESERVED" - }, - "data_format": "MITRE", "data_type": "CVE", + "data_format": "MITRE", "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2019-5094", + "ASSIGNER": "talos-cna@cisco.com", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "n/a", + "product": { + "product_data": [ + { + "product_name": "E2fsprogs", + "version": { + "version_data": [ + { + "version_value": "E2fsprogs 1.43.3 - 1.45.3" + } + ] + } + } + ] + } + } + ] + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "remote code execution" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "refsource": "MISC", + "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887" + } + ] + }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability." } ] }