admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2020-09-03 14:01:41 +00:00
parent 4fce806ae1
commit 1d653ac6ce
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
8 changed files with 345 additions and 193 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

66
2020/12xxx/CVE-2020-12058.json
View File

@ -1,17 +1,71 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-12058",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2020-12058",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code. The malicious code can be injected as follows: the page parameter to catalog/admin/order_status.php, catalog/admin/tax_rates.php, catalog/admin/languages.php, catalog/admin/countries.php, catalog/admin/tax_classes.php, catalog/admin/reviews.php, or catalog/admin/zones.php; or the zpage or spage parameter to catalog/admin/geo_zones.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.oscommerce.com/Us&News=155",
"refsource": "MISC",
"name": "https://www.oscommerce.com/Us&News=155"
},
{
"refsource": "MISC",
"name": "https://github.com/gburton/CE-Phoenix/commit/8d0fb97810bc28880415a3a31607f473bfc5fec8",
"url": "https://github.com/gburton/CE-Phoenix/commit/8d0fb97810bc28880415a3a31607f473bfc5fec8"
},
{
"refsource": "MISC",
"name": "https://sisl.lab.uic.edu/projects/chess/cross-site-scripting-in-cephoenix/",
"url": "https://sisl.lab.uic.edu/projects/chess/cross-site-scripting-in-cephoenix/"
}
]
}

2
2020/13xxx/CVE-2020-13802.json
View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "The rebar3 tool 3.0.0-beta.3 through 3.13.2 for Erlang allows remote code execution."
"value": "Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification."
}
]
},

56
2020/24xxx/CVE-2020-24949.json
View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-24949",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2020-24949",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution (RCE)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/php-fusion/PHP-Fusion/issues/2312",
"refsource": "MISC",
"name": "https://github.com/php-fusion/PHP-Fusion/issues/2312"
}
]
}

18
2020/25xxx/CVE-2020-25101.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-25101",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

18
2020/25xxx/CVE-2020-25102.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-25102",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

18
2020/25xxx/CVE-2020-25103.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-25103",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

180
2020/4xxx/CVE-2020-4337.json
View File

@ -1,93 +1,93 @@
{
"references" : {
"reference_data" : [
{
"title" : "IBM Security Bulletin 6324763 (API Connect)",
"refsource" : "CONFIRM",
"url" : "https://www.ibm.com/support/pages/node/6324763",
"name" : "https://www.ibm.com/support/pages/node/6324763"
},
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/177933",
"name" : "ibm-api-cve20204337-phishing (177933)",
"title" : "X-Force Vulnerability Report",
"refsource" : "XF"
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Gain Access"
}
]
}
]
},
"CVE_data_meta" : {
"ASSIGNER" : "psirt@us.ibm.com",
"ID" : "CVE-2020-4337",
"DATE_PUBLIC" : "2020-09-02T00:00:00",
"STATE" : "PUBLIC"
},
"description" : {
"description_data" : [
{
"value" : "IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933.",
"lang" : "eng"
}
]
},
"impact" : {
"cvssv3" : {
"TM" : {
"RC" : "C",
"E" : "U",
"RL" : "O"
},
"BM" : {
"I" : "H",
"AV" : "N",
"PR" : "N",
"A" : "N",
"UI" : "R",
"AC" : "L",
"S" : "U",
"C" : "N",
"SCORE" : "6.500"
}
}
},
"data_type" : "CVE",
"affects" : {
"vendor" : {
"vendor_data" : [
"references": {
"reference_data": [
{
"product" : {
"product_data" : [
{
"product_name" : "API Connect",
"version" : {
"version_data" : [
{
"version_value" : "2018.4.1.0"
},
{
"version_value" : "2018.4.1.12"
}
]
}
}
]
},
"vendor_name" : "IBM"
"title": "IBM Security Bulletin 6324763 (API Connect)",
"refsource": "CONFIRM",
"url": "https://www.ibm.com/support/pages/node/6324763",
"name": "https://www.ibm.com/support/pages/node/6324763"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/177933",
"name": "ibm-api-cve20204337-phishing (177933)",
"title": "X-Force Vulnerability Report",
"refsource": "XF"
}
]
}
},
"data_version" : "4.0",
"data_format" : "MITRE"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Gain Access"
}
]
}
]
},
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"ID": "CVE-2020-4337",
"DATE_PUBLIC": "2020-09-02T00:00:00",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"value": "IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933.",
"lang": "eng"
}
]
},
"impact": {
"cvssv3": {
"TM": {
"RC": "C",
"E": "U",
"RL": "O"
},
"BM": {
"I": "H",
"AV": "N",
"PR": "N",
"A": "N",
"UI": "R",
"AC": "L",
"S": "U",
"C": "N",
"SCORE": "6.500"
}
}
},
"data_type": "CVE",
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "API Connect",
"version": {
"version_data": [
{
"version_value": "2018.4.1.0"
},
{
"version_value": "2018.4.1.12"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_version": "4.0",
"data_format": "MITRE"
}

180
2020/4xxx/CVE-2020-4638.json
View File

@ -1,93 +1,93 @@
{
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Gain Privileges"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"url" : "https://www.ibm.com/support/pages/node/6324751",
"name" : "https://www.ibm.com/support/pages/node/6324751",
"title" : "IBM Security Bulletin 6324751 (API Connect)",
"refsource" : "CONFIRM"
},
{
"refsource" : "XF",
"title" : "X-Force Vulnerability Report",
"name" : "ibm-api-cve20204638-priv-escalation (185508)",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/185508"
}
]
},
"data_type" : "CVE",
"impact" : {
"cvssv3" : {
"TM" : {
"E" : "U",
"RC" : "C",
"RL" : "O"
},
"BM" : {
"I" : "H",
"AC" : "L",
"S" : "U",
"C" : "H",
"SCORE" : "7.200",
"AV" : "N",
"PR" : "H",
"A" : "H",
"UI" : "N"
}
}
},
"CVE_data_meta" : {
"ASSIGNER" : "psirt@us.ibm.com",
"DATE_PUBLIC" : "2020-09-02T00:00:00",
"STATE" : "PUBLIC",
"ID" : "CVE-2020-4638"
},
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508."
}
]
},
"data_version" : "4.0",
"data_format" : "MITRE",
"affects" : {
"vendor" : {
"vendor_data" : [
"problemtype": {
"problemtype_data": [
{
"vendor_name" : "IBM",
"product" : {
"product_data" : [
{
"version" : {
"version_data" : [
{
"version_value" : "2018.4.1.0"
},
{
"version_value" : "2018.4.12"
}
]
},
"product_name" : "API Connect"
}
]
}
"description": [
{
"lang": "eng",
"value": "Gain Privileges"
}
]
}
]
}
}
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.ibm.com/support/pages/node/6324751",
"name": "https://www.ibm.com/support/pages/node/6324751",
"title": "IBM Security Bulletin 6324751 (API Connect)",
"refsource": "CONFIRM"
},
{
"refsource": "XF",
"title": "X-Force Vulnerability Report",
"name": "ibm-api-cve20204638-priv-escalation (185508)",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/185508"
}
]
},
"data_type": "CVE",
"impact": {
"cvssv3": {
"TM": {
"E": "U",
"RC": "C",
"RL": "O"
},
"BM": {
"I": "H",
"AC": "L",
"S": "U",
"C": "H",
"SCORE": "7.200",
"AV": "N",
"PR": "H",
"A": "H",
"UI": "N"
}
}
},
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2020-09-02T00:00:00",
"STATE": "PUBLIC",
"ID": "CVE-2020-4638"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508."
}
]
},
"data_version": "4.0",
"data_format": "MITRE",
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "IBM",
"product": {
"product_data": [
{
"version": {
"version_data": [
{
"version_value": "2018.4.1.0"
},
{
"version_value": "2018.4.12"
}
]
},
"product_name": "API Connect"
}
]
}
}
]
}
}
}