admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-19 17:32:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2019-11-21 23:01:54 +00:00
parent a0a89ea090
commit 22161eae0e
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
21 changed files with 927 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

61
2012/1xxx/CVE-2012-1637.json
View File

@ -1,8 +1,8 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-1637",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +11,62 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Cross-site scripting vulnerability (XSS) in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Quick Tabs",
"product": {
"product_data": [
{
"product_name": "Quicktabs",
"version": {
"version_data": [
{
"version_value": "6.x-2.x before 6.x-2.1"
},
{
"version_value": "6.x-3.x before 6.x-3.1"
},
{
"version_value": "and 7.x-3.x before 7.x-3.3"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2012/04/07/1",
"url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"
},
{
"refsource": "MISC",
"name": "https://www.drupal.org/node/1409476",
"url": "https://www.drupal.org/node/1409476"
}
]
}

55
2012/2xxx/CVE-2012-2078.json
View File

@ -1,8 +1,8 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-2078",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +11,56 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Cross-site scripting (XSS) vulnerability in the Activity module 6.x-1.x for Drupal."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Activity",
"product": {
"product_data": [
{
"product_name": "Activity",
"version": {
"version_data": [
{
"version_value": "6.x-1.x"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2012/04/07/1",
"url": "http://www.openwall.com/lists/oss-security/2012/04/07/1"
},
{
"refsource": "MISC",
"name": "https://www.drupal.org/node/1506562",
"url": "https://www.drupal.org/node/1506562"
}
]
}

53
2014/2xxx/CVE-2014-2901.json
View File

@ -2,7 +2,30 @@
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-2901",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +34,33 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "wolfssl before 3.2.0 does not properly issue certificates for a server's hostname."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://security-tracker.debian.org/tracker/CVE-2014-2901",
"refsource": "MISC",
"name": "https://security-tracker.debian.org/tracker/CVE-2014-2901"
},
{
"url": "http://www.openwall.com/lists/oss-security/2014/04/18/2",
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2014/04/18/2"
}
]
}

58
2014/2xxx/CVE-2014-2902.json
View File

@ -2,7 +2,30 @@
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-2902",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +34,38 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "http://www.openwall.com/lists/oss-security/2014/04/18/2",
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2014/04/18/2"
},
{
"url": "https://security-tracker.debian.org/tracker/CVE-2014-2902",
"refsource": "MISC",
"name": "https://security-tracker.debian.org/tracker/CVE-2014-2902"
},
{
"refsource": "MISC",
"name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792646",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792646"
}
]
}

58
2014/2xxx/CVE-2014-2904.json
View File

@ -2,7 +2,30 @@
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-2904",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +34,38 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "wolfssl before 3.2.0 has a server certificate that is not properly authorized for server authentication."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2014/04/18/2",
"url": "http://www.openwall.com/lists/oss-security/2014/04/18/2"
},
{
"url": "https://security-tracker.debian.org/tracker/CVE-2014-2904",
"refsource": "MISC",
"name": "https://security-tracker.debian.org/tracker/CVE-2014-2904"
},
{
"refsource": "MISC",
"name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792646",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792646"
}
]
}

70
2014/5xxx/CVE-2014-5254.json
View File

@ -1,8 +1,31 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ASSIGNER": "security@debian.org",
"ID": "CVE-2014-5254",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "xcfa",
"version": {
"version_data": [
{
"version_value": "4.3.8-1"
}
]
}
}
]
},
"vendor_name": "xcfa"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +34,48 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Symbolic Link Following"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://security-tracker.debian.org/tracker/CVE-2014-5254",
"refsource": "MISC",
"name": "https://security-tracker.debian.org/tracker/CVE-2014-5254"
},
{
"refsource": "MISC",
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95331",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95331"
},
{
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2014/08/15/4",
"url": "http://www.openwall.com/lists/oss-security/2014/08/15/4"
},
{
"refsource": "MISC",
"name": "http://www.securityfocus.com/bid/69020",
"url": "http://www.securityfocus.com/bid/69020"
},
{
"refsource": "MISC",
"name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756600",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756600"
}
]
}

75
2014/5xxx/CVE-2014-5255.json
View File

@ -1,8 +1,31 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ASSIGNER": "security@debian.org",
"ID": "CVE-2014-5255",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "xcfa",
"version": {
"version_data": [
{
"version_value": "4.3.8-1"
}
]
}
}
]
},
"vendor_name": "xcfa"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +34,53 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Symbolic Link Following"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://security-tracker.debian.org/tracker/CVE-2014-5255",
"refsource": "MISC",
"name": "https://security-tracker.debian.org/tracker/CVE-2014-5255"
},
{
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2014/08/15/4",
"url": "http://www.openwall.com/lists/oss-security/2014/08/15/4"
},
{
"refsource": "MISC",
"name": "http://www.securityfocus.com/bid/69020",
"url": "http://www.securityfocus.com/bid/69020"
},
{
"refsource": "MISC",
"name": "https://bugs.gentoo.org/show_bug.cgi?id=CVE-2014-5255",
"url": "https://bugs.gentoo.org/show_bug.cgi?id=CVE-2014-5255"
},
{
"refsource": "MISC",
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95332",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95332"
},
{
"refsource": "MISC",
"name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756600",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756600"
}
]
}

5
2017/17xxx/CVE-2017-17127.json
View File

@ -56,6 +56,11 @@
"name": "https://bugzilla.libav.org/show_bug.cgi?id=1099",
"refsource": "MISC",
"url": "https://bugzilla.libav.org/show_bug.cgi?id=1099"
},
{
"refsource": "MISC",
"name": "https://deb.freexian.com/extended-lts/tracker/CVE-2017-17127",
"url": "https://deb.freexian.com/extended-lts/tracker/CVE-2017-17127"
}
]
}

5
2019/11xxx/CVE-2019-11151.json
View File

@ -48,6 +48,11 @@
"refsource": "MISC",
"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00287.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00287.html"
},
{
"refsource": "CONFIRM",
"name": "https://support.f5.com/csp/article/K89105210?utm_source=f5support&utm_medium=RSS",
"url": "https://support.f5.com/csp/article/K89105210?utm_source=f5support&utm_medium=RSS"
}
]
},

71
2019/11xxx/CVE-2019-11325.json
View File

@ -1,17 +1,76 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-11325",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2019-11325",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to execution of arbitrary PHP code. This is related to symfony/var-exporter."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/symfony/var-exporter/compare/d8bf442...57e00f3",
"refsource": "MISC",
"name": "https://github.com/symfony/var-exporter/compare/d8bf442...57e00f3"
},
{
"refsource": "CONFIRM",
"name": "https://symfony.com/blog/symfony-4-3-8-released",
"url": "https://symfony.com/blog/symfony-4-3-8-released"
},
{
"refsource": "CONFIRM",
"name": "https://github.com/symfony/symfony/releases/tag/v4.3.8",
"url": "https://github.com/symfony/symfony/releases/tag/v4.3.8"
},
{
"refsource": "CONFIRM",
"name": "https://symfony.com/blog/cve-2019-11325-fix-escaping-of-strings-in-varexporter",
"url": "https://symfony.com/blog/cve-2019-11325-fix-escaping-of-strings-in-varexporter"
}
]
}

72
2019/18xxx/CVE-2019-18887.json Normal file
View File

@ -0,0 +1,72 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-18887",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. The UriSigner was subject to timing attacks. This is related to symfony/http-kernel."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://symfony.com/blog/symfony-4-3-8-released",
"url": "https://symfony.com/blog/symfony-4-3-8-released"
},
{
"refsource": "CONFIRM",
"name": "https://github.com/symfony/symfony/releases/tag/v4.3.8",
"url": "https://github.com/symfony/symfony/releases/tag/v4.3.8"
},
{
"refsource": "CONFIRM",
"name": "https://symfony.com/blog/cve-2019-18887-use-constant-time-comparison-in-urisigner",
"url": "https://symfony.com/blog/cve-2019-18887-use-constant-time-comparison-in-urisigner"
}
]
}
}

72
2019/18xxx/CVE-2019-18888.json Normal file
View File

@ -0,0 +1,72 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-18888",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application passes unvalidated user input as the file for which MIME type validation should occur, then arbitrary arguments are passed to the underlying file command. This is related to symfony/http-foundation (and symfony/mime in 4.3.x)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://symfony.com/blog/symfony-4-3-8-released",
"url": "https://symfony.com/blog/symfony-4-3-8-released"
},
{
"refsource": "CONFIRM",
"name": "https://github.com/symfony/symfony/releases/tag/v4.3.8",
"url": "https://github.com/symfony/symfony/releases/tag/v4.3.8"
},
{
"refsource": "CONFIRM",
"name": "https://symfony.com/blog/cve-2019-18888-prevent-argument-injection-in-a-mimetypeguesser",
"url": "https://symfony.com/blog/cve-2019-18888-prevent-argument-injection-in-a-mimetypeguesser"
}
]
}
}

72
2019/18xxx/CVE-2019-18889.json Normal file
View File

@ -0,0 +1,72 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-18889",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. Serializing certain cache adapter interfaces could result in remote code injection. This is related to symfony/cache."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://symfony.com/blog/symfony-4-3-8-released",
"url": "https://symfony.com/blog/symfony-4-3-8-released"
},
{
"refsource": "CONFIRM",
"name": "https://github.com/symfony/symfony/releases/tag/v4.3.8",
"url": "https://github.com/symfony/symfony/releases/tag/v4.3.8"
},
{
"refsource": "CONFIRM",
"name": "https://symfony.com/blog/cve-2019-18889-forbid-serializing-abstractadapter-and-tagawareadapter-instances",
"url": "https://symfony.com/blog/cve-2019-18889-forbid-serializing-abstractadapter-and-tagawareadapter-instances"
}
]
}
}

67
2019/18xxx/CVE-2019-18933.json Normal file
View File

@ -0,0 +1,67 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-18933",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Zulip Server versions from 1.7.0 to before 2.0.7, a bug in the new user signup process meant that users who registered their account using social authentication (e.g., GitHub or Google SSO) in an organization that also allows password authentication could have their personal API key stolen by an unprivileged attacker, allowing nearly full access to the user's account."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://blog.zulip.org/2019/11/21/zulip-2-0-7-security-release/",
"url": "https://blog.zulip.org/2019/11/21/zulip-2-0-7-security-release/"
},
{
"refsource": "MISC",
"name": "https://github.com/zulip/zulip/commit/0c2cc41d2e40807baa5ee2c72987ebfb64ea2eb6",
"url": "https://github.com/zulip/zulip/commit/0c2cc41d2e40807baa5ee2c72987ebfb64ea2eb6"
}
]
}
}

5
2019/19xxx/CVE-2019-19033.json
View File

@ -57,11 +57,6 @@
"refsource": "MISC",
"name": "https://community.jalios.com/jcms/frt_74021/en/blog-jalios-community"
},
{
"url": "https://drive.google.com/drive/folders/1Wv2wCY-n5PuuvD4MYoRd0NTWC58V3G8B?usp=sharing",
"refsource": "MISC",
"name": "https://drive.google.com/drive/folders/1Wv2wCY-n5PuuvD4MYoRd0NTWC58V3G8B?usp=sharing"
},
{
"refsource": "MISC",
"name": "http://packetstormsecurity.com/files/155419/Jalios-JCMS-10-Backdoor-Account-Authentication-Bypass.html",

67
2019/19xxx/CVE-2019-19221.json Normal file
View File

@ -0,0 +1,67 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-19221",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/libarchive/libarchive/issues/1276",
"refsource": "MISC",
"name": "https://github.com/libarchive/libarchive/issues/1276"
},
{
"url": "https://github.com/libarchive/libarchive/commit/22b1db9d46654afc6f0c28f90af8cdc84a199f41",
"refsource": "MISC",
"name": "https://github.com/libarchive/libarchive/commit/22b1db9d46654afc6f0c28f90af8cdc84a199f41"
}
]
}
}

18
2019/19xxx/CVE-2019-19222.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-19222",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

18
2019/19xxx/CVE-2019-19223.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-19223",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

18
2019/19xxx/CVE-2019-19224.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-19224",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

18
2019/19xxx/CVE-2019-19225.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-19225",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

18
2019/19xxx/CVE-2019-19226.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-19226",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}